This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json) Hash identifier: pGbLTeihu3kFbOiYAG71tmpL3lN1cdUTju7X/HlQTv4= Subject key identifier: 5F:34:15:3E:5A:AA:27:4B:38:D0:EB:37:B5:6E:3A:FE:A7:27:19:DA Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1E8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft Manifest number: 1E04 Signing time: Sat 06 Dec 2025 15:48:03 +0000 Manifest this update: Sat 06 Dec 2025 15:48:03 +0000 Manifest next update: Sat 13 Dec 2025 15:48:03 +0000 Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: lwM9IWvDhRf9+tjzdQuGGcfSO35wW4n6O0HPpPrsBXo=) 2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: ErQUIZBQOuclNYifsKsmx5/Jnr/1hpU5xKibhIO600k=) 3: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: JDAGe4IksOtjrzlmQZ9zVBIzM1ZKwteeQYN9TBrAsPk=) 4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: FW9NYXvHGiXVfFykPHyKhdOjK9fS+NAvHhqmtmC3mxY=) 5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: KptRM9OhZOY+IAnuIj6dKpgRtL+UG95HSLHK6SbwluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7818 (0x1e8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Validity Not Before: Dec 6 15:48:03 2025 GMT Not After : Dec 13 15:48:03 2025 GMT Subject: CN=69345033-8f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:dd:2f:a7:bd:fc:9f:2d:10:69:dd:ce:f3: ad:ba:e6:60:d9:e7:b1:0f:ef:ac:90:9f:dd:5f:4c: 34:b6:5a:4a:06:8a:96:c3:08:40:41:ab:0a:5d:b0: 62:0f:63:4a:c8:cc:e0:4c:c4:96:d3:5c:cd:3b:ce: 3f:d4:58:77:d4:11:94:bc:0a:07:7b:42:41:fc:c5: 29:57:21:63:ec:07:82:45:8a:f8:12:2d:16:65:85: 98:c8:13:42:28:7e:87:e4:87:1c:49:0d:78:03:b2: 66:70:81:3c:a0:26:5e:e7:ed:9d:0c:33:97:a1:a5: ff:c7:bc:72:5f:04:f6:d7:e0:c8:32:34:1d:fd:cc: ee:4b:1b:3a:38:f0:a8:5f:24:7c:19:e3:fd:97:53: e8:ce:a2:cc:71:95:e1:ba:a3:01:e3:8f:25:78:a0: f7:51:5e:9f:16:93:6e:52:d1:4b:77:da:c0:d5:20: 1f:49:35:c8:13:ba:f5:0c:e7:fe:b0:e3:20:75:50: 32:ca:f7:fc:61:9a:5e:d3:72:72:5a:bd:28:26:0a: c7:46:64:e9:a5:86:34:fb:97:91:de:39:2a:0e:95: aa:8a:23:ab:6c:c6:4b:fe:54:17:3c:6c:41:b3:0c: 10:6a:6b:7f:dc:70:7a:4f:44:d5:32:eb:18:b3:fa: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:34:15:3E:5A:AA:27:4B:38:D0:EB:37:B5:6E:3A:FE:A7:27:19:DA X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a7:73:86:0f:c2:00:1a:17:60:f6:0a:f4:a4:30:51:2b:1c: 87:89:57:e0:23:8f:78:50:db:d6:04:2a:ee:45:4f:4b:7a:30: 25:f6:ad:14:0c:d1:9a:56:83:a5:91:1e:ea:04:dc:7c:17:d2: 4d:bf:97:34:f4:c2:fa:6e:90:ef:23:cf:f4:bb:fb:8b:56:bf: aa:f0:46:50:2e:a8:3d:0b:1e:85:a5:22:24:49:75:54:09:eb: c3:b5:31:ed:83:33:49:d8:50:e7:7b:96:04:db:86:1d:0b:71: b1:e5:7c:f2:b8:2d:b0:b5:c7:30:4f:9a:ab:62:bf:36:fa:99: e8:e9:46:5c:b6:fd:9b:47:c6:84:1f:05:46:a1:04:20:d0:19: 8b:d9:94:83:c2:be:a5:2e:37:cc:bd:54:b2:a4:29:1d:0e:77: 9a:ed:b4:69:31:07:e7:59:7c:68:10:a5:0b:e0:1d:84:78:9d: a8:83:9a:66:d4:46:70:43:44:7e:05:91:eb:a5:99:0d:33:03: c2:8c:79:bc:9c:12:42:86:23:6b:6c:f3:87:59:70:24:f0:d7: ec:f7:dd:e9:42:bb:5d:8d:ec:8b:59:b6:fa:c7:9b:32:db:fe: c4:63:0f:53:de:9b:9e:32:31:13:67:49:03:11:b9:dd:cb:08: 99:10:1b:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjUxMjA2MTU0ODAzWhcNMjUxMjEzMTU0ODAzWjAYMRYwFAYD VQQDEw02OTM0NTAzMy04ZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqibdL6e9/J8tEGndzvOtuuZg2eexD++skJ/dX0w0tlpKBoqWwwhAQasKXbBi D2NKyMzgTMSW01zNO84/1Fh31BGUvAoHe0JB/MUpVyFj7AeCRYr4Ei0WZYWYyBNC KH6H5IccSQ14A7JmcIE8oCZe5+2dDDOXoaX/x7xyXwT21+DIMjQd/czuSxs6OPCo XyR8GeP9l1PozqLMcZXhuqMB448leKD3UV6fFpNuUtFLd9rA1SAfSTXIE7r1DOf+ sOMgdVAyyvf8YZpe03JyWr0oJgrHRmTppYY0+5eR3jkqDpWqiiOrbMZL/lQXPGxB swwQamt/3HB6T0TVMusYs/ogCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF80FT5a qidLONDrN7VuOv6nJxnaMB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf QlJVbi1sTTlSNmtYQjM1akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8p3OGD8IAGhdg9gr0pDBRKxyHiVfgI494UNvWBCruRU9LejAl9q0U DNGaVoOlkR7qBNx8F9JNv5c09ML6bpDvI8/0u/uLVr+q8EZQLqg9Cx6FpSIkSXVU CevDtTHtgzNJ2FDne5YE24YdC3Gx5XzyuC2wtccwT5qrYr82+pno6UZctv2bR8aE HwVGoQQg0BmL2ZSDwr6lLjfMvVSypCkdDnea7bRpMQfnWXxoEKUL4B2EeJ2og5pm 1EZwQ0R+BZHrpZkNMwPCjHm8nBJChiNrbPOHWXAk8Nfs993pQrtdjeyLWbb6x5sy 2/7EYw9T3pueMjETZ0kDEbndywiZEBuC -----END CERTIFICATE-----Generated at Sun Dec 7 05:11:36 2025 by rpki-client