This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft File: 7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json) Hash identifier: VYG1nCWOUgBB5S5XwdnIpPW7p3K3fstRfmQn0mS1Hdc= Subject key identifier: CD:93:6C:38:40:B4:03:EB:50:1C:86:69:A5:5F:BC:82:3B:4B:67:1B Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F Certificate serial: 3559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft Manifest number: 351D Signing time: Sat 20 Dec 2025 14:47:49 +0000 Manifest this update: Sat 20 Dec 2025 14:47:48 +0000 Manifest next update: Sat 27 Dec 2025 14:47:48 +0000 Files and hashes: 1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: ffOn8LlRwYjhyx4ryJD63Z4YlVRyD9s3bjWwiTQW3q0=) 2: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: 7ZkKrwIf5dxU1AyQHdEtx/cZNmt12RU0pVuLQbnEwD8=) 3: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: /XOWg1DL5Ca4WTABh7nowkgqWfXA9qIHVM17A2ry+Ak=) 4: 2A73A3403A0711F081048A4EC4F9AE02.roa (hash: Sb9dKZUra617yJWr0DgG7F51M0rwa4KtVZlgSlPgYpw=) 5: F026CE74927411EDB020A481C4F9AE02.roa (hash: D3nZr89FC3B/hYB2ABfVDlFpa9Kx2bcJix0bhxq7u3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13657 (0x3559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F Validity Not Before: Dec 20 14:47:48 2025 GMT Not After : Dec 27 14:47:48 2025 GMT Subject: CN=6946b715-3661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:6c:dc:27:b8:0d:11:e4:a9:5f:de:8f:55: 18:ad:f9:31:7c:4c:55:96:eb:c3:94:cf:ea:ee:d2: 27:eb:12:04:6c:c8:9f:11:f3:8a:f9:64:8e:6a:08: 22:0d:b8:77:3f:2b:1f:09:ee:b0:d2:fb:96:76:99: ad:b2:6d:d5:93:7a:24:6f:68:f3:8d:6b:66:85:57: 76:fb:ce:59:8c:35:d2:6b:51:71:c7:b0:b1:f7:2d: 78:a3:f6:54:9c:8c:3b:22:f4:6b:da:a1:da:f4:4d: 1c:d0:a1:88:9c:90:ff:af:8c:94:cb:e0:e5:55:1d: 37:8a:42:d9:68:08:68:e6:97:67:30:f8:49:fd:99: 72:b4:d7:35:82:19:4e:42:7f:4e:04:27:d4:ce:1d: 5d:33:ff:f2:90:63:32:1a:87:4e:22:26:b4:f3:f1: d5:9d:b7:94:59:5c:0a:7e:00:49:4b:ed:d1:0c:fd: b7:4d:73:6c:c3:30:cc:7a:2b:3f:5f:56:e2:60:a4: b2:2c:6f:10:51:1c:f2:3d:d7:de:bb:ec:ff:94:d0: 6c:c1:74:fa:ed:b3:8d:bf:70:2a:c6:cb:6d:51:83: 15:62:0b:b0:a0:c8:e9:55:ef:93:b9:cf:d9:a4:70: bb:7f:dc:01:eb:5a:26:7e:96:8a:9c:a5:98:69:f5: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:93:6C:38:40:B4:03:EB:50:1C:86:69:A5:5F:BC:82:3B:4B:67:1B X509v3 Authority Key Identifier: keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:cb:2b:34:a7:84:87:98:dd:40:cb:a3:61:34:a7:7d:d8:0f: 7b:e6:11:22:73:54:dc:fd:12:81:bf:57:c7:9f:c5:62:3f:10: c4:30:04:79:ed:fe:e4:0e:21:97:58:31:85:de:68:90:66:c7: d0:2b:ca:f3:2d:7a:39:6f:5f:84:73:2b:79:53:7b:ec:87:ed: 5e:97:97:a6:5e:ac:07:e1:a3:e0:6e:2c:1a:07:de:d7:99:e9: bb:b7:7c:3a:d4:ff:02:ef:9c:73:5d:82:17:29:90:77:1e:cd: a1:0d:9f:79:d9:66:cb:2d:00:72:12:61:5e:2f:6d:ee:73:03: 34:67:de:20:5f:cf:49:47:92:23:b3:22:a1:cf:fc:17:6e:35: db:10:07:5f:6c:67:d9:9e:94:55:67:9f:50:ff:a4:01:aa:ae: d0:2d:fd:69:87:a9:74:8c:43:db:64:2f:e6:f6:b1:33:d1:86: 40:65:0e:ff:fd:9d:f4:72:f5:36:eb:e7:0f:7f:32:45:95:ed: 76:f6:3c:34:ab:f3:e3:98:78:f0:3b:16:83:42:11:72:f6:f4: 33:28:3c:db:b6:ed:ea:de:fd:9d:63:5a:2c:77:fa:4c:ab:d1: 53:de:53:f3:fd:37:85:6a:79:56:12:0e:c5:dd:1a:81:1d:47: 7a:d4:f6:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QjcxMTAvBgNVBAUTKEVFQThBRTgwRDcxM0U2QjIyREIwRUM2MDkxNTdGMEM1 OUE1MkZEN0YwHhcNMjUxMjIwMTQ0NzQ4WhcNMjUxMjI3MTQ0NzQ4WjAYMRYwFAYD VQQDDA02OTQ2YjcxNS0zNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSZs3Ce4DRHkqV/ej1UYrfkxfExVluvDlM/q7tIn6xIEbMifEfOK+WSOaggi Dbh3PysfCe6w0vuWdpmtsm3Vk3okb2jzjWtmhVd2+85ZjDXSa1Fxx7Cx9y14o/ZU nIw7IvRr2qHa9E0c0KGInJD/r4yUy+DlVR03ikLZaAho5pdnMPhJ/ZlytNc1ghlO Qn9OBCfUzh1dM//ykGMyGodOIia08/HVnbeUWVwKfgBJS+3RDP23TXNswzDMeis/ X1biYKSyLG8QURzyPdfeu+z/lNBswXT67bONv3AqxsttUYMVYguwoMjpVe+Tuc/Z pHC7f9wB61omfpaKnKWYafU11QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2TbDhA tAPrUByGaaVfvII7S2cbMB8GA1UdIwQYMBaAFO6oroDXE+ayLbDsYJFX8MWaUv1/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCNy8xQzE2NjQxQzFE OTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05jVDVySXRzT3hna1Zmd3hacFNf WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxaXVnTmNUNXJJdHNPeGdrVmZ3eFpwU19YOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCNy8xQzE2NjQxQzFEOTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05jVDVy SXRzT3hna1Zmd3hacFNfWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwyys0p4SHmN1Ay6NhNKd92A975hEic1Tc/RKBv1fHn8ViPxDEMAR5 7f7kDiGXWDGF3miQZsfQK8rzLXo5b1+Ecyt5U3vsh+1el5emXqwH4aPgbiwaB97X mem7t3w61P8C75xzXYIXKZB3Hs2hDZ952WbLLQByEmFeL23ucwM0Z94gX89JR5Ij syKhz/wXbjXbEAdfbGfZnpRVZ59Q/6QBqq7QLf1ph6l0jEPbZC/m9rEz0YZAZQ7/ /Z30cvU26+cPfzJFle129jw0q/PjmHjwOxaDQhFy9vQzKDzbtu3q3v2dY1osd/pM q9FT3lPz/TeFanlWEg7F3RqBHUd61PaW -----END CERTIFICATE-----Generated at Sun Dec 21 16:17:18 2025 by rpki-client