This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json) Hash identifier: 0xp50gaGAiUBiva84p4WbAXyc6/cWFs6IZnmTngyUE0= Subject key identifier: 36:56:50:D9:A5:86:D5:29:7F:07:58:01:3A:93:1A:5E:AC:99:07:41 Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 0326 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft Manifest number: 030D Signing time: Thu 04 Dec 2025 23:35:53 +0000 Manifest this update: Thu 04 Dec 2025 23:35:52 +0000 Manifest next update: Thu 11 Dec 2025 23:35:52 +0000 Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: eVYSudL6uhOZHYejjK0W2QhzXaunXGB1zjePU1uR/pQ=) 2: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: BW5tT5Fwnb90kCw3kdyCo6pAhP8PZLajj0fwMdIDbDA=) 3: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: z4aaUTQPt4LTmxBrxqPbGwAQr9ekPHI1lkNmNVVH7mw=) 4: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: 9Lyfdf8jewXKDNNSejND0Fdao81XqhdSmTyOn0pVCEo=) 5: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: zUxzk8PVVaES9EMN0VkIqcIxDvXdbV+4WJwr6H3F2mM=) 6: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: 2FTQfXCf5iEijrWaIGoqW7OkD23cYHWReHvkr3RdiVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 806 (0x326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Dec 4 23:35:52 2025 GMT Not After : Dec 11 23:35:52 2025 GMT Subject: CN=69321ad8-ec6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:b8:45:c7:79:65:96:af:55:cd:da:76:e5: 7e:28:41:0f:03:ee:db:04:4f:99:1a:9f:e6:3e:9b: 66:5a:b4:58:b5:17:64:2c:44:4c:a9:43:74:b1:77: 61:be:c3:b8:b2:4a:a7:1d:fa:69:d8:19:c7:cb:0d: 70:14:98:44:7c:ae:54:54:dc:6a:e8:2a:58:e2:61: 75:9f:45:d6:fd:a2:f4:26:78:bd:53:8b:25:44:c3: 52:71:77:7a:83:27:78:1b:34:00:19:1f:0c:45:b8: 07:e8:89:d2:6a:51:dc:d9:eb:ce:37:fc:63:b7:ce: b3:ea:86:ed:a8:5c:41:8f:2d:7e:dd:e2:7c:7c:4b: 8e:ae:22:00:bd:92:13:d7:7d:09:b7:ad:8c:6a:54: 73:11:01:ef:7f:a2:e3:8b:0e:f7:a3:39:4c:cd:2d: dc:9d:13:b6:a5:48:37:f2:cf:00:df:6c:87:d6:04: 8e:7d:9c:dd:81:2c:7a:bb:8c:88:88:83:86:45:b0: 64:fa:61:e1:84:c2:67:d2:89:e8:13:4a:aa:66:43: 0a:a7:4d:30:bc:15:b5:b9:38:74:79:34:d4:b0:f8: 33:4e:69:41:4a:6f:cd:9b:6c:22:19:4f:0d:0e:bd: b2:2a:82:f0:20:8b:2c:a3:65:c4:be:a2:60:be:60: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:56:50:D9:A5:86:D5:29:7F:07:58:01:3A:93:1A:5E:AC:99:07:41 X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:af:7f:17:2a:25:bf:bc:00:4a:e0:4c:ea:8a:74:48:7e:fd: 9d:8e:56:39:8e:bc:9b:24:47:d6:e8:19:4e:d4:01:5b:4e:5d: ae:bb:cb:e8:96:1b:a9:7b:cb:f8:4e:7d:ef:21:d2:64:dd:c8: d2:be:16:c9:f7:e1:6a:85:6e:40:b0:02:dd:33:bf:81:63:19: 67:cd:01:e5:f8:70:47:f0:c1:0d:65:2c:79:8f:d0:bc:bf:18: 0c:13:e8:f6:cc:70:85:96:19:1c:b5:02:50:91:f4:a0:9b:98: b0:17:2e:a9:1a:31:26:e1:d3:c8:ef:bb:ac:4e:74:56:c3:46: 40:8e:9e:ae:7d:b5:24:32:46:2b:86:88:02:90:3b:e4:35:07: c4:9d:34:0c:e5:dd:56:96:d4:a9:57:0b:e3:7a:2a:ff:55:c1: 36:4e:63:e6:e7:e2:58:3d:26:22:da:80:36:77:dc:ed:54:5b: 5a:a7:f6:0d:11:f7:29:5e:73:d1:64:d6:64:06:66:bf:d9:2c: 29:46:0a:d1:7e:59:6e:84:fb:0a:0c:0c:ca:05:b7:7f:f5:6e: 38:8e:4a:e2:fe:15:7a:23:b4:ab:82:4d:64:9d:9c:a4:e3:e8: c7:e1:c4:cb:3e:dc:e1:4e:2b:4e:7f:fc:28:09:96:b5:bd:f2: 13:0e:9b:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjUxMjA0MjMzNTUyWhcNMjUxMjExMjMzNTUyWjAYMRYwFAYD VQQDEw02OTMyMWFkOC1lYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNu4Rcd5ZZavVc3aduV+KEEPA+7bBE+ZGp/mPptmWrRYtRdkLERMqUN0sXdh vsO4skqnHfpp2BnHyw1wFJhEfK5UVNxq6CpY4mF1n0XW/aL0Jni9U4slRMNScXd6 gyd4GzQAGR8MRbgH6InSalHc2evON/xjt86z6obtqFxBjy1+3eJ8fEuOriIAvZIT 130Jt62MalRzEQHvf6Ljiw73ozlMzS3cnRO2pUg38s8A32yH1gSOfZzdgSx6u4yI iIOGRbBk+mHhhMJn0onoE0qqZkMKp00wvBW1uTh0eTTUsPgzTmlBSm/Nm2wiGU8N Dr2yKoLwIIsso2XEvqJgvmD9rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZWUNml htUpfwdYATqTGl6smQdBMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ3Qy83RTBGNTg3MjAxRTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNl SGZLWFAySzEwam92djlKb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEr38XKiW/vABK4EzqinRIfv2djlY5jrybJEfW6BlO1AFbTl2uu8vo lhupe8v4Tn3vIdJk3cjSvhbJ9+FqhW5AsALdM7+BYxlnzQHl+HBH8MENZSx5j9C8 vxgME+j2zHCFlhkctQJQkfSgm5iwFy6pGjEm4dPI77usTnRWw0ZAjp6ufbUkMkYr hogCkDvkNQfEnTQM5d1WltSpVwvjeir/VcE2TmPm5+JYPSYi2oA2d9ztVFtap/YN EfcpXnPRZNZkBma/2SwpRgrRflluhPsKDAzKBbd/9W44jkri/hV6I7Srgk1knZyk 4+jH4cTLPtzhTitOf/woCZa1vfITDput -----END CERTIFICATE-----Generated at Sat Dec 6 22:08:29 2025 by rpki-client