This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: TXAybQUZnQTYIUuWdlIg1GovIdQjWvCzRd+NY4efmyU= Subject key identifier: 38:7D:D9:A0:D4:B7:BF:E0:B7:0D:66:08:24:3E:04:15:E2:86:61:7D Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 352F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 350E Signing time: Sat 20 Dec 2025 15:09:12 +0000 Manifest this update: Sat 20 Dec 2025 15:09:11 +0000 Manifest next update: Sat 27 Dec 2025 15:09:11 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: iI5k7ATfVhQxX3zJQfl5jmxC1eurKbmy+NV7yLg1EsY=) 2: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: LlAjrsD9ycrpFNBYdBCY0r9fbGY7oXTXFKR7+XLlDrc=) 3: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: COh4JhkMC+3XkvGRBIDud8yE0YD4qDE6A/jEDVUuxUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13615 (0x352f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Dec 20 15:09:11 2025 GMT Not After : Dec 27 15:09:11 2025 GMT Subject: CN=6946bc18-5356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:fb:16:f6:7f:7a:85:af:35:6b:55:d5:14: 91:71:3b:66:23:4f:d9:77:af:b4:84:5d:78:ac:28: 54:7d:84:d2:9d:e7:26:36:83:9f:1e:0d:88:04:8a: de:20:ae:01:fc:1b:2b:bd:6b:90:ef:5c:d9:0f:25: 06:f4:0d:c3:2e:25:70:7f:85:83:0c:87:8e:59:e6: 79:0e:52:26:63:6b:ad:05:63:2f:ce:d6:bb:05:9d: 87:63:70:9a:67:6a:4c:75:7a:70:77:ce:ed:12:22: 47:61:cc:c6:9e:61:e8:78:06:c3:6a:6f:b0:c3:6b: 8e:2b:34:67:18:7d:b5:ab:1b:ff:6a:35:5b:b9:70: 20:ec:9e:6c:70:09:c6:6a:9d:c7:8d:bb:ae:6a:2b: a3:7b:b3:c6:13:e5:56:aa:0f:d7:f6:23:26:9c:9c: 18:0e:2e:9c:ac:30:6f:67:4e:f4:e2:da:bd:ba:8c: fc:bd:29:0d:79:95:21:a4:d5:7a:38:73:32:8d:86: e2:d4:16:25:27:c7:b8:35:fa:01:5b:92:ac:6f:48: fd:5b:36:63:d1:d2:a2:1f:73:a5:f3:c7:0f:7c:e5: 1d:0a:71:67:0f:e3:21:f4:a3:f4:0b:f9:da:44:70: a2:3f:f0:d8:37:f9:07:db:20:73:97:31:33:92:80: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7D:D9:A0:D4:B7:BF:E0:B7:0D:66:08:24:3E:04:15:E2:86:61:7D X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a0:61:6d:3f:32:ea:a0:9e:86:98:f5:e5:be:84:97:77:20: 3b:07:4f:92:78:62:43:c1:de:4f:cc:cb:8b:46:96:62:55:c7: 4d:cc:d5:e4:05:44:c0:55:56:a4:02:f2:a2:cc:ba:e8:72:c9: c1:60:0d:e9:97:50:f7:76:b6:8c:7f:43:45:72:77:fa:ee:d1: 7f:c7:ec:05:35:5b:90:43:90:04:4e:b7:06:b8:33:b2:c5:53: 63:ce:f1:70:64:0a:7a:76:ca:a5:54:e3:30:ec:8e:1b:16:2c: 96:20:19:bb:ad:27:46:93:3d:18:44:6e:ba:44:d5:1a:7f:0d: d0:f4:33:ea:ce:c7:f9:88:f8:7a:47:d2:97:d9:20:0f:3b:f6: 18:b0:5d:9b:b0:fc:5c:9c:82:af:28:68:ce:bd:c7:15:9b:b9: 99:8e:fd:45:57:2f:ab:86:fa:3d:ba:ee:33:a7:e6:d3:6d:06: 73:31:41:09:9c:a0:b8:b6:18:3d:e6:9e:7a:f3:c1:df:f3:44: 67:58:42:1d:21:1b:36:f8:72:a5:29:a6:c4:26:50:ef:86:71: 83:07:9a:1b:d0:e6:eb:9e:37:cd:fb:d5:55:8a:a8:eb:df:f6: 46:36:12:ca:f6:94:f1:89:62:d8:49:70:34:6a:e7:3e:54:e7: 9a:86:30:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjUxMjIwMTUwOTExWhcNMjUxMjI3MTUwOTExWjAYMRYwFAYD VQQDDA02OTQ2YmMxOC01MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIP7FvZ/eoWvNWtV1RSRcTtmI0/Zd6+0hF14rChUfYTSnecmNoOfHg2IBIre IK4B/BsrvWuQ71zZDyUG9A3DLiVwf4WDDIeOWeZ5DlImY2utBWMvzta7BZ2HY3Ca Z2pMdXpwd87tEiJHYczGnmHoeAbDam+ww2uOKzRnGH21qxv/ajVbuXAg7J5scAnG ap3Hjbuuaiuje7PGE+VWqg/X9iMmnJwYDi6crDBvZ0704tq9uoz8vSkNeZUhpNV6 OHMyjYbi1BYlJ8e4NfoBW5Ksb0j9WzZj0dKiH3Ol88cPfOUdCnFnD+Mh9KP0C/na RHCiP/DYN/kH2yBzlzEzkoC5fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDh92aDU t7/gtw1mCCQ+BBXihmF9MB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOoGFtPzLqoJ6GmPXlvoSXdyA7B0+SeGJDwd5PzMuLRpZiVcdNzNXk BUTAVVakAvKizLrocsnBYA3pl1D3draMf0NFcnf67tF/x+wFNVuQQ5AETrcGuDOy xVNjzvFwZAp6dsqlVOMw7I4bFiyWIBm7rSdGkz0YRG66RNUafw3Q9DPqzsf5iPh6 R9KX2SAPO/YYsF2bsPxcnIKvKGjOvccVm7mZjv1FVy+rhvo9uu4zp+bTbQZzMUEJ nKC4thg95p5688Hf80RnWEIdIRs2+HKlKabEJlDvhnGDB5ob0ObrnjfN+9VViqjr 3/ZGNhLK9pTxiWLYSXA0auc+VOeahjAb -----END CERTIFICATE-----Generated at Sun Dec 21 20:03:24 2025 by rpki-client