This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json) Hash identifier: CFsGjFl1iU1TOhO59TLZQW6gyElDsONRioMHen9f7gQ= Subject key identifier: 86:0E:B3:09:9D:EF:EF:9E:1D:CB:B8:23:53:A1:48:88:C3:E6:4B:F6 Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Certificate serial: 084D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft Manifest number: 0840 Signing time: Sat 20 Dec 2025 20:12:22 +0000 Manifest this update: Sat 20 Dec 2025 20:12:21 +0000 Manifest next update: Sat 27 Dec 2025 20:12:21 +0000 Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: IS7hraei5XEKegVxckbFNC4+3K2I6pZjeqixMReClQk=) 2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: A+8vz2aU+wC552KBg2dFDTbTWJJd1ELKdd2raygWGUA=) 3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Vo3PCsdHmPC7RHzYgOW5sXRasLzQm3wjobK8wMgaD5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2125 (0x84d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81 Validity Not Before: Dec 20 20:12:21 2025 GMT Not After : Dec 27 20:12:21 2025 GMT Subject: CN=69470325-56b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:63:58:18:c1:bf:74:7b:41:c4:e2:f1:d4: c3:01:db:9d:af:96:60:d7:34:e9:12:8f:d1:fb:cb: a6:36:7e:20:89:80:e0:c3:49:ba:7c:17:03:12:f6: a7:41:74:e1:9b:31:95:db:06:ad:86:5c:52:b9:ed: 0b:de:78:a7:40:bf:fb:f2:fc:65:ac:84:b8:e5:8d: ca:a5:69:d8:02:01:d1:f6:0e:f3:e4:7d:bc:24:42: e7:db:39:db:2f:de:14:f5:6e:e7:a2:03:ef:0c:ac: c9:71:88:73:6f:e3:33:6a:86:7a:7a:fb:76:4a:6f: 08:ba:7d:60:ff:b7:84:00:70:9a:ee:d1:d8:1e:23: 0c:48:89:22:d1:71:c2:a4:eb:7e:c3:01:52:10:24: 63:5d:92:69:fb:2a:5d:24:5b:40:02:3b:c6:7e:43: cb:a7:7f:f3:56:55:8d:ad:41:6f:22:3f:a9:d9:35: 1f:44:06:13:9e:8d:c9:30:f1:73:21:c6:e6:3b:02: 3e:f7:41:ea:db:57:64:97:b0:03:99:b5:d7:ac:19: 59:fe:a7:d5:21:1a:52:29:01:fc:4a:f0:2d:fd:95: fd:8f:75:ce:1d:1b:6b:11:67:b0:85:e2:04:b9:d8: 3b:84:e9:c8:bd:fa:ba:ba:57:95:42:36:ad:06:5e: 46:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0E:B3:09:9D:EF:EF:9E:1D:CB:B8:23:53:A1:48:88:C3:E6:4B:F6 X509v3 Authority Key Identifier: keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:bc:04:cc:83:1e:2a:76:ae:9c:63:14:24:c5:86:a0:18:f3: 72:5c:c3:ba:78:0b:df:14:82:63:cc:3a:81:df:36:2a:a8:cc: c3:55:4d:4d:cd:3a:87:01:ac:e5:be:5a:5f:75:80:3a:b3:65: ac:fa:6e:32:e4:ae:8e:c7:97:89:f1:a7:8f:c1:55:f2:64:3b: c3:18:68:98:04:2e:c3:ac:1f:b2:ba:34:3e:db:e7:c3:05:7a: fa:c2:c6:d6:4b:45:f2:0d:be:8a:6b:af:97:49:e1:54:1f:f7: 55:5d:27:86:17:ae:79:82:6a:03:2b:1f:f6:ff:09:64:23:96: 01:80:aa:69:e1:6c:76:d6:fc:5e:06:e4:74:fb:dc:0e:de:eb: c4:48:74:12:11:dd:a6:49:cf:d9:57:14:54:06:55:09:e5:9a: 8b:26:67:86:a2:39:29:60:67:07:73:36:87:2f:7b:bd:cb:a7: f5:a7:04:3d:7a:41:25:c4:97:27:84:db:c9:53:f3:a4:3a:b6: 80:8e:0c:85:0b:09:89:57:9c:2b:5c:7b:2c:0b:5d:6c:fe:d8: 8a:81:53:14:3f:a5:da:a0:65:86:54:9d:80:5c:31:f0:e9:fc: 1c:a5:b7:63:10:30:b4:cc:0c:3c:ca:67:5e:2c:28:52:49:3a: 05:7e:e6:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2 RkE2MzRDODEwHhcNMjUxMjIwMjAxMjIxWhcNMjUxMjI3MjAxMjIxWjAYMRYwFAYD VQQDDA02OTQ3MDMyNS01NmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqC1jWBjBv3R7QcTi8dTDAdudr5Zg1zTpEo/R+8umNn4giYDgw0m6fBcDEvan QXThmzGV2wathlxSue0L3ninQL/78vxlrIS45Y3KpWnYAgHR9g7z5H28JELn2znb L94U9W7nogPvDKzJcYhzb+MzaoZ6evt2Sm8Iun1g/7eEAHCa7tHYHiMMSIki0XHC pOt+wwFSECRjXZJp+ypdJFtAAjvGfkPLp3/zVlWNrUFvIj+p2TUfRAYTno3JMPFz IcbmOwI+90Hq21dkl7ADmbXXrBlZ/qfVIRpSKQH8SvAt/ZX9j3XOHRtrEWewheIE udg7hOnIvfq6uleVQjatBl5G2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYOswmd 7++eHcu4I1OhSIjD5kv2MB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz SDVMZXhyeVFuYnh2cGpUSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvvATMgx4qdq6cYxQkxYagGPNyXMO6eAvfFIJjzDqB3zYqqMzDVU1N zTqHAazlvlpfdYA6s2Ws+m4y5K6Ox5eJ8aePwVXyZDvDGGiYBC7DrB+yujQ+2+fD BXr6wsbWS0XyDb6Ka6+XSeFUH/dVXSeGF655gmoDKx/2/wlkI5YBgKpp4Wx21vxe BuR0+9wO3uvESHQSEd2mSc/ZVxRUBlUJ5ZqLJmeGojkpYGcHczaHL3u9y6f1pwQ9 ekElxJcnhNvJU/OkOraAjgyFCwmJV5wrXHssC11s/tiKgVMUP6XaoGWGVJ2AXDHw 6fwcpbdjEDC0zAw8ymdeLChSSToFfuYC -----END CERTIFICATE-----Generated at Sun Dec 21 13:41:41 2025 by rpki-client