This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json) Hash identifier: kyt6BLJ39tpYaarsgZMD43F1BQYMZNEnetJXQfcOP98= Subject key identifier: CC:1D:76:69:C1:E3:21:70:4B:3B:CB:66:52:34:18:EE:90:A9:A7:AC Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft Manifest number: 0CAD Signing time: Mon 22 Dec 2025 17:56:00 +0000 Manifest this update: Mon 22 Dec 2025 17:56:00 +0000 Manifest next update: Mon 29 Dec 2025 17:56:00 +0000 Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: oDGPwx7jauz815+BxqFDLLNO2AmRk19TPPqYcDCmDbE=) 2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Validity Not Before: Dec 22 17:56:00 2025 GMT Not After : Dec 29 17:56:00 2025 GMT Subject: CN=69498630-8978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:dc:19:0e:5a:a2:ae:d0:a2:9c:68:df:4c: fc:3c:c3:45:5a:5f:22:9d:aa:5d:7f:09:6f:2a:4d: 00:07:a5:b7:5d:e5:6e:24:a4:38:3d:7c:c5:4c:db: ef:53:30:ca:25:05:ec:cc:f1:22:2d:b9:24:00:0c: 42:d0:b9:fd:27:18:ef:c5:36:21:cf:8b:c0:7e:d6: ce:34:4e:09:e0:cd:60:81:1b:10:d0:30:9e:65:ec: 8c:c2:20:d4:a1:0f:2b:1b:1e:f3:8c:1a:45:b2:e5: f9:c3:b0:df:3a:09:c7:a4:41:ec:be:c1:ac:c1:52: 03:3e:75:c8:70:7a:cc:2b:5d:ee:76:0b:be:89:48: 07:1a:a5:2c:56:5d:9c:69:8c:84:f0:ef:e0:ab:58: 56:e7:3c:00:98:71:43:4f:3a:86:f6:db:c2:8a:52: 7f:82:ad:d7:1c:c7:a8:f7:af:14:d2:ad:a3:c7:87: 5d:97:78:74:1a:1c:4f:93:08:eb:94:ea:b5:b0:06: 1a:cd:da:16:28:ac:e8:75:91:39:00:68:d0:9a:56: 4f:b0:bd:b1:e5:fc:00:06:04:24:5a:b6:1e:d0:79: 23:5e:be:92:e9:4d:92:36:3b:4c:c9:14:da:01:d7: a2:50:da:24:10:9c:75:6a:b9:70:59:30:6e:fc:c1: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1D:76:69:C1:E3:21:70:4B:3B:CB:66:52:34:18:EE:90:A9:A7:AC X509v3 Authority Key Identifier: keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:e4:c2:c4:50:33:a4:d3:2a:fe:bc:ec:1c:6a:08:7b:b4:c1: f1:9b:e3:6d:29:71:9c:19:01:f2:a1:38:31:04:91:12:6e:79: 88:44:ae:18:90:27:ee:d8:17:f4:ed:a8:d8:39:2a:09:00:7c: e1:10:08:da:a9:04:69:77:2b:ac:e7:ec:85:1f:e9:1c:1a:ff: 7a:1c:79:8c:7d:30:fe:93:04:ac:b3:aa:d9:54:c7:76:9a:e7: 9b:01:db:50:0d:64:f5:fc:d2:76:a0:d8:dc:66:2e:dc:e2:5e: fe:74:30:90:65:99:72:1c:95:ce:8e:4f:6f:b3:b5:2f:f6:cf: 01:8a:a1:c6:bf:b8:c1:4a:21:2b:74:d9:1c:96:5b:e9:53:97: 2b:9e:24:27:06:dc:d4:42:9a:f3:30:8b:e5:6d:04:35:6c:10: 9a:db:cf:55:78:45:a6:3b:de:70:4d:5a:df:92:f9:02:0e:67: 7c:36:46:70:7e:a1:e8:1d:a9:59:7c:14:3f:76:4f:b2:dd:04: 94:07:69:64:89:73:e1:6d:a3:21:1b:6b:f7:a0:07:0c:5d:2d: 24:0e:c5:06:f4:ab:8a:a4:f2:99:02:96:ab:74:c8:fe:d2:72: 40:33:79:9c:ae:a6:97:4b:10:f9:66:a1:03:dc:50:4b:b0:36: b1:ea:3c:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND ODg2MUVGOTcwHhcNMjUxMjIyMTc1NjAwWhcNMjUxMjI5MTc1NjAwWjAYMRYwFAYD VQQDDA02OTQ5ODYzMC04OTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrTcGQ5aoq7Qopxo30z8PMNFWl8inapdfwlvKk0AB6W3XeVuJKQ4PXzFTNvv UzDKJQXszPEiLbkkAAxC0Ln9JxjvxTYhz4vAftbONE4J4M1ggRsQ0DCeZeyMwiDU oQ8rGx7zjBpFsuX5w7DfOgnHpEHsvsGswVIDPnXIcHrMK13udgu+iUgHGqUsVl2c aYyE8O/gq1hW5zwAmHFDTzqG9tvCilJ/gq3XHMeo968U0q2jx4ddl3h0GhxPkwjr lOq1sAYazdoWKKzodZE5AGjQmlZPsL2x5fwABgQkWrYe0HkjXr6S6U2SNjtMyRTa AdeiUNokEJx1arlwWTBu/MGA5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwddmnB 4yFwSzvLZlI0GO6QqaesMB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1 RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF YmREVm9ad2FGLVBJaGg3NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl5MLEUDOk0yr+vOwcagh7tMHxm+NtKXGcGQHyoTgxBJESbnmIRK4Y kCfu2Bf07ajYOSoJAHzhEAjaqQRpdyus5+yFH+kcGv96HHmMfTD+kwSss6rZVMd2 muebAdtQDWT1/NJ2oNjcZi7c4l7+dDCQZZlyHJXOjk9vs7Uv9s8BiqHGv7jBSiEr dNkcllvpU5crniQnBtzUQprzMIvlbQQ1bBCa289VeEWmO95wTVrfkvkCDmd8NkZw fqHoHalZfBQ/dk+y3QSUB2lkiXPhbaMhG2v3oAcMXS0kDsUG9KuKpPKZApardMj+ 0nJAM3mcrqaXSxD5ZqED3FBLsDax6jw4 -----END CERTIFICATE-----Generated at Wed Dec 24 17:34:58 2025 by rpki-client