This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json) Hash identifier: ginKKYvsRB7LRLD+W3mYbrr3qMiR9T9tKPQ2yavLDQY= Subject key identifier: C6:B9:C6:9D:CC:24:0B:78:19:BB:8E:80:76:51:83:37:0E:61:0E:C9 Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 099D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft Manifest number: 0980 Signing time: Thu 18 Dec 2025 19:40:57 +0000 Manifest this update: Thu 18 Dec 2025 19:40:57 +0000 Manifest next update: Thu 25 Dec 2025 19:40:57 +0000 Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: NeGrVTQhGiyEgXJXUm75QIu5ZE+sLbjXB++5Av7C0Ds=) 2: 42B13940C3C011EE86C2C317C4F9AE02.roa (hash: ohub1su2eLkcxe2mnfMUSQeEjo+GPwYrkG+K0CsdsDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2461 (0x99d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: Dec 18 19:40:57 2025 GMT Not After : Dec 25 19:40:57 2025 GMT Subject: CN=694458c9-4368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:32:09:ff:c9:77:7f:d8:1e:6c:dc:ae:7f:f1: 68:5f:71:c8:ca:09:cc:6c:98:ca:df:14:0c:e3:70: 05:76:18:72:cb:d2:4f:ee:0e:47:67:2e:47:fd:a0: 6e:2b:8b:d7:83:54:1a:57:69:95:12:71:52:da:20: 28:27:1e:39:11:69:7f:64:86:df:dd:4c:30:9d:fc: a0:b8:a3:c6:c6:5b:4e:1f:e4:0f:72:6d:06:8f:66: 93:be:2d:c3:a9:f5:1d:26:8f:02:3b:81:85:78:4b: ac:2a:b9:f4:41:81:15:c9:3b:b2:0f:5c:61:52:66: 7c:2d:78:f8:fc:71:9b:4a:7a:51:42:09:16:f4:65: 50:4c:ee:03:ef:a6:a1:d3:56:2c:ee:9c:ad:fc:9c: ec:a4:3b:6f:1c:1f:5d:83:7f:5f:43:7d:3a:b6:8c: 30:62:77:d8:e5:eb:c6:69:b3:fc:75:0d:5a:15:be: d4:d7:26:22:63:74:82:a0:dc:fa:74:e1:ee:de:c9: 93:14:b1:51:1b:04:81:fa:cb:e4:88:ff:53:bb:9e: 67:65:2e:15:5f:e2:30:5a:e5:6a:d2:23:75:d8:f6: 30:57:9c:63:e9:d9:27:6d:37:49:9d:d0:10:92:98: 81:e7:f0:26:6e:4f:fa:e9:12:e2:0f:65:d7:d1:ae: b6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B9:C6:9D:CC:24:0B:78:19:BB:8E:80:76:51:83:37:0E:61:0E:C9 X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:65:39:4f:47:c3:4c:7a:21:65:89:56:92:c0:b4:e6:e5:3c: 75:97:36:2b:90:0b:11:27:d9:80:f0:a0:48:55:5f:cf:44:5f: 49:d6:70:74:a9:91:96:b2:ec:60:12:5e:13:46:c4:70:80:74: c0:8c:db:ce:14:85:41:a2:40:08:a2:81:3e:3d:aa:6a:d2:65: 63:b7:35:14:68:b4:d5:6e:96:38:85:b1:8e:37:17:7c:da:b3: ce:92:dd:e1:39:07:95:9c:7c:f2:67:78:77:23:ae:17:13:46: 09:17:4f:56:a1:5c:4e:ed:28:04:d9:fe:f7:6a:d6:31:8e:d8: b7:05:80:ff:d9:02:95:70:e6:e7:d8:c9:4e:77:2e:1b:bc:de: bd:1a:61:f1:57:fb:10:66:dc:04:0f:f0:47:f7:36:cf:ca:9f: f5:53:5d:bd:d3:b5:d5:cb:42:03:a1:50:55:01:b7:c5:41:32: ab:01:c3:0b:31:bb:60:c9:84:56:f2:53:3d:3a:16:97:ae:47: dd:74:b5:79:63:95:e2:a9:2a:4c:6f:4b:62:62:8a:79:96:b7: a1:6c:5d:18:75:25:5f:a0:0f:63:0c:b9:fb:fc:54:a4:60:64: 62:2c:cb:14:40:1f:3a:23:71:e8:e4:66:20:d0:fc:f3:d0:54: bc:22:9e:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjUxMjE4MTk0MDU3WhcNMjUxMjI1MTk0MDU3WjAYMRYwFAYD VQQDDA02OTQ0NThjOS00MzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DIJ/8l3f9gebNyuf/FoX3HIygnMbJjK3xQM43AFdhhyy9JP7g5HZy5H/aBu K4vXg1QaV2mVEnFS2iAoJx45EWl/ZIbf3UwwnfyguKPGxltOH+QPcm0Gj2aTvi3D qfUdJo8CO4GFeEusKrn0QYEVyTuyD1xhUmZ8LXj4/HGbSnpRQgkW9GVQTO4D76ah 01Ys7pyt/JzspDtvHB9dg39fQ306towwYnfY5evGabP8dQ1aFb7U1yYiY3SCoNz6 dOHu3smTFLFRGwSB+svkiP9Tu55nZS4VX+IwWuVq0iN12PYwV5xj6dknbTdJndAQ kpiB5/Ambk/66RLiD2XX0a62DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMa5xp3M JAt4GbuOgHZRgzcOYQ7JMB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkJDOS84M0ZGOUZFQ0FBODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29a NzlMbmN2bTZlbnZjYnVEU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6ZTlPR8NMeiFliVaSwLTm5Tx1lzYrkAsRJ9mA8KBIVV/PRF9J1nB0 qZGWsuxgEl4TRsRwgHTAjNvOFIVBokAIooE+Papq0mVjtzUUaLTVbpY4hbGONxd8 2rPOkt3hOQeVnHzyZ3h3I64XE0YJF09WoVxO7SgE2f73atYxjti3BYD/2QKVcObn 2MlOdy4bvN69GmHxV/sQZtwED/BH9zbPyp/1U12907XVy0IDoVBVAbfFQTKrAcML MbtgyYRW8lM9OhaXrkfddLV5Y5XiqSpMb0tiYop5lrehbF0YdSVfoA9jDLn7/FSk YGRiLMsUQB86I3Ho5GYg0Pzz0FS8Ip7M -----END CERTIFICATE-----Generated at Sat Dec 20 06:54:29 2025 by rpki-client