This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json) Hash identifier: BxqOPNIT0Xk8dorEEKsVnfSKN87N47B924RmUDa+kIk= Subject key identifier: 5A:62:DB:29:43:A1:6C:39:9D:CF:F5:1C:1C:79:C5:8B:4C:26:A0:D0 Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Certificate serial: 0AC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft Manifest number: 0AB1 Signing time: Sun 14 Dec 2025 19:02:18 +0000 Manifest this update: Sun 14 Dec 2025 19:02:18 +0000 Manifest next update: Sun 21 Dec 2025 19:02:18 +0000 Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: f4cQDwz2FE8bTaHWgmrK3b4149VT+KynLRynZIRn4H8=) 2: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: hBn0Qcv2Wj2OFO1BXPRpxsQ8U4zswJ2i/kTyMm1Zr1Y=) 3: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: horX5P75gumDA8WyF+ghzmHcSe0CjNBHMfSInHVl7ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2758 (0xac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Validity Not Before: Dec 14 19:02:18 2025 GMT Not After : Dec 21 19:02:18 2025 GMT Subject: CN=693f09ba-5b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:96:e2:22:5a:8d:3b:09:2c:93:df:a1:8f: d1:79:50:00:09:53:a2:ab:d4:04:73:b5:ca:45:11: 69:64:29:94:43:47:0d:7e:95:18:3d:50:d5:4d:19: f0:07:73:2c:da:70:6c:c3:fc:55:cb:a2:31:07:7f: 5f:61:63:21:70:31:71:38:13:52:ff:1e:56:73:4e: 9f:85:98:9d:1d:37:76:bc:80:e0:1a:d0:46:4c:f2: a1:e8:1e:5c:cb:9c:eb:78:65:1e:c7:5e:ea:4d:51: 76:5f:39:67:36:37:ab:04:16:dc:29:32:8d:bd:c2: 43:2c:99:d4:87:16:3c:46:c1:e1:3b:8c:44:71:b8: 44:ee:1d:71:79:85:ee:e8:11:69:70:ab:33:67:07: df:f9:43:7e:b9:97:5f:5a:47:3d:71:25:69:87:65: f0:3d:73:49:fd:20:ed:b4:b8:9c:0a:03:4d:04:ee: 7b:7d:52:4a:86:3c:d5:f4:9e:e7:eb:fe:68:f1:3d: 8b:ef:78:3d:e3:f3:14:6c:0d:7f:12:63:ec:4d:0f: a2:a3:a5:1c:a1:3d:6c:2c:e4:4c:f2:d2:ab:de:8e: ee:ca:d5:cd:f4:2c:7e:95:8b:92:de:5f:32:b0:23: e9:34:f2:09:20:43:79:00:39:cd:3a:96:00:e9:58: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:62:DB:29:43:A1:6C:39:9D:CF:F5:1C:1C:79:C5:8B:4C:26:A0:D0 X509v3 Authority Key Identifier: keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ad:e6:c0:5c:97:5a:9d:fb:1f:de:f1:0e:7a:03:49:51:66: 29:8a:80:6e:04:93:94:5c:ae:9e:8d:62:ab:da:d5:a1:af:17: 08:cd:ce:01:4b:ca:b9:27:3a:7b:62:2b:c0:fc:ca:15:e1:7c: de:34:7d:e0:29:2d:f6:18:ea:b2:cd:16:45:25:06:b8:f5:e1: f0:95:25:b8:39:80:2b:9c:a6:44:c1:9d:d5:c5:2c:b4:41:c8: f2:7f:37:07:53:eb:bb:a5:49:05:e4:d9:3b:de:c3:41:28:c6: a7:ca:73:24:d2:33:1b:e1:9c:7f:0e:e1:45:f6:56:1a:73:58: bd:a8:7d:1b:a5:1a:46:a4:9c:b4:10:8f:1f:bc:b6:02:b6:fd: 51:a1:f1:7c:7c:8f:cb:24:9f:f8:6f:56:28:cb:a9:be:96:93: c8:26:e0:71:40:0b:b1:fb:7d:0a:69:74:7b:be:1a:51:f1:e9: 6e:44:37:58:09:a2:9a:bf:42:e3:c3:1b:a8:7e:e9:ae:87:f6: eb:e0:89:94:3f:c4:f4:25:8c:68:f4:7b:39:91:a8:d5:15:d1: 47:2d:b0:5a:8a:69:bc:75:fc:28:c6:a8:63:cc:b0:76:bf:2f: e4:19:56:f8:69:be:11:a7:84:6f:c0:61:a9:7f:53:c6:7b:64: cc:82:34:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2 RDUzNzhGMzMwHhcNMjUxMjE0MTkwMjE4WhcNMjUxMjIxMTkwMjE4WjAYMRYwFAYD VQQDDA02OTNmMDliYS01YjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwuW4iJajTsJLJPfoY/ReVAACVOiq9QEc7XKRRFpZCmUQ0cNfpUYPVDVTRnw B3Ms2nBsw/xVy6IxB39fYWMhcDFxOBNS/x5Wc06fhZidHTd2vIDgGtBGTPKh6B5c y5zreGUex17qTVF2XzlnNjerBBbcKTKNvcJDLJnUhxY8RsHhO4xEcbhE7h1xeYXu 6BFpcKszZwff+UN+uZdfWkc9cSVph2XwPXNJ/SDttLicCgNNBO57fVJKhjzV9J7n 6/5o8T2L73g94/MUbA1/EmPsTQ+io6UcoT1sLORM8tKr3o7uytXN9Cx+lYuS3l8y sCPpNPIJIEN5ADnNOpYA6VheBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpi2ylD oWw5nc/1HBx5xYtMJqDQMB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5 QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDNDQi9BOUE0MzlGQzY5QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1Vs YkpzUDNkYTNGSlp0VTNqek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCurebAXJdanfsf3vEOegNJUWYpioBuBJOUXK6ejWKr2tWhrxcIzc4B S8q5Jzp7YivA/MoV4XzeNH3gKS32GOqyzRZFJQa49eHwlSW4OYArnKZEwZ3VxSy0 QcjyfzcHU+u7pUkF5Nk73sNBKManynMk0jMb4Zx/DuFF9lYac1i9qH0bpRpGpJy0 EI8fvLYCtv1RofF8fI/LJJ/4b1Yoy6m+lpPIJuBxQAux+30KaXR7vhpR8eluRDdY CaKav0Ljwxuofumuh/br4ImUP8T0JYxo9Hs5kajVFdFHLbBaimm8dfwoxqhjzLB2 vy/kGVb4ab4Rp4RvwGGpf1PGe2TMgjRg -----END CERTIFICATE-----Generated at Mon Dec 15 18:21:13 2025 by rpki-client