This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json) Hash identifier: gY+X1cHDTsOLo3awifFWlWL2woGUOT91F6wsqLIbFSA= Subject key identifier: 77:A0:5A:DA:91:26:23:69:EB:4A:72:DE:D2:6E:90:E0:B6:5C:66:C4 Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Certificate serial: 21C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft Manifest number: 21C0 Signing time: Sat 06 Dec 2025 15:37:49 +0000 Manifest this update: Sat 06 Dec 2025 15:37:48 +0000 Manifest next update: Sat 13 Dec 2025 15:37:48 +0000 Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: dX5rKqZpvaVzU/2Z3X/udhOr7VpVxAvVBHqgBW/yTRk=) 2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: /mOiRGW1T9qa7YdW+2kPvRZkQyewAraUry397iZAYjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8649 (0x21c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Validity Not Before: Dec 6 15:37:48 2025 GMT Not After : Dec 13 15:37:48 2025 GMT Subject: CN=69344dcc-a381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:df:e5:d6:c0:94:fa:83:75:1b:65:9c:cc: 11:1c:07:bd:58:a5:a6:33:24:19:30:09:07:7b:b9: 98:06:11:cf:8e:d4:5e:e0:91:cd:90:81:f7:ca:6e: a5:b8:28:9e:cc:da:f2:e7:d5:48:b2:4f:8d:3f:1d: 51:80:cc:c7:9c:71:03:ab:51:89:93:ca:13:74:9f: 0c:cc:f3:b4:ba:39:4e:34:e8:9f:53:b5:62:c1:26: fa:3d:8f:60:5e:5d:d0:e0:32:b4:b9:77:88:fb:f7: 2f:da:a6:e3:b8:4b:f3:7b:a1:c1:7f:fb:ff:ec:e4: fa:70:59:6d:7b:f6:bd:99:11:22:08:30:2b:4a:f9: 5b:76:8e:38:f2:ac:50:6d:44:a5:29:9b:ce:73:fb: 0a:d0:37:c9:af:10:7f:00:91:a7:b1:94:c4:07:81: b4:29:42:86:87:dd:a1:f6:67:42:46:9b:33:13:66: 14:70:78:a5:24:11:3b:db:56:f6:db:e7:0c:39:d1: 5d:51:b0:3e:c6:a4:47:fe:17:2a:e9:dd:1a:a2:54: 92:c8:45:2a:5d:8b:b4:8a:bb:23:5b:70:39:b4:90: 4a:16:07:fd:91:6d:94:67:ad:1f:be:75:09:a3:a5: 00:86:d7:28:0b:e8:e1:37:7d:29:22:ee:60:38:9e: 46:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A0:5A:DA:91:26:23:69:EB:4A:72:DE:D2:6E:90:E0:B6:5C:66:C4 X509v3 Authority Key Identifier: keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:10:18:b6:58:62:25:70:c0:a2:06:6e:d4:b6:2c:cb:c3:77: 4f:30:d7:1f:65:8f:8b:eb:87:ec:5b:09:db:06:b6:0e:ad:2b: d0:ca:28:73:2f:1a:81:88:21:44:55:5f:03:f1:7d:7a:6a:d7: cb:05:54:c5:da:d3:b0:65:46:40:0b:7e:3c:51:70:8a:e6:2a: a3:dd:48:63:e1:46:be:4b:42:70:de:3a:eb:42:2d:fa:85:45: 60:c8:d4:36:01:9b:54:4d:46:08:32:90:f4:8f:60:2f:8c:42: 1b:0d:f5:16:fd:e2:3b:95:84:23:38:a9:d6:73:29:2a:e5:84: 83:f5:d7:56:f4:6d:55:fb:13:cd:09:9d:e4:49:6a:00:ae:55: 53:a9:78:72:0c:c0:69:1d:33:ca:55:fa:41:90:48:cb:f9:9d: 58:d9:17:ad:e5:b2:62:c7:21:b7:f5:1b:5b:d9:05:cc:0b:1a: e0:58:9a:01:81:ed:9e:40:fb:46:d3:73:8c:50:27:e3:df:80: 63:8c:9c:ba:51:3c:95:ff:1f:e4:e2:6d:78:47:0d:e6:6f:b4: 47:d1:32:2d:b4:47:0e:b7:14:f2:b7:5e:1f:ff:a5:45:92:e7: fc:c3:1f:80:20:ee:3e:40:c3:e2:65:a8:32:c7:23:86:8c:7d: 55:aa:c5:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4RkQxMTAvBgNVBAUTKEZGQkMyRDQxQ0REOTVGRkNGOEE3N0U1MjkxOUUyRTZE MUJBRjAyREYwHhcNMjUxMjA2MTUzNzQ4WhcNMjUxMjEzMTUzNzQ4WjAYMRYwFAYD VQQDEw02OTM0NGRjYy1hMzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgjf5dbAlPqDdRtlnMwRHAe9WKWmMyQZMAkHe7mYBhHPjtRe4JHNkIH3ym6l uCiezNry59VIsk+NPx1RgMzHnHEDq1GJk8oTdJ8MzPO0ujlONOifU7ViwSb6PY9g Xl3Q4DK0uXeI+/cv2qbjuEvze6HBf/v/7OT6cFlte/a9mREiCDArSvlbdo448qxQ bUSlKZvOc/sK0DfJrxB/AJGnsZTEB4G0KUKGh92h9mdCRpszE2YUcHilJBE721b2 2+cMOdFdUbA+xqRH/hcq6d0aolSSyEUqXYu0irsjW3A5tJBKFgf9kW2UZ60fvnUJ o6UAhtcoC+jhN30pIu5gOJ5GXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHegWtqR JiNp60py3tJukOC2XGbEMB8GA1UdIwQYMBaAFP+8LUHN2V/8+Kd+UpGeLm0brwLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhGRC85QTc5OTY0NEUx MTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhfejRwMzVTa1o0dWJSdXZB dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183d3RRYzNaWF96NHAzNVNrWjR1YlJ1dkF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhGRC85QTc5OTY0NEUxMTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhf ejRwMzVTa1o0dWJSdXZBdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPEBi2WGIlcMCiBm7UtizLw3dPMNcfZY+L64fsWwnbBrYOrSvQyihz LxqBiCFEVV8D8X16atfLBVTF2tOwZUZAC348UXCK5iqj3Uhj4Ua+S0Jw3jrrQi36 hUVgyNQ2AZtUTUYIMpD0j2AvjEIbDfUW/eI7lYQjOKnWcykq5YSD9ddW9G1V+xPN CZ3kSWoArlVTqXhyDMBpHTPKVfpBkEjL+Z1Y2Ret5bJixyG39Rtb2QXMCxrgWJoB ge2eQPtG03OMUCfj34BjjJy6UTyV/x/k4m14Rw3mb7RH0TIttEcOtxTyt14f/6VF kuf8wx+AIO4+QMPiZagyxyOGjH1VqsV9 -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:27 2025 by rpki-client