This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft File: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json) Hash identifier: DorEZD5PbjMMzCE/E/fDiJjILAThNL5TDGqQi+HWDpU= Subject key identifier: 22:5D:BC:B5:1F:D5:2C:A4:D3:D3:FF:A3:63:24:FC:EF:FC:7A:80:AF Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 Certificate issuer: /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft Manifest number: C9 Signing time: Tue 23 Dec 2025 04:48:07 +0000 Manifest this update: Tue 23 Dec 2025 04:48:07 +0000 Manifest next update: Tue 30 Dec 2025 04:48:07 +0000 Files and hashes: 1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: eFmg1bvIlV2HOsIHcGk0ewuteErVAnkjfz8xXE7sehY=) 2: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: e+4VvyTw5EiL9s2wDbpueyf6WrUVOXMUrF9XKmOAfHk=) 3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: MXLScbZrX+ixKdw+PkZ2ou8n1e3yrgCRyU1xYRmvDJE=) 4: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 8Y7BjEQwwth3UdSD7/xgkj96IaOOzZmnkVz9bWZwiMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Validity Not Before: Dec 23 04:48:07 2025 GMT Not After : Dec 30 04:48:07 2025 GMT Subject: CN=694a1f07-fc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:e9:ab:ea:a7:69:2f:9d:61:07:76:f1:6a: 4e:fb:ff:bb:a6:ea:bd:63:f9:ce:22:12:6d:04:41: 47:05:ce:ab:08:3c:69:e9:57:28:dd:72:97:74:70: 87:02:fc:08:20:01:8c:39:97:49:ca:d0:11:29:a0: b9:20:ee:a6:d8:fc:be:f4:a9:83:bb:44:a0:cd:b6: e2:8f:47:61:df:2f:39:0d:d9:bd:f4:da:52:41:10: 26:72:f4:ee:3d:bc:7f:79:5d:9a:96:e2:b9:56:45: 12:2b:85:de:54:55:27:b3:ef:30:4d:78:df:9f:09: 94:a5:a7:98:24:92:e8:57:c1:64:5e:b5:9d:1c:64: 58:45:7d:dc:94:83:ef:05:fd:6c:7a:b8:91:63:a5: 5f:d7:c7:6e:4c:d2:93:78:50:9e:15:aa:e2:f8:a8: 4e:75:4b:f7:c8:a5:c5:e0:76:7c:2f:3d:03:6b:dd: 7f:4c:f5:8f:66:1e:8b:2a:fd:69:d4:dc:d6:01:6d: c4:22:87:3a:de:9e:ee:dd:37:7f:b9:20:82:23:f3: 66:ec:44:7e:1f:67:98:cc:81:0c:f0:30:4a:31:ba: cc:dd:6d:81:05:d9:6e:d4:d1:f6:7c:e7:91:45:46: 9f:40:2b:f7:62:c0:44:34:aa:6b:78:2a:b4:be:89: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5D:BC:B5:1F:D5:2C:A4:D3:D3:FF:A3:63:24:FC:EF:FC:7A:80:AF X509v3 Authority Key Identifier: keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:5d:85:7c:7a:aa:07:76:92:4f:84:cc:a1:a9:cd:8a:6d:86: 81:35:d8:04:06:0c:ca:62:b4:24:b8:bb:9e:b6:54:90:36:3d: 61:72:85:c9:82:09:b4:0b:d0:cd:64:49:e3:6e:c9:cc:f8:b7: d5:4d:ab:36:52:56:eb:81:d8:df:06:25:93:88:14:88:78:bf: c7:f4:dd:26:1a:f3:de:ef:9c:5b:ef:de:dc:e5:52:0a:dc:c8: 2b:57:49:73:e6:db:79:02:23:be:db:4e:75:9c:59:ea:cf:ce: d9:b1:07:0f:d5:05:ac:3e:5e:94:8b:66:a4:57:f6:1d:32:2b: a9:bb:3b:a8:9b:f3:7a:95:c6:0c:74:72:13:8e:88:91:20:01: 37:8e:98:5a:e8:d9:f6:3f:f7:1f:f0:94:9e:f9:85:b2:01:95: f3:72:b3:68:84:13:22:92:53:58:e5:ec:b5:19:76:f2:7b:e5: 08:86:d1:5d:91:1b:09:41:a0:39:29:cb:6a:99:fd:31:83:cc: d5:c4:00:95:eb:79:ab:e5:0f:c8:e2:45:e0:30:85:5f:e6:f5: a7:bd:09:19:dd:b2:13:6e:d4:71:39:77:aa:eb:92:66:69:6b: b6:90:56:b5:91:5b:b0:e9:91:bc:42:ca:75:f6:c3:7e:c0:a0: 71:8a:22:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMkExMTAvBgNVBAUTKEVDRkYzMjQ0MEM0RUUxRDI3OTQzQ0RCNzJBN0Q0OTEw NjM0MDJERjEwHhcNMjUxMjIzMDQ0ODA3WhcNMjUxMjMwMDQ0ODA3WjAYMRYwFAYD VQQDDA02OTRhMWYwNy1mYzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGrpq+qnaS+dYQd28WpO+/+7puq9Y/nOIhJtBEFHBc6rCDxp6Vco3XKXdHCH AvwIIAGMOZdJytARKaC5IO6m2Py+9KmDu0Sgzbbij0dh3y85Ddm99NpSQRAmcvTu Pbx/eV2aluK5VkUSK4XeVFUns+8wTXjfnwmUpaeYJJLoV8FkXrWdHGRYRX3clIPv Bf1seriRY6Vf18duTNKTeFCeFari+KhOdUv3yKXF4HZ8Lz0Da91/TPWPZh6LKv1p 1NzWAW3EIoc63p7u3Td/uSCCI/Nm7ER+H2eYzIEM8DBKMbrM3W2BBdlu1NH2fOeR RUafQCv3YsBENKpreCq0volJgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJdvLUf 1Syk09P/o2Mk/O/8eoCvMB8GA1UdIwQYMBaAFOz/MkQMTuHSeUPNtyp9SRBjQC3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9COUQ0Q0Y0MkFF M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRkSjVRODIzS24xSkVHTkFM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdQOHlSQXhPNGRKNVE4MjNLbjFKRUdOQUxmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyQS9COUQ0Q0Y0MkFFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRk SjVRODIzS24xSkVHTkFMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABXYV8eqoHdpJPhMyhqc2KbYaBNdgEBgzKYrQkuLuetlSQNj1hcoXJ ggm0C9DNZEnjbsnM+LfVTas2UlbrgdjfBiWTiBSIeL/H9N0mGvPe75xb797c5VIK 3MgrV0lz5tt5AiO+2051nFnqz87ZsQcP1QWsPl6Ui2akV/YdMiupuzuom/N6lcYM dHITjoiRIAE3jpha6Nn2P/cf8JSe+YWyAZXzcrNohBMiklNY5ey1GXbye+UIhtFd kRsJQaA5Kctqmf0xg8zVxACV63mr5Q/I4kXgMIVf5vWnvQkZ3bITbtRxOXeq65Jm aWu2kFa1kVuw6ZG8Qsp19sN+wKBxiiLG -----END CERTIFICATE-----Generated at Tue Dec 23 16:26:26 2025 by rpki-client