This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.mft (raw, json) Hash identifier: T6SPxhehfQcyZCs5TP5JwZBXZlKz4s6d5EL50tTzzOQ= Subject key identifier: E6:9E:FD:F4:F1:A7:CA:4F:A5:D1:50:40:02:6F:58:19:58:AE:C9:E2 Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 Certificate issuer: /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Certificate serial: 1297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft Manifest number: 1285 Signing time: Thu 18 Dec 2025 16:56:35 +0000 Manifest this update: Thu 18 Dec 2025 16:56:34 +0000 Manifest next update: Thu 25 Dec 2025 16:56:34 +0000 Files and hashes: 1: 7ulOOvQOrIyjbcMuSeREbs-zNQU.crl (hash: 9QFsWTsjkiXrQF/F1DioPUIWDnNxLgaY5otGt3ZN+nA=) 2: 0DE55A7CAA4411F0B070DC19C4F9AE02.roa (hash: RVeWzEi8FWx6+XKLQ2LvJ/XgHncVpOFiC8+2OAjSGp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4759 (0x1297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161FF7, serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Validity Not Before: Dec 18 16:56:34 2025 GMT Not After : Dec 25 16:56:34 2025 GMT Subject: CN=69443242-a425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:c4:96:f0:58:90:10:b5:4e:6f:c1:04:3f: f8:46:06:0a:80:de:50:d2:51:13:7f:61:84:c9:e9: 39:05:60:f1:57:5e:bd:5b:50:24:4b:d5:11:40:2e: 88:e3:bc:6c:10:96:c0:3c:2d:51:4e:bb:7f:c2:10: 89:d9:ca:e9:d0:18:79:04:38:91:c4:96:cd:62:1d: 76:b1:68:a3:0c:8e:da:8a:51:e5:4b:ba:d9:1a:d7: f7:d7:b6:a4:e4:fc:48:1c:89:aa:90:03:e4:37:a0: 53:03:e3:91:d1:4f:6a:cb:3f:39:a3:da:61:79:75: 4e:3e:85:1d:6d:54:2f:2c:f4:33:92:af:c4:ec:04: 88:36:5b:c4:c6:64:31:7c:6e:ff:ee:9f:b5:42:14: d4:b2:95:b2:a0:f6:22:37:03:a0:96:e4:28:8e:b5: 87:9e:0c:b1:74:d9:08:99:f8:03:1f:33:73:21:9a: 69:9b:09:0e:d3:56:91:06:ef:b8:4a:df:1b:c5:ec: 12:1e:bb:a2:f5:57:c7:d3:aa:88:e2:ed:fd:94:4c: e6:92:fd:4a:2b:7b:b0:81:0b:45:43:9a:3a:3c:d2: ab:40:0f:55:d0:50:74:43:b5:4e:1c:79:9e:98:0a: 8c:fa:02:b5:88:71:da:66:0a:a4:fb:51:44:d7:6e: f0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9E:FD:F4:F1:A7:CA:4F:A5:D1:50:40:02:6F:58:19:58:AE:C9:E2 X509v3 Authority Key Identifier: keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:cb:3e:5b:f0:ff:52:49:b7:d7:b3:50:a5:58:b5:11:75:ea: 82:47:aa:ce:af:6e:8e:cd:28:17:bc:1d:80:65:65:c8:96:67: f9:0f:39:d9:d7:82:65:67:32:7b:77:30:d7:f6:03:d8:fb:6c: 53:45:6c:45:12:22:fc:70:5b:4b:f9:79:d8:a7:66:ea:9b:80: 9f:78:77:ac:cc:e6:2f:bb:86:73:71:fe:b4:6a:d3:25:a5:eb: 6f:6f:77:f9:39:c1:86:b3:e5:40:b7:9b:0e:f1:02:59:0b:7c: 23:a6:6d:4a:f5:cb:60:b3:cc:bc:d9:08:28:8f:b3:7c:54:78: d1:49:80:dd:8d:27:9c:4e:cb:67:ea:f8:b7:a7:30:1a:b9:7b: 67:c7:f8:50:17:ba:90:e7:07:05:ec:83:48:8f:2b:32:ee:42: f0:f5:c8:f3:96:ba:95:75:02:d6:b8:f1:3a:64:13:c9:4c:b1: e1:7e:52:17:ea:3b:a3:ed:ed:98:2a:39:6c:14:42:8c:a0:37: 9d:44:5e:66:56:84:38:8b:4c:61:7b:57:95:7c:a8:1a:69:4d: 4b:6a:5a:79:7d:e5:6d:c5:04:ea:bb:d2:cb:59:14:4b:b4:eb: be:cf:5f:f3:17:32:d4:aa:fe:7c:81:5d:d0:35:ac:ad:68:a3: b1:c3:9d:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGRjcxMTAvBgNVBAUTKEVFRTk0RTNBRjQwRUFDOENBMzZEQzMyRTQ5RTQ0NDZF Q0ZCMzM1MDUwHhcNMjUxMjE4MTY1NjM0WhcNMjUxMjI1MTY1NjM0WjAYMRYwFAYD VQQDDA02OTQ0MzI0Mi1hNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6fElvBYkBC1Tm/BBD/4RgYKgN5Q0lETf2GEyek5BWDxV169W1AkS9URQC6I 47xsEJbAPC1RTrt/whCJ2crp0Bh5BDiRxJbNYh12sWijDI7ailHlS7rZGtf317ak 5PxIHImqkAPkN6BTA+OR0U9qyz85o9pheXVOPoUdbVQvLPQzkq/E7ASINlvExmQx fG7/7p+1QhTUspWyoPYiNwOgluQojrWHngyxdNkImfgDHzNzIZppmwkO01aRBu+4 St8bxewSHrui9VfH06qI4u39lEzmkv1KK3uwgQtFQ5o6PNKrQA9V0FB0Q7VOHHme mAqM+gK1iHHaZgqk+1FE127wfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOae/fTx p8pPpdFQQAJvWBlYrsniMB8GA1UdIwQYMBaAFO7pTjr0DqyMo23DLknkRG7PszUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUZGNy8yMTg2MkM2NEUw QzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJeWpiY011U2VSRWJzLXpO UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bE9PdlFPckl5amJjTXVTZVJFYnMtek5RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUZGNy8yMTg2MkM2NEUwQzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJ eWpiY011U2VSRWJzLXpOUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNyz5b8P9SSbfXs1ClWLURdeqCR6rOr26OzSgXvB2AZWXIlmf5DznZ 14JlZzJ7dzDX9gPY+2xTRWxFEiL8cFtL+XnYp2bqm4CfeHeszOYvu4Zzcf60atMl petvb3f5OcGGs+VAt5sO8QJZC3wjpm1K9ctgs8y82Qgoj7N8VHjRSYDdjSecTstn 6vi3pzAauXtnx/hQF7qQ5wcF7INIjysy7kLw9cjzlrqVdQLWuPE6ZBPJTLHhflIX 6juj7e2YKjlsFEKMoDedRF5mVoQ4i0xhe1eVfKgaaU1Lalp5feVtxQTqu9LLWRRL tOu+z1/zFzLUqv58gV3QNaytaKOxw50C -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:34 2025 by rpki-client