This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json) Hash identifier: qFUpjZNv4Wmlhsti3Vaz1L1H+w1Z52J27WeAbQdtg20= Subject key identifier: 7A:A8:AA:E7:15:79:2D:17:1F:F3:C2:F7:3B:CD:AC:98:D2:DF:81:07 Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Certificate serial: 0AEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft Manifest number: 0AE5 Signing time: Sat 06 Dec 2025 18:40:03 +0000 Manifest this update: Sat 06 Dec 2025 18:40:03 +0000 Manifest next update: Sat 13 Dec 2025 18:40:03 +0000 Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: CXRZI35NtwzXqDj0GmKE7uvHgGDz8D9TYUSluHKMndk=) 2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: wRiU0pz+/rk6H4beDLKQQM79S2Mgy7c+Kq9SVKFoW2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2795 (0xaeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Validity Not Before: Dec 6 18:40:03 2025 GMT Not After : Dec 13 18:40:03 2025 GMT Subject: CN=69347883-ead9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:1e:09:db:8a:2f:39:16:30:4c:95:9f:1d: 88:f2:23:c6:d6:5b:52:20:d4:47:d0:1d:90:5d:e3: d6:a1:19:9a:79:8e:c3:b4:e9:58:e4:60:a1:b5:03: fa:07:69:6c:7a:2f:f9:c6:ab:83:51:db:a2:d9:12: de:78:ff:1d:5b:6d:ec:e5:af:fe:a8:26:b6:b5:e4: b6:af:f9:1c:18:ab:9e:d2:0b:9b:c8:0b:70:34:77: 7a:49:4a:e5:42:22:31:30:8a:6e:65:5d:bf:cc:55: b1:9a:36:2f:ab:a0:c4:16:aa:61:a8:7c:28:8d:1c: 61:c4:3c:80:c4:c3:26:2f:7e:76:59:52:e6:d2:dc: 3d:0f:a8:df:03:13:2f:50:68:ed:59:bf:72:43:28: 76:58:4e:d7:80:44:f0:10:5b:b5:8f:8e:ac:cd:bf: 1e:54:d6:b0:5e:78:77:da:8a:6c:d9:ad:3a:b3:84: 12:d6:15:43:2c:3f:ca:49:db:97:9f:ef:af:75:ac: c6:86:07:16:d5:d9:8d:fa:0f:f0:f9:0b:d7:df:bc: e3:99:f8:80:6d:6d:6e:07:0e:7e:88:d1:63:6c:1d: d9:ff:bd:aa:e5:79:8c:cb:81:50:19:82:ae:82:db: 51:b4:d7:57:7b:03:18:45:c5:5f:ca:83:4c:18:ec: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A8:AA:E7:15:79:2D:17:1F:F3:C2:F7:3B:CD:AC:98:D2:DF:81:07 X509v3 Authority Key Identifier: keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:75:a8:f7:01:69:9a:ab:ed:cc:90:e7:8b:7d:35:9b:0a:ce: 24:31:b2:67:dc:52:b6:5e:63:65:f0:cf:5b:26:64:58:f7:0e: da:62:85:53:3d:67:28:da:4f:1d:ad:b4:33:37:d9:2f:ac:dc: 2f:79:cf:1a:ec:20:21:71:14:4c:da:e4:36:d4:75:5e:92:f9: c4:8d:ad:98:c7:fe:b5:05:71:68:3f:27:9b:34:93:5b:29:4c: 4d:77:60:4d:d3:84:8a:32:4b:5d:e8:e9:4a:6f:60:14:ef:cb: 52:4b:5a:1a:5e:2f:94:8a:8c:94:d2:d0:d6:ab:7a:b0:63:a0: 2c:4b:ea:97:da:78:8a:bf:a0:39:aa:9d:fd:d6:f7:79:0e:96: bb:39:70:69:74:5f:77:04:5f:0b:c9:65:ff:a0:18:be:80:69: 67:40:1d:5b:bf:3a:b9:78:84:02:b1:38:eb:52:9d:6b:5e:de: 2b:24:50:0e:7e:19:9f:37:46:76:ce:c2:a2:d8:a9:57:db:75: e7:45:8b:20:20:ab:ee:3d:21:fb:25:9a:dd:3f:13:4a:f0:e2: 46:17:55:a7:97:97:35:fb:4f:25:25:e6:8f:b9:36:89:8c:3c: f8:1e:4b:80:54:61:d6:f5:85:a7:2d:1d:7f:ea:06:b3:84:3b: 07:d1:5a:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA0RTMxMTAvBgNVBAUTKEVDNThCNDM3OEZDQkZGNENCMTI0MUY4MkYzQkNDMEU4 NzJFNEIzOTYwHhcNMjUxMjA2MTg0MDAzWhcNMjUxMjEzMTg0MDAzWjAYMRYwFAYD VQQDEw02OTM0Nzg4My1lYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuS0eCduKLzkWMEyVnx2I8iPG1ltSINRH0B2QXePWoRmaeY7DtOlY5GChtQP6 B2lsei/5xquDUdui2RLeeP8dW23s5a/+qCa2teS2r/kcGKue0gubyAtwNHd6SUrl QiIxMIpuZV2/zFWxmjYvq6DEFqphqHwojRxhxDyAxMMmL352WVLm0tw9D6jfAxMv UGjtWb9yQyh2WE7XgETwEFu1j46szb8eVNawXnh32ops2a06s4QS1hVDLD/KSduX n++vdazGhgcW1dmN+g/w+QvX37zjmfiAbW1uBw5+iNFjbB3Z/72q5XmMy4FQGYKu gttRtNdXewMYRcVfyoNMGOyDSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqoqucV eS0XH/PC9zvNrJjS34EHMB8GA1UdIwQYMBaAFOxYtDePy/9MsSQfgvO8wOhy5LOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDRFMy8xNDgzQkQzNjVC QjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8weXhKQi1DODd6QTZITGtz NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGaTBONF9MXzB5eEpCLUM4N3pBNkhMa3M1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDRFMy8xNDgzQkQzNjVCQjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8w eXhKQi1DODd6QTZITGtzNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCdaj3AWmaq+3MkOeLfTWbCs4kMbJn3FK2XmNl8M9bJmRY9w7aYoVT PWco2k8drbQzN9kvrNwvec8a7CAhcRRM2uQ21HVekvnEja2Yx/61BXFoPyebNJNb KUxNd2BN04SKMktd6OlKb2AU78tSS1oaXi+UioyU0tDWq3qwY6AsS+qX2niKv6A5 qp391vd5Dpa7OXBpdF93BF8LyWX/oBi+gGlnQB1bvzq5eIQCsTjrUp1rXt4rJFAO fhmfN0Z2zsKi2KlX23XnRYsgIKvuPSH7JZrdPxNK8OJGF1Wnl5c1+08lJeaPuTaJ jDz4HkuAVGHW9YWnLR1/6gazhDsH0Vqi -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:22 2025 by rpki-client