This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: 3LNY+sTJwFij7ulUcOlSgSfzXFIa/0o+z6Jmkn0UUnk= Subject key identifier: 5E:8C:51:72:AF:A9:7E:FD:9F:3D:F3:87:AC:47:08:9E:5E:95:7F:AE Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 040B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 03E2 Signing time: Thu 18 Dec 2025 23:56:40 +0000 Manifest this update: Thu 18 Dec 2025 23:56:39 +0000 Manifest next update: Thu 25 Dec 2025 23:56:39 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: o+vA8LnPFhqACo9eVetxlws5QePnir9x0dA0A8QOErU=) 2: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: JIzx72Iu5kXzy1zuPq6JcTLGHOjrjN0dOL1PQPVedEI=) 3: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk=) 4: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: c8xFCddcnF0FXPYTeBOXBWlSAzFr4WalC4h3RJBUm0g=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: sxadIBziqD0gGHzlLgMeF3y6MatZTVAVquFeXL0wHHA=) 6: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: DiuzbA0Eyu2SFjBtadVHxxhq9EQIpll9WL5oTCeuzso=) 7: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: Keth2970vjYbkSSDZ7cyyc004SjVLXN/KW/3yleZzSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1035 (0x40b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Dec 18 23:56:39 2025 GMT Not After : Dec 25 23:56:39 2025 GMT Subject: CN=694494b8-7889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:38:3b:7a:30:96:6c:fd:68:c3:68:1d:d8: e9:2a:e4:14:60:e3:ed:05:b3:c5:09:24:fb:fd:57: 13:30:70:43:7b:ce:35:4c:9a:d7:a7:de:4a:bd:5e: d4:a4:27:71:c1:10:34:25:cb:94:ec:38:bf:d0:62: 27:f8:3e:3c:02:3a:29:22:05:5d:fd:69:20:74:36: 99:f5:2f:e6:0d:2a:c1:cb:20:4f:86:12:54:35:ee: b2:0b:6c:53:aa:5d:8c:66:eb:15:3f:d7:b3:52:94: bb:68:73:ee:f3:12:15:3a:77:c3:e6:20:3f:2b:25: ed:01:b3:05:19:d5:e8:9c:6a:53:70:20:8f:1c:c4: 58:3a:d4:87:04:2e:4d:ab:20:d1:df:54:e2:3b:a9: 90:f9:96:09:8f:f1:83:26:66:bc:57:3e:a5:19:e7: b9:77:b7:06:28:9f:62:50:48:59:e6:e7:4d:4f:4a: 57:6b:2c:7c:7b:af:bd:39:92:3c:72:67:d7:2a:c7: ec:bc:6d:f0:96:41:07:71:26:01:c3:25:ce:46:87: 2d:5d:6f:ee:f6:a6:8c:b3:fb:ca:8a:45:6a:64:b3: ad:ed:08:56:8b:f0:d1:5a:7e:af:9b:e2:3b:d2:e9: 37:b4:bb:7b:65:c1:e9:71:48:5c:37:db:95:d2:36: 21:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8C:51:72:AF:A9:7E:FD:9F:3D:F3:87:AC:47:08:9E:5E:95:7F:AE X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:7f:23:67:94:78:72:34:bb:8d:53:6d:ac:3c:f7:a2:91:9f: 02:ff:a6:6d:9b:81:fb:55:46:8d:87:c8:82:a0:a9:e4:21:30: 94:0c:ee:a3:c8:b1:ee:c6:1f:e8:3e:0f:dd:21:88:01:0e:ac: d8:d9:f4:cc:fd:0b:f4:c0:7f:89:6d:dc:48:7d:ae:27:8c:b3: 77:e8:f0:e3:fc:2c:f5:32:55:6e:1c:ee:de:d3:20:91:2b:d8: 43:af:00:dd:cd:40:37:2f:64:d2:26:8a:59:63:e5:ee:0d:e5: b3:ec:80:9f:83:dd:28:f6:ff:96:d4:53:0e:11:6b:c5:7f:1f: c3:ff:b4:7d:f6:9e:c5:16:95:1c:72:7c:c8:6a:56:c9:9d:b6: f5:e5:93:94:1f:34:a8:58:7b:d0:66:0a:b2:20:3a:04:86:fa: 98:a7:89:16:92:85:7f:fc:47:b1:2b:67:ae:7d:a2:c0:73:84: e1:1e:6d:89:dc:9a:8f:bb:0f:29:2f:f8:de:7f:80:55:1c:ab: 42:a7:86:e1:bc:6f:c3:c5:4d:97:78:dd:c0:5b:97:56:8a:84: b5:26:5c:e3:05:9c:d4:ea:33:3b:4c:a5:f3:65:b2:17:e0:e8: e8:be:f6:15:9b:8d:64:89:41:59:f6:4f:5b:aa:ff:94:24:b8: 01:d1:37:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUxMjE4MjM1NjM5WhcNMjUxMjI1MjM1NjM5WjAYMRYwFAYD VQQDDA02OTQ0OTRiOC03ODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjM4O3owlmz9aMNoHdjpKuQUYOPtBbPFCST7/VcTMHBDe841TJrXp95KvV7U pCdxwRA0JcuU7Di/0GIn+D48AjopIgVd/WkgdDaZ9S/mDSrByyBPhhJUNe6yC2xT ql2MZusVP9ezUpS7aHPu8xIVOnfD5iA/KyXtAbMFGdXonGpTcCCPHMRYOtSHBC5N qyDR31TiO6mQ+ZYJj/GDJma8Vz6lGee5d7cGKJ9iUEhZ5udNT0pXayx8e6+9OZI8 cmfXKsfsvG3wlkEHcSYBwyXORoctXW/u9qaMs/vKikVqZLOt7QhWi/DRWn6vm+I7 0uk3tLt7ZcHpcUhcN9uV0jYhoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6MUXKv qX79nz3zh6xHCJ5elX+uMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApfyNnlHhyNLuNU22sPPeikZ8C/6Ztm4H7VUaNh8iCoKnkITCUDO6j yLHuxh/oPg/dIYgBDqzY2fTM/Qv0wH+JbdxIfa4njLN36PDj/Cz1MlVuHO7e0yCR K9hDrwDdzUA3L2TSJopZY+XuDeWz7ICfg90o9v+W1FMOEWvFfx/D/7R99p7FFpUc cnzIalbJnbb15ZOUHzSoWHvQZgqyIDoEhvqYp4kWkoV//EexK2eufaLAc4ThHm2J 3JqPuw8pL/jef4BVHKtCp4bhvG/DxU2XeN3AW5dWioS1JlzjBZzU6jM7TKXzZbIX 4OjovvYVm41kiUFZ9k9bqv+UJLgB0Tex -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:14 2025 by rpki-client