This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft File: P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json) Hash identifier: eZft3jIFhXvylwK16YXouAJw58rOuQuLyhSSOVMJsR8= Subject key identifier: 40:03:A2:FE:F1:73:96:FA:6A:07:04:4A:E7:EE:8B:5E:61:AA:04:3D Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Certificate serial: 2B67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft Manifest number: 2B38 Signing time: Thu 18 Dec 2025 15:31:20 +0000 Manifest this update: Thu 18 Dec 2025 15:31:20 +0000 Manifest next update: Thu 25 Dec 2025 15:31:20 +0000 Files and hashes: 1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: aD79PetZRr7GGZg9atrVyyHUlWQWrDQVKBa90f/0LD8=) 2: 7523EB28671811F0B26A8C1AC4F9AE02.roa (hash: ppGKOWraeOF8KBxlm/qgPAfA6uqwS+C7Tk6GCScwyjk=) 3: 5DE5F5603D2311F0BC3F7332C4F9AE02.roa (hash: Gj/dQfmDGUWDK4XHV01NkbElb3DXkLPBPWk0YD6hwjM=) 4: BE9BADE02B4011F0BA1FF282C4F9AE02.roa (hash: JIxsUWoaA8dqs4H846TBR0QXM7ZNHktOJjX2Kny5hR4=) 5: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: +HLe66PXx2PeHfF3w62lv44BzlqBqje8fJ2L8YnpkrU=) 6: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: W6zfrwj6/OqirsYiKLU78RB1FM66HD+HpTrmcoXxfW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11111 (0x2b67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Validity Not Before: Dec 18 15:31:20 2025 GMT Not After : Dec 25 15:31:20 2025 GMT Subject: CN=69441e48-94b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:55:73:10:eb:ed:e9:af:cc:c9:07:40:18: 07:35:17:f4:4a:c0:dc:0b:8f:11:b8:b8:3b:cc:96: 90:13:40:18:95:c4:ef:a9:d0:8d:34:4f:08:04:46: 9d:87:85:c0:61:ab:a3:9a:ff:90:03:a3:56:bf:a6: 8e:81:03:30:11:88:c2:f5:fd:15:98:88:ed:9f:28: 75:9c:90:25:3d:84:d4:67:ce:95:c1:fe:db:d4:2e: c5:e0:6f:94:4a:09:6f:bb:ff:1f:c1:50:76:47:f8: 66:0c:fe:75:ac:d4:9c:ae:dc:78:c8:3c:ff:46:ad: b6:46:47:99:89:4f:f8:66:3e:65:ba:87:1d:9d:c4: 10:50:54:ea:d7:d4:df:40:29:99:4b:86:fc:31:65: a2:71:bd:d9:59:e5:f4:aa:ba:5b:b0:d6:a4:ef:69: 2d:26:64:ad:a6:87:46:4a:3d:4e:ed:2e:62:ce:e2: 4a:4f:35:f5:99:de:04:64:af:bc:91:29:97:72:ee: 74:b3:8c:01:bc:59:8f:8e:74:a3:b7:97:2e:fa:08: d8:5b:7e:02:f7:22:a1:04:55:f2:9b:ba:36:fa:e7: 15:44:7d:3b:95:de:2f:d6:3e:a1:b7:25:47:e8:31: c9:35:99:44:2a:ce:0b:fe:6b:74:29:f0:ff:19:85: ba:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:03:A2:FE:F1:73:96:FA:6A:07:04:4A:E7:EE:8B:5E:61:AA:04:3D X509v3 Authority Key Identifier: keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:6c:09:3c:1f:3c:b5:33:bb:7d:07:2c:32:92:64:46:f3:9c: fe:b1:ff:85:e3:1b:b2:af:1d:93:3e:d7:cf:4f:29:f2:31:d8: ec:16:6d:cb:8a:6c:7b:36:b5:d5:79:2f:05:f9:3a:9c:38:d8: 3e:f5:9f:7f:57:7e:ae:14:bf:b3:23:14:39:c5:6e:92:03:37: f7:f4:83:59:8a:a3:44:69:2e:9f:a3:7f:86:be:e0:58:6d:85: 0d:d7:d0:a9:a8:24:3e:eb:88:5b:81:d3:58:ec:9a:c9:d6:78: ae:de:c0:73:54:90:72:3a:0d:84:3f:e4:3f:15:0c:26:be:00: ad:f0:21:25:93:69:87:2c:5e:59:1b:48:fc:6e:73:1c:47:7e: a0:e0:42:c7:9d:08:8a:15:fd:5c:09:f7:d8:de:0e:a8:8e:27: 77:17:8e:b1:83:c7:ee:2e:50:b4:42:3d:e9:0f:48:05:66:ef: b1:20:ab:c8:38:1d:00:22:c1:19:1c:07:6a:34:c0:7a:23:88: 9b:f7:1f:43:c8:50:9f:af:5a:d0:42:db:6b:14:b0:d9:d1:cf: 69:be:21:61:20:85:e0:29:26:d2:b6:fc:f7:3e:c1:a0:dd:71: fb:21:ce:25:45:84:51:1a:35:c9:80:af:dc:ab:a3:3d:1e:fa: db:32:f3:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2 MUY4MkE5NTcwHhcNMjUxMjE4MTUzMTIwWhcNMjUxMjI1MTUzMTIwWjAYMRYwFAYD VQQDDA02OTQ0MWU0OC05NGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IhVcxDr7emvzMkHQBgHNRf0SsDcC48RuLg7zJaQE0AYlcTvqdCNNE8IBEad h4XAYaujmv+QA6NWv6aOgQMwEYjC9f0VmIjtnyh1nJAlPYTUZ86Vwf7b1C7F4G+U Sglvu/8fwVB2R/hmDP51rNScrtx4yDz/Rq22RkeZiU/4Zj5luocdncQQUFTq19Tf QCmZS4b8MWWicb3ZWeX0qrpbsNak72ktJmStpodGSj1O7S5izuJKTzX1md4EZK+8 kSmXcu50s4wBvFmPjnSjt5cu+gjYW34C9yKhBFXym7o2+ucVRH07ld4v1j6htyVH 6DHJNZlEKs4L/mt0KfD/GYW6cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEADov7x c5b6agcESufui15hqgQ9MB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9CN0Y4MTk1ODMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJ M09XUTk4U0pCM2xoLUNxVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBibAk8Hzy1M7t9BywykmRG85z+sf+F4xuyrx2TPtfPTynyMdjsFm3L imx7NrXVeS8F+TqcONg+9Z9/V36uFL+zIxQ5xW6SAzf39INZiqNEaS6fo3+GvuBY bYUN19CpqCQ+64hbgdNY7JrJ1niu3sBzVJByOg2EP+Q/FQwmvgCt8CElk2mHLF5Z G0j8bnMcR36g4ELHnQiKFf1cCffY3g6ojid3F46xg8fuLlC0Qj3pD0gFZu+xIKvI OB0AIsEZHAdqNMB6I4ib9x9DyFCfr1rQQttrFLDZ0c9pviFhIIXgKSbStvz3PsGg 3XH7Ic4lRYRRGjXJgK/cq6M9HvrbMvPq -----END CERTIFICATE-----Generated at Sat Dec 20 13:57:38 2025 by rpki-client