This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json) Hash identifier: dZb/gffb57zs1DSZmlFXaveM8LnnVXxxlHcagfB8APY= Subject key identifier: 1B:66:24:75:25:80:E1:6A:2D:0E:7A:DB:0C:4E:0D:1B:44:66:38:3D Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft Manifest number: 0221 Signing time: Fri 05 Dec 2025 00:30:19 +0000 Manifest this update: Fri 05 Dec 2025 00:30:19 +0000 Manifest next update: Fri 12 Dec 2025 00:30:19 +0000 Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: TCEmMs6f6+XixotE8o+1aveYeNz4EpOeFDAziw4eq6E=) 2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Validity Not Before: Dec 5 00:30:19 2025 GMT Not After : Dec 12 00:30:19 2025 GMT Subject: CN=6932279b-2642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:49:cb:f7:f6:d3:cf:75:7e:c1:a5:f0:a1: 25:23:da:da:4a:e2:9a:28:13:54:a6:cf:41:48:bb: be:41:8c:65:d3:ca:91:87:d2:ac:4f:7a:7e:bf:8b: e8:eb:58:3b:89:8e:13:56:c2:50:36:34:57:9f:fe: 64:59:f3:76:43:45:2c:73:c3:10:89:7a:b2:26:4e: d9:9a:13:1f:e1:bb:06:ad:17:16:03:99:3a:6f:95: 21:e9:63:0a:ea:8e:5f:ee:0b:a5:13:31:b0:c9:ab: da:6f:d4:77:87:10:f7:06:cf:cf:52:d7:41:83:82: 27:1a:ec:99:48:9e:cd:ac:5e:73:35:f4:cb:d6:a3: 2a:39:0f:5d:65:f8:12:1f:f6:a5:d1:14:34:8e:1f: 21:4e:ce:04:b2:b4:fa:5c:4c:3b:72:10:32:9d:51: 4d:c9:df:d8:d6:34:83:46:ec:7a:5c:52:d9:ee:0c: 69:5f:12:eb:9b:41:97:cf:81:0c:cc:72:67:fd:e6: d9:f0:5f:26:d4:bd:7b:87:45:54:d3:18:69:d3:3f: 91:7d:58:a6:3f:8d:97:d0:8a:aa:c5:89:8c:6b:04: 73:ac:ae:bb:62:3b:6e:ad:d0:ad:ad:53:fe:ce:93: 84:c7:fc:8f:93:17:0c:58:91:ba:c6:54:67:10:67: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:66:24:75:25:80:E1:6A:2D:0E:7A:DB:0C:4E:0D:1B:44:66:38:3D X509v3 Authority Key Identifier: keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:68:a9:09:d0:8f:9f:3b:60:85:2f:7a:2c:02:eb:e5:16:8e: e1:d4:39:62:d0:9f:48:bc:db:2c:fb:5b:f3:0f:c0:54:ee:d2: 6d:ee:04:08:af:7b:96:f3:38:b5:30:79:c4:4c:a3:0f:ca:c6: 87:cf:dd:59:35:53:25:ec:49:0a:21:76:71:84:2d:81:6f:56: 21:ef:62:3c:3b:7f:5b:e8:82:0c:cd:1f:53:f5:ed:66:26:e0: 38:91:98:0c:e7:f4:69:ba:3a:1a:d0:69:02:a5:5b:d5:0b:fd: 32:9c:a9:a1:2f:23:2e:08:e7:47:b9:ec:ec:2e:e1:35:03:fc: b2:d6:52:98:69:1b:f9:6e:2a:b0:16:0e:7d:b7:b2:75:28:6e: 89:02:c2:9e:e3:40:c1:c9:02:3c:da:17:77:06:98:1b:16:63: ee:fa:da:3f:af:21:10:79:d6:d3:13:11:a7:94:ec:37:f4:ef: 57:b4:5f:ff:54:8f:7c:62:13:a7:34:27:d9:71:7c:6d:00:0f: b5:f0:5a:dc:30:00:7d:78:56:d1:7f:b5:c6:f0:42:43:76:8f: 32:21:25:cd:6d:e8:66:e9:63:08:06:73:a0:74:f8:67:d1:14: 1c:8a:88:32:a2:28:55:6f:5c:93:be:6a:47:3b:bf:ff:cd:a8: a0:9b:93:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3 RDYzODQ2NjgwHhcNMjUxMjA1MDAzMDE5WhcNMjUxMjEyMDAzMDE5WjAYMRYwFAYD VQQDEw02OTMyMjc5Yi0yNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SdJy/f20891fsGl8KElI9raSuKaKBNUps9BSLu+QYxl08qRh9KsT3p+v4vo 61g7iY4TVsJQNjRXn/5kWfN2Q0Usc8MQiXqyJk7ZmhMf4bsGrRcWA5k6b5Uh6WMK 6o5f7gulEzGwyavab9R3hxD3Bs/PUtdBg4InGuyZSJ7NrF5zNfTL1qMqOQ9dZfgS H/al0RQ0jh8hTs4EsrT6XEw7chAynVFNyd/Y1jSDRux6XFLZ7gxpXxLrm0GXz4EM zHJn/ebZ8F8m1L17h0VU0xhp0z+RfVimP42X0IqqxYmMawRzrK67YjturdCtrVP+ zpOEx/yPkxcMWJG6xlRnEGeZ/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtmJHUl gOFqLQ562wxODRtEZjg9MB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2 NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzBCOC9GMUY4OTBGMDk2NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVP OURTM0dKVlBGemg5WTRSbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkaKkJ0I+fO2CFL3osAuvlFo7h1Dli0J9IvNss+1vzD8BU7tJt7gQI r3uW8zi1MHnETKMPysaHz91ZNVMl7EkKIXZxhC2Bb1Yh72I8O39b6IIMzR9T9e1m JuA4kZgM5/Rpujoa0GkCpVvVC/0ynKmhLyMuCOdHuezsLuE1A/yy1lKYaRv5biqw Fg59t7J1KG6JAsKe40DByQI82hd3BpgbFmPu+to/ryEQedbTExGnlOw39O9XtF// VI98YhOnNCfZcXxtAA+18FrcMAB9eFbRf7XG8EJDdo8yISXNbehm6WMIBnOgdPhn 0RQciogyoihVb1yTvmpHO7//zaigm5Pp -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:20 2025 by rpki-client