This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft File: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json) Hash identifier: d1imN9O95p+JeaiFPMz+oRsAr7c4eFccd3y51HvJPA0= Subject key identifier: 4B:A9:BC:37:4E:18:58:20:CC:EE:CB:9F:C5:CC:EE:5B:32:D0:69:2E Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft Manifest number: 0211 Signing time: Tue 23 Dec 2025 01:19:22 +0000 Manifest this update: Tue 23 Dec 2025 01:19:22 +0000 Manifest next update: Tue 30 Dec 2025 01:19:22 +0000 Files and hashes: 1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: ty2CHg686p6bWtFiHaBKljHSJ4YighCIxP/U7NER5Es=) 2: 545EDE9C140911EF8520A25BC4F9AE02.roa (hash: Tv8VFI61ht6g4zpgpyoiarorIdL71VBSjtb/bqzuKfo=) 3: A24D0F54140C11EFBC640B71C4F9AE02.roa (hash: wRJLakVb4OT38G6t+rRsnOSv4LpQV0AO0Scq5OD6JMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Validity Not Before: Dec 23 01:19:22 2025 GMT Not After : Dec 30 01:19:22 2025 GMT Subject: CN=6949ee1a-a07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:b8:b9:38:ee:02:86:75:5d:6d:db:ac:f6: f0:67:53:d6:97:12:14:6c:fb:0d:66:7b:f4:0a:fa: 42:de:77:51:ea:9f:66:f6:45:ee:03:b0:89:ec:0a: 65:19:10:c0:ef:e4:ed:a9:a3:2f:42:14:d6:93:94: c6:7f:22:bd:a1:9b:a5:c2:1c:c1:36:4b:b3:ee:e5: 00:16:b8:0f:4b:ec:92:20:59:c3:0a:b9:6b:55:08: d4:34:cb:02:ea:8b:62:d1:71:15:d4:bd:97:e6:f8: 3b:94:ba:68:f1:85:b8:ef:4a:75:30:0e:21:05:7e: 38:dd:d9:eb:cc:22:67:b6:36:cf:e4:24:39:ea:ce: 6d:f0:70:3c:ec:02:5a:35:2f:49:24:80:eb:2e:ca: a3:84:da:6b:c5:8a:dc:f9:d3:c7:9e:52:56:a9:dc: 9d:05:bb:92:db:b6:19:5c:e6:26:fb:07:b5:05:4f: 1c:f7:3d:fa:25:7d:6f:76:35:c5:53:db:90:b6:8a: c3:ac:94:be:30:ef:ed:95:65:53:a3:af:78:5e:a7: b2:9f:81:e2:ec:23:2b:ba:1e:fa:da:94:4e:ed:3b: 7b:63:49:78:66:89:7f:a8:e5:fd:27:8e:78:16:3e: a1:76:c3:5b:52:ee:a7:46:72:c7:67:f9:68:b5:e7: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A9:BC:37:4E:18:58:20:CC:EE:CB:9F:C5:CC:EE:5B:32:D0:69:2E X509v3 Authority Key Identifier: keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:fd:14:5c:52:f8:30:af:46:25:43:17:a9:1f:b7:b3:29:07: 05:82:eb:79:b9:a6:81:b4:53:4c:8c:93:91:5f:24:6f:46:b0: 91:80:7f:c5:5e:79:f3:df:c9:c7:10:68:d8:8f:a4:05:b5:17: 09:ca:dc:d5:33:a9:f9:65:3b:2f:1d:da:68:3f:3c:cd:69:83: d6:75:56:ea:48:30:91:8d:bf:0d:03:20:c9:0a:1d:77:4a:b9: 3d:fd:25:81:11:a7:75:d8:a8:a9:e9:82:c0:45:59:4e:c3:d2: 95:61:91:23:95:da:5e:7f:1f:60:d3:d2:b0:db:43:7d:8b:4a: 6e:90:b8:5e:b0:81:a4:32:a8:f6:32:a9:bd:37:0e:2d:5d:b5: 26:cb:39:5e:08:b8:8e:53:2a:60:e1:5f:44:d0:e2:b3:e3:05: 6b:a4:88:2f:9c:37:bf:62:5f:12:eb:37:bd:a1:f9:ea:d3:ba: 83:2a:13:6b:9f:29:89:3e:f6:cc:3d:94:af:63:9c:13:26:f9: 52:e1:c2:d2:b7:0a:3d:c1:54:cc:5a:d9:73:ad:fe:2e:91:be: 47:fc:c1:c6:d7:70:ca:9d:47:a7:68:ce:33:24:98:3c:77:0a: a2:17:99:c3:b5:09:9a:c4:33:63:b9:8b:b7:e2:96:e7:1c:25: 5b:5e:4a:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBNDAxMTAvBgNVBAUTKDM3QjYyQTc3MjUxQzUyQTA0QjMzQjgyRDJFRDAyMDRD OTI3QTQyOUEwHhcNMjUxMjIzMDExOTIyWhcNMjUxMjMwMDExOTIyWjAYMRYwFAYD VQQDDA02OTQ5ZWUxYS1hMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZu4uTjuAoZ1XW3brPbwZ1PWlxIUbPsNZnv0CvpC3ndR6p9m9kXuA7CJ7Apl GRDA7+TtqaMvQhTWk5TGfyK9oZulwhzBNkuz7uUAFrgPS+ySIFnDCrlrVQjUNMsC 6oti0XEV1L2X5vg7lLpo8YW470p1MA4hBX443dnrzCJntjbP5CQ56s5t8HA87AJa NS9JJIDrLsqjhNprxYrc+dPHnlJWqdydBbuS27YZXOYm+we1BU8c9z36JX1vdjXF U9uQtorDrJS+MO/tlWVTo694Xqeyn4Hi7CMruh762pRO7Tt7Y0l4Zol/qOX9J454 Fj6hdsNbUu6nRnLHZ/lotefjMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEupvDdO GFggzO7Ln8XM7lsy0GkuMB8GA1UdIwQYMBaAFDe2KnclHFKgSzO4LS7QIEySekKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREE0MC85NkYwRDcwQ0JC REExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1VxQkxNN2d0THRBZ1RKSjZR cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL043WXFkeVVjVXFCTE03Z3RMdEFnVEpKNlFwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REE0MC85NkYwRDcwQ0JCREExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1Vx QkxNN2d0THRBZ1RKSjZRcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG/RRcUvgwr0YlQxepH7ezKQcFgut5uaaBtFNMjJORXyRvRrCRgH/F Xnnz38nHEGjYj6QFtRcJytzVM6n5ZTsvHdpoPzzNaYPWdVbqSDCRjb8NAyDJCh13 Srk9/SWBEad12Kip6YLARVlOw9KVYZEjldpefx9g09Kw20N9i0pukLhesIGkMqj2 Mqm9Nw4tXbUmyzleCLiOUypg4V9E0OKz4wVrpIgvnDe/Yl8S6ze9ofnq07qDKhNr nymJPvbMPZSvY5wTJvlS4cLStwo9wVTMWtlzrf4ukb5H/MHG13DKnUenaM4zJJg8 dwqiF5nDtQmaxDNjuYu34pbnHCVbXkpB -----END CERTIFICATE-----Generated at Thu Dec 25 02:44:44 2025 by rpki-client