This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft File: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json) Hash identifier: 2VEd9p85XslRQov7WeiDQUZRL0+jOxPZwUA05reYot0= Subject key identifier: 3B:4D:9D:F0:17:AC:C9:50:9A:AA:F7:F1:B2:BB:5C:E1:D3:6D:18:8F Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66 Certificate issuer: /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft Manifest number: BA Signing time: Thu 25 Dec 2025 04:59:58 +0000 Manifest this update: Thu 25 Dec 2025 04:59:57 +0000 Manifest next update: Thu 01 Jan 2026 04:59:57 +0000 Files and hashes: 1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: FYbLzFh0HwhqLGGHn/zoA2rmRA2Ng8Fyexv3utTxgxs=) 2: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: NFkplWmsMA3dKF672WmukIl9RpnNjHUYN1V/j7l+GN0=) 3: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: FPrJ8rYYz3zXm+ulxONvcKZWR1V8127XQSJ/4rwqktA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 04:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66 Validity Not Before: Dec 25 04:59:57 2025 GMT Not After : Jan 1 04:59:57 2026 GMT Subject: CN=694cc4ce-1126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:73:2b:ee:88:9e:2f:65:4c:e3:9c:d9:f9:97: 7e:e4:f2:06:0f:f3:ff:eb:01:03:27:e8:c5:2b:c1: 55:0a:b8:f5:bd:20:52:fa:1d:eb:7e:f4:73:7d:0b: 64:ee:99:15:b1:6a:db:ec:f8:eb:1c:c1:2e:47:bd: 4f:d9:c7:28:78:63:cf:ee:04:84:3c:ae:1a:44:9d: 3a:78:31:13:2e:38:7c:01:c1:ff:3a:f7:35:63:8c: 72:1a:7f:a2:c7:5a:05:0b:75:4c:10:30:bb:64:a4: 0b:8a:54:de:51:91:b5:58:52:49:63:41:2a:b4:e5: 8d:94:66:ac:cf:4a:bf:f4:5c:4a:ad:4a:ac:7d:e4: 5d:bd:f3:b1:ae:df:6e:a4:f1:18:1a:f0:f0:23:72: da:16:33:36:65:ec:a5:62:1f:c9:2d:a0:b8:32:01: 23:d4:11:9d:19:06:73:27:4c:29:55:08:00:d3:f0: f5:a7:68:b5:5c:72:f1:b9:d0:78:c8:3b:56:be:3e: 66:d4:12:ff:0f:9f:10:95:0a:80:7a:21:f7:e0:20: 21:d9:16:a9:bf:3f:b1:d1:62:36:87:74:09:6a:b8: 5f:aa:64:48:c3:06:8f:a3:d0:ce:ba:0a:14:9c:9a: 32:2a:82:be:da:84:34:07:e1:15:c2:9b:07:bf:f6: 9b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4D:9D:F0:17:AC:C9:50:9A:AA:F7:F1:B2:BB:5C:E1:D3:6D:18:8F X509v3 Authority Key Identifier: keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:3b:27:2a:60:76:99:87:58:7a:25:e0:80:c0:3b:ab:41:f7: 7c:54:d1:4e:62:61:35:a9:33:a9:98:d5:bd:58:76:dc:c7:d5: 08:95:87:1d:bd:58:1c:88:b7:11:25:b4:7a:16:9b:b5:3d:35: 3f:ed:ed:d2:37:69:24:b0:d8:f4:e1:75:a2:b0:e6:8c:9d:e8: 0c:e2:b6:d6:35:ad:81:ab:74:fd:db:15:e6:00:6b:13:20:c5: 45:2d:d0:32:a4:5c:01:77:29:1a:cd:e0:0e:79:d4:63:df:4e: 21:26:80:08:ec:7d:bd:b3:54:20:60:91:68:b5:c8:f4:c5:33: 0a:cb:29:c7:98:28:58:d3:8a:08:4d:1b:06:86:04:8b:b3:f5: 1d:e4:95:c8:58:00:dc:65:2f:c1:15:49:d0:6a:f2:29:c1:13: c3:34:4d:e1:6c:11:43:d9:45:37:c7:b1:0e:9c:f8:a1:b6:a8: 73:8b:60:a4:f4:07:55:fd:a2:2e:41:d3:2a:85:47:18:d7:4c: a8:b9:c1:2b:f4:f1:3f:99:a4:a3:b9:c7:04:9b:bd:f3:25:13: a9:63:18:04:c7:53:98:f2:e1:75:0d:f2:da:bd:44:ca:d4:55: b4:4b:d6:9d:34:06:77:8a:26:b4:ee:ce:d2:2e:fa:19:15:c7: 07:72:9c:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBM0MxMTAvBgNVBAUTKEVFODE5QTQ5QjhDOEE4NDQxM0VFOEZFODMyNkVGMTM3 RjUxODVDNjYwHhcNMjUxMjI1MDQ1OTU3WhcNMjYwMTAxMDQ1OTU3WjAYMRYwFAYD VQQDDA02OTRjYzRjZS0xMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/XMr7oieL2VM45zZ+Zd+5PIGD/P/6wEDJ+jFK8FVCrj1vSBS+h3rfvRzfQtk 7pkVsWrb7PjrHMEuR71P2ccoeGPP7gSEPK4aRJ06eDETLjh8AcH/Ovc1Y4xyGn+i x1oFC3VMEDC7ZKQLilTeUZG1WFJJY0EqtOWNlGasz0q/9FxKrUqsfeRdvfOxrt9u pPEYGvDwI3LaFjM2ZeylYh/JLaC4MgEj1BGdGQZzJ0wpVQgA0/D1p2i1XHLxudB4 yDtWvj5m1BL/D58QlQqAeiH34CAh2Rapvz+x0WI2h3QJarhfqmRIwwaPo9DOugoU nJoyKoK+2oQ0B+EVwpsHv/ab3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtNnfAX rMlQmqr38bK7XOHTbRiPMB8GA1UdIwQYMBaAFO6Bmkm4yKhEE+6P6DJu8Tf1GFxm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkEzQy83QkZCNENBQ0M2 QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi83b0dhU2JqSXFFUVQ3b19vTW03eE5fVVlY R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdvR2FTYmpJcUVRVDdvX29NbTd4Tl9VWVhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkEzQy83QkZCNENBQ0M2QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi83b0dhU2JqSXFF UVQ3b19vTW03eE5fVVlYR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2OycqYHaZh1h6JeCAwDurQfd8VNFOYmE1qTOpmNW9WHbcx9UIlYcd vVgciLcRJbR6Fpu1PTU/7e3SN2kksNj04XWisOaMnegM4rbWNa2Bq3T92xXmAGsT IMVFLdAypFwBdykazeAOedRj304hJoAI7H29s1QgYJFotcj0xTMKyynHmChY04oI TRsGhgSLs/Ud5JXIWADcZS/BFUnQavIpwRPDNE3hbBFD2UU3x7EOnPihtqhzi2Ck 9AdV/aIuQdMqhUcY10youcEr9PE/maSjuccEm73zJROpYxgEx1OY8uF1DfLavUTK 1FW0S9adNAZ3iia07s7SLvoZFccHcpwQ -----END CERTIFICATE-----Generated at Fri Dec 26 04:51:33 2025 by rpki-client