This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft File: 7TFghH3ErtktjFnRmEZbHL7y3yI.mft (raw, json) Hash identifier: f8H9QXrHIyYRdi3EX4EfO0DSTmkzEde/sP/8uTjjUw8= Subject key identifier: 29:BD:2F:A5:F8:45:9F:C3:B3:07:C8:C4:DC:D0:B2:80:E2:31:5F:8A Authority key identifier: ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22 Certificate issuer: /CN=A91B6C85/serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft Manifest number: 0116 Signing time: Sun 07 Dec 2025 03:08:08 +0000 Manifest this update: Sun 07 Dec 2025 03:08:08 +0000 Manifest next update: Sun 14 Dec 2025 03:08:08 +0000 Files and hashes: 1: 7TFghH3ErtktjFnRmEZbHL7y3yI.crl (hash: u2UXPlsFsl/5mbDp227ChACUVRRWP0YDzVCcTW8BvFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6C85, serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22 Validity Not Before: Dec 7 03:08:08 2025 GMT Not After : Dec 14 03:08:08 2025 GMT Subject: CN=6934ef98-ab95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:1f:47:9b:73:d5:e7:2f:37:1c:ef:07:a6: 97:8f:f2:f8:9a:5e:c5:a7:b1:d0:e4:e2:e8:83:00: 3a:3d:10:6f:ec:22:14:a0:d7:b5:30:a8:fb:89:7e: 53:77:9c:94:f0:ad:a3:4a:8d:e3:33:a9:9a:8f:a2: 79:0e:b2:7c:7b:45:5d:0a:13:7a:1c:af:da:78:6c: 23:66:47:0c:04:78:ac:19:22:52:0a:8b:d2:c6:0c: 26:a6:95:57:de:7e:78:e9:15:31:89:51:bb:7f:15: 16:0b:d6:bb:2e:47:65:b6:01:4c:6d:de:9c:e4:d0: 41:af:3e:0f:9d:92:2b:8f:94:9b:49:15:5b:c4:47: d6:44:4c:88:7e:c2:e0:77:cf:79:42:7a:83:11:32: ae:b6:39:df:00:35:03:63:32:03:70:8b:58:9a:52: ab:c2:c7:ee:3d:3b:35:e7:a5:e7:66:9f:13:e9:ec: cd:86:20:b4:c5:1b:da:4c:92:47:be:b4:c5:10:17: 3f:4d:25:19:f3:a4:08:d6:61:26:21:49:e9:a6:9d: 12:c3:8f:2a:3e:ea:79:b4:bc:ab:27:9f:44:cc:02: 5c:54:6b:35:b0:1d:f5:c6:fc:07:d6:aa:f7:0b:e6: da:3a:31:dd:a2:d7:bf:70:a1:69:6c:f0:42:7c:6b: 82:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BD:2F:A5:F8:45:9F:C3:B3:07:C8:C4:DC:D0:B2:80:E2:31:5F:8A X509v3 Authority Key Identifier: keyid:ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f4:c6:e5:c2:98:70:00:8a:cd:c8:82:fd:86:02:3a:a5:8b: da:57:09:a2:3c:4b:05:c6:21:df:00:27:79:9d:c9:81:00:ad: 69:bc:5c:36:d2:fc:75:93:c7:45:84:04:3c:ec:59:43:ea:b3: 5a:23:27:33:96:db:c9:9f:2b:a3:c7:43:34:35:9b:ff:8d:d5: 0c:20:66:7e:0a:08:97:02:99:41:99:e8:a2:2e:dc:77:8c:4c: 30:f7:93:b2:32:49:48:16:08:53:a2:35:93:b6:b7:96:bb:cc: cf:ae:2b:1f:a9:74:e6:45:6e:60:4a:25:39:57:0f:1b:c3:ea: 17:d2:c4:bf:e9:41:fc:58:54:cb:2f:40:15:29:bb:05:39:a0: 99:d5:54:96:1a:38:79:9a:29:57:87:48:71:a4:c2:9b:c1:c9: 12:fd:0f:79:c3:16:eb:f5:96:48:70:23:60:0d:05:05:62:ef: 68:3a:70:e7:88:0b:86:02:63:58:e0:0e:0e:2a:4e:31:8a:57: fd:3e:91:fb:1f:6b:7a:ca:c1:3c:29:c6:e3:8d:79:10:9b:32: 33:b5:65:99:94:bb:ad:4e:d4:6d:ce:bf:8e:87:b4:fe:b1:98: b7:6e:05:55:97:78:ae:5f:25:a3:3a:33:73:1e:82:32:ec:42: f4:04:1f:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDODUxMTAvBgNVBAUTKEVEMzE2MDg0N0RDNEFFRDkyRDhDNTlEMTk4NDY1QjFD QkVGMkRGMjIwHhcNMjUxMjA3MDMwODA4WhcNMjUxMjE0MDMwODA4WjAYMRYwFAYD VQQDEw02OTM0ZWY5OC1hYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/8fR5tz1ecvNxzvB6aXj/L4ml7Fp7HQ5OLogwA6PRBv7CIUoNe1MKj7iX5T d5yU8K2jSo3jM6maj6J5DrJ8e0VdChN6HK/aeGwjZkcMBHisGSJSCovSxgwmppVX 3n546RUxiVG7fxUWC9a7LkdltgFMbd6c5NBBrz4PnZIrj5SbSRVbxEfWREyIfsLg d895QnqDETKutjnfADUDYzIDcItYmlKrwsfuPTs156XnZp8T6ezNhiC0xRvaTJJH vrTFEBc/TSUZ86QI1mEmIUnppp0Sw48qPup5tLyrJ59EzAJcVGs1sB31xvwH1qr3 C+baOjHdote/cKFpbPBCfGuCtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCm9L6X4 RZ/DswfIxNzQsoDiMV+KMB8GA1UdIwQYMBaAFO0xYIR9xK7ZLYxZ0ZhGWxy+8t8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkM4NS8yODcwN0NCRTI4 ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0a3RqRm5SbUVaYkhMN3kz eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdURmdoSDNFcnRrdGpGblJtRVpiSEw3eTN5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkM4NS8yODcwN0NCRTI4ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0 a3RqRm5SbUVaYkhMN3kzeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk9MblwphwAIrNyIL9hgI6pYvaVwmiPEsFxiHfACd5ncmBAK1pvFw2 0vx1k8dFhAQ87FlD6rNaIyczltvJnyujx0M0NZv/jdUMIGZ+CgiXAplBmeiiLtx3 jEww95OyMklIFghTojWTtreWu8zPrisfqXTmRW5gSiU5Vw8bw+oX0sS/6UH8WFTL L0AVKbsFOaCZ1VSWGjh5milXh0hxpMKbwckS/Q95wxbr9ZZIcCNgDQUFYu9oOnDn iAuGAmNY4A4OKk4xilf9PpH7H2t6ysE8KcbjjXkQmzIztWWZlLutTtRtzr+Oh7T+ sZi3bgVVl3iuXyWjOjNzHoIy7EL0BB+7 -----END CERTIFICATE-----Generated at Sun Dec 7 04:54:11 2025 by rpki-client