This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft File: C7ukEkukx8in-dCX7uqpgy8JeWc.mft (raw, json) Hash identifier: AIMGgVE4+IPyN+ILS1vv19Ousdpe4vvHX+av0zqkg5Q= Subject key identifier: 17:B4:56:53:85:FF:7A:DC:BC:79:DA:2A:1E:CB:5A:BD:48:EA:AB:37 Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 Certificate issuer: /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft Manifest number: 3C Signing time: Fri 05 Dec 2025 05:19:42 +0000 Manifest this update: Fri 05 Dec 2025 05:19:41 +0000 Manifest next update: Fri 12 Dec 2025 05:19:41 +0000 Files and hashes: 1: C7ukEkukx8in-dCX7uqpgy8JeWc.crl (hash: oHuRqa7PGaquRzS6/eizkbv4duallEowRaWQUKDvBrY=) 2: 58F7915E78DC11F084C71D2BC4F9AE02.roa (hash: jTESa3U73YRI0+Qom5Rj/Y57jrY10Y9T/v9pDSvTy48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Validity Not Before: Dec 5 05:19:41 2025 GMT Not After : Dec 12 05:19:41 2025 GMT Subject: CN=69326b6e-0ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f5:c6:d6:6e:77:7c:77:2b:fc:68:a5:88:56: 97:2e:c1:8e:5c:6b:95:30:83:9e:1f:c2:1e:b9:86: de:6f:cc:ea:0e:d8:0b:51:9f:f8:19:4d:de:e3:ad: 85:5b:5e:53:22:7b:1a:c2:59:9a:c3:3b:05:96:f7: 6f:4f:0f:b3:84:55:85:67:19:08:9b:f4:26:06:20: 35:4d:dd:d4:31:9e:9b:f8:31:86:af:4e:51:2a:3d: 50:dd:b3:77:46:74:bb:08:f1:a8:cd:5c:f2:72:87: 02:c3:03:38:37:b5:dc:61:f4:01:6d:73:29:49:71: b1:11:a4:93:44:37:6d:a1:98:8f:17:8b:b4:f9:26: 25:bf:5e:73:7b:22:56:53:7a:ac:e6:ff:35:56:5a: c6:e1:b0:6e:52:62:c3:45:7b:71:33:f0:a8:ef:9c: 3f:34:02:cf:00:85:92:4d:99:7f:e2:ae:89:05:7e: 2c:f9:3d:d6:94:9a:a5:1a:4d:63:aa:be:f4:87:ab: 57:b0:9d:8a:ea:30:57:d4:29:eb:23:78:b5:bc:01: 49:f2:37:e1:af:2a:38:04:32:f8:94:ea:9b:f7:03: 5c:70:62:6e:65:b1:b5:e4:2f:31:0d:e0:87:90:42: 30:fd:08:6b:82:f1:15:55:0c:e2:af:16:8a:dd:6c: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B4:56:53:85:FF:7A:DC:BC:79:DA:2A:1E:CB:5A:BD:48:EA:AB:37 X509v3 Authority Key Identifier: keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:9b:c6:6b:3b:94:8a:cb:1a:89:fd:cc:30:9f:2d:cb:fa:5f: bb:ad:b5:ef:7a:06:ee:a2:a6:02:ed:a1:25:42:56:8f:7c:e2: da:f8:ff:cb:16:72:0e:bb:46:71:b9:65:52:76:a7:97:6b:7c: f5:e1:10:4b:66:46:0f:11:35:3c:ca:a3:c3:41:6c:b3:8e:eb: 34:c9:1b:0b:6e:26:92:e9:73:33:1a:26:34:43:65:a7:fd:b9: 51:dd:5f:ae:64:d6:39:ba:e2:9b:e8:64:18:02:43:f9:bf:37: dc:5c:ae:92:95:e6:7b:af:40:ca:5e:04:01:18:91:c0:91:64: 72:78:61:f8:77:e8:47:c1:2b:f4:dd:d9:0e:f9:07:b7:75:64: c0:df:d8:2d:00:9f:d0:a1:83:6b:54:7e:95:8d:dc:4b:e3:83: cd:b7:98:8b:47:51:b3:b9:be:6e:04:ee:54:fd:2c:23:ac:ea: 4c:9c:a1:c1:e1:38:85:87:de:00:d4:be:cf:59:35:cd:90:a7: 3f:a7:79:e0:69:60:cb:8b:86:f5:98:26:fe:2e:55:50:10:c0: 85:78:18:18:4a:01:ca:84:23:bf:e1:77:5a:b1:4f:c3:63:41: 42:01:ec:09:be:8a:b4:1a:c7:4c:45:20:3e:23:c9:44:6b:ce: 54:7b:5a:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTAxRTExMC8GA1UEBRMoMEJCQkE0MTI0QkE0QzdDOEE3RjlEMDk3RUVFQUE5ODMy RjA5Nzk2NzAeFw0yNTEyMDUwNTE5NDFaFw0yNTEyMTIwNTE5NDFaMBgxFjAUBgNV BAMTDTY5MzI2YjZlLTBlZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE9cbWbnd8dyv8aKWIVpcuwY5ca5Uwg54fwh65ht5vzOoO2AtRn/gZTd7jrYVb XlMiexrCWZrDOwWW929PD7OEVYVnGQib9CYGIDVN3dQxnpv4MYavTlEqPVDds3dG dLsI8ajNXPJyhwLDAzg3tdxh9AFtcylJcbERpJNEN22hmI8Xi7T5JiW/XnN7IlZT eqzm/zVWWsbhsG5SYsNFe3Ez8KjvnD80As8AhZJNmX/irokFfiz5PdaUmqUaTWOq vvSHq1ewnYrqMFfUKesjeLW8AUnyN+GvKjgEMviU6pv3A1xwYm5lsbXkLzEN4IeQ QjD9CGuC8RVVDOKvFordbDXVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF7RWU4X/ ety8edoqHstavUjqqzcwHwYDVR0jBBgwFoAUC7ukEkukx8in+dCX7uqpgy8JeWcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5MDFFL0U2RTg4MEQ4NzhE QTExRjBCMEZCRTIxNkM0RjlBRTAyL0M3dWtFa3VreDhpbi1kQ1g3dXFwZ3k4SmVX Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzd1a0VrdWt4OGluLWRDWDd1cXBneThKZVdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 MDFFL0U2RTg4MEQ4NzhEQTExRjBCMEZCRTIxNkM0RjlBRTAyL0M3dWtFa3VreDhp bi1kQ1g3dXFwZ3k4SmVXYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADObxms7lIrLGon9zDCfLcv6X7utte96Bu6ipgLtoSVCVo984tr4/8sW cg67RnG5ZVJ2p5drfPXhEEtmRg8RNTzKo8NBbLOO6zTJGwtuJpLpczMaJjRDZaf9 uVHdX65k1jm64pvoZBgCQ/m/N9xcrpKV5nuvQMpeBAEYkcCRZHJ4Yfh36EfBK/Td 2Q75B7d1ZMDf2C0An9Chg2tUfpWN3Evjg823mItHUbO5vm4E7lT9LCOs6kycocHh OIWH3gDUvs9ZNc2Qpz+neeBpYMuLhvWYJv4uVVAQwIV4GBhKAcqEI7/hd1qxT8Nj QUIB7Am+irQax0xFID4jyURrzlR7Wmc= -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:58 2025 by rpki-client