This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft File: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft (raw, json) Hash identifier: rAPfE7yxw1LiLcRamnhdoU4sjkUotmuUn/DjicAUuFQ= Subject key identifier: E9:84:D5:15:8A:69:80:53:C2:46:4E:43:5B:AE:3C:C4:25:26:D1:C1 Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 Certificate issuer: /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft Manifest number: 0A Signing time: Fri 05 Dec 2025 04:21:56 +0000 Manifest this update: Fri 05 Dec 2025 04:21:55 +0000 Manifest next update: Fri 12 Dec 2025 04:21:55 +0000 Files and hashes: 1: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl (hash: PbX1AVbJhgufItXBUyBL/exkcDT4SabL1/KgUXZt87k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Validity Not Before: Dec 5 04:21:55 2025 GMT Not After : Dec 12 04:21:55 2025 GMT Subject: CN=69325de4-d291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2e:f1:9b:42:fd:50:92:f7:b5:df:37:0c:14: 2b:56:3d:4a:48:82:a5:fe:9f:d5:7c:6f:32:f1:92: 90:7b:2d:eb:2d:01:0b:59:94:5a:ab:40:ad:29:33: e1:40:15:b3:74:97:23:50:4e:93:26:0a:26:a0:a4: 5f:49:de:b0:bf:4e:7b:c5:02:df:c5:6a:5d:56:50: fa:f0:d6:5b:2c:6c:c1:74:5f:55:02:62:5b:84:8a: 2d:d8:ef:9e:37:e1:e8:a1:ed:3b:c4:09:65:b2:d3: 1e:6f:7c:18:41:4a:ff:31:23:bf:fa:ba:4b:aa:0e: 0d:93:1c:89:aa:c9:81:32:d9:dd:cf:73:61:64:52: 48:b7:b6:c7:e2:d5:c0:82:03:14:89:f8:6d:3b:a7: 52:6b:06:27:a3:ac:e7:64:49:25:ef:5e:b0:1c:a0: 0c:15:39:4f:54:ab:a9:a1:d8:8f:7a:2b:79:54:50: 40:1f:66:1f:7a:c7:f8:b2:65:96:29:83:dc:3e:9b: 05:f6:5b:b8:ec:71:1b:80:17:1b:90:dd:fc:44:53: a0:34:75:97:7f:80:15:1d:37:12:18:70:ee:28:68: c5:bc:83:57:d8:cf:f3:7c:a8:eb:76:d7:62:7f:66: 77:55:5d:28:7d:30:ad:49:6f:33:0a:4e:2a:4a:2b: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:84:D5:15:8A:69:80:53:C2:46:4E:43:5B:AE:3C:C4:25:26:D1:C1 X509v3 Authority Key Identifier: keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:ca:fc:13:e4:a2:b1:36:bf:b0:34:6b:d0:3c:98:31:03:1e: f0:41:c4:d8:e6:49:98:52:ad:68:34:48:e7:78:20:20:6f:73: 26:60:46:7e:ab:20:dc:84:d1:b9:24:c8:8d:9a:ed:3a:1b:02: e6:cf:66:4e:84:83:a9:a2:d2:fb:bd:2a:51:98:c3:e9:15:fd: 85:ae:5e:48:22:5f:30:ae:58:15:ba:dd:71:58:eb:40:5f:e7: 0a:cd:ee:1e:e0:d1:18:cc:47:a7:9a:51:f5:98:3d:dd:f3:45: a6:01:b1:ee:82:b3:ac:1e:53:8e:3b:9a:00:f8:06:31:a5:bd: e7:de:ea:30:34:ef:be:81:1a:9b:47:19:5c:97:79:03:ae:99: ac:66:47:2a:35:69:23:6a:e4:df:98:6a:5a:09:8f:39:71:29: 6a:52:d6:f7:09:f8:c0:5e:33:36:23:6c:5b:48:38:31:c4:a1: 56:c8:b2:47:8d:44:67:3a:a2:2c:6e:d5:79:52:f8:d8:01:7c: 37:cd:16:ff:39:3e:b9:d0:eb:0c:72:4b:aa:81:2e:cc:e5:af: 16:b8:9a:90:62:71:4b:78:b3:3f:cc:b3:70:ad:97:b4:75:93: 7d:1d:57:c5:a2:48:8d:2c:1d:c5:32:ac:4f:01:07:71:45:1b: 2a:a8:25:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDFBQzExMC8GA1UEBRMoRUVBOTAxQjdGQjMzRkI1MENGMDRDNTk4MUY4QkVGNkM0 REVDMzVFMjAeFw0yNTEyMDUwNDIxNTVaFw0yNTEyMTIwNDIxNTVaMBgxFjAUBgNV BAMTDTY5MzI1ZGU0LWQyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhLvGbQv1Qkve13zcMFCtWPUpIgqX+n9V8bzLxkpB7LestAQtZlFqrQK0pM+FA FbN0lyNQTpMmCiagpF9J3rC/TnvFAt/Fal1WUPrw1lssbMF0X1UCYluEii3Y7543 4eih7TvECWWy0x5vfBhBSv8xI7/6ukuqDg2THImqyYEy2d3Pc2FkUki3tsfi1cCC AxSJ+G07p1JrBiejrOdkSSXvXrAcoAwVOU9Uq6mh2I96K3lUUEAfZh96x/iyZZYp g9w+mwX2W7jscRuAFxuQ3fxEU6A0dZd/gBUdNxIYcO4oaMW8g1fYz/N8qOt212J/ ZndVXSh9MK1JbzMKTipKK6IzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6YTVFYpp gFPCRk5DW648xCUm0cEwHwYDVR0jBBgwFoAU7qkBt/sz+1DPBMWYH4vvbE3sNeIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MUFDL0EzMDJBQjQ2QzY4 QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFEUEJNV1lINHZ2YkUzc05l SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN3FrQnRfc3otMURQQk1XWUg0dnZiRTNzTmVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MUFDL0EzMDJBQjQ2QzY4QzExRjBBRDIxNDYzN0M0RjlBRTAyLzdxa0J0X3N6LTFE UEJNV1lINHZ2YkUzc05lSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGDK/BPkorE2v7A0a9A8mDEDHvBBxNjmSZhSrWg0SOd4ICBvcyZgRn6r INyE0bkkyI2a7TobAubPZk6Eg6mi0vu9KlGYw+kV/YWuXkgiXzCuWBW63XFY60Bf 5wrN7h7g0RjMR6eaUfWYPd3zRaYBse6Cs6weU447mgD4BjGlvefe6jA0776BGptH GVyXeQOumaxmRyo1aSNq5N+YaloJjzlxKWpS1vcJ+MBeMzYjbFtIODHEoVbIskeN RGc6oixu1XlS+NgBfDfNFv85PrnQ6wxyS6qBLszlrxa4mpBicUt4sz/Ms3Ctl7R1 k30dV8WiSI0sHcUyrE8BB3FFGyqoJUk= -----END CERTIFICATE-----Generated at Sat Dec 6 19:51:04 2025 by rpki-client