This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.mft File: 7AffwfGIh38OvP3gtIHMAiw0NrI.mft (raw, json) Hash identifier: wV69YoyICccost01NI4YbPNI9NVMv68EM0n9W3BAiYo= Subject key identifier: 28:FE:80:ED:AD:67:08:37:EA:A6:B8:19:92:8B:DC:20:82:36:DB:A7 Authority key identifier: EC:07:DF:C1:F1:88:87:7F:0E:BC:FD:E0:B4:81:CC:02:2C:34:36:B2 Certificate issuer: /CN=A91BEE1D/serialNumber=EC07DFC1F188877F0EBCFDE0B481CC022C3436B2 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7AffwfGIh38OvP3gtIHMAiw0NrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.mft Manifest number: AE Signing time: Fri 05 Dec 2025 04:06:58 +0000 Manifest this update: Fri 05 Dec 2025 04:06:58 +0000 Manifest next update: Fri 12 Dec 2025 04:06:58 +0000 Files and hashes: 1: 7AffwfGIh38OvP3gtIHMAiw0NrI.crl (hash: kvDhBN0VmEQgce7O3A0xOTYWpCLNi2GqXZPTVdUj3ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.crl rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7AffwfGIh38OvP3gtIHMAiw0NrI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE1D, serialNumber=EC07DFC1F188877F0EBCFDE0B481CC022C3436B2 Validity Not Before: Dec 5 04:06:58 2025 GMT Not After : Dec 12 04:06:58 2025 GMT Subject: CN=69325a62-7e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:94:cd:3c:46:57:57:c0:e6:f2:00:1e:1b: e1:f9:8b:3c:0c:e8:18:e6:b5:77:12:58:7e:66:90: 95:db:f9:d2:2d:c2:d6:d8:14:62:88:58:75:bb:5e: f8:dc:b1:64:4b:37:35:7f:c1:60:b9:a3:a8:d5:92: c9:64:18:fb:23:b2:b1:ea:e5:57:3a:cd:51:d5:58: 5e:7e:c3:8b:62:00:9b:ef:8f:fc:eb:f7:f2:7b:44: 5c:87:95:57:a2:3d:1a:0c:11:66:01:43:18:09:e1: ae:a2:b7:e7:34:32:22:d5:8d:31:8a:be:1a:2c:94: d4:10:bf:80:39:26:ea:b8:a3:a1:b8:c4:7e:74:51: 9d:ed:a5:5c:28:19:08:3e:41:e9:09:61:1a:f2:05: 9b:4a:44:43:cd:b0:d1:30:c9:76:05:32:7b:39:24: d0:c4:52:48:e1:82:3c:fc:e4:66:c6:50:88:76:6a: 85:6a:05:5d:dc:bc:c2:ae:12:09:70:50:69:6f:b1: d2:68:e4:0d:1e:fd:ec:f5:b3:91:97:33:1f:77:32: 4e:e3:66:18:8c:b1:b6:1b:25:f6:f2:13:50:38:7d: 71:0e:17:62:f1:2d:0d:81:ab:8c:15:db:df:42:43: 9e:34:32:98:a8:6d:41:e7:0f:2c:fe:5a:79:64:18: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FE:80:ED:AD:67:08:37:EA:A6:B8:19:92:8B:DC:20:82:36:DB:A7 X509v3 Authority Key Identifier: keyid:EC:07:DF:C1:F1:88:87:7F:0E:BC:FD:E0:B4:81:CC:02:2C:34:36:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7AffwfGIh38OvP3gtIHMAiw0NrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/92782234C70E11EF8067C466C4F9AE02/7AffwfGIh38OvP3gtIHMAiw0NrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:cb:bf:85:ef:e7:78:e5:6b:b0:29:35:e7:f6:31:ec:1f:a3: af:5e:80:f2:ee:f1:33:bd:3e:e8:af:34:49:02:2f:ec:a3:4c: 73:4f:92:98:58:61:74:cc:ac:0c:67:66:5b:99:a6:48:ce:e0: cc:28:3b:17:7d:8a:48:82:73:af:96:0e:92:5b:df:2d:2e:18: ad:3e:9c:35:56:5f:aa:a8:39:1d:67:08:9d:9f:79:17:53:60: cc:06:a1:fe:e1:9e:41:c7:47:ea:5e:a2:ac:64:f0:c5:c2:dc: 3c:94:0c:c6:3f:7a:1e:99:46:05:af:aa:68:19:f3:77:7c:0e: c8:d2:12:dd:58:8f:d3:f9:6d:ee:96:ca:42:16:d9:2e:06:75: 0f:82:b8:af:9a:c8:33:f0:b2:9f:2f:ef:b8:aa:2a:2a:ab:30: 9d:95:f2:12:d0:b5:80:58:39:03:ff:df:0b:91:cf:40:81:21: d0:9c:59:b0:41:74:ae:59:de:48:f1:b8:18:95:72:36:cc:c3: 62:41:2f:af:b6:a6:54:43:5d:ba:eb:03:60:3c:47:2c:30:fb: 6e:5b:8f:da:7a:55:41:ed:4c:0c:2e:41:d1:96:e7:ef:cf:c4: 59:d6:27:f9:cc:15:40:4b:23:60:36:3d:2b:1c:76:ce:a6:83: 4d:90:ee:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMUQxMTAvBgNVBAUTKEVDMDdERkMxRjE4ODg3N0YwRUJDRkRFMEI0ODFDQzAy MkMzNDM2QjIwHhcNMjUxMjA1MDQwNjU4WhcNMjUxMjEyMDQwNjU4WjAYMRYwFAYD VQQDEw02OTMyNWE2Mi03ZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUGUzTxGV1fA5vIAHhvh+Ys8DOgY5rV3Elh+ZpCV2/nSLcLW2BRiiFh1u174 3LFkSzc1f8FguaOo1ZLJZBj7I7Kx6uVXOs1R1VhefsOLYgCb74/86/fye0Rch5VX oj0aDBFmAUMYCeGuorfnNDIi1Y0xir4aLJTUEL+AOSbquKOhuMR+dFGd7aVcKBkI PkHpCWEa8gWbSkRDzbDRMMl2BTJ7OSTQxFJI4YI8/ORmxlCIdmqFagVd3LzCrhIJ cFBpb7HSaOQNHv3s9bORlzMfdzJO42YYjLG2GyX28hNQOH1xDhdi8S0NgauMFdvf QkOeNDKYqG1B5w8s/lp5ZBgjjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCj+gO2t Zwg36qa4GZKL3CCCNtunMB8GA1UdIwQYMBaAFOwH38HxiId/Drz94LSBzAIsNDay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUxRC85Mjc4MjIzNEM3 MEUxMUVGODA2N0M0NjZDNEY5QUUwMi83QWZmd2ZHSWgzOE92UDNndElITUFpdzBO ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdBZmZ3ZkdJaDM4T3ZQM2d0SUhNQWl3ME5ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUxRC85Mjc4MjIzNEM3MEUxMUVGODA2N0M0NjZDNEY5QUUwMi83QWZmd2ZHSWgz OE92UDNndElITUFpdzBOckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXy7+F7+d45WuwKTXn9jHsH6OvXoDy7vEzvT7orzRJAi/so0xzT5KY WGF0zKwMZ2ZbmaZIzuDMKDsXfYpIgnOvlg6SW98tLhitPpw1Vl+qqDkdZwidn3kX U2DMBqH+4Z5Bx0fqXqKsZPDFwtw8lAzGP3oemUYFr6poGfN3fA7I0hLdWI/T+W3u lspCFtkuBnUPgrivmsgz8LKfL++4qioqqzCdlfIS0LWAWDkD/98Lkc9AgSHQnFmw QXSuWd5I8bgYlXI2zMNiQS+vtqZUQ1266wNgPEcsMPtuW4/aelVB7UwMLkHRlufv z8RZ1if5zBVASyNgNj0rHHbOpoNNkO4A -----END CERTIFICATE-----Generated at Sat Dec 6 22:10:14 2025 by rpki-client