This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: EAr5S3MEXWcq7Bw/ncG4/+2z71MrCzqdQUk1gyelPUM= Subject key identifier: 4C:29:C8:55:BB:83:00:97:E1:AA:FB:F2:37:50:11:D9:E1:D8:61:82 Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0FC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0FB4 Signing time: Sat 06 Dec 2025 16:59:43 +0000 Manifest this update: Sat 06 Dec 2025 16:59:42 +0000 Manifest next update: Sat 13 Dec 2025 16:59:42 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: WfY8bDvaijtA9peyOcZurIVdKQ+VjSsyV/aT8OMvbEI=) 2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: EAEo2CWZrqKlxbxQ35euXD3MOHKDbeB7itc8qDQhAZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4038 (0xfc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Dec 6 16:59:42 2025 GMT Not After : Dec 13 16:59:42 2025 GMT Subject: CN=693460ff-5f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:02:d0:21:a5:71:04:72:18:0d:59:de:2b: fb:fd:e7:5d:2c:e1:2d:40:3c:6f:c7:38:bd:19:ae: 94:b9:38:f9:ac:2d:75:7a:4c:73:53:a0:33:df:a3: f5:53:ad:db:99:9e:c7:e7:a4:0d:41:db:34:da:05: e5:c4:48:88:1f:85:52:6c:88:69:13:9c:6f:8b:81: be:a6:ee:51:5c:10:73:a0:49:df:81:2a:53:68:ab: b6:15:54:0f:ee:73:ba:0f:6a:99:ea:e6:bf:8c:fb: 77:e1:2e:46:d9:25:d5:5c:c0:3f:f1:b6:2b:c8:52: 97:ae:1a:12:be:e4:36:54:e7:3d:1a:42:96:34:9b: ea:dd:24:14:49:29:13:67:79:67:23:cc:a6:3a:07: 77:35:20:cf:1f:83:dc:1c:4d:fb:93:a6:3d:1c:7b: 7e:f1:b1:d0:12:b3:6d:c2:17:12:1e:88:22:e1:76: a7:8e:ce:d1:2e:34:02:a8:ca:b9:29:35:f4:e1:49: 57:da:22:d5:be:bb:ba:5f:1a:30:d8:eb:51:d8:cd: bd:b4:6a:e8:a8:b6:41:c9:d2:0d:3c:33:13:9a:eb: ad:1f:e0:6d:63:80:e1:d5:ee:0a:c7:ae:5f:3b:00: cc:ce:8c:c2:2c:e9:a6:09:1b:d8:2c:71:12:d3:e0: 15:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:29:C8:55:BB:83:00:97:E1:AA:FB:F2:37:50:11:D9:E1:D8:61:82 X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9c:55:d1:46:fb:4c:86:3d:99:06:40:6d:1e:c6:de:ee:48: 18:14:85:14:ad:27:9b:d8:d8:cd:7c:59:5f:60:bf:cf:15:42: a9:0e:74:24:6a:0f:0e:8f:fa:c8:45:67:6f:8c:29:15:15:39: 6f:56:9a:52:ff:41:ab:66:1a:45:1b:a7:1c:b2:58:53:15:95: eb:e9:ed:76:e8:d7:8b:c0:8b:03:2f:55:17:32:c0:83:03:4b: 10:58:6e:18:6d:e6:37:0e:c7:57:47:0a:95:c8:25:b8:58:54: 52:dc:90:31:36:ea:4a:40:5d:e4:81:df:88:70:3a:98:75:8f: 4d:15:ac:2c:f7:77:77:fc:53:5c:df:ba:fb:22:c1:1a:cf:71: 85:ee:3d:a8:24:6d:30:9f:6e:5e:a3:c9:a2:93:5c:95:bb:28: c3:36:43:d9:19:a0:b3:7d:93:e5:87:21:ee:5a:e1:64:db:d5: fc:9e:78:c6:e0:2a:fd:6a:b3:bc:dc:11:10:35:73:48:69:33: d6:e1:de:2a:84:4d:2a:78:01:3a:81:0f:4d:29:1f:af:b3:a4: 30:51:ac:78:c4:9f:05:3c:d3:ad:fb:87:a1:33:33:2c:8e:d4: 26:2e:a0:31:62:3f:54:10:42:da:e1:05:8d:7d:a3:48:61:93: 47:c5:77:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjUxMjA2MTY1OTQyWhcNMjUxMjEzMTY1OTQyWjAYMRYwFAYD VQQDEw02OTM0NjBmZi01ZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAploC0CGlcQRyGA1Z3iv7/eddLOEtQDxvxzi9Ga6UuTj5rC11ekxzU6Az36P1 U63bmZ7H56QNQds02gXlxEiIH4VSbIhpE5xvi4G+pu5RXBBzoEnfgSpTaKu2FVQP 7nO6D2qZ6ua/jPt34S5G2SXVXMA/8bYryFKXrhoSvuQ2VOc9GkKWNJvq3SQUSSkT Z3lnI8ymOgd3NSDPH4PcHE37k6Y9HHt+8bHQErNtwhcSHogi4Xanjs7RLjQCqMq5 KTX04UlX2iLVvru6Xxow2OtR2M29tGroqLZBydINPDMTmuutH+BtY4Dh1e4Kx65f OwDMzozCLOmmCRvYLHES0+AVdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwpyFW7 gwCX4ar78jdQEdnh2GGCMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcnFXRRvtMhj2ZBkBtHsbe7kgYFIUUrSeb2NjNfFlfYL/PFUKpDnQk ag8Oj/rIRWdvjCkVFTlvVppS/0GrZhpFG6ccslhTFZXr6e126NeLwIsDL1UXMsCD A0sQWG4YbeY3DsdXRwqVyCW4WFRS3JAxNupKQF3kgd+IcDqYdY9NFaws93d3/FNc 37r7IsEaz3GF7j2oJG0wn25eo8mik1yVuyjDNkPZGaCzfZPlhyHuWuFk29X8nnjG 4Cr9arO83BEQNXNIaTPW4d4qhE0qeAE6gQ9NKR+vs6QwUax4xJ8FPNOt+4ehMzMs jtQmLqAxYj9UEELa4QWNfaNIYZNHxXfi -----END CERTIFICATE-----Generated at Sun Dec 7 07:50:05 2025 by rpki-client