This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: 4uS4z57gff9GaNefuKGLUocQypKugbCMpuYlCFO48dk= Subject key identifier: C4:08:BE:83:DD:85:A1:7F:9C:A4:28:AD:E6:A7:B4:A2:55:B9:14:B3 Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 9C Signing time: Sun 21 Dec 2025 05:29:08 +0000 Manifest this update: Sun 21 Dec 2025 05:29:08 +0000 Manifest next update: Sun 28 Dec 2025 05:29:08 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: Ov/T08AX7hz1t8O52B9XJj47GSwrzmSG0TvGd2OWCJk=) 2: 3DE8388A53F411F0B5061085C4F9AE02.roa (hash: Ps4sZW3pvUKvzqoCE6utZYer/j53HdcntTVucVviEc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Dec 21 05:29:08 2025 GMT Not After : Dec 28 05:29:08 2025 GMT Subject: CN=694785a4-79e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b2:5f:c2:7d:cb:8f:b2:4c:10:5c:23:b3:31: c3:28:87:c9:45:90:3b:82:d1:59:f3:7d:2d:57:d5: a8:90:5b:80:61:3d:23:1c:c7:c2:8c:ec:44:71:4e: eb:6b:9c:a8:d0:97:6b:9e:4a:06:a4:7e:95:bb:80: 32:f1:5b:4a:9b:28:4f:c8:55:51:f0:30:62:87:87: 88:47:ab:af:15:6d:9d:fd:f1:8f:e9:6b:11:4e:c3: 40:83:d6:18:16:a4:a8:03:38:cf:ba:db:12:20:03: f1:d6:40:77:36:31:1c:44:dc:9c:61:9b:96:30:46: db:d9:ce:82:6b:b5:c4:1e:85:37:95:a4:9c:e4:f2: 0c:4b:6e:e4:b3:33:df:75:3d:cb:87:b3:67:8c:81: de:3a:5d:35:a3:b4:d3:1f:8a:08:c5:6b:21:51:db: c2:37:b8:94:41:6f:79:b7:cf:9c:28:80:1c:bb:e0: bb:b0:38:a3:3d:45:08:87:58:19:21:64:28:26:bf: e7:62:8d:0e:6d:4b:90:f5:52:09:7d:be:f2:63:2e: af:56:25:4b:de:63:ed:b1:ac:79:3b:70:2b:9c:5a: 5f:f0:44:45:4b:d3:5d:e9:cb:c4:69:b4:71:64:8e: bc:af:a3:12:1e:79:4c:e1:40:a8:19:1c:3e:a7:38: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:08:BE:83:DD:85:A1:7F:9C:A4:28:AD:E6:A7:B4:A2:55:B9:14:B3 X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:99:8d:49:5f:ba:bd:7e:35:2c:1c:9f:fc:df:0c:ac:bd:76: 24:01:08:0a:9b:2e:64:ba:ef:c9:ae:94:84:05:14:1b:6b:32: 1c:65:68:d9:ca:64:15:8c:09:2d:c5:5d:d1:2c:41:bc:c8:23: 0b:57:b1:6b:69:8b:06:c3:4c:e7:83:73:a6:58:e4:60:e0:82: d2:ba:24:37:dd:33:c4:a4:81:91:16:98:9e:97:1e:38:0b:d3: c4:6d:07:80:78:bb:c0:80:86:36:3c:24:e6:c8:08:82:32:7e: 0f:01:2c:ef:cd:80:72:21:b6:a9:df:cd:a0:33:89:83:2d:c0: a5:93:6f:3b:01:6c:49:c4:25:cd:3c:cd:0f:5d:5d:9a:cf:ac: 84:e7:31:27:19:24:41:ec:33:a9:94:a1:6a:81:01:93:1a:7a: 82:91:81:d7:f0:bb:42:a1:1d:e4:54:55:7d:bd:de:1a:65:88: d9:eb:88:22:6d:65:7d:d5:1e:c6:fc:c3:6b:9b:a2:95:98:af: 1f:9c:15:da:70:ab:aa:09:f3:68:9c:6f:c1:a5:75:08:27:4a: 2f:17:ef:db:04:d5:fb:43:26:86:a0:95:5e:bd:00:21:b1:49: 0c:ff:5e:e0:03:61:61:fc:3f:6b:bb:82:a2:f1:0a:43:02:eb: c2:83:34:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYwRTgxMTAvBgNVBAUTKEVDMkVDMUU1OTkxMDY4M0EzRUQ1RTdBOTRGODlGNjc0 RDk2N0NCOTAwHhcNMjUxMjIxMDUyOTA4WhcNMjUxMjI4MDUyOTA4WjAYMRYwFAYD VQQDDA02OTQ3ODVhNC03OWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rJfwn3Lj7JMEFwjszHDKIfJRZA7gtFZ830tV9WokFuAYT0jHMfCjOxEcU7r a5yo0JdrnkoGpH6Vu4Ay8VtKmyhPyFVR8DBih4eIR6uvFW2d/fGP6WsRTsNAg9YY FqSoAzjPutsSIAPx1kB3NjEcRNycYZuWMEbb2c6Ca7XEHoU3laSc5PIMS27kszPf dT3Lh7NnjIHeOl01o7TTH4oIxWshUdvCN7iUQW95t8+cKIAcu+C7sDijPUUIh1gZ IWQoJr/nYo0ObUuQ9VIJfb7yYy6vViVL3mPtsax5O3ArnFpf8ERFS9Nd6cvEabRx ZI68r6MSHnlM4UCoGRw+pzhQfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQIvoPd haF/nKQoreantKJVuRSzMB8GA1UdIwQYMBaAFOwuweWZEGg6PtXnqU+J9nTZZ8uQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjBFOC8yRDMwNkIzNEY0 NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFEby0xZWVwVDRuMmRObG55 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjBFOC8yRDMwNkIzNEY0NDUxMUVGQThDNTI2NDZDNEY5QUUwMi83QzdCNVprUWFE by0xZWVwVDRuMmRObG55NUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAImY1JX7q9fjUsHJ/83wysvXYkAQgKmy5kuu/JrpSEBRQbazIcZWjZ ymQVjAktxV3RLEG8yCMLV7FraYsGw0zng3OmWORg4ILSuiQ33TPEpIGRFpielx44 C9PEbQeAeLvAgIY2PCTmyAiCMn4PASzvzYByIbap382gM4mDLcClk287AWxJxCXN PM0PXV2az6yE5zEnGSRB7DOplKFqgQGTGnqCkYHX8LtCoR3kVFV9vd4aZYjZ64gi bWV91R7G/MNrm6KVmK8fnBXacKuqCfNonG/BpXUIJ0ovF+/bBNX7QyaGoJVevQAh sUkM/17gA2Fh/D9ru4Ki8QpDAuvCgzQm -----END CERTIFICATE-----Generated at Mon Dec 22 15:49:34 2025 by rpki-client