This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft File: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json) Hash identifier: s8w5p7D/6FfvNOFFHbrNRIurZexqM8mpkjMbSKQYa9o= Subject key identifier: 46:2A:E5:47:01:68:47:01:27:BA:C0:7B:49:FF:E6:7D:7B:8D:81:53 Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 Certificate issuer: /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft Manifest number: AA Signing time: Fri 05 Dec 2025 04:08:36 +0000 Manifest this update: Fri 05 Dec 2025 04:08:36 +0000 Manifest next update: Fri 12 Dec 2025 04:08:36 +0000 Files and hashes: 1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: IQjYjHxYEiAfsfIBpS9cCI85JIXtBq3/nSzYpOVBR70=) 2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: WVqv1JuSt8hSNNolUiV5z8//m1vJSnq0q+Q8Ooe/S0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Validity Not Before: Dec 5 04:08:36 2025 GMT Not After : Dec 12 04:08:36 2025 GMT Subject: CN=69325ac4-90fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:39:1c:9e:6d:7a:8f:47:3e:b0:b7:0c:d7: 0c:52:14:f4:4b:33:ec:5c:f1:89:4e:7e:5f:bd:58: 5c:28:0d:fc:64:d8:10:5f:9c:3e:c7:67:65:84:5c: d5:4d:95:88:90:5c:52:33:54:e0:54:73:84:cd:98: 70:8a:c9:08:0f:f8:ee:b9:52:db:3d:04:f2:b6:11: 3e:4d:c7:6f:cf:af:0c:7a:2b:6d:c7:51:b2:a8:42: b7:4b:bd:24:c2:90:72:b7:76:5c:9c:33:fe:6f:52: 5c:7f:06:88:95:73:e3:76:a0:8a:ed:98:f1:62:4f: 66:de:06:40:ea:8d:95:b8:4b:a9:12:a6:4c:0e:df: 9e:49:f6:63:76:14:dd:fe:5f:32:0f:3c:b0:87:6b: 3f:d7:7e:a6:8e:25:a9:c9:7e:fd:de:a4:3d:d4:a2: a7:97:f1:90:fb:2b:0f:01:2e:82:bd:57:0b:c3:12: b9:03:c3:ef:70:36:ca:f3:9e:da:5c:d2:3f:f7:f3: 0c:82:2a:cb:0f:69:06:be:41:12:ad:66:8f:5d:bf: 93:6a:81:86:03:aa:5e:e1:1a:71:f5:fd:44:37:97: 55:54:36:e6:44:24:54:ae:f5:b5:6d:1d:dd:63:eb: e4:99:b3:d1:67:26:80:9f:90:69:8f:3e:23:34:68: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2A:E5:47:01:68:47:01:27:BA:C0:7B:49:FF:E6:7D:7B:8D:81:53 X509v3 Authority Key Identifier: keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ea:00:d8:bf:d0:2c:3b:76:eb:21:d2:05:7c:98:01:2f:eb: 99:f1:7e:b4:05:f7:3a:13:d0:09:5a:b9:45:6f:e6:14:76:0d: 9c:c7:63:00:83:e5:e6:00:f7:ca:8e:a9:58:2f:38:fb:02:4e: 5e:14:c7:25:29:5a:db:41:09:57:da:bd:b2:9e:0d:e3:80:40: 25:5d:e8:28:be:08:d5:71:65:f5:19:6e:9c:f0:56:29:29:44: 8e:8c:ab:59:32:b1:f8:31:a2:ee:7d:96:e3:92:af:74:01:48: 02:e8:5e:1d:9e:88:ad:a6:75:96:ff:89:6f:05:f7:51:14:8f: f5:28:68:f9:9e:6c:88:14:dc:33:e8:a8:0d:19:b9:40:31:ee: 22:9b:79:b5:a4:21:9f:81:37:23:24:11:09:be:4e:a4:90:3b: d1:b0:a3:81:0d:85:88:b7:2e:67:7e:f8:9b:d9:20:a8:84:e5: e9:80:3d:a3:5e:02:94:81:3a:8d:a4:de:09:9f:57:89:66:3a: 03:8b:8b:58:0f:e9:ad:73:37:88:81:f9:eb:6d:75:b3:8c:55: ec:5c:b8:d8:65:60:d8:49:72:66:77:ae:af:15:bf:e6:50:14: 11:fa:7e:93:f1:be:f6:84:ae:13:cd:a2:cc:de:c4:70:d0:5e: ed:8d:76:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyQjYxMTAvBgNVBAUTKEVDNjc5MTY5MTc3QjlFMTMxRDBEQUEwMTM5OEQ3MDAz OTgyN0QxRjYwHhcNMjUxMjA1MDQwODM2WhcNMjUxMjEyMDQwODM2WjAYMRYwFAYD VQQDEw02OTMyNWFjNC05MGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eQ5HJ5teo9HPrC3DNcMUhT0SzPsXPGJTn5fvVhcKA38ZNgQX5w+x2dlhFzV TZWIkFxSM1TgVHOEzZhwiskID/juuVLbPQTythE+Tcdvz68Meittx1GyqEK3S70k wpByt3ZcnDP+b1JcfwaIlXPjdqCK7ZjxYk9m3gZA6o2VuEupEqZMDt+eSfZjdhTd /l8yDzywh2s/136mjiWpyX793qQ91KKnl/GQ+ysPAS6CvVcLwxK5A8PvcDbK857a XNI/9/MMgirLD2kGvkESrWaPXb+TaoGGA6pe4Rpx9f1EN5dVVDbmRCRUrvW1bR3d Y+vkmbPRZyaAn5Bpjz4jNGi3rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYq5UcB aEcBJ7rAe0n/5n17jYFTMB8GA1UdIwQYMBaAFOxnkWkXe54THQ2qATmNcAOYJ9H2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJCNi9FNjRCMDNCNENC NTkxMUVGODY5MTVCNjFDNEY5QUUwMi83R2VSYVJkN25oTWREYW9CT1kxd0E1Z24w ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdHZVJhUmQ3bmhNZERhb0JPWTF3QTVnbjBmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJCNi9FNjRCMDNCNENCNTkxMUVGODY5MTVCNjFDNEY5QUUwMi83R2VSYVJkN25o TWREYW9CT1kxd0E1Z24wZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ6gDYv9AsO3brIdIFfJgBL+uZ8X60Bfc6E9AJWrlFb+YUdg2cx2MA g+XmAPfKjqlYLzj7Ak5eFMclKVrbQQlX2r2yng3jgEAlXegovgjVcWX1GW6c8FYp KUSOjKtZMrH4MaLufZbjkq90AUgC6F4dnoitpnWW/4lvBfdRFI/1KGj5nmyIFNwz 6KgNGblAMe4im3m1pCGfgTcjJBEJvk6kkDvRsKOBDYWIty5nfvib2SCohOXpgD2j XgKUgTqNpN4Jn1eJZjoDi4tYD+mtczeIgfnrbXWzjFXsXLjYZWDYSXJmd66vFb/m UBQR+n6T8b72hK4TzaLM3sRw0F7tjXZR -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:43 2025 by rpki-client