This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json) Hash identifier: 4xSVhKNOlWUlSfq+mIGufVHIvxd8cTOKitMiOdXyuX4= Subject key identifier: 9D:F0:13:46:45:B0:56:85:99:42:91:D5:51:BD:F1:AD:4C:AB:B3:09 Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 03A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft Manifest number: 039B Signing time: Fri 26 Dec 2025 23:48:02 +0000 Manifest this update: Fri 26 Dec 2025 23:48:01 +0000 Manifest next update: Fri 02 Jan 2026 23:48:01 +0000 Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: F5kztGnUY/pcjqtMm62hc9oKI+ciLqrA6Phxx6dsUdI=) 2: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: lc1pPdhpDyedJmN9wKoMqneYMH913sVIQlr9uEAlmPc=) 3: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 5H3doinpQy2aJUR8V/Iyn/j6ZGC3RyvpumpsTRmuHeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 23:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Validity Not Before: Dec 26 23:48:01 2025 GMT Not After : Jan 2 23:48:01 2026 GMT Subject: CN=694f1eb1-b79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ca:8c:2d:33:5e:8f:4c:11:34:76:39:55:92: a9:4d:c4:7c:3f:c3:b2:64:e5:4e:da:2f:29:e3:83: 74:3d:1b:56:f4:2a:38:a5:de:0a:8a:b1:13:94:cd: 0b:b1:c7:50:09:0a:66:e2:aa:3a:45:e7:d4:bc:c9: a4:ae:d8:76:f7:e2:57:e9:6b:ca:49:06:26:82:33: 51:09:51:1a:00:34:b0:0e:f7:98:b2:7c:9b:04:01: 17:c2:5b:04:94:5d:97:35:6a:36:55:b2:2f:e1:b0: 54:d2:9c:94:fb:42:f1:2c:00:33:82:23:3b:91:4b: 7d:e1:a4:41:23:f4:53:96:ca:7d:53:16:0d:4a:6a: 98:44:75:79:ac:45:fd:0b:39:45:80:91:64:88:f9: cf:ea:6a:94:0c:47:c4:44:0e:d0:09:be:46:7e:25: c0:44:f6:12:9d:98:07:a8:14:50:d9:12:90:ce:21: 31:c0:05:04:00:ad:1e:a8:fa:3a:9a:79:a4:ab:19: 75:48:a7:65:40:81:17:cd:f0:13:29:45:d0:dd:33: 42:a7:58:63:81:f6:a9:01:8f:77:45:9d:53:60:01: 6d:47:9b:f2:25:e3:0e:08:3a:38:e4:46:e5:d7:9f: 20:e2:55:71:bf:6a:ed:eb:a8:31:eb:5c:41:a0:4d: 0e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F0:13:46:45:B0:56:85:99:42:91:D5:51:BD:F1:AD:4C:AB:B3:09 X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:87:c8:99:03:46:53:c1:52:ca:3a:bb:32:72:6e:16:84:50: 27:e2:b4:3f:72:70:be:2b:d5:31:7e:ab:fe:2e:75:f6:a2:28: 48:ec:0a:98:f2:22:1b:52:e8:5d:5f:04:db:0b:8b:80:f5:9a: fd:23:f6:b9:d4:82:73:bf:ba:56:05:79:aa:c3:ac:a4:ef:94: cb:1f:2b:32:f4:aa:68:53:66:d3:d3:7c:bc:4b:1c:38:96:c2: ae:b3:fb:df:12:a2:64:38:32:30:e1:bd:1b:d6:5c:41:a0:e1: 7e:5c:1b:51:85:25:07:7f:52:0f:be:61:7e:1a:9b:09:62:43: de:db:b0:54:46:0b:43:3e:f0:1f:9c:ec:74:9e:df:30:e1:19: 0d:20:81:60:1e:ed:58:4f:65:72:e6:ca:8b:5f:d9:70:1e:2c: 6d:47:e1:52:d9:d5:ca:aa:da:36:ef:fb:18:52:93:3c:1f:26: 85:f2:99:55:4d:c0:20:ab:28:35:be:7b:1a:f1:95:ee:a6:53: 06:7d:13:fc:ac:9e:15:d9:6e:b1:a8:06:ee:c1:24:3c:75:31: 07:74:1f:a8:7c:a9:dc:c2:6f:b1:25:37:c8:8c:c1:cc:8e:ac: 6b:de:5e:07:31:f9:f5:8a:67:60:97:4d:ae:bf:fb:33:09:de: 75:bf:32:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjUxMjI2MjM0ODAxWhcNMjYwMTAyMjM0ODAxWjAYMRYwFAYD VQQDDA02OTRmMWViMS1iNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5MqMLTNej0wRNHY5VZKpTcR8P8OyZOVO2i8p44N0PRtW9Co4pd4KirETlM0L scdQCQpm4qo6RefUvMmkrth29+JX6WvKSQYmgjNRCVEaADSwDveYsnybBAEXwlsE lF2XNWo2VbIv4bBU0pyU+0LxLAAzgiM7kUt94aRBI/RTlsp9UxYNSmqYRHV5rEX9 CzlFgJFkiPnP6mqUDEfERA7QCb5GfiXARPYSnZgHqBRQ2RKQziExwAUEAK0eqPo6 mnmkqxl1SKdlQIEXzfATKUXQ3TNCp1hjgfapAY93RZ1TYAFtR5vyJeMOCDo45Ebl 158g4lVxv2rt66gx61xBoE0OaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3wE0ZF sFaFmUKR1VG98a1Mq7MJMB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWh8iZA0ZTwVLKOrsycm4WhFAn4rQ/cnC+K9Uxfqv+LnX2oihI7AqY 8iIbUuhdXwTbC4uA9Zr9I/a51IJzv7pWBXmqw6yk75TLHysy9KpoU2bT03y8Sxw4 lsKus/vfEqJkODIw4b0b1lxBoOF+XBtRhSUHf1IPvmF+GpsJYkPe27BURgtDPvAf nOx0nt8w4RkNIIFgHu1YT2Vy5sqLX9lwHixtR+FS2dXKqto27/sYUpM8HyaF8plV TcAgqyg1vnsa8ZXuplMGfRP8rJ4V2W6xqAbuwSQ8dTEHdB+ofKncwm+xJTfIjMHM jqxr3l4HMfn1imdgl02uv/szCd51vzKq -----END CERTIFICATE-----Generated at Sun Dec 28 09:07:02 2025 by rpki-client