This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft File: 7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json) Hash identifier: XM7uFGPBsiI1w2rGOnocnGFUJWrhgO0e2J/lc4DDYQY= Subject key identifier: ED:6F:62:DE:67:FD:C3:58:B1:42:14:2F:44:C6:C0:65:51:61:C6:28 Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 Certificate issuer: /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft Manifest number: 017F Signing time: Fri 05 Dec 2025 01:50:42 +0000 Manifest this update: Fri 05 Dec 2025 01:50:42 +0000 Manifest next update: Fri 12 Dec 2025 01:50:42 +0000 Files and hashes: 1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: HXDKihcyZIzaFWgsYJnst+nTUVz5NsgPOK0k/QR+pmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Validity Not Before: Dec 5 01:50:42 2025 GMT Not After : Dec 12 01:50:42 2025 GMT Subject: CN=69323a72-c518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:f3:e1:c9:8a:87:aa:4c:64:3b:ee:74:2d:e7: 31:39:c2:4d:5d:cc:12:a1:fa:50:5c:37:72:22:83: ae:9a:7b:be:fa:2c:6c:1e:49:ae:7c:92:02:73:4c: 43:04:31:5e:78:4f:3f:bd:9d:0f:97:ec:09:84:2f: 44:36:79:bf:ca:c2:d4:ba:62:b2:37:0c:de:df:32: 07:8d:0b:aa:40:49:1a:35:4d:60:82:4d:0a:2e:db: 67:ee:34:c9:62:7c:b1:59:1a:ca:f1:ea:39:fa:7d: 3a:ad:a0:89:fe:2e:08:59:4f:8a:99:8d:21:01:21: 66:3c:bd:fe:a7:b0:ee:85:ea:e6:76:6d:80:77:e8: e2:05:ac:e6:15:b9:8d:2b:bb:96:0d:ab:29:21:aa: 0e:49:d6:70:e1:64:98:8a:a8:13:b5:ec:f9:22:27: b8:ef:a3:bd:11:35:21:8c:4a:0d:55:47:24:32:cc: 08:b5:21:63:31:5b:9a:89:7f:2d:ba:a2:53:57:df: 88:a3:73:a9:23:8d:72:27:ec:c8:1d:0f:39:6c:d1: 3c:98:b9:3f:5e:83:7e:b6:3e:43:8e:b0:04:5f:f0: 28:9a:ba:a1:23:58:62:c5:5f:6e:fc:8d:11:42:3b: b4:78:f6:7b:b3:aa:7e:51:cc:3f:2c:8f:b9:4a:36: 1d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6F:62:DE:67:FD:C3:58:B1:42:14:2F:44:C6:C0:65:51:61:C6:28 X509v3 Authority Key Identifier: keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:58:4f:9d:b5:74:c3:ff:08:5f:f5:c4:9f:05:4e:34:bb:3d: ca:7e:78:6f:20:5d:63:8a:fd:c4:86:c1:90:12:0e:22:cd:34: 0d:4d:6f:44:87:60:97:ee:90:94:73:72:b4:17:dd:1e:3c:ab: 49:7c:c8:84:5a:23:6f:74:c4:7e:41:51:bc:cd:49:fb:7d:76: 04:51:94:1e:88:60:09:ad:45:92:22:b0:9c:98:56:1d:1f:0e: 77:e8:3e:3d:9e:19:86:5a:88:5b:ba:c5:5a:a3:be:b2:3c:ce: 5b:b8:65:1b:16:bd:dd:5d:e5:44:f5:36:34:2d:30:2a:aa:35: e4:c3:fd:54:93:ca:69:da:8e:c4:e3:dd:0f:b1:81:f0:1a:76: 77:94:54:a5:cc:9e:9d:e8:5d:d3:d1:de:ef:53:ab:ed:66:17: a4:8b:e9:30:aa:69:90:f1:05:b5:f7:99:9a:07:da:a2:b2:46: 20:5b:fa:77:f5:21:4e:e9:53:28:0c:c3:96:6b:ad:6d:e1:9d: db:c0:48:6b:2f:54:19:73:5f:a2:a7:e8:86:9d:8e:1e:2c:25: b0:94:01:71:42:2b:11:27:f6:56:66:c8:85:6a:6e:fd:47:2b: e9:47:c2:6d:f8:de:d0:59:5b:0f:44:32:2f:63:03:a9:7e:c5: 97:95:c0:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyRjAxMTAvBgNVBAUTKEVFRTlFMTBDMjkxRTU2QzgyRDc3MDcyMDEwQjBFNTgw MDgzRkU3MjkwHhcNMjUxMjA1MDE1MDQyWhcNMjUxMjEyMDE1MDQyWjAYMRYwFAYD VQQDEw02OTMyM2E3Mi1jNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/fPhyYqHqkxkO+50LecxOcJNXcwSofpQXDdyIoOumnu++ixsHkmufJICc0xD BDFeeE8/vZ0Pl+wJhC9ENnm/ysLUumKyNwze3zIHjQuqQEkaNU1ggk0KLttn7jTJ YnyxWRrK8eo5+n06raCJ/i4IWU+KmY0hASFmPL3+p7Duhermdm2Ad+jiBazmFbmN K7uWDaspIaoOSdZw4WSYiqgTtez5Iie476O9ETUhjEoNVUckMswItSFjMVuaiX8t uqJTV9+Io3OpI41yJ+zIHQ85bNE8mLk/XoN+tj5DjrAEX/AomrqhI1hixV9u/I0R Qju0ePZ7s6p+Ucw/LI+5SjYd5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1vYt5n /cNYsUIUL0TGwGVRYcYoMB8GA1UdIwQYMBaAFO7p4QwpHlbILXcHIBCw5YAIP+cp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJGMC81QzU3RTVDMDgy ODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZzZ3Rkd2NnRUxEbGdBZ181 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bmhEQ2tlVnNndGR3Y2dFTERsZ0FnXzV5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJGMC81QzU3RTVDMDgyODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZz Z3Rkd2NnRUxEbGdBZ181eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgWE+dtXTD/whf9cSfBU40uz3KfnhvIF1jiv3EhsGQEg4izTQNTW9E h2CX7pCUc3K0F90ePKtJfMiEWiNvdMR+QVG8zUn7fXYEUZQeiGAJrUWSIrCcmFYd Hw536D49nhmGWohbusVao76yPM5buGUbFr3dXeVE9TY0LTAqqjXkw/1Uk8pp2o7E 490PsYHwGnZ3lFSlzJ6d6F3T0d7vU6vtZheki+kwqmmQ8QW195maB9qiskYgW/p3 9SFO6VMoDMOWa61t4Z3bwEhrL1QZc1+ip+iGnY4eLCWwlAFxQisRJ/ZWZsiFam79 RyvpR8Jt+N7QWVsPRDIvYwOpfsWXlcBQ -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:21 2025 by rpki-client