This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft File: x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json) Hash identifier: nCcMpSJahbey/OxMCay0CV9gR9cI4gEvFWcwtsnHj2w= Subject key identifier: 15:12:81:54:A0:DC:FD:1B:7B:10:1F:22:27:59:81:9B:21:F9:77:72 Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB Certificate issuer: /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft Manifest number: 0247 Signing time: Tue 23 Dec 2025 00:47:05 +0000 Manifest this update: Tue 23 Dec 2025 00:47:05 +0000 Manifest next update: Tue 30 Dec 2025 00:47:05 +0000 Files and hashes: 1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: vChrG5H3DNHj6KlWu1bv8ZcCgBdMAXNRP7Ck/mE+84g=) 2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: 3spAcopzpeJWyW5mR0mGk38MM078PmmdgI27LOSYIH0=) 3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: aYUm1aVtuDy+5vYCksuuiVbwXJaF0tNfwYSEMBfgydU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB Validity Not Before: Dec 23 00:47:05 2025 GMT Not After : Dec 30 00:47:05 2025 GMT Subject: CN=6949e689-d77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:5e:d7:71:32:4e:31:76:b0:9b:e4:ff:b4: fe:e4:c1:13:7e:89:8f:c7:87:e6:d2:f3:2f:79:42: 52:c5:90:10:4d:57:44:8b:95:b5:6f:c9:5e:38:73: 73:99:68:0f:69:a9:12:6f:c5:ff:4d:af:99:81:c6: 67:08:af:0f:7f:28:02:da:80:93:9d:d0:c8:7f:24: a0:0a:3b:a7:4e:44:d9:85:38:ab:8e:a4:17:3b:85: 4c:58:4f:63:b3:39:cc:17:56:20:4d:e6:1c:85:9b: dd:8d:e5:c2:b2:7c:d7:8a:58:96:45:e3:ee:25:ac: 7d:ad:1e:74:ff:a9:34:f0:12:ba:5e:ca:90:86:f3: 1f:82:d2:16:f1:2c:cc:58:76:fd:63:65:b0:dc:da: 41:95:68:bf:07:98:c2:42:20:7e:50:54:5d:56:d4: c0:b7:2e:a6:27:70:f6:72:af:13:0f:9b:15:2a:cc: 8a:c1:f2:eb:2c:25:84:ea:01:13:31:b3:52:6a:d8: 0f:52:bc:8c:7a:92:d0:ae:9e:cd:ae:9b:bc:46:01: e9:10:5f:91:78:7d:d2:e8:23:49:7d:0b:e8:de:58: bd:b6:85:87:cf:60:bc:55:a5:5c:21:77:fc:88:ce: a1:7c:24:4a:b4:de:24:ea:67:de:da:eb:9e:49:76: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:12:81:54:A0:DC:FD:1B:7B:10:1F:22:27:59:81:9B:21:F9:77:72 X509v3 Authority Key Identifier: keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e0:13:01:53:0d:c1:f1:ff:6f:59:e7:4e:48:63:74:0d:d8: 55:28:40:65:da:10:8a:b3:ae:ee:33:ca:bc:4d:30:e9:a4:8f: 76:27:95:5c:df:7f:dc:b2:6b:57:2b:2f:eb:6b:55:9b:0d:6d: 6d:a4:38:6f:9e:1d:d4:b8:75:75:b1:83:8b:7d:f8:5f:87:68: b2:28:21:87:39:0c:90:a6:7e:1d:74:89:69:b9:38:79:cc:42: 8d:78:78:7e:3b:08:f0:0a:c5:f0:65:3d:b8:25:12:16:21:97: f6:ac:03:76:a5:65:59:82:8d:35:5b:ae:5b:7f:de:94:bc:18: d5:63:23:9c:6f:88:44:d8:3f:7a:e8:a0:71:14:ed:4c:91:a1: 9e:73:0f:9b:47:35:3d:44:35:a9:09:e1:d9:45:e5:7c:59:95: ca:34:1a:27:dd:93:af:80:71:cf:34:52:e5:97:b1:9b:10:85: e9:1f:bc:ef:2f:c7:2d:8a:db:86:20:ee:3d:83:63:7c:ea:61: e5:c3:99:5d:a0:61:f9:f2:a4:eb:00:17:c5:16:e5:df:82:91: 44:f0:11:f4:79:3f:19:b8:84:dd:1b:cc:53:da:e0:ca:8b:58: 30:a4:e8:f7:80:99:8f:18:8e:40:0e:b6:41:6d:09:b2:d3:49: 5f:ef:cc:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NzUxMTAvBgNVBAUTKEM3QjEzMDlEMDA4NzJEMDY2NjM5NkI0QzIzRDhFRjVD MzEyQzZCRUIwHhcNMjUxMjIzMDA0NzA1WhcNMjUxMjMwMDA0NzA1WjAYMRYwFAYD VQQDDA02OTQ5ZTY4OS1kNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+le13EyTjF2sJvk/7T+5METfomPx4fm0vMveUJSxZAQTVdEi5W1b8leOHNz mWgPaakSb8X/Ta+ZgcZnCK8PfygC2oCTndDIfySgCjunTkTZhTirjqQXO4VMWE9j sznMF1YgTeYchZvdjeXCsnzXiliWRePuJax9rR50/6k08BK6XsqQhvMfgtIW8SzM WHb9Y2Ww3NpBlWi/B5jCQiB+UFRdVtTAty6mJ3D2cq8TD5sVKsyKwfLrLCWE6gET MbNSatgPUryMepLQrp7Nrpu8RgHpEF+ReH3S6CNJfQvo3li9toWHz2C8VaVcIXf8 iM6hfCRKtN4k6mfe2uueSXYkQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUSgVSg 3P0bexAfIidZgZsh+XdyMB8GA1UdIwQYMBaAFMexMJ0Ahy0GZjlrTCPY71wxLGvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY3NS82RDExRjU3ODVF NUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExRWm1PV3RNSTlqdlhERXNh LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3RXduUUNITFFabU9XdE1JOWp2WERFc2Etcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY3NS82RDExRjU3ODVFNUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExR Wm1PV3RNSTlqdlhERXNhLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe4BMBUw3B8f9vWedOSGN0DdhVKEBl2hCKs67uM8q8TTDppI92J5Vc 33/csmtXKy/ra1WbDW1tpDhvnh3UuHV1sYOLffhfh2iyKCGHOQyQpn4ddIlpuTh5 zEKNeHh+OwjwCsXwZT24JRIWIZf2rAN2pWVZgo01W65bf96UvBjVYyOcb4hE2D96 6KBxFO1MkaGecw+bRzU9RDWpCeHZReV8WZXKNBon3ZOvgHHPNFLll7GbEIXpH7zv L8ctituGIO49g2N86mHlw5ldoGH58qTrABfFFuXfgpFE8BH0eT8ZuITdG8xT2uDK i1gwpOj3gJmPGI5ADrZBbQmy00lf78zH -----END CERTIFICATE-----Generated at Tue Dec 23 12:43:08 2025 by rpki-client