This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: cC/kVi1svHnoDempjPkjToCLJjXJ4T1910mSY+LT+xw= Subject key identifier: DD:5B:5A:42:9E:64:B5:09:31:62:EB:C0:B3:20:14:1D:55:A2:01:5A Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0FCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0FBB Signing time: Sat 20 Dec 2025 17:13:37 +0000 Manifest this update: Sat 20 Dec 2025 17:13:36 +0000 Manifest next update: Sat 27 Dec 2025 17:13:36 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: EkCHo7q4Fx1l3km+Eltw23BZncDBixgqN2TEeFThnIA=) 2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: EAEo2CWZrqKlxbxQ35euXD3MOHKDbeB7itc8qDQhAZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4045 (0xfcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Dec 20 17:13:36 2025 GMT Not After : Dec 27 17:13:36 2025 GMT Subject: CN=6946d941-67bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:73:a2:b4:b3:4c:26:82:fa:9a:ce:db:33: 59:2f:6f:c9:d5:f2:1e:70:17:98:b0:ae:b9:d9:36: b0:6b:cf:e4:bc:7e:92:6d:02:2d:76:0f:aa:23:6b: 51:80:8f:7e:61:26:b0:f3:e4:1a:f8:03:77:00:9d: 2b:bb:09:a8:94:62:bc:2d:42:34:8b:6c:fd:aa:10: 41:f6:68:a3:49:ef:3f:aa:a2:7b:0e:b2:f6:95:a8: 26:9a:e5:d3:ff:1b:39:16:86:45:04:e8:9e:2e:f6: 27:44:c1:d0:23:c1:ea:cb:79:3f:a2:c5:c0:b2:b5: 92:7e:88:3d:db:cc:18:10:70:47:d5:05:97:fe:9a: d1:20:f0:35:dc:d1:49:5f:77:76:ed:09:9d:b9:ae: 86:3c:be:6b:51:0b:89:67:9e:18:3e:08:24:16:cd: 80:a2:a6:ef:38:9b:b0:3a:06:58:1c:cf:c4:13:95: df:aa:08:a8:38:75:c5:9a:3e:5a:47:06:40:42:73: 8d:26:92:a5:57:09:c4:71:35:30:ba:01:fc:16:4d: ae:72:3f:2d:9c:24:f6:47:85:c3:96:c6:2f:71:83: 3e:68:06:d8:1b:6c:aa:68:9b:8b:8b:90:07:38:2f: d3:28:09:58:52:61:70:e8:92:51:f9:0d:64:f0:33: 82:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5B:5A:42:9E:64:B5:09:31:62:EB:C0:B3:20:14:1D:55:A2:01:5A X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:af:13:5e:66:77:50:8c:f9:2c:08:fc:f6:97:22:ba:07:90: 8e:19:f8:a4:b7:ef:4e:19:78:b3:06:03:e0:83:ea:64:bd:59: 69:6c:da:3d:e8:89:af:c1:ae:3f:e3:e5:d1:2f:a3:41:2e:8a: 05:d5:e2:c0:95:63:5a:db:ad:ac:e5:34:b3:a4:b7:a4:e3:ae: 2b:f6:24:3f:a3:17:63:96:8d:ee:cd:bf:99:7e:26:ef:85:75: 52:e3:69:b9:02:ed:0f:11:b0:83:b9:70:41:96:2a:dd:4c:5c: 01:4d:39:08:e4:e6:da:ca:dc:7a:b2:f5:8b:59:04:8a:da:15: c1:e3:90:a6:d8:2c:2e:2a:8b:9f:c2:83:a2:10:95:f1:d0:d9: 15:a6:95:d2:53:22:21:98:bf:48:56:78:08:a5:8a:7b:7d:40: d7:b1:32:14:60:d3:35:80:ec:17:95:ec:4e:d5:cf:97:c9:08: e2:00:00:a5:9f:7f:3d:dd:90:3e:ee:a1:b2:6e:fc:30:ba:3f: db:75:1c:64:82:0c:c2:76:b9:f9:f6:4b:78:79:1d:d8:3b:5c: 48:84:ee:fd:e5:96:77:9f:22:fb:26:b5:48:f1:19:ae:85:6e: fc:f8:61:f7:c3:04:c2:8d:37:c3:69:e1:fe:70:8c:c2:2a:13: aa:8b:7c:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjUxMjIwMTcxMzM2WhcNMjUxMjI3MTcxMzM2WjAYMRYwFAYD VQQDDA02OTQ2ZDk0MS02N2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm7VzorSzTCaC+prO2zNZL2/J1fIecBeYsK652Tawa8/kvH6SbQItdg+qI2tR gI9+YSaw8+Qa+AN3AJ0ruwmolGK8LUI0i2z9qhBB9mijSe8/qqJ7DrL2lagmmuXT /xs5FoZFBOieLvYnRMHQI8Hqy3k/osXAsrWSfog928wYEHBH1QWX/prRIPA13NFJ X3d27Qmdua6GPL5rUQuJZ54YPggkFs2AoqbvOJuwOgZYHM/EE5XfqgioOHXFmj5a RwZAQnONJpKlVwnEcTUwugH8Fk2ucj8tnCT2R4XDlsYvcYM+aAbYG2yqaJuLi5AH OC/TKAlYUmFw6JJR+Q1k8DOCzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1bWkKe ZLUJMWLrwLMgFB1VogFaMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGrxNeZndQjPksCPz2lyK6B5COGfikt+9OGXizBgPgg+pkvVlpbNo9 6Imvwa4/4+XRL6NBLooF1eLAlWNa262s5TSzpLek464r9iQ/oxdjlo3uzb+Zfibv hXVS42m5Au0PEbCDuXBBlirdTFwBTTkI5Obaytx6svWLWQSK2hXB45Cm2CwuKouf woOiEJXx0NkVppXSUyIhmL9IVngIpYp7fUDXsTIUYNM1gOwXlexO1c+XyQjiAACl n3893ZA+7qGybvwwuj/bdRxkggzCdrn59kt4eR3YO1xIhO795ZZ3nyL7JrVI8Rmu hW78+GH3wwTCjTfDaeH+cIzCKhOqi3wM -----END CERTIFICATE-----Generated at Mon Dec 22 04:43:15 2025 by rpki-client