This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: 0Ckk7cAqQKdp79GqofTwtJ6uAEiGGCMjUtqPIz7akCc= Subject key identifier: 0B:A1:34:48:0C:65:20:A4:9D:20:29:A8:15:30:7A:33:5C:A0:E0:2C Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 042C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 0424 Signing time: Thu 04 Dec 2025 22:49:20 +0000 Manifest this update: Thu 04 Dec 2025 22:49:20 +0000 Manifest next update: Thu 11 Dec 2025 22:49:20 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: nN9NKPVt7cmlcoLYCffB1wcjGPr0AshfKEMMJN8DHhg=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Dec 4 22:49:20 2025 GMT Not After : Dec 11 22:49:20 2025 GMT Subject: CN=69320ff0-1978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b6:97:f6:4c:53:9d:5c:b6:61:2f:33:d1:99: c7:cc:87:d1:ca:d3:86:1b:38:13:bd:8d:8c:81:68: 24:68:f1:cc:bb:4d:05:e7:00:16:3b:53:c6:2a:a8: 23:d5:20:6f:07:ee:4a:1f:e4:17:c3:20:87:ca:12: 66:1f:5d:a6:f8:5a:bd:14:da:9d:4f:70:e8:2b:03: be:4e:a8:cd:6d:ed:0a:25:a1:e1:49:95:6b:f7:e0: 17:cc:fd:92:34:56:f3:31:a2:ee:9e:52:b8:89:fe: 2a:8f:60:c0:54:1b:66:57:8d:0f:d1:3f:eb:91:de: 1c:08:37:4e:18:e2:d2:b8:87:8a:f7:cd:db:11:df: 1d:bb:9d:2f:2e:96:92:4a:a1:67:d1:56:94:15:d0: b9:8e:8f:16:35:66:65:f2:e2:e9:72:1f:a7:97:33: 32:b2:0f:18:4c:79:55:cd:4e:c0:27:36:59:9f:cb: a7:fa:b3:7a:87:fd:3c:02:65:b1:7f:d0:e5:56:83: 3e:d9:55:30:d4:8d:4a:5c:c7:cc:b2:f4:aa:95:17: 7f:bb:94:ca:33:c6:bc:a4:d2:b6:cb:36:23:83:3c: c7:89:3e:c8:ff:05:17:e9:c0:a5:b2:54:17:2c:9b: 9f:66:ef:20:1f:dc:52:57:2a:f8:7e:9f:98:5f:97: 20:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A1:34:48:0C:65:20:A4:9D:20:29:A8:15:30:7A:33:5C:A0:E0:2C X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:b3:62:f3:9f:1d:26:7d:4a:47:fb:04:a6:6b:83:d2:28:6a: bd:55:a5:84:b2:04:e0:d6:7b:d3:bd:b7:e6:37:13:57:53:f7: fd:55:ab:8e:2f:59:ab:5f:4c:2f:fd:8f:4b:ae:63:fa:85:62: b8:5c:2f:b8:21:1f:28:6e:87:d4:3f:ce:06:4d:36:e6:5f:fa: 8e:8e:6a:2b:9a:a4:04:50:85:12:c7:8c:db:64:e6:3e:1e:16: 54:cc:34:39:88:8e:fa:7e:d9:85:f3:63:ba:a8:0d:64:8e:0a: 34:94:81:43:c2:03:9a:25:7a:33:f8:5c:4b:f5:4a:95:48:e2: b9:c3:d1:85:a3:06:3b:cf:2f:74:02:42:65:0b:e5:6c:a4:9b: 7c:50:61:1f:c5:7b:b8:ec:ed:66:0b:bf:5a:9d:14:51:32:0d: 4c:08:72:51:8f:eb:14:24:4f:77:56:8f:e4:75:6c:a1:88:ac: fb:b0:40:56:fb:9e:50:70:f6:45:54:5f:f5:f1:f2:1f:b2:04: 34:72:16:5b:a6:b8:0c:b5:5f:fc:1e:47:fc:9e:33:86:10:e2: a3:bd:b9:35:39:f4:1f:05:71:d1:c9:1d:24:f2:8a:99:a6:26: ec:97:c8:c1:4b:7d:16:b2:2a:36:b3:93:6b:b5:9d:83:9a:ef: 57:74:7a:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjUxMjA0MjI0OTIwWhcNMjUxMjExMjI0OTIwWjAYMRYwFAYD VQQDEw02OTMyMGZmMC0xOTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobaX9kxTnVy2YS8z0ZnHzIfRytOGGzgTvY2MgWgkaPHMu00F5wAWO1PGKqgj 1SBvB+5KH+QXwyCHyhJmH12m+Fq9FNqdT3DoKwO+TqjNbe0KJaHhSZVr9+AXzP2S NFbzMaLunlK4if4qj2DAVBtmV40P0T/rkd4cCDdOGOLSuIeK983bEd8du50vLpaS SqFn0VaUFdC5jo8WNWZl8uLpch+nlzMysg8YTHlVzU7AJzZZn8un+rN6h/08AmWx f9DlVoM+2VUw1I1KXMfMsvSqlRd/u5TKM8a8pNK2yzYjgzzHiT7I/wUX6cClslQX LJufZu8gH9xSVyr4fp+YX5cgAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuhNEgM ZSCknSApqBUwejNcoOAsMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAs2Lznx0mfUpH+wSma4PSKGq9VaWEsgTg1nvTvbfmNxNXU/f9VauO L1mrX0wv/Y9LrmP6hWK4XC+4IR8obofUP84GTTbmX/qOjmormqQEUIUSx4zbZOY+ HhZUzDQ5iI76ftmF82O6qA1kjgo0lIFDwgOaJXoz+FxL9UqVSOK5w9GFowY7zy90 AkJlC+VspJt8UGEfxXu47O1mC79anRRRMg1MCHJRj+sUJE93Vo/kdWyhiKz7sEBW +55QcPZFVF/18fIfsgQ0chZbprgMtV/8Hkf8njOGEOKjvbk1OfQfBXHRyR0k8oqZ pibsl8jBS30Wsio2s5NrtZ2Dmu9XdHrG -----END CERTIFICATE-----Generated at Sat Dec 6 22:45:45 2025 by rpki-client