This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft File: s-7PFnJWFEpGodq0i4CA15DSBDw.mft (raw, json) Hash identifier: vOTXthuC0XEKlBMEMHXFzWH+jER+DHzfJrGHH7wZ7NI= Subject key identifier: 9C:E8:28:FD:E2:9F:74:9F:8C:52:A7:0E:7C:D8:D7:20:F5:68:F4:E5 Authority key identifier: B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C Certificate issuer: /CN=A9125F64/serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft Manifest number: 6D Signing time: Fri 19 Dec 2025 05:54:34 +0000 Manifest this update: Fri 19 Dec 2025 05:54:33 +0000 Manifest next update: Fri 26 Dec 2025 05:54:33 +0000 Files and hashes: 1: s-7PFnJWFEpGodq0i4CA15DSBDw.crl (hash: 42JeueaNQ5IsmsLUixgcUF2kf7PXKPqwy2E4yalWhB0=) 2: E32B7E6E348811F0ABE70D36C4F9AE02.roa (hash: 7I16PahKXROEbW1mEKLvSzyE22KDspebhWlSBSWo4cY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F64, serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C Validity Not Before: Dec 19 05:54:33 2025 GMT Not After : Dec 26 05:54:33 2025 GMT Subject: CN=6944e89a-5cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1c:c5:f8:f6:3c:a0:3a:28:13:27:9d:64:94: cc:08:66:30:f2:1f:79:70:50:db:67:1b:f5:15:0e: 4e:e2:f3:8b:fc:04:bd:33:96:a0:82:24:34:eb:72: 28:4c:55:ab:d9:2c:78:0f:94:f8:5b:06:b3:87:c7: 03:2b:d6:12:5f:94:2d:5a:8f:30:94:d2:1c:87:10: 73:94:b9:9c:28:e1:57:c0:fd:39:9e:d0:c0:09:a0: 91:e4:7b:08:c1:32:88:26:f6:a9:ee:97:9a:da:e6: 05:8a:7a:93:c3:fe:27:d7:ac:5c:e5:5c:e6:3b:46: aa:eb:c9:f6:a2:4e:63:fb:c4:7a:55:75:df:49:e5: 75:c8:8f:27:7b:59:a0:4d:0c:1f:ae:db:3b:86:25: 14:29:2a:e9:6e:55:d7:c2:f0:ae:26:18:89:b9:df: 32:3f:51:c1:90:45:99:38:bf:33:5e:77:bc:7f:03: d3:b5:c6:52:61:01:de:49:ca:a7:f1:bc:66:52:ab: aa:44:24:4e:b5:12:9b:3b:10:a1:2b:5c:28:02:b9: 8e:b7:81:67:2d:dc:ec:17:92:10:36:00:b5:90:13: 74:b1:89:b7:4b:0d:f5:2a:b0:7c:14:89:4e:49:51: 0e:3c:7d:40:d9:0b:0a:0a:3d:1a:7b:e1:8f:32:0a: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E8:28:FD:E2:9F:74:9F:8C:52:A7:0E:7C:D8:D7:20:F5:68:F4:E5 X509v3 Authority Key Identifier: keyid:B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:72:00:03:59:c9:47:1b:45:bb:3a:8e:e1:9d:1a:c8:b8:96: d2:db:dd:85:5a:f4:3c:4e:e8:38:79:4c:46:9c:e7:55:e4:fc: df:c5:c8:f5:57:92:a9:81:12:6d:bc:ae:09:58:79:b2:d0:a5: 1f:f7:ab:19:33:78:31:b5:fc:56:d5:ce:e9:c9:f2:56:24:2a: 11:b6:29:5f:9d:b5:cf:fe:fe:99:d9:07:7e:ac:bb:31:2e:1a: d2:44:d8:fa:20:5e:da:cc:7f:a3:a9:0e:f8:a5:55:e0:c9:0d: 5d:a0:5d:ec:f1:53:05:e9:48:ee:b3:c1:7a:03:e5:25:5c:a7: 96:2c:9e:6e:e8:13:59:eb:4e:14:b6:ad:6c:88:09:dc:25:56: 21:56:a3:bf:40:04:b1:3a:a4:f3:bd:d7:4f:72:20:84:93:70: 38:39:07:8e:d8:45:57:59:68:1a:06:9b:da:39:dc:1e:15:9e: e2:fc:d3:13:28:69:80:40:57:56:1a:d3:2f:38:d7:5c:da:5a: 69:46:b5:2d:ea:8c:51:a0:5e:de:c4:7c:de:6a:90:fb:eb:c7: 2c:02:4f:d6:19:24:0e:35:ac:96:2a:ca:51:d5:2a:23:fa:e4: 3f:e5:34:98:40:ab:1a:4a:e3:09:35:34:6f:b3:c9:7b:60:c1: 8f:93:51:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUY2NDExMC8GA1UEBRMoQjNFRUNGMTY3MjU2MTQ0QTQ2QTFEQUI0OEI4MDgwRDc5 MEQyMDQzQzAeFw0yNTEyMTkwNTU0MzNaFw0yNTEyMjYwNTU0MzNaMBgxFjAUBgNV BAMMDTY5NDRlODlhLTVjZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMHMX49jygOigTJ51klMwIZjDyH3lwUNtnG/UVDk7i84v8BL0zlqCCJDTrcihM VavZLHgPlPhbBrOHxwMr1hJflC1ajzCU0hyHEHOUuZwo4VfA/Tme0MAJoJHkewjB Mogm9qnul5ra5gWKepPD/ifXrFzlXOY7RqrryfaiTmP7xHpVdd9J5XXIjyd7WaBN DB+u2zuGJRQpKuluVdfC8K4mGIm53zI/UcGQRZk4vzNed7x/A9O1xlJhAd5Jyqfx vGZSq6pEJE61Eps7EKErXCgCuY63gWct3OwXkhA2ALWQE3SxibdLDfUqsHwUiU5J UQ48fUDZCwoKPRp74Y8yCnYzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnOgo/eKf dJ+MUqcOfNjXIPVo9OUwHwYDVR0jBBgwFoAUs+7PFnJWFEpGodq0i4CA15DSBDww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RjY0L0ExRTBEODNBMzQ2 NzExRjBBMkZBRDU0OUM0RjlBRTAyL3MtN1BGbkpXRkVwR29kcTBpNENBMTVEU0JE dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcy03UEZuSldGRXBHb2RxMGk0Q0ExNURTQkR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 RjY0L0ExRTBEODNBMzQ2NzExRjBBMkZBRDU0OUM0RjlBRTAyL3MtN1BGbkpXRkVw R29kcTBpNENBMTVEU0JEdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABRyAANZyUcbRbs6juGdGsi4ltLb3YVa9DxO6Dh5TEac51Xk/N/FyPVX kqmBEm28rglYebLQpR/3qxkzeDG1/FbVzunJ8lYkKhG2KV+dtc/+/pnZB36suzEu GtJE2PogXtrMf6OpDvilVeDJDV2gXezxUwXpSO6zwXoD5SVcp5Ysnm7oE1nrThS2 rWyICdwlViFWo79ABLE6pPO9109yIISTcDg5B47YRVdZaBoGm9o53B4VnuL80xMo aYBAV1Ya0y8411zaWmlGtS3qjFGgXt7EfN5qkPvrxywCT9YZJA41rJYqylHVKiP6 5D/lNJhAqxpK4wk1NG+zyXtgwY+TUa4= -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:40 2025 by rpki-client