This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft File: g7x91dFCfoM0DS32wztiPUPX7KQ.mft (raw, json) Hash identifier: I8s0kks8ZPvUR43/V/HKbCXWQVsq5DdRvSIC5eaOrmg= Subject key identifier: 33:35:5F:D9:36:24:7C:EC:19:D2:17:07:2F:C7:9F:60:84:21:0A:B0 Authority key identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4 Certificate issuer: /CN=A911B468/serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4 Certificate serial: 0F0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft Manifest number: 0EFB Signing time: Sat 06 Dec 2025 17:05:09 +0000 Manifest this update: Sat 06 Dec 2025 17:05:08 +0000 Manifest next update: Sat 13 Dec 2025 17:05:08 +0000 Files and hashes: 1: g7x91dFCfoM0DS32wztiPUPX7KQ.crl (hash: F3xsh5el4dChTdZKaaxVZppgI9F9Phi9GPoD/QGjqsE=) 2: E1769D329EF711EABE23195AC4F9AE02.roa (hash: bnxide7jSDy0H4+26/GRiKEkbVdX6Jj48LQNDvhocz8=) 3: 16C329A4713B11F0A2354E78C4F9AE02.roa (hash: 7smT06syTnNc536UG7njwXY5Lk24IKolME1BG7DDt6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3850 (0xf0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B468, serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4 Validity Not Before: Dec 6 17:05:08 2025 GMT Not After : Dec 13 17:05:08 2025 GMT Subject: CN=69346244-1bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:c4:4d:51:df:79:75:f7:49:20:2d:4a:e8: 25:d0:6c:8c:01:59:6f:95:3e:1e:c1:59:77:0d:1a: 9f:75:bb:ba:bc:01:09:7b:da:38:53:90:70:5e:8f: e9:2e:20:7a:85:92:22:29:51:1c:7a:3a:33:67:73: b2:01:21:29:07:7f:f2:0a:7f:0b:da:bc:48:58:aa: ae:01:49:54:47:47:3e:3a:dd:53:07:e5:a9:4a:2f: c0:c2:a5:81:9c:c3:bf:2d:5f:df:10:56:cd:48:86: 16:b3:dd:41:de:74:85:15:34:b5:e5:d2:1a:6e:15: 4e:f7:bd:16:f5:98:c9:7f:92:c8:6e:06:8c:ac:fa: bb:ea:cd:bf:b4:1e:6a:3b:3b:a5:d6:e3:9a:a8:c1: 9f:ad:e1:f9:d5:0c:3b:49:6b:c4:ab:63:07:e2:16: dd:5b:51:57:4f:c6:74:39:aa:b2:7e:ab:06:ab:75: 34:cc:47:1f:23:00:7d:03:50:01:f2:e1:94:ce:d7: f7:95:62:08:aa:86:0e:e5:30:6e:d5:48:44:4d:1a: 0a:08:b1:d0:7e:78:c3:32:b2:ee:10:92:8b:9f:50: 20:5a:42:8f:dc:b5:51:4e:a3:3a:8b:e2:37:4f:a4: 52:60:29:b7:90:88:ef:cb:ae:d6:06:0b:17:31:3a: 92:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:35:5F:D9:36:24:7C:EC:19:D2:17:07:2F:C7:9F:60:84:21:0A:B0 X509v3 Authority Key Identifier: keyid:83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:34:b4:8b:ff:b4:bd:ac:8a:5f:49:16:95:93:d9:cb:d1:ba: d9:9d:5b:1e:57:19:76:f8:62:23:f8:51:70:2c:96:0f:a5:9b: 7e:79:0d:0e:0b:94:72:4f:1f:83:0c:f5:89:c0:b9:6e:46:9f: 2b:d8:f3:55:5d:f3:3a:73:25:47:7d:59:fa:21:e5:d2:10:1f: e8:83:d5:c1:e4:cd:10:b7:8a:1f:55:33:9e:9a:01:fc:83:12: 94:bb:ae:df:a1:4a:43:ec:56:04:4c:63:bd:89:67:26:2c:9b: 37:f0:5b:3e:2e:81:fe:61:83:38:86:f5:02:48:e6:3c:16:1f: ff:53:f3:17:df:b0:41:63:65:fc:fd:22:3c:ca:83:bc:41:ff: f6:ef:79:08:e4:3b:a4:3b:cc:af:6b:5a:ff:77:cb:dd:7d:67: 5c:29:2a:9f:f7:81:77:b6:d6:dd:44:bc:fe:e8:02:86:ba:f8: 7f:39:77:c6:06:e8:49:b7:f1:44:1b:3e:e4:44:52:34:88:74: 16:77:9d:11:66:42:bc:91:2f:1f:21:04:75:3e:26:9e:2f:75: e0:a3:87:c6:63:70:73:59:5a:3c:f7:56:ea:eb:b9:3c:23:78: ca:06:b3:9c:59:10:83:70:85:f6:d3:58:12:36:c3:5b:6a:05: 6d:ce:65:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0NjgxMTAvBgNVBAUTKDgzQkM3REQ1RDE0MjdFODMzNDBEMkRGNkMzM0I2MjNE NDNEN0VDQTQwHhcNMjUxMjA2MTcwNTA4WhcNMjUxMjEzMTcwNTA4WjAYMRYwFAYD VQQDEw02OTM0NjI0NC0xYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArK/ETVHfeXX3SSAtSugl0GyMAVlvlT4ewVl3DRqfdbu6vAEJe9o4U5BwXo/p LiB6hZIiKVEcejozZ3OyASEpB3/yCn8L2rxIWKquAUlUR0c+Ot1TB+WpSi/AwqWB nMO/LV/fEFbNSIYWs91B3nSFFTS15dIabhVO970W9ZjJf5LIbgaMrPq76s2/tB5q Ozul1uOaqMGfreH51Qw7SWvEq2MH4hbdW1FXT8Z0OaqyfqsGq3U0zEcfIwB9A1AB 8uGUztf3lWIIqoYO5TBu1UhETRoKCLHQfnjDMrLuEJKLn1AgWkKP3LVRTqM6i+I3 T6RSYCm3kIjvy67WBgsXMTqSPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDM1X9k2 JHzsGdIXBy/Hn2CEIQqwMB8GA1UdIwQYMBaAFIO8fdXRQn6DNA0t9sM7Yj1D1+yk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQ2OC84MTIyNjAyODkx MUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRGQ2ZvTTBEUzMyd3p0aVBVUFg3 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3eDkxZEZDZm9NMERTMzJ3enRpUFVQWDdLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjQ2OC84MTIyNjAyODkxMUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRGQ2Zv TTBEUzMyd3p0aVBVUFg3S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPNLSL/7S9rIpfSRaVk9nL0brZnVseVxl2+GIj+FFwLJYPpZt+eQ0O C5RyTx+DDPWJwLluRp8r2PNVXfM6cyVHfVn6IeXSEB/og9XB5M0Qt4ofVTOemgH8 gxKUu67foUpD7FYETGO9iWcmLJs38Fs+LoH+YYM4hvUCSOY8Fh//U/MX37BBY2X8 /SI8yoO8Qf/273kI5DukO8yva1r/d8vdfWdcKSqf94F3ttbdRLz+6AKGuvh/OXfG BuhJt/FEGz7kRFI0iHQWd50RZkK8kS8fIQR1PiaeL3Xgo4fGY3BzWVo891bq67k8 I3jKBrOcWRCDcIX201gSNsNbagVtzmUX -----END CERTIFICATE-----Generated at Sun Dec 7 02:04:02 2025 by rpki-client