This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json) Hash identifier: x7Vc2JK3E8YOX5nLam4RmthPmv6nDovvUdJYOTCYgw4= Subject key identifier: 00:AD:E5:4F:4D:C6:5A:DA:46:20:22:AB:87:BD:03:AE:ED:84:EC:B4 Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft Manifest number: 2E Signing time: Fri 05 Dec 2025 05:27:55 +0000 Manifest this update: Fri 05 Dec 2025 05:27:54 +0000 Manifest next update: Fri 12 Dec 2025 05:27:54 +0000 Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: yIumLyORdrJ3KXDpI+0+K11HXzAygNBDKwjzfcNLsEA=) 2: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: g7RZU/wRy/WcZYbu6OOC41FcuLTqxTBZLD2lxc5r+0s=) 3: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: 4ic8CmF7ut7Pvp2iYIvf/QMf2ZOGMMwbhjJKgiRPMl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Validity Not Before: Dec 5 05:27:54 2025 GMT Not After : Dec 12 05:27:54 2025 GMT Subject: CN=69326d5a-cec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:50:6a:b1:bb:e8:b5:dd:35:5d:09:e4:c5: 64:88:19:4b:1b:7a:1f:8b:9d:3a:05:46:86:3b:94: 4c:a5:89:c1:0f:e0:ea:96:95:19:7d:ca:85:cc:54: a3:66:29:16:0a:07:7f:e5:43:47:b0:67:c1:6f:c2: 1f:c0:16:1b:d6:eb:2f:74:c9:08:7a:28:d4:44:a9: c2:96:06:13:25:1d:81:8e:69:47:9a:05:f8:36:b3: be:88:07:dd:08:64:86:57:6a:f3:f6:dd:5a:44:be: 36:db:98:af:1b:fa:f3:e6:24:a8:4e:5e:cd:f5:40: 24:2b:29:c0:a3:74:80:22:fa:57:ea:2f:0b:f8:84: 0d:9e:49:e4:54:47:a5:53:28:3e:04:cd:6f:5f:90: ae:dd:51:23:b8:93:12:b5:db:c2:f3:8d:ec:87:94: 0b:e8:cc:4c:7a:63:44:ba:80:fd:92:5b:b0:80:82: d5:93:e0:8a:a4:3d:ff:bd:71:ed:7d:0d:f6:b5:34: ba:2d:7a:85:7e:76:6b:fd:0b:5c:e4:ae:71:a9:e4: c8:84:d9:97:40:76:61:9a:27:49:5a:dc:a0:d4:e6: 09:34:07:6f:67:b0:77:1a:d7:ff:5b:50:32:25:fe: 66:b7:fd:46:a6:c3:6d:fd:bc:2a:09:a7:d2:b8:17: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AD:E5:4F:4D:C6:5A:DA:46:20:22:AB:87:BD:03:AE:ED:84:EC:B4 X509v3 Authority Key Identifier: keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:f4:bb:ee:59:b1:97:16:13:57:c4:0c:94:f5:06:df:87:ba: f5:8e:7b:97:90:35:bb:ce:2c:02:a9:ce:95:f5:c9:b3:c8:fb: 09:db:04:2a:7e:00:6c:3b:52:5c:a4:f7:3e:2f:49:c8:55:d9: bc:ac:78:39:3d:32:5d:3b:b5:55:84:1f:e2:72:c3:e8:89:e2: 87:70:d3:ae:4e:7e:86:53:c5:06:9f:51:e5:14:cf:78:b0:49: 55:9f:28:b7:cd:9f:8a:1d:62:24:10:56:ca:82:c5:a7:d2:0f: 65:a2:6c:d2:39:88:80:e9:8b:63:e0:8a:ad:d9:c5:b9:16:bf: c6:fe:9a:e7:7d:ab:dd:40:bd:c2:82:59:a2:ee:68:d8:4b:55: 65:56:8f:be:af:93:06:19:62:ca:9c:61:a6:bd:60:5e:26:a4: 48:c8:b7:bf:e5:0a:df:84:01:ce:19:3f:c5:cc:7f:7a:1f:2c: 57:5b:65:51:50:8d:60:8d:4d:0e:07:07:ba:b6:ac:d1:3a:6a: d1:83:a3:05:d6:48:1a:e5:b3:4d:71:e3:87:4c:47:58:cd:40: 7a:be:9c:2f:b2:08:0e:9e:66:85:f8:18:d8:b1:74:e8:1e:9c: f8:1e:9c:eb:a5:ed:d7:7f:9a:59:8d:ec:f2:57:7a:88:a7:e1: 3f:2a:10:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjhBMDExMC8GA1UEBRMoQUZCQUExNTE2RTlFMTdGMjRDRjkxNDVCOEM3Q0Q0QkE4 MUE1N0E0MDAeFw0yNTEyMDUwNTI3NTRaFw0yNTEyMTIwNTI3NTRaMBgxFjAUBgNV BAMTDTY5MzI2ZDVhLWNlYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3eVBqsbvotd01XQnkxWSIGUsbeh+LnToFRoY7lEylicEP4OqWlRl9yoXMVKNm KRYKB3/lQ0ewZ8Fvwh/AFhvW6y90yQh6KNREqcKWBhMlHYGOaUeaBfg2s76IB90I ZIZXavP23VpEvjbbmK8b+vPmJKhOXs31QCQrKcCjdIAi+lfqLwv4hA2eSeRUR6VT KD4EzW9fkK7dUSO4kxK128LzjeyHlAvozEx6Y0S6gP2SW7CAgtWT4IqkPf+9ce19 Dfa1NLoteoV+dmv9C1zkrnGp5MiE2ZdAdmGaJ0la3KDU5gk0B29nsHca1/9bUDIl /ma3/Uamw239vCoJp9K4F4/nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAK3lT03G WtpGICKrh70Dru2E7LQwHwYDVR0jBBgwFoAUr7qhUW6eF/JM+RRbjHzUuoGlekAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2OEEwL0IyMDY4Q0Y4OEUy ODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjdxaFVXNmVGX0pNLVJSYmpIelV1b0dsZWtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 OEEwL0IyMDY4Q0Y4OEUyODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9K TS1SUmJqSHpVdW9HbGVrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGf0u+5ZsZcWE1fEDJT1Bt+HuvWOe5eQNbvOLAKpzpX1ybPI+wnbBCp+ AGw7Ulyk9z4vSchV2byseDk9Ml07tVWEH+Jyw+iJ4odw065OfoZTxQafUeUUz3iw SVWfKLfNn4odYiQQVsqCxafSD2WibNI5iIDpi2Pgiq3ZxbkWv8b+mud9q91AvcKC WaLuaNhLVWVWj76vkwYZYsqcYaa9YF4mpEjIt7/lCt+EAc4ZP8XMf3ofLFdbZVFQ jWCNTQ4HB7q2rNE6atGDowXWSBrls01x44dMR1jNQHq+nC+yCA6eZoX4GNixdOge nPgenOul7dd/mlmN7PJXeoin4T8qEBE= -----END CERTIFICATE-----Generated at Sat Dec 6 18:27:34 2025 by rpki-client