This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: POx94soQ/tDFNO1uqzk+KzRF8SJ6tfP8YMgYQkCg4sA= Subject key identifier: 3E:69:78:EC:93:0A:56:6C:3D:0F:D5:00:CA:9C:E0:F9:55:98:D4:1C Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: 5D Signing time: Fri 05 Dec 2025 05:10:24 +0000 Manifest this update: Fri 05 Dec 2025 05:10:23 +0000 Manifest next update: Fri 12 Dec 2025 05:10:23 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: pM1lSumFv4oUsZDfCAXAXHQ89pFxfZ/Sx191lzNt/2Y=) 2: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: negZFqmBMo6VKE4VUMOsRrfxv0TCnbtWxCJ6jQA2XAg=) 3: 10958AE05FB611F0BF84DD83C4F9AE02.roa (hash: 99rILg0lAp1MtFrGVsL1ZVmf1GEn+BZy/AOnEIUCEaI=) 4: C6811EDA5FB811F094135B2FC4F9AE02.roa (hash: +YrktxlVC+PsFpuKkXdgvfc2lY3YsjGZkj0Z7YYEcZU=) 5: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: vQxvyyxrHRBa4iZJFOrEvTxzuAri97r7swFzpbuyhQg=) 6: D05AFAE6CE0011F0A94EB15FC4F9AE02.roa (hash: ZORl5ItaUpxsd5UMywpx9FTe3Rjs1KUOMOCTNzk7o10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Dec 5 05:10:23 2025 GMT Not After : Dec 12 05:10:23 2025 GMT Subject: CN=69326940-9a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:b0:35:b7:e6:47:18:e4:fb:92:b2:72:16: 60:72:ab:fc:f6:9a:17:a3:ad:a3:b6:fc:c3:db:4c: eb:bd:49:35:3f:3d:95:b8:50:a8:c8:9d:0e:af:f3: 42:36:32:58:71:53:22:0e:6f:3f:34:65:8e:42:38: 02:c3:3d:4c:d6:e1:d2:c3:de:a9:51:63:7f:2b:c5: f2:78:bc:0b:70:91:c5:44:37:2e:d4:aa:f3:47:6d: b3:6b:b8:3f:70:a7:73:a4:67:e9:8e:52:75:8c:06: b8:e9:2d:24:41:b3:59:7d:cc:2d:0f:96:89:29:1d: c8:74:0a:c4:9e:1b:91:35:a2:04:04:b8:e9:5a:5d: 0b:4e:b8:cd:4a:d0:9b:98:4b:38:88:a7:ee:3f:12: 1e:f0:ef:5a:78:34:06:1e:40:46:65:51:aa:e0:84: b1:03:35:31:4d:89:15:d2:28:a4:e5:c4:49:62:ab: 57:57:67:84:b9:7a:07:af:71:83:91:00:8b:05:f7: 9c:ae:c6:b5:4c:af:c9:df:a8:68:89:77:44:0f:1b: 96:ef:3c:3f:85:cf:f2:39:ce:8c:0f:67:90:45:bc: 2a:2c:43:ec:1a:bc:65:63:24:b0:be:63:e8:10:08: bf:3e:3e:4a:92:44:7a:9f:17:f4:b8:95:43:ad:f2: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:69:78:EC:93:0A:56:6C:3D:0F:D5:00:CA:9C:E0:F9:55:98:D4:1C X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:8c:c8:52:0f:55:b3:a4:0d:25:6b:b0:b9:e2:81:1c:98:3a: 2b:07:da:ce:ec:ec:98:a4:38:fc:19:2c:d4:b5:68:a1:50:68: 18:c5:5d:01:78:82:40:28:24:bb:e7:e5:89:38:76:57:99:92: c6:6e:57:9c:e5:5f:ac:45:3a:36:7b:f6:e5:53:40:b3:e4:09: c1:1f:9a:d4:db:2e:1a:c9:e0:bc:2b:fd:df:b5:f7:09:57:21: 24:bd:44:55:79:40:df:b4:e6:07:2b:0e:96:24:28:c1:3d:53: 76:02:92:3a:84:32:6a:b4:e5:13:cc:d1:74:66:1e:f8:70:32: ea:74:4a:dd:cc:e9:cc:58:af:1e:ec:ea:cf:01:ff:89:e9:2e: 23:8b:f1:b8:52:72:fc:09:c3:84:40:85:91:c7:92:1b:9b:11: 89:fd:46:f2:f1:02:df:3a:b7:04:fb:7d:37:d9:de:f0:e9:6d: 37:7d:ce:e6:a9:cd:2b:0c:71:9a:ad:dc:88:8f:b1:16:dd:3c: 21:b6:f3:f7:27:9e:7d:27:ad:19:7e:a9:d2:9d:46:b5:de:e0: 7c:e0:ea:67:c3:b8:e2:4a:f9:4e:8e:ce:fc:88:21:5f:2c:41: 9a:5a:d6:96:bc:e6:96:f6:48:b4:9e:28:52:5b:96:5c:3b:5f: e7:c9:69:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNDdCNTc3QjlDOEFCRTJDMzYwMEM1QjRFNzkzRkY0RDQ3 QjY1MDYyMDAeFw0yNTEyMDUwNTEwMjNaFw0yNTEyMTIwNTEwMjNaMBgxFjAUBgNV BAMTDTY5MzI2OTQwLTlhMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC29rA1t+ZHGOT7krJyFmByq/z2mhejraO2/MPbTOu9STU/PZW4UKjInQ6v80I2 MlhxUyIObz80ZY5COALDPUzW4dLD3qlRY38rxfJ4vAtwkcVENy7UqvNHbbNruD9w p3OkZ+mOUnWMBrjpLSRBs1l9zC0PlokpHch0CsSeG5E1ogQEuOlaXQtOuM1K0JuY SziIp+4/Eh7w71p4NAYeQEZlUarghLEDNTFNiRXSKKTlxEliq1dXZ4S5egevcYOR AIsF95yuxrVMr8nfqGiJd0QPG5bvPD+Fz/I5zowPZ5BFvCosQ+wavGVjJLC+Y+gQ CL8+PkqSRHqfF/S4lUOt8noVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPml47JMK Vmw9D9UAypzg+VWY1BwwHwYDVR0jBBgwFoAUR7V3ucir4sNgDFtOeT/01HtlBiAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0M1REFCRUVBNUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjdWM3VjaXI0c05nREZ0T2VUXzAxSHRsQmlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND MEM5L0M1REFCRUVBNUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL1I3VjN1Y2lyNHNO Z0RGdE9lVF8wMUh0bEJpQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGaMyFIPVbOkDSVrsLnigRyYOisH2s7s7JikOPwZLNS1aKFQaBjFXQF4 gkAoJLvn5Yk4dleZksZuV5zlX6xFOjZ79uVTQLPkCcEfmtTbLhrJ4Lwr/d+19wlX ISS9RFV5QN+05gcrDpYkKME9U3YCkjqEMmq05RPM0XRmHvhwMup0St3M6cxYrx7s 6s8B/4npLiOL8bhScvwJw4RAhZHHkhubEYn9RvLxAt86twT7fTfZ3vDpbTd9zuap zSsMcZqt3IiPsRbdPCG28/cnnn0nrRl+qdKdRrXe4Hzg6mfDuOJK+U6OzvyIIV8s QZpa1pa85pb2SLSeKFJbllw7X+fJack= -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:28 2025 by rpki-client