This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft File: P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json) Hash identifier: WQBLl22ZcZ/ezluVKiC7Io0gft8T8LUwDujTBxh21Yw= Subject key identifier: A6:56:92:AD:36:95:19:6E:6F:2D:50:2A:1B:07:34:3E:64:FF:79:66 Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft Manifest number: 0292 Signing time: Fri 19 Dec 2025 00:58:15 +0000 Manifest this update: Fri 19 Dec 2025 00:58:14 +0000 Manifest next update: Fri 26 Dec 2025 00:58:14 +0000 Files and hashes: 1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: OvByMtQ80KgHLanSJ7a6RU8inb9I5iWi5MOUqVDKgbY=) 2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: vUiqL1FpnlPYqefYhUAV6sUs/CDwSVo4hBehciV+Ep4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E Validity Not Before: Dec 19 00:58:14 2025 GMT Not After : Dec 26 00:58:14 2025 GMT Subject: CN=6944a327-7077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:32:0d:97:12:ab:38:c3:3c:ad:fb:80:c0:47: 6e:99:bb:7f:60:49:cd:7b:9a:b1:d3:62:ad:6d:70: 4b:61:ea:54:bc:3b:ca:7d:0e:45:e6:91:7c:a2:11: 6a:ca:a9:ab:cb:f9:f6:16:c9:22:e8:7c:fb:9b:d0: 53:fe:bb:7f:f5:5e:5f:e3:45:fc:ca:74:db:00:20: 2d:95:08:d0:eb:a7:2e:da:eb:b8:4e:79:3c:2f:3f: c9:9c:65:2b:69:c8:28:d8:29:29:8e:a1:d6:95:26: 81:f6:d9:7a:7e:cc:f9:be:d1:1d:2c:d9:29:61:da: 77:1d:ed:bb:dc:86:e5:e2:32:43:9f:72:0a:35:33: 4e:f5:ea:82:9e:fe:42:b7:a5:33:8b:d4:3a:80:63: 20:81:80:92:e0:06:46:26:de:c1:51:ea:42:d9:b9: c7:97:6f:ed:3a:41:8c:d4:f5:91:65:db:a5:0e:0e: f9:9e:2d:de:0a:5e:d2:79:c2:ab:b1:53:15:ec:a9: c0:b6:a1:d0:fe:96:be:2b:19:ed:5c:5f:3f:97:69: 67:f2:a7:95:85:14:40:a0:7a:2b:cb:30:31:8d:d1: 7f:8e:34:c7:8c:9d:21:aa:ba:e1:4d:c0:57:68:c4: b9:c0:d7:16:b5:f5:20:44:6d:f8:df:c0:05:b6:8d: 9e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:56:92:AD:36:95:19:6E:6F:2D:50:2A:1B:07:34:3E:64:FF:79:66 X509v3 Authority Key Identifier: keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:88:a3:d1:1f:16:3f:1b:b7:e1:4e:0b:9e:1b:4e:f6:35:d1: d2:dc:0b:82:f3:f2:c7:c3:96:21:44:9f:78:e5:62:dd:1d:f0: 51:75:aa:1c:c2:78:ee:bc:73:e8:26:3d:8f:a1:a0:c2:9c:b2: 11:d0:b7:04:fd:44:e8:fb:14:f6:cd:aa:d2:bc:0c:27:bd:86: cd:6e:6b:f9:29:9f:af:39:cf:4b:52:a8:54:bb:e7:c5:49:a1: c3:b9:a2:30:10:9b:43:66:0e:47:03:7f:e5:8d:79:d9:ce:57: 00:20:c1:fb:a9:20:d7:5a:a5:6a:67:4e:47:30:26:19:25:42: 2f:d8:c7:1d:53:3b:1b:33:9b:89:47:5b:0d:e6:06:ea:e5:fa: ab:ed:1d:4b:37:81:39:e4:21:f7:00:3f:c2:07:90:e5:47:47: 0a:f7:cc:92:30:c2:12:fb:16:2d:4c:28:c8:0a:3b:a5:45:6a: 06:c6:39:5c:da:0c:72:70:d4:b9:53:4f:8e:9c:af:d4:a3:68: 8d:e0:ae:ab:b8:91:13:29:4b:e6:50:be:de:aa:ec:fd:50:11: 93:25:95:c6:e1:3e:34:9e:e5:f8:8c:47:84:a2:5d:55:8c:43: 90:cd:b3:98:10:c8:c3:fe:10:65:7d:f0:21:ef:1e:bd:65:5b: 89:57:1c:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFERjgxMTAvBgNVBAUTKDNGQkMzQUY0MzEwMkNFREE0RkEwRjdGQTlCRDkxQjJE NjUzNDZENkUwHhcNMjUxMjE5MDA1ODE0WhcNMjUxMjI2MDA1ODE0WjAYMRYwFAYD VQQDDA02OTQ0YTMyNy03MDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkDINlxKrOMM8rfuAwEdumbt/YEnNe5qx02KtbXBLYepUvDvKfQ5F5pF8ohFq yqmry/n2Fski6Hz7m9BT/rt/9V5f40X8ynTbACAtlQjQ66cu2uu4Tnk8Lz/JnGUr acgo2CkpjqHWlSaB9tl6fsz5vtEdLNkpYdp3He273Ibl4jJDn3IKNTNO9eqCnv5C t6Uzi9Q6gGMggYCS4AZGJt7BUepC2bnHl2/tOkGM1PWRZdulDg75ni3eCl7SecKr sVMV7KnAtqHQ/pa+KxntXF8/l2ln8qeVhRRAoHoryzAxjdF/jjTHjJ0hqrrhTcBX aMS5wNcWtfUgRG3438AFto2eYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZWkq02 lRluby1QKhsHND5k/3lmMB8GA1UdIwQYMBaAFD+8OvQxAs7aT6D3+pvZGy1lNG1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MURGOC8yNkU1MzExNDU1 MDYxMUVEOTUwNkMwNDVDNEY5QUUwMi9QN3c2OURFQ3p0cFBvUGY2bTlrYkxXVTBi VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3dzY5REVDenRwUG9QZjZtOWtiTFdVMGJXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MURGOC8yNkU1MzExNDU1MDYxMUVEOTUwNkMwNDVDNEY5QUUwMi9QN3c2OURFQ3p0 cFBvUGY2bTlrYkxXVTBiVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3iKPRHxY/G7fhTgueG072NdHS3AuC8/LHw5YhRJ945WLdHfBRdaoc wnjuvHPoJj2PoaDCnLIR0LcE/UTo+xT2zarSvAwnvYbNbmv5KZ+vOc9LUqhUu+fF SaHDuaIwEJtDZg5HA3/ljXnZzlcAIMH7qSDXWqVqZ05HMCYZJUIv2McdUzsbM5uJ R1sN5gbq5fqr7R1LN4E55CH3AD/CB5DlR0cK98ySMMIS+xYtTCjICjulRWoGxjlc 2gxycNS5U0+OnK/Uo2iN4K6ruJETKUvmUL7equz9UBGTJZXG4T40nuX4jEeEol1V jEOQzbOYEMjD/hBlffAh7x69ZVuJVxwR -----END CERTIFICATE-----Generated at Fri Dec 19 17:36:39 2025 by rpki-client