This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft File: c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json) Hash identifier: 2mBENYDc3Z20QFnRS03X7RPhY82ZCVnyuRtDrWGu7rc= Subject key identifier: 4B:75:5D:15:9A:4C:75:06:E0:26:FF:A1:08:07:16:37:D5:32:B8:49 Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Certificate serial: 084F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft Manifest number: 14E2 Signing time: Mon 22 Dec 2025 17:57:11 +0000 Manifest this update: Mon 22 Dec 2025 17:57:11 +0000 Manifest next update: Mon 29 Dec 2025 17:57:11 +0000 Files and hashes: 1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: XP+FTqktJf2lfDIjDz+gS9Pdb0eSqYdz6F/Jl6DruMs=) 2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: Wy656K9y8HRrMZ3s/WXbZct5wLSLzkShWRKdtdLgnAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2127 (0x84f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Validity Not Before: Dec 22 17:57:11 2025 GMT Not After : Dec 29 17:57:11 2025 GMT Subject: CN=69498677-d421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b9:18:4b:ca:fd:95:13:a4:f6:61:3c:c8:ca: 0a:14:c0:20:a1:61:e6:f3:37:43:b0:f6:c6:cb:dd: e1:f0:55:75:16:52:09:2c:37:c8:de:73:4c:be:9a: 2a:78:d1:e6:23:ae:30:34:fd:71:17:fb:ce:20:64: 8f:ae:d4:5e:23:d6:78:0c:43:2c:c5:86:ac:45:20: 4e:7a:88:cf:65:d3:04:dd:99:5d:03:ad:b8:e5:24: 73:2f:4c:23:aa:43:8e:19:36:47:32:df:f7:78:7d: 59:6a:7d:ef:09:b1:36:b2:99:0d:de:cf:7f:b9:f8: ac:58:89:ec:12:44:a8:99:c5:9c:83:20:e9:f2:17: 11:01:74:de:73:24:8e:fb:b1:25:59:42:13:30:c4: a9:2b:4e:9b:06:96:1c:87:19:89:83:af:e0:dd:ae: 12:d9:16:42:31:38:a9:03:87:a2:a1:84:e0:ea:24: 5e:23:4d:90:e4:5f:c9:a0:ae:12:f8:1a:5f:5d:d0: 8e:1e:09:94:18:47:7f:03:92:18:8a:7f:1a:d9:99: 7a:5c:c4:15:c3:62:6a:4b:ac:e3:92:88:23:00:d0: 3d:f6:e5:f1:eb:c0:52:af:d8:34:ff:3f:ea:d9:ec: 9d:28:50:f5:da:f4:c3:4b:05:01:37:71:f8:e9:6e: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:75:5D:15:9A:4C:75:06:E0:26:FF:A1:08:07:16:37:D5:32:B8:49 X509v3 Authority Key Identifier: keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a0:5f:ba:78:de:e1:9c:55:ae:06:55:ac:20:f5:8f:8a:ab: a9:46:70:c9:16:c8:4c:08:16:2c:e6:2b:59:79:92:32:58:17: 0d:97:fc:dc:e5:07:61:74:99:65:4d:c0:9f:a7:6d:f6:0c:d0: f6:3c:02:d2:a2:ad:e4:9b:f5:58:e1:5b:f6:a4:68:d8:7e:6d: d6:f1:93:2f:27:77:df:8f:c2:5f:20:5c:19:5a:6e:72:12:71: ca:2b:27:0a:96:dc:1f:49:0c:0e:9c:04:94:54:da:fd:a5:b6: 8e:c5:a7:9c:c4:15:32:6c:a7:14:1a:e8:1e:3e:23:36:ae:48: 4a:5f:a2:60:8e:47:4e:5d:0c:66:b0:3d:a2:83:42:33:b8:ed: 7f:e8:6f:c5:60:90:f8:ed:85:3a:42:d8:75:72:4e:53:3e:d0: 54:8b:f4:16:77:87:1a:3a:9b:67:48:19:c4:e9:c3:6c:6c:06: 0f:a8:02:fe:ee:9c:a5:96:fe:d2:b2:1b:e6:31:f0:ec:d7:a3: d3:17:0c:15:72:21:5b:ba:55:37:bf:25:a5:2f:a0:16:86:af: 4d:7c:7f:16:e0:b2:bb:7c:04:9e:89:89:36:c4:f3:03:a2:0d: f5:ef:80:6b:a3:31:6d:0e:cf:66:d4:db:ec:c5:43:ea:11:dc: 1b:20:fa:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz NzAwMTBDNTkwHhcNMjUxMjIyMTc1NzExWhcNMjUxMjI5MTc1NzExWjAYMRYwFAYD VQQDDA02OTQ5ODY3Ny1kNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbkYS8r9lROk9mE8yMoKFMAgoWHm8zdDsPbGy93h8FV1FlIJLDfI3nNMvpoq eNHmI64wNP1xF/vOIGSPrtReI9Z4DEMsxYasRSBOeojPZdME3ZldA6245SRzL0wj qkOOGTZHMt/3eH1Zan3vCbE2spkN3s9/ufisWInsEkSomcWcgyDp8hcRAXTecySO +7ElWUITMMSpK06bBpYchxmJg6/g3a4S2RZCMTipA4eioYTg6iReI02Q5F/JoK4S +BpfXdCOHgmUGEd/A5IYin8a2Zl6XMQVw2JqS6zjkogjANA99uXx68BSr9g0/z/q 2eydKFD12vTDSwUBN3H46W7/SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEt1XRWa THUG4Cb/oQgHFjfVMrhJMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEt TDlkUjVPQlF3NjAzQUJERmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWoF+6eN7hnFWuBlWsIPWPiqupRnDJFshMCBYs5itZeZIyWBcNl/zc 5QdhdJllTcCfp232DND2PALSoq3km/VY4Vv2pGjYfm3W8ZMvJ3ffj8JfIFwZWm5y EnHKKycKltwfSQwOnASUVNr9pbaOxaecxBUybKcUGugePiM2rkhKX6JgjkdOXQxm sD2ig0IzuO1/6G/FYJD47YU6Qth1ck5TPtBUi/QWd4caOptnSBnE6cNsbAYPqAL+ 7pyllv7SshvmMfDs16PTFwwVciFbulU3vyWlL6AWhq9NfH8W4LK7fASeiYk2xPMD og3174BrozFtDs9m1NvsxUPqEdwbIPr5 -----END CERTIFICATE-----Generated at Wed Dec 24 14:48:00 2025 by rpki-client