This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft File: x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json) Hash identifier: EmWzlfdXimy/20BphFwJwlDrDU24dcwr/PlWef6BvnI= Subject key identifier: 25:20:42:35:6B:6B:15:F3:E3:F0:09:F7:F6:AC:FD:B7:E6:54:ED:92 Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Certificate serial: 1750 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft Manifest number: 1725 Signing time: Sat 20 Dec 2025 16:25:03 +0000 Manifest this update: Sat 20 Dec 2025 16:25:03 +0000 Manifest next update: Sat 27 Dec 2025 16:25:03 +0000 Files and hashes: 1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: 4div4KJ0TH/6wdBqXHUPdfgvS9ShLjU3t2Jc6hkzDYU=) 2: 0897E314434811EF8E76757AC4F9AE02.roa (hash: xZv4JvM9/5O4QAK6f9ql/QNO43kIj5mFCJkX2eaTwtQ=) 3: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: SNFd606eyFRgHckXLJYOpmny777DQiIg5ZDfiZG+0S0=) 4: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: FodKXS0TzbSfOmAlxgs1FAfJLdqFJAQgdw0d4FctwUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5968 (0x1750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Validity Not Before: Dec 20 16:25:03 2025 GMT Not After : Dec 27 16:25:03 2025 GMT Subject: CN=6946cddf-8a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:00:85:a1:8b:ef:00:6b:f2:4d:a3:71:45: a8:f5:3f:44:09:35:77:86:fb:fa:fa:07:32:03:23: 62:6a:dc:e2:31:61:1e:ac:d2:49:8e:44:9d:43:e3: b0:9b:d9:b1:6c:30:17:37:00:a7:52:73:19:18:6a: fa:08:92:8a:13:1e:41:5c:a0:44:22:8c:f9:f7:46: 12:cb:fe:38:47:4c:e2:5f:7d:86:2c:19:0e:a7:fa: 97:6d:89:b5:62:ff:31:0a:47:0c:6f:5f:77:e3:2c: 41:b6:8d:e5:e9:a3:de:63:9a:d8:a5:a1:bb:9f:5c: 34:8e:00:3a:72:18:44:a8:85:82:81:a2:7f:5e:99: f3:9a:11:d5:5e:61:da:4c:61:9e:70:63:a7:0e:2f: 17:aa:3a:67:32:f8:30:da:84:9b:c6:da:2a:3c:42: c8:4d:cf:1f:39:34:fd:21:1d:4c:5d:a7:e9:58:d5: ed:93:d3:14:dc:03:81:f6:3e:bf:73:e0:17:c4:dd: 0e:d0:b2:19:c1:26:c2:90:0f:e7:3a:59:08:ef:82: a3:ae:25:8d:97:df:b0:ec:44:32:66:cd:1b:a3:30: 82:d8:72:32:ba:65:d0:0c:5e:25:19:21:b3:b6:79: 1b:02:3d:45:36:01:0c:89:a1:c0:92:9d:67:02:43: b4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:20:42:35:6B:6B:15:F3:E3:F0:09:F7:F6:AC:FD:B7:E6:54:ED:92 X509v3 Authority Key Identifier: keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3f:69:0f:6f:7c:21:7c:62:b4:c4:c5:b7:7d:d3:2a:0e:d9: d5:46:5f:f4:db:73:eb:0f:bf:4d:4f:d8:77:99:e4:78:c0:27: 69:2e:58:a9:e6:a2:97:a5:59:c4:b1:95:68:d2:73:b7:cc:79: e4:63:d3:3c:49:89:32:6a:62:20:1d:c5:a7:fb:78:36:7c:8f: de:be:ed:6c:5d:9c:b2:62:c2:5a:c1:ff:b1:25:0e:2c:bc:98: 36:71:1f:71:7c:55:3e:63:8c:e7:68:af:dc:1d:04:fe:e6:91: 68:5b:1f:fc:70:6e:4f:9a:13:d4:af:ef:02:3c:40:4f:68:b2: ff:27:00:95:34:72:b1:8c:66:a3:df:49:b2:8b:ee:04:4b:c3: 1c:0d:26:c9:d0:2a:11:c3:3c:fc:f4:63:c8:49:87:75:21:32: dd:14:59:93:db:28:87:dc:40:f3:0a:7e:4d:49:0d:56:81:ac: 6f:e4:4e:f2:0a:69:db:2f:18:0c:d5:19:5c:aa:df:25:98:5c: e8:49:64:77:35:53:d0:35:45:c8:45:b7:29:c3:d3:2a:42:0e: fd:cb:1c:35:b5:a3:90:a0:24:a9:63:fa:b6:39:e6:fe:48:f8: a8:e2:09:bc:ce:2f:2d:4c:1f:88:45:be:8a:85:b8:6b:50:90: 8e:44:47:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKEM3QjI2NDczNTAzODBBNkEzNEUzNEUzMkNFRkUzNTE5 OTM3RTk3QzgwHhcNMjUxMjIwMTYyNTAzWhcNMjUxMjI3MTYyNTAzWjAYMRYwFAYD VQQDDA02OTQ2Y2RkZi04YTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcsAhaGL7wBr8k2jcUWo9T9ECTV3hvv6+gcyAyNiatziMWEerNJJjkSdQ+Ow m9mxbDAXNwCnUnMZGGr6CJKKEx5BXKBEIoz590YSy/44R0ziX32GLBkOp/qXbYm1 Yv8xCkcMb1934yxBto3l6aPeY5rYpaG7n1w0jgA6chhEqIWCgaJ/XpnzmhHVXmHa TGGecGOnDi8XqjpnMvgw2oSbxtoqPELITc8fOTT9IR1MXafpWNXtk9MU3AOB9j6/ c+AXxN0O0LIZwSbCkA/nOlkI74KjriWNl9+w7EQyZs0bozCC2HIyumXQDF4lGSGz tnkbAj1FNgEMiaHAkp1nAkO0LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUgQjVr axXz4/AJ9/as/bfmVO2SMB8GA1UdIwQYMBaAFMeyZHNQOApqNONOMs7+NRmTfpfI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80Qjk1OEJDRTAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENtbzA0MDR5enY0MUdaTi1s OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3SmtjMUE0Q21vMDQwNHl6djQxR1pOLWw4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80Qjk1OEJDRTAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENt bzA0MDR5enY0MUdaTi1sOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9P2kPb3whfGK0xMW3fdMqDtnVRl/023PrD79NT9h3meR4wCdpLlip 5qKXpVnEsZVo0nO3zHnkY9M8SYkyamIgHcWn+3g2fI/evu1sXZyyYsJawf+xJQ4s vJg2cR9xfFU+Y4znaK/cHQT+5pFoWx/8cG5PmhPUr+8CPEBPaLL/JwCVNHKxjGaj 30myi+4ES8McDSbJ0CoRwzz89GPISYd1ITLdFFmT2yiH3EDzCn5NSQ1Wgaxv5E7y CmnbLxgM1Rlcqt8lmFzoSWR3NVPQNUXIRbcpw9MqQg79yxw1taOQoCSpY/q2Oeb+ SPio4gm8zi8tTB+IRb6KhbhrUJCOREd0 -----END CERTIFICATE-----Generated at Sun Dec 21 16:03:00 2025 by rpki-client