This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json) Hash identifier: HhB9r6AobhbxyJcj+R+q2U2f6OFeIOwCW+qZZY7vZ6Q= Subject key identifier: 90:05:BA:F0:E2:71:8E:1C:B4:68:2C:18:40:17:BB:96:3E:76:21:28 Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Certificate serial: 0AC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft Manifest number: 0AB4 Signing time: Sat 20 Dec 2025 19:01:22 +0000 Manifest this update: Sat 20 Dec 2025 19:01:22 +0000 Manifest next update: Sat 27 Dec 2025 19:01:22 +0000 Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: i3G2D7TzXXVY4o+YoEi2aM2rp1o9BOV58Ym1b/yFMTw=) 2: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: hBn0Qcv2Wj2OFO1BXPRpxsQ8U4zswJ2i/kTyMm1Zr1Y=) 3: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: horX5P75gumDA8WyF+ghzmHcSe0CjNBHMfSInHVl7ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2761 (0xac9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Validity Not Before: Dec 20 19:01:22 2025 GMT Not After : Dec 27 19:01:22 2025 GMT Subject: CN=6946f282-b724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:45:a1:dc:b2:5f:96:2a:66:1a:76:40:07:ae: 7a:2d:bd:5e:64:85:91:fd:43:3b:e8:df:5f:62:07: 72:96:a1:4e:1b:c4:14:ff:af:d7:ac:33:00:7e:1c: ce:3c:77:b4:22:82:ae:16:1b:59:8d:6c:70:9b:45: c5:70:3b:a6:f3:47:81:bb:18:bd:a3:0b:73:e4:0e: 3c:1d:1f:ba:9b:c7:15:ea:56:2d:e2:cf:88:fa:09: b7:97:04:64:ec:ea:db:f1:19:fa:69:58:0c:15:2f: 50:2a:4a:3f:c4:69:b7:a1:61:9c:e5:4c:34:66:d1: bd:c7:ce:3b:67:07:df:15:ff:9b:23:05:05:3e:0b: b0:15:da:68:00:24:6f:ff:60:f0:0f:0a:54:2d:d2: 08:7b:6a:24:2b:5b:05:f3:fc:11:c3:6e:af:2c:31: 9c:ad:d4:d4:4a:b4:07:5a:82:7c:54:c2:dd:ea:f5: 8c:a9:c9:af:85:e9:58:07:eb:cc:86:68:16:cf:df: a8:91:88:0d:76:aa:e1:a7:48:24:62:0f:e6:99:c6: 1d:0b:53:f5:03:05:23:55:ef:28:9a:fa:9f:80:f0: eb:f7:38:a8:95:bb:38:a1:f5:0b:9a:14:66:89:55: 9e:f4:64:e1:c7:25:3f:b3:ce:54:7f:95:97:85:6e: 97:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:BA:F0:E2:71:8E:1C:B4:68:2C:18:40:17:BB:96:3E:76:21:28 X509v3 Authority Key Identifier: keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:0a:3a:03:0a:d5:b1:29:2d:f1:e7:dc:cd:89:1b:d8:49:c9: 03:55:ed:5c:9d:10:e9:50:86:53:c3:d5:5c:74:07:f3:58:d5: e2:f0:ea:83:39:27:5c:75:ac:53:ba:9f:36:c2:64:f1:c6:b1: 5f:7f:d6:5b:c9:3b:6f:a8:8b:b0:89:da:de:8e:c9:cb:92:f3: 91:e2:1c:5a:7c:e8:51:1f:f8:17:28:09:fd:f6:cd:26:8c:51: b9:24:3f:df:b2:ec:af:b5:3a:c4:63:1a:3b:21:40:71:23:aa: f3:bb:eb:ff:91:67:44:1e:4c:66:20:f8:87:54:f3:fe:9a:86: 1e:f4:e2:0d:2e:01:12:cf:34:de:2d:a6:13:e2:46:5e:05:9b: 8b:cf:fc:2d:4f:a7:2f:a8:df:d3:01:c7:0f:4a:57:cd:1e:5c: 2a:bb:22:19:0e:af:32:bc:11:6e:6c:17:38:68:eb:4d:d7:51: 43:e0:93:0e:d8:10:1a:da:1e:10:6c:9e:25:41:b4:15:85:64: 97:9b:fc:b1:ae:52:3d:5d:b3:7d:01:33:2b:d5:74:05:5b:9d: 5c:37:ab:71:c8:a3:62:85:0e:56:03:22:04:f7:45:18:76:60: 19:e9:4d:15:bf:d8:0f:70:b1:84:cc:86:55:88:98:61:e6:27: 6f:15:30:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2 RDUzNzhGMzMwHhcNMjUxMjIwMTkwMTIyWhcNMjUxMjI3MTkwMTIyWjAYMRYwFAYD VQQDDA02OTQ2ZjI4Mi1iNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUWh3LJflipmGnZAB656Lb1eZIWR/UM76N9fYgdylqFOG8QU/6/XrDMAfhzO PHe0IoKuFhtZjWxwm0XFcDum80eBuxi9owtz5A48HR+6m8cV6lYt4s+I+gm3lwRk 7Orb8Rn6aVgMFS9QKko/xGm3oWGc5Uw0ZtG9x847ZwffFf+bIwUFPguwFdpoACRv /2DwDwpULdIIe2okK1sF8/wRw26vLDGcrdTUSrQHWoJ8VMLd6vWMqcmvhelYB+vM hmgWz9+okYgNdqrhp0gkYg/mmcYdC1P1AwUjVe8omvqfgPDr9ziolbs4ofULmhRm iVWe9GThxyU/s85Uf5WXhW6XxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAFuvDi cY4ctGgsGEAXu5Y+diEoMB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5 QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDNDQi9BOUE0MzlGQzY5QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1Vs YkpzUDNkYTNGSlp0VTNqek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnCjoDCtWxKS3x59zNiRvYSckDVe1cnRDpUIZTw9VcdAfzWNXi8OqD OSdcdaxTup82wmTxxrFff9ZbyTtvqIuwidrejsnLkvOR4hxafOhRH/gXKAn99s0m jFG5JD/fsuyvtTrEYxo7IUBxI6rzu+v/kWdEHkxmIPiHVPP+moYe9OINLgESzzTe LaYT4kZeBZuLz/wtT6cvqN/TAccPSlfNHlwquyIZDq8yvBFubBc4aOtN11FD4JMO 2BAa2h4QbJ4lQbQVhWSXm/yxrlI9XbN9ATMr1XQFW51cN6txyKNihQ5WAyIE90UY dmAZ6U0Vv9gPcLGEzIZViJhh5idvFTAy -----END CERTIFICATE-----Generated at Sat Dec 20 23:12:50 2025 by rpki-client