This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json) Hash identifier: Mo3ycKwkR2WSdMWNQXMBUHXOaXA8Noevu8OznmFMb70= Subject key identifier: 3A:B5:D8:03:ED:BF:E8:2F:1A:2A:C2:A0:F3:92:14:59:77:20:8F:01 Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0BF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft Manifest number: 0BEB Signing time: Wed 24 Dec 2025 18:27:10 +0000 Manifest this update: Wed 24 Dec 2025 18:27:09 +0000 Manifest next update: Wed 31 Dec 2025 18:27:09 +0000 Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: 8A+r+bxJMH2+LwaUCouL/6ynjTslgXOc8pms+n2L9NA=) 2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 18:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3057 (0xbf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: Dec 24 18:27:09 2025 GMT Not After : Dec 31 18:27:09 2025 GMT Subject: CN=694c307e-7c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:9b:cb:45:c0:7a:2d:a5:79:a1:89:d0:6f: 7d:b1:98:45:f5:47:93:33:75:03:a0:9c:a7:d8:d5: 0f:2e:f4:71:b9:17:f6:6b:e4:cb:ee:eb:85:62:e6: 10:18:10:8c:a8:b2:ec:fe:24:dd:a6:a2:e3:c5:ac: 1b:0d:f7:bc:52:e3:f3:05:4f:c6:a1:8f:07:bf:25: 06:78:53:19:bc:96:6b:12:1f:f0:1b:0e:04:1e:4c: 84:01:44:1f:8a:19:1d:b1:b1:49:88:fe:0a:64:fe: a9:d6:61:8f:eb:cb:25:26:43:35:e5:45:b0:6a:18: 84:36:50:18:a8:55:aa:0c:c2:1a:bd:08:53:2c:e1: d0:43:92:89:94:a0:6e:6f:38:5b:0e:44:fd:62:46: 96:6a:9f:df:c7:7e:ee:2a:5b:25:60:c9:f6:ab:41: de:ec:54:21:69:39:5f:f0:4c:94:0c:52:6a:e2:80: 91:6f:d8:33:e5:d4:5f:98:0c:96:88:bf:92:c8:57: 80:dc:28:ae:b7:2c:8c:96:98:02:e9:3a:4d:5e:3b: dd:6b:ee:0c:fc:be:45:e0:da:91:f5:f0:9a:20:62: 3e:ab:08:ba:02:62:f0:a1:e5:50:1d:74:bb:4d:25: 0c:01:b9:ad:38:15:e2:09:18:69:a5:94:75:c7:1e: ee:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B5:D8:03:ED:BF:E8:2F:1A:2A:C2:A0:F3:92:14:59:77:20:8F:01 X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3d:e9:bf:95:de:91:4c:3a:0c:5e:4e:bb:28:c8:f6:62:61: 41:10:94:1d:60:b3:1f:3e:0a:d6:7f:f9:77:fd:81:9d:56:61: 14:7f:dd:25:bc:1a:9c:ea:8a:e3:49:91:a1:b8:b6:b6:0d:11: c2:8b:67:75:44:75:ad:ca:c6:ee:c7:b9:4a:bb:3e:30:fd:c5: 4a:db:05:87:d1:c9:92:3f:d6:aa:a1:41:33:73:b5:79:61:a6: 04:f3:21:81:4c:1f:e0:bd:8b:a9:fe:6d:d6:1d:01:c4:a1:38: 5f:6f:6d:76:5c:9f:5a:50:70:0b:1c:25:01:aa:33:a3:a3:62: f3:75:f8:71:1a:24:39:f1:75:d8:51:a6:ce:7e:48:12:fc:66: dc:d7:5a:d6:cf:50:c8:27:e6:da:5a:ec:72:3d:b7:78:96:f8: 00:a7:55:43:3c:2c:6e:98:8b:56:a4:f7:34:ea:ed:86:27:d0: 9c:ab:a6:f2:8b:4a:2b:46:79:ef:c1:d8:5a:0f:70:c7:09:65: df:19:6d:86:f5:7e:ef:1d:c7:d6:b9:b3:9c:80:8c:a8:de:4e: c2:fd:68:d2:51:71:2d:fa:46:d4:83:56:42:85:fa:21:b8:f6: c8:d2:b8:be:a5:8b:6a:34:29:58:17:5f:21:66:0b:6d:95:82: 6f:5f:1a:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjUxMjI0MTgyNzA5WhcNMjUxMjMxMTgyNzA5WjAYMRYwFAYD VQQDDA02OTRjMzA3ZS03YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFSby0XAei2leaGJ0G99sZhF9UeTM3UDoJyn2NUPLvRxuRf2a+TL7uuFYuYQ GBCMqLLs/iTdpqLjxawbDfe8UuPzBU/GoY8HvyUGeFMZvJZrEh/wGw4EHkyEAUQf ihkdsbFJiP4KZP6p1mGP68slJkM15UWwahiENlAYqFWqDMIavQhTLOHQQ5KJlKBu bzhbDkT9YkaWap/fx37uKlslYMn2q0He7FQhaTlf8EyUDFJq4oCRb9gz5dRfmAyW iL+SyFeA3CiutyyMlpgC6TpNXjvda+4M/L5F4NqR9fCaIGI+qwi6AmLwoeVQHXS7 TSUMAbmtOBXiCRhppZR1xx7uPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDq12APt v+gvGirCoPOSFFl3II8BMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtPem/ld6RTDoMXk67KMj2YmFBEJQdYLMfPgrWf/l3/YGdVmEUf90l vBqc6orjSZGhuLa2DRHCi2d1RHWtysbux7lKuz4w/cVK2wWH0cmSP9aqoUEzc7V5 YaYE8yGBTB/gvYup/m3WHQHEoThfb212XJ9aUHALHCUBqjOjo2LzdfhxGiQ58XXY UabOfkgS/Gbc11rWz1DIJ+baWuxyPbd4lvgAp1VDPCxumItWpPc06u2GJ9Ccq6by i0orRnnvwdhaD3DHCWXfGW2G9X7vHcfWubOcgIyo3k7C/WjSUXEt+kbUg1ZChfoh uPbI0ri+pYtqNClYF18hZgttlYJvXxqz -----END CERTIFICATE-----Generated at Thu Dec 25 03:29:33 2025 by rpki-client