This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: EXVk+ux3qXtgrk/TNW+Exy5lCjUar42Yf4STnpJbEXU= Subject key identifier: 11:CE:62:BC:D0:76:F1:69:40:BA:DF:19:4D:EB:28:E1:06:9B:72:14 Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: 0130 Signing time: Fri 19 Dec 2025 03:45:03 +0000 Manifest this update: Fri 19 Dec 2025 03:45:02 +0000 Manifest next update: Fri 26 Dec 2025 03:45:02 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: BCea31ggwOjN+BUkbjs/SxuFW9qWISrrzok9fl83ONg=) 2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: CwXxvQd82DMK841MpqVGbyP5fEoZfjolyFEgUa5vlRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Validity Not Before: Dec 19 03:45:02 2025 GMT Not After : Dec 26 03:45:02 2025 GMT Subject: CN=6944ca3f-7df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:d0:77:c4:a1:8e:dd:4c:59:6b:95:7a:d9: 92:f9:29:28:5d:e5:91:ae:07:f0:3b:e4:c9:38:9f: ad:e0:50:40:c8:07:35:f3:44:ae:9c:6e:de:cb:31: eb:4a:68:88:88:66:dc:21:6e:11:26:0e:f5:64:de: 21:0c:c7:e2:9c:a4:53:a4:64:0e:cb:19:d8:7a:0e: d7:34:0b:d6:ca:a3:18:58:24:b3:af:54:83:4a:aa: b3:54:f1:c0:e3:14:8d:59:a4:93:b6:ef:da:f6:5a: 39:bc:41:64:b4:41:9a:1d:a4:b1:fb:97:b8:c3:62: 64:ba:51:e1:f3:4f:e6:ca:f8:91:10:4b:bb:46:3b: 7d:9c:77:50:05:3b:1a:40:7a:46:e6:c0:94:82:43: df:45:47:91:4e:c7:44:4c:dc:d5:7c:39:d9:4e:a3: f3:93:12:69:dd:55:79:cc:bf:ef:a8:71:08:7c:fb: 0b:98:e5:74:41:9e:41:80:b7:81:af:7b:2b:a7:a9: 83:13:b7:e4:4a:aa:18:89:ef:c2:1c:0c:59:43:b8: a6:e9:f9:b7:1a:e3:ea:83:4d:e2:33:ea:15:dc:14: 5e:54:f1:99:40:71:8e:88:62:3e:db:7f:8d:cf:1a: 15:94:d0:0f:4b:4d:72:44:60:2f:ec:3e:f3:21:bf: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CE:62:BC:D0:76:F1:69:40:BA:DF:19:4D:EB:28:E1:06:9B:72:14 X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:9a:c6:4d:39:29:54:d0:05:a2:3b:a4:40:9b:08:b8:11:41: dd:23:fb:be:52:bf:70:fe:da:25:1b:a3:60:c6:5b:d9:86:9f: d0:a6:fb:bf:10:74:cf:b4:eb:ae:8b:50:23:07:d7:ec:1e:e2: c9:ad:fe:c5:38:b9:17:29:35:e6:4e:37:d6:59:cb:6d:89:a0: 39:1b:29:7b:58:74:dc:4b:60:9b:3f:13:0d:8d:a0:9a:4e:77: db:19:26:3e:b6:83:f8:74:4b:08:86:22:56:27:b4:be:c2:05: f5:0f:9c:9c:c7:d4:29:57:cb:78:7b:03:9e:2b:5f:18:7f:ef: 0b:dc:7e:4a:72:ba:6f:b1:3c:bd:01:e1:49:4f:29:d4:c3:77: 6e:a2:8c:12:4b:15:d2:61:14:eb:4e:36:e2:2b:7b:2d:be:76: 60:62:6a:7a:e8:8c:f7:09:92:14:5d:81:82:db:f9:f7:94:f3: 94:55:13:28:38:25:75:7d:a0:50:8b:75:00:5b:00:a5:20:9b: 8f:39:99:f1:50:aa:77:5a:05:25:f8:11:49:9f:77:49:9e:22: e7:ae:ca:69:de:2a:e7:cc:df:72:93:ab:5c:3e:37:fe:c0:3d: 13:a1:79:92:41:d4:f9:e7:f8:e8:b5:fd:dd:da:cb:a6:e2:05: 64:f5:49:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx ODdEOTdGMzMwHhcNMjUxMjE5MDM0NTAyWhcNMjUxMjI2MDM0NTAyWjAYMRYwFAYD VQQDDA02OTQ0Y2EzZi03ZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXTQd8Shjt1MWWuVetmS+SkoXeWRrgfwO+TJOJ+t4FBAyAc180SunG7eyzHr SmiIiGbcIW4RJg71ZN4hDMfinKRTpGQOyxnYeg7XNAvWyqMYWCSzr1SDSqqzVPHA 4xSNWaSTtu/a9lo5vEFktEGaHaSx+5e4w2JkulHh80/myviREEu7Rjt9nHdQBTsa QHpG5sCUgkPfRUeRTsdETNzVfDnZTqPzkxJp3VV5zL/vqHEIfPsLmOV0QZ5BgLeB r3srp6mDE7fkSqoYie/CHAxZQ7im6fm3GuPqg03iM+oV3BReVPGZQHGOiGI+23+N zxoVlNAPS01yRGAv7D7zIb+k6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHOYrzQ dvFpQLrfGU3rKOEGm3IUMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha U05rcG40cFBrcHdZZlpmek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCmsZNOSlU0AWiO6RAmwi4EUHdI/u+Ur9w/tolG6NgxlvZhp/Qpvu/ EHTPtOuui1AjB9fsHuLJrf7FOLkXKTXmTjfWWcttiaA5Gyl7WHTcS2CbPxMNjaCa TnfbGSY+toP4dEsIhiJWJ7S+wgX1D5ycx9QpV8t4ewOeK18Yf+8L3H5KcrpvsTy9 AeFJTynUw3duoowSSxXSYRTrTjbiK3stvnZgYmp66Iz3CZIUXYGC2/n3lPOUVRMo OCV1faBQi3UAWwClIJuPOZnxUKp3WgUl+BFJn3dJniLnrspp3irnzN9yk6tcPjf+ wD0ToXmSQdT55/jotf3d2sum4gVk9Uns -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:49 2025 by rpki-client