This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json) Hash identifier: 997AJfh2Wk6fyAvjHlK4JoM8zX4ZQ0isnTMKElEB9i4= Subject key identifier: C6:D4:C1:16:9C:98:EB:49:CB:BD:EF:3E:47:DC:34:E3:1B:55:58:F8 Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft Manifest number: 07EB Signing time: Sat 06 Dec 2025 20:11:59 +0000 Manifest this update: Sat 06 Dec 2025 20:11:58 +0000 Manifest next update: Sat 13 Dec 2025 20:11:58 +0000 Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: 6gxOFPfRKX3GXLuTgVohsd8VKDe0u3IbMM/2zmMS8yg=) 2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: wiuGLfhX4Abp89BeKvQrP2ym0zYLw1999qfgLcOKlHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Validity Not Before: Dec 6 20:11:58 2025 GMT Not After : Dec 13 20:11:58 2025 GMT Subject: CN=69348e0f-9f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3c:46:ef:7c:65:98:df:07:9c:9b:1e:a6:70: 41:3c:e0:a3:ce:03:90:6c:31:d1:46:c8:32:90:cc: 0a:28:d3:ad:ba:d6:39:25:45:d6:f6:f2:60:c7:b8: 0b:9d:bd:9d:88:a2:11:02:c7:4c:b4:b6:b8:f9:c4: 1c:93:b1:b5:6e:c6:90:d1:c3:09:ac:aa:3b:44:be: 0a:16:e3:bd:1b:76:81:94:02:05:52:b0:1f:e8:bd: 7f:0f:bc:df:d4:ab:99:a4:ca:92:c3:aa:f8:d7:89: 54:cb:98:18:57:49:71:00:a5:77:23:e2:ca:fa:98: 17:7c:25:9e:56:97:2c:fd:b2:66:44:47:88:62:f3: 10:a7:24:b5:38:f1:43:10:b7:e5:53:36:f5:ac:22: d7:ff:1c:e0:99:3a:37:da:e2:fe:33:03:20:25:b1: b1:42:a8:b4:79:d2:fc:e8:1e:3f:be:db:a2:35:fe: 07:e8:a5:93:ca:9b:6d:40:2e:93:f8:ad:89:2b:38: 2f:0b:65:1c:40:ae:06:0d:c1:77:ba:62:bf:97:ea: 25:e6:cd:3f:fc:14:8e:47:52:ee:61:59:b6:61:1e: 81:cd:b0:68:74:d8:9e:b6:1e:1f:6a:4d:9f:c4:2e: 73:c2:d8:3c:b4:47:e7:de:78:5a:7b:34:30:35:08: 1f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D4:C1:16:9C:98:EB:49:CB:BD:EF:3E:47:DC:34:E3:1B:55:58:F8 X509v3 Authority Key Identifier: keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:11:c3:ee:b1:e2:43:61:3e:dc:01:97:99:fd:0e:4f:8b:9b: 08:56:d6:a0:33:53:be:26:ed:fa:7f:11:39:6d:0b:e7:e6:2c: 0f:86:cb:34:ee:43:b6:30:0d:29:4a:fd:c1:21:f2:90:23:33: 2b:bb:5d:dd:d0:b6:14:a3:8a:4c:4b:24:a1:2a:61:38:17:42: 80:0f:e5:c8:05:dc:e5:c5:50:3a:0e:a0:36:5b:a7:33:a4:1a: b3:b2:2f:80:d8:56:db:f9:95:d4:ef:2e:42:20:0f:ed:61:ae: fe:de:bd:e0:2e:e4:bf:e0:de:37:a3:9e:5f:23:79:a9:ec:2d: 7f:53:b0:45:4e:87:8c:6e:71:fd:3f:8d:81:80:8f:f4:09:2d: 99:7b:cc:f4:3f:7c:05:ce:4b:03:17:b7:16:c5:ef:7b:03:70: 3d:f7:61:d0:cc:99:f2:77:5f:ee:63:be:96:ec:37:09:e0:b2: c1:0c:21:02:4c:dc:52:cf:a0:db:2e:1c:0b:11:fb:ed:73:22: 98:a3:48:4a:ae:ea:91:d2:12:72:f3:2d:5c:a2:84:99:8a:5c: 53:b0:88:d9:37:90:6f:dd:48:9d:16:a0:2b:9b:a5:b4:e5:02: d3:76:9e:91:6a:d6:5f:5c:62:d8:b7:53:f3:5f:27:bf:ff:04: 2b:3d:3c:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNDkxMTAvBgNVBAUTKDE3NzI1RkFERUI0NEEzRkE4QjMxRkZGMEE2M0NCQzUx NTVBOTA3RDgwHhcNMjUxMjA2MjAxMTU4WhcNMjUxMjEzMjAxMTU4WjAYMRYwFAYD VQQDEw02OTM0OGUwZi05ZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzxG73xlmN8HnJsepnBBPOCjzgOQbDHRRsgykMwKKNOtutY5JUXW9vJgx7gL nb2diKIRAsdMtLa4+cQck7G1bsaQ0cMJrKo7RL4KFuO9G3aBlAIFUrAf6L1/D7zf 1KuZpMqSw6r414lUy5gYV0lxAKV3I+LK+pgXfCWeVpcs/bJmREeIYvMQpyS1OPFD ELflUzb1rCLX/xzgmTo32uL+MwMgJbGxQqi0edL86B4/vtuiNf4H6KWTypttQC6T +K2JKzgvC2UcQK4GDcF3umK/l+ol5s0//BSOR1LuYVm2YR6BzbBodNieth4fak2f xC5zwtg8tEfn3nhaezQwNQgf6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbUwRac mOtJy73vPkfcNOMbVVj4MB8GA1UdIwQYMBaAFBdyX63rRKP6izH/8KY8vFFVqQfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA0OS83RUM5MDk3NjBE RkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9fcUxNZl93cGp5OFVWV3BC OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YzSmZyZXRFb19xTE1mX3dwank4VVZXcEI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA0OS83RUM5MDk3NjBERkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9f cUxNZl93cGp5OFVWV3BCOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJEcPuseJDYT7cAZeZ/Q5Pi5sIVtagM1O+Ju36fxE5bQvn5iwPhss0 7kO2MA0pSv3BIfKQIzMru13d0LYUo4pMSyShKmE4F0KAD+XIBdzlxVA6DqA2W6cz pBqzsi+A2Fbb+ZXU7y5CIA/tYa7+3r3gLuS/4N43o55fI3mp7C1/U7BFToeMbnH9 P42BgI/0CS2Ze8z0P3wFzksDF7cWxe97A3A992HQzJnyd1/uY76W7DcJ4LLBDCEC TNxSz6DbLhwLEfvtcyKYo0hKruqR0hJy8y1cooSZilxTsIjZN5Bv3UidFqArm6W0 5QLTdp6RatZfXGLYt1PzXye//wQrPTx+ -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:59 2025 by rpki-client