This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json) Hash identifier: dI3xmK5JcPOg7AQvV7JcXId6vwUYcLCfHrrlUQ2b6eo= Subject key identifier: 95:62:2E:0A:A0:32:45:2A:B3:1F:20:C1:FD:C3:60:4B:5F:98:42:59 Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft Manifest number: 020F Signing time: Sun 21 Dec 2025 01:40:13 +0000 Manifest this update: Sun 21 Dec 2025 01:40:13 +0000 Manifest next update: Sun 28 Dec 2025 01:40:13 +0000 Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: ySP6JAXm72PI9aE8OGi03jX6MIb+ooXZVCePBvRmfCk=) 2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: sT81rK2M9q+5qR5h3geelVobh9M/XdM5YvpNMzqLxAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: Dec 21 01:40:13 2025 GMT Not After : Dec 28 01:40:13 2025 GMT Subject: CN=69474ffd-2e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:ec:a3:3e:80:2a:25:09:c8:78:f0:4b:78: 43:33:e5:45:05:0a:e7:76:ff:19:9e:47:4c:5e:8a: 68:b1:ba:02:34:b1:cd:d4:16:62:65:df:59:9a:83: db:50:10:ef:25:0a:4c:df:b8:0e:98:1b:b0:b6:99: df:a8:94:45:fa:7d:f3:d2:c4:56:ce:ff:3b:fe:f3: 8a:2c:d9:a6:a2:2b:5b:f9:86:2c:71:a0:c2:39:be: 46:1c:f2:a3:3b:de:ee:88:ed:e9:f0:49:90:61:fa: 8d:5f:4d:74:eb:00:42:e0:ea:8f:67:fb:1b:1d:1f: 34:eb:cb:b3:7b:82:1c:97:c7:a0:10:49:53:36:4b: c9:83:b1:6e:ca:d5:94:e9:b1:3f:41:a1:c6:a9:fb: d4:8e:f7:09:7d:cd:e7:a7:dd:2b:5d:06:69:4f:7e: 51:f4:be:b7:a3:59:64:95:66:ca:01:75:8d:17:dc: 35:7e:5c:f9:34:16:32:d4:ce:d9:95:bc:65:32:0c: 5a:06:16:31:2c:e8:15:3d:c7:40:48:d2:af:32:ec: bf:de:55:30:3a:43:3d:2c:53:f5:6d:c2:3f:de:8d: 5c:b7:eb:2f:72:53:1b:aa:0f:cb:ea:11:26:38:03: 3b:c1:b8:38:2f:ab:ee:8d:28:36:62:f3:7b:17:62: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:2E:0A:A0:32:45:2A:B3:1F:20:C1:FD:C3:60:4B:5F:98:42:59 X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:38:5d:dc:52:be:44:5c:45:aa:2b:94:6a:ac:91:99:18:5f: 50:cc:28:0c:a9:fd:90:51:fe:bf:f6:eb:87:c0:f5:04:ec:f8: dd:bd:06:0a:01:ac:14:ba:4d:7a:cf:8f:a4:21:02:ff:51:7d: 80:98:cd:dc:ab:0e:ba:b1:75:ee:c4:f0:5c:d0:2c:fa:2d:36: e2:00:e1:1e:89:e5:62:36:24:7d:67:1a:82:4e:0f:53:62:75: 78:78:f3:00:a5:8b:56:92:f6:7a:b4:52:23:b3:3c:f8:5e:37: 49:af:b2:bf:70:3e:16:c8:87:84:ac:36:e5:fc:c3:f7:03:64: 1f:65:9a:fb:c5:4f:62:ef:21:49:ff:ca:56:f2:49:88:ba:eb: 63:83:b5:d8:8e:ce:f7:44:b0:09:b8:10:a3:d4:56:f3:07:8f: c1:12:c1:68:3f:be:2e:6f:32:cc:f2:c8:69:6c:83:07:b6:3d: ad:19:1f:23:58:b9:54:2d:d8:17:88:2f:28:ec:f5:84:55:e7: 44:d5:44:fa:d3:6c:0f:28:6a:92:0b:bf:d7:85:78:92:61:61: 2c:84:ce:8b:d9:db:60:3a:dd:d7:86:c2:3c:af:94:c3:9e:79: 50:11:60:e5:49:83:5b:ca:34:62:74:94:39:b3:d1:64:1e:18: ec:8f:f8:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUxMjIxMDE0MDEzWhcNMjUxMjI4MDE0MDEzWjAYMRYwFAYD VQQDDA02OTQ3NGZmZC0yZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fzsoz6AKiUJyHjwS3hDM+VFBQrndv8ZnkdMXoposboCNLHN1BZiZd9ZmoPb UBDvJQpM37gOmBuwtpnfqJRF+n3z0sRWzv87/vOKLNmmoitb+YYscaDCOb5GHPKj O97uiO3p8EmQYfqNX0106wBC4OqPZ/sbHR8068uze4Icl8egEElTNkvJg7FuytWU 6bE/QaHGqfvUjvcJfc3np90rXQZpT35R9L63o1lklWbKAXWNF9w1flz5NBYy1M7Z lbxlMgxaBhYxLOgVPcdASNKvMuy/3lUwOkM9LFP1bcI/3o1ct+svclMbqg/L6hEm OAM7wbg4L6vujSg2YvN7F2LwvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJViLgqg MkUqsx8gwf3DYEtfmEJZMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3OF3cUr5EXEWqK5RqrJGZGF9QzCgMqf2QUf6/9uuHwPUE7PjdvQYK AawUuk16z4+kIQL/UX2AmM3cqw66sXXuxPBc0Cz6LTbiAOEeieViNiR9ZxqCTg9T YnV4ePMApYtWkvZ6tFIjszz4XjdJr7K/cD4WyIeErDbl/MP3A2QfZZr7xU9i7yFJ /8pW8kmIuutjg7XYjs73RLAJuBCj1FbzB4/BEsFoP74ubzLM8shpbIMHtj2tGR8j WLlULdgXiC8o7PWEVedE1UT602wPKGqSC7/XhXiSYWEshM6L2dtgOt3XhsI8r5TD nnlQEWDlSYNbyjRidJQ5s9FkHhjsj/gx -----END CERTIFICATE-----Generated at Sun Dec 21 05:00:49 2025 by rpki-client