This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: Soi3iYf3nV52P2N16S1HM+1HsVEOOXzyySYJZE2ZPXs= Subject key identifier: 01:EA:92:87:83:03:13:B4:9A:19:C9:35:2E:2F:D3:50:DC:67:E1:4C Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 3527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 3506 Signing time: Thu 04 Dec 2025 15:04:20 +0000 Manifest this update: Thu 04 Dec 2025 15:04:20 +0000 Manifest next update: Thu 11 Dec 2025 15:04:20 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: aTzheCVW0arABh4qSBYrhvu/LAzkQRS4StJAWcMnc7U=) 2: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: COh4JhkMC+3XkvGRBIDud8yE0YD4qDE6A/jEDVUuxUQ=) 3: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: LlAjrsD9ycrpFNBYdBCY0r9fbGY7oXTXFKR7+XLlDrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13607 (0x3527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Dec 4 15:04:20 2025 GMT Not After : Dec 11 15:04:20 2025 GMT Subject: CN=6931a2f4-9e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:d6:d6:14:d7:7e:30:4e:01:9a:e3:ed:57: 89:05:f7:e1:27:a0:7b:30:44:c0:9d:27:d5:81:67: f0:20:ac:ab:a7:e3:c9:97:71:d0:51:e9:33:00:8c: 25:db:de:3b:35:48:25:2e:87:84:8c:7e:bc:60:63: 41:bb:a1:13:de:b9:5a:fb:5c:ff:7e:a5:37:43:21: 89:f2:d1:73:02:4d:ee:98:68:41:3a:52:d8:3c:a1: e5:54:17:c7:4c:44:c3:b9:8b:a3:7a:27:d8:20:dd: 35:cd:28:3a:f2:4c:7d:65:54:e5:49:fc:b3:14:b2: d2:1f:6a:1f:47:ee:9a:c9:2b:d7:3a:fd:2e:94:a7: 69:19:0f:c5:58:1a:94:8b:e3:f1:07:53:cb:bd:79: b8:12:36:7c:c6:31:48:1e:4c:35:be:88:e9:75:b9: f9:8c:5f:0a:73:39:a6:99:ad:1f:ce:d0:2f:05:ff: 84:9e:6e:bd:56:ba:09:38:f8:12:25:c8:64:a3:12: 82:92:a1:04:8a:e0:9f:d6:03:1e:1c:b1:d7:3a:23: 88:92:8c:06:ac:c3:a9:a1:78:e0:73:8b:d2:d7:b1: 02:a1:72:02:91:2e:77:00:32:4f:b5:2e:5c:f1:9c: ed:50:4e:e8:4f:ff:07:5b:eb:b2:de:cc:62:01:24: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EA:92:87:83:03:13:B4:9A:19:C9:35:2E:2F:D3:50:DC:67:E1:4C X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:0f:fb:b2:12:e0:6a:7f:2f:c9:fa:8d:29:3b:5a:17:eb:5b: d5:6f:bf:e2:d3:08:c0:48:38:9a:5b:67:1f:d7:88:d0:af:88: 25:89:05:57:bd:7b:db:0d:f3:b5:4f:1f:ff:12:f7:24:ce:03: 93:62:1e:24:36:70:7b:ff:2e:1f:fc:84:0d:92:50:c9:aa:94: 92:61:7b:09:4a:5f:b3:93:fa:25:cc:b1:fa:00:5d:1a:1d:de: 60:33:62:a7:75:2c:0b:fa:3f:f0:2e:0c:09:4c:66:1e:ea:cb: 70:3d:26:22:4d:07:70:60:b8:fd:e7:95:e5:7c:27:e8:35:b1: 47:15:e6:75:75:14:71:f2:b1:12:b9:f9:64:bf:c4:49:77:b4: 30:ee:97:bd:f2:a2:e7:34:13:38:af:f9:91:d0:c2:1e:33:ac: 3b:91:b6:f4:f0:29:8d:81:97:99:0f:84:7a:e6:f2:1c:63:b8: de:f9:bf:00:40:d4:52:9a:3b:26:45:4a:60:a9:b2:87:26:14: a9:23:ca:28:bd:79:c9:82:4e:7f:f2:65:95:33:95:4c:f3:55: 8c:34:40:c3:fb:48:13:7a:b4:a1:e4:8c:bf:7f:68:f5:02:a7: 7c:d0:fa:2c:0c:e8:f5:34:68:30:c1:4c:6f:49:69:9f:62:34: f3:d9:9b:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjUxMjA0MTUwNDIwWhcNMjUxMjExMTUwNDIwWjAYMRYwFAYD VQQDEw02OTMxYTJmNC05ZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5XW1hTXfjBOAZrj7VeJBffhJ6B7METAnSfVgWfwIKyrp+PJl3HQUekzAIwl 2947NUglLoeEjH68YGNBu6ET3rla+1z/fqU3QyGJ8tFzAk3umGhBOlLYPKHlVBfH TETDuYujeifYIN01zSg68kx9ZVTlSfyzFLLSH2ofR+6aySvXOv0ulKdpGQ/FWBqU i+PxB1PLvXm4EjZ8xjFIHkw1vojpdbn5jF8Kczmmma0fztAvBf+Enm69VroJOPgS JchkoxKCkqEEiuCf1gMeHLHXOiOIkowGrMOpoXjgc4vS17ECoXICkS53ADJPtS5c 8ZztUE7oT/8HW+uy3sxiAST/bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHqkoeD AxO0mhnJNS4v01DcZ+FMMB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyD/uyEuBqfy/J+o0pO1oX61vVb7/i0wjASDiaW2cf14jQr4gliQVX vXvbDfO1Tx//EvckzgOTYh4kNnB7/y4f/IQNklDJqpSSYXsJSl+zk/olzLH6AF0a Hd5gM2KndSwL+j/wLgwJTGYe6stwPSYiTQdwYLj955XlfCfoNbFHFeZ1dRRx8rES uflkv8RJd7Qw7pe98qLnNBM4r/mR0MIeM6w7kbb08CmNgZeZD4R65vIcY7je+b8A QNRSmjsmRUpgqbKHJhSpI8oovXnJgk5/8mWVM5VM81WMNEDD+0gTerSh5Iy/f2j1 Aqd80PosDOj1NGgwwUxvSWmfYjTz2ZvU -----END CERTIFICATE-----Generated at Sat Dec 6 13:52:16 2025 by rpki-client