This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft File: S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json) Hash identifier: gW4IULkHBTRtRNwwN4HMeaxpkr5d9vNVAKT58wTjsGo= Subject key identifier: 95:0E:21:EA:81:21:7F:43:98:24:3F:3D:83:B0:6A:69:C9:BE:83:17 Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92 Certificate issuer: /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft Manifest number: 26 Signing time: Fri 05 Dec 2025 05:32:17 +0000 Manifest this update: Fri 05 Dec 2025 05:32:16 +0000 Manifest next update: Fri 12 Dec 2025 05:32:16 +0000 Files and hashes: 1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: +jjRktQiob4sI6eTPpsiafjJZjLQ9GTme09vkmzx/eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92 Validity Not Before: Dec 5 05:32:16 2025 GMT Not After : Dec 12 05:32:16 2025 GMT Subject: CN=69326e61-a447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:c8:c6:86:c9:90:eb:7a:ad:00:8f:92:19: 48:7b:a5:c2:f8:65:66:02:7a:cf:02:70:fb:f6:12: eb:a6:18:5d:a8:ba:25:28:50:45:37:fe:9f:94:62: c4:15:f8:53:72:6a:2b:6f:d6:61:3d:a7:00:d2:a1: d0:43:e3:be:fe:02:2c:2d:7f:30:2b:15:3e:94:72: c7:62:4a:20:ff:87:7a:7d:cb:1b:20:7c:b1:2a:79: 9f:03:f4:b1:27:6c:7c:79:67:26:e9:ce:d4:91:e1: 6c:ac:e5:31:df:f7:5b:44:04:2a:57:16:de:07:6c: d7:93:12:70:c1:fb:fb:c9:d6:3f:86:72:83:4a:0c: f6:39:80:6d:b7:e2:40:92:d1:d7:f1:7c:2a:61:89: d3:a4:51:0c:5a:40:14:1f:59:ec:05:10:63:3e:0e: 8d:97:8b:8b:cd:6b:b6:22:f5:4d:e2:62:d0:d6:20: a8:ca:69:3d:57:a7:b9:4b:ee:27:e6:c1:d6:60:b7: 69:3b:17:24:ab:94:a5:45:e3:06:81:c6:71:0d:cc: 5d:3a:9a:22:6e:48:77:bc:8b:b6:ce:5b:c6:96:2e: b8:0c:d2:6e:2d:f2:da:c0:0a:05:7b:bb:79:ea:3d: c6:8e:25:1b:77:78:97:47:4c:4b:99:d9:23:35:24: 23:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0E:21:EA:81:21:7F:43:98:24:3F:3D:83:B0:6A:69:C9:BE:83:17 X509v3 Authority Key Identifier: keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d7:98:67:d1:36:bd:bb:f4:1f:1d:14:4e:76:c7:02:2d:37: c9:95:b0:45:1f:6d:ea:68:51:a5:c2:48:8d:ca:75:0e:d1:89: ae:1c:fa:8f:c5:1c:b9:67:e0:c6:4f:10:ae:0b:d1:8b:43:c1: 2f:ac:81:60:35:21:3e:69:78:fe:e5:df:f5:70:d6:30:58:85: 26:54:dc:44:84:f4:62:f8:84:fa:9d:8b:a6:5a:28:a9:60:0a: bf:8d:70:9a:a4:37:ba:ec:ec:56:e9:5a:19:4f:58:ac:4a:81: 29:dd:f2:5c:6c:08:77:de:78:b6:0b:ca:6c:da:8f:db:3a:98: 14:f8:51:4a:30:10:f6:af:89:75:6d:03:a6:9b:bd:76:62:8f: 41:e6:2e:27:c6:db:c9:73:a1:17:a8:98:ed:a4:cb:a6:df:9b: b0:e4:2a:71:0f:c2:05:75:81:62:d6:5c:a8:51:63:6f:c8:09: 2b:4e:ad:cb:55:e8:2a:51:e8:ae:06:7f:d1:db:b1:f0:a4:fc: 96:06:43:11:4a:06:8a:0f:85:9e:44:52:c8:47:a1:0d:77:f6: 9f:c8:f6:ce:46:68:ed:10:d6:93:b5:0e:f8:31:37:72:f8:46: f5:5d:40:ed:ab:52:80:a0:fb:94:80:26:bd:1a:7e:6e:47:2c: 30:53:bf:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjQzMTExMC8GA1UEBRMoNEJCNTM1MjM5NDhFQzZBQzk5MTNCMkQ1MDlDMUQ3QjI5 NDZEOUU5MjAeFw0yNTEyMDUwNTMyMTZaFw0yNTEyMTIwNTMyMTZaMBgxFjAUBgNV BAMTDTY5MzI2ZTYxLWE0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgT8jGhsmQ63qtAI+SGUh7pcL4ZWYCes8CcPv2EuumGF2ouiUoUEU3/p+UYsQV +FNyaitv1mE9pwDSodBD477+AiwtfzArFT6UcsdiSiD/h3p9yxsgfLEqeZ8D9LEn bHx5ZybpztSR4Wys5THf91tEBCpXFt4HbNeTEnDB+/vJ1j+GcoNKDPY5gG234kCS 0dfxfCphidOkUQxaQBQfWewFEGM+Do2Xi4vNa7Yi9U3iYtDWIKjKaT1Xp7lL7ifm wdZgt2k7FySrlKVF4waBxnENzF06miJuSHe8i7bOW8aWLrgM0m4t8trACgV7u3nq PcaOJRt3eJdHTEuZ2SM1JCM7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlQ4h6oEh f0OYJD89g7Bqacm+gxcwHwYDVR0jBBgwFoAUS7U1I5SOxqyZE7LVCcHXspRtnpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNDMxL0ZGN0QxOERBOTkx ODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5WkU3TFZDY0hYc3BSdG5w SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzdVMUk1U094cXlaRTdMVkNjSFhzcFJ0bnBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG NDMxL0ZGN0QxOERBOTkxODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5 WkU3TFZDY0hYc3BSdG5wSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF3XmGfRNr279B8dFE52xwItN8mVsEUfbepoUaXCSI3KdQ7Ria4c+o/F HLln4MZPEK4L0YtDwS+sgWA1IT5peP7l3/Vw1jBYhSZU3ESE9GL4hPqdi6ZaKKlg Cr+NcJqkN7rs7FbpWhlPWKxKgSnd8lxsCHfeeLYLymzaj9s6mBT4UUowEPaviXVt A6abvXZij0HmLifG28lzoReomO2ky6bfm7DkKnEPwgV1gWLWXKhRY2/ICStOrctV 6CpR6K4Gf9HbsfCk/JYGQxFKBooPhZ5EUshHoQ139p/I9s5GaO0Q1pO1DvgxN3L4 RvVdQO2rUoCg+5SAJr0afm5HLDBTv2k= -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:18 2025 by rpki-client