This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json) Hash identifier: zTqbb36Hj2mstpEQLtblK7DHaQgC4rs/tY78t8bBzYc= Subject key identifier: 3B:0A:FB:66:49:54:45:50:03:B5:2B:7B:69:DC:96:35:34:4B:0B:F7 Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft Manifest number: 0315 Signing time: Sun 21 Dec 2025 00:25:00 +0000 Manifest this update: Sun 21 Dec 2025 00:25:00 +0000 Manifest next update: Sun 28 Dec 2025 00:25:00 +0000 Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: vAfQTX6FFBwTCHV+4RSKCKnJXPrGBMQcKJEIw6Q2qvI=) 2: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: 9Lyfdf8jewXKDNNSejND0Fdao81XqhdSmTyOn0pVCEo=) 3: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: BW5tT5Fwnb90kCw3kdyCo6pAhP8PZLajj0fwMdIDbDA=) 4: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: zUxzk8PVVaES9EMN0VkIqcIxDvXdbV+4WJwr6H3F2mM=) 5: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: 2FTQfXCf5iEijrWaIGoqW7OkD23cYHWReHvkr3RdiVo=) 6: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: z4aaUTQPt4LTmxBrxqPbGwAQr9ekPHI1lkNmNVVH7mw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Dec 21 00:25:00 2025 GMT Not After : Dec 28 00:25:00 2025 GMT Subject: CN=69473e5c-b0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:24:76:9b:49:dd:7a:e8:26:29:a1:10:c7: 99:86:92:b9:df:58:9d:3e:5c:0c:03:9f:f9:7a:6c: b0:7f:09:88:e5:03:52:13:0c:64:be:17:f2:bc:81: 07:72:e8:fb:83:78:f1:eb:a9:9b:35:7f:ed:2d:1e: 3b:c8:73:fb:10:b9:bd:d0:0b:3f:25:ba:a7:ab:75: 9a:aa:c0:dc:e7:b7:40:1f:20:bf:e4:e8:07:07:04: 03:a3:50:e0:4c:ed:b2:a0:06:b9:a7:59:22:0c:57: 87:b1:7e:b5:1a:6a:68:ed:3e:22:02:12:cd:67:4c: f6:5e:b1:19:5b:33:5c:1d:9f:50:d4:6c:e0:38:9e: bb:ac:31:2d:63:91:4c:4c:5a:ef:a4:57:e4:2f:a0: f9:a1:e5:50:b8:e4:7c:01:2b:fc:80:f5:eb:34:60: ab:30:8d:60:6c:05:72:a0:7c:b4:8e:9a:4f:29:36: 22:3d:cb:24:80:f1:ed:84:11:37:2a:9f:71:6f:bf: fd:55:1b:15:60:ad:6f:9e:5c:67:65:d6:11:ac:e4: 7b:26:18:e2:f6:cf:0f:9a:13:fe:f8:6b:9e:d5:d3: c1:d2:14:c0:3d:88:be:50:0e:19:78:d1:36:34:ce: 6e:70:08:ab:96:d6:fc:17:ad:84:05:81:bc:3f:21: c3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0A:FB:66:49:54:45:50:03:B5:2B:7B:69:DC:96:35:34:4B:0B:F7 X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:5d:7c:7e:6e:9f:2e:14:c0:47:42:8f:5c:03:d7:fc:0f:c1: 0a:06:05:5f:06:b4:03:d5:fa:64:4d:ed:fb:f7:42:e4:b3:87: 0e:42:a1:de:59:bf:b1:9b:df:68:68:ec:7e:c0:12:61:bc:31: 56:cc:af:ba:5f:7c:af:77:cc:51:40:b9:5b:f7:1b:75:49:08: ce:d8:6a:21:6d:7a:d8:ee:ac:56:3d:e3:b2:03:ee:27:23:e0: b0:26:fe:d0:56:19:4d:3e:05:a8:c0:82:9d:dc:fd:ee:99:9e: b2:c4:7e:94:c8:37:fa:5b:7d:93:30:61:b8:1f:64:f6:db:b4: a4:50:08:3b:37:65:e8:7a:3f:b5:c2:b3:fc:a5:e5:2c:b9:90: 6e:06:ab:f1:4e:28:76:46:02:1d:eb:cf:9a:c7:49:db:fc:fa: 9c:17:a1:e9:00:c2:3a:a2:68:8b:97:96:ca:52:74:83:c1:cf: 15:3a:48:42:b8:65:fe:7e:e4:bc:0e:a4:62:51:bb:ce:ce:95: 05:88:fd:ae:70:0e:7a:eb:5b:11:81:b6:a8:ac:0f:76:31:f2: 37:83:9e:81:68:cc:e8:9e:2e:a0:3e:eb:a5:8a:d0:e4:16:cd: 44:71:1a:a5:bd:19:2e:77:5e:c6:51:b1:e6:ab:99:a0:45:68: 55:f0:10:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjUxMjIxMDAyNTAwWhcNMjUxMjI4MDAyNTAwWjAYMRYwFAYD VQQDDA02OTQ3M2U1Yy1iMGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzU0kdptJ3XroJimhEMeZhpK531idPlwMA5/5emywfwmI5QNSEwxkvhfyvIEH cuj7g3jx66mbNX/tLR47yHP7ELm90As/Jbqnq3WaqsDc57dAHyC/5OgHBwQDo1Dg TO2yoAa5p1kiDFeHsX61Gmpo7T4iAhLNZ0z2XrEZWzNcHZ9Q1GzgOJ67rDEtY5FM TFrvpFfkL6D5oeVQuOR8ASv8gPXrNGCrMI1gbAVyoHy0jppPKTYiPcskgPHthBE3 Kp9xb7/9VRsVYK1vnlxnZdYRrOR7Jhji9s8PmhP++Gue1dPB0hTAPYi+UA4ZeNE2 NM5ucAirltb8F62EBYG8PyHDGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsK+2ZJ VEVQA7Ure2ncljU0Swv3MB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ3Qy83RTBGNTg3MjAxRTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNl SGZLWFAySzEwam92djlKb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYXXx+bp8uFMBHQo9cA9f8D8EKBgVfBrQD1fpkTe3790Lks4cOQqHe Wb+xm99oaOx+wBJhvDFWzK+6X3yvd8xRQLlb9xt1SQjO2GohbXrY7qxWPeOyA+4n I+CwJv7QVhlNPgWowIKd3P3umZ6yxH6UyDf6W32TMGG4H2T227SkUAg7N2Xoej+1 wrP8peUsuZBuBqvxTih2RgId68+ax0nb/PqcF6HpAMI6omiLl5bKUnSDwc8VOkhC uGX+fuS8DqRiUbvOzpUFiP2ucA5661sRgbaorA92MfI3g56BaMzoni6gPuulitDk Fs1EcRqlvRkud17GUbHmq5mgRWhV8BC7 -----END CERTIFICATE-----Generated at Mon Dec 22 05:20:55 2025 by rpki-client