This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json) Hash identifier: zrLnRqpLrRbFL1rffTCbKTzD2DKCYwiboX4xxrxCaYA= Subject key identifier: DC:BA:D3:75:3E:E1:5C:26:00:9A:73:AB:63:65:E3:ED:BF:51:CC:C1 Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft Manifest number: CA Signing time: Sun 21 Dec 2025 04:55:57 +0000 Manifest this update: Sun 21 Dec 2025 04:55:56 +0000 Manifest next update: Sun 28 Dec 2025 04:55:56 +0000 Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: bYRbAqFFXozMY25Jj0ZV2seC6pZgnt+aIxAxX5W5fRk=) 2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: Ac/uc/BnLL5OC5L/oElWDyPEyaU4HTEnF9nDubVxykg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Validity Not Before: Dec 21 04:55:56 2025 GMT Not After : Dec 28 04:55:56 2025 GMT Subject: CN=69477ddd-d26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fc:dc:7a:d5:32:68:42:a6:80:7d:9c:f2:ba: c6:57:41:e2:7e:11:3a:84:04:d7:37:d9:5d:10:49: ad:d0:d8:97:08:e7:8c:d4:57:67:98:0f:0b:0c:30: 9b:ee:c0:44:bf:d7:1b:1e:68:02:bc:a1:c4:52:33: ab:6f:4b:da:9a:d5:2e:0f:35:cb:be:3e:bb:a0:86: d7:2e:5c:c0:a0:4b:79:1c:b3:ab:43:62:f2:ed:41: 39:12:ee:4d:d0:72:ac:ef:c6:25:5b:66:99:74:32: 7a:a0:da:ec:18:63:41:1f:b3:e3:c7:71:1b:ee:ca: 76:dc:73:07:27:0f:e0:72:aa:8e:95:c2:87:72:8b: 81:c0:89:c9:b1:ee:57:f5:1b:07:5c:35:1b:1e:16: 30:b5:84:91:9c:b5:51:dc:39:c1:64:1b:29:9e:8b: 7f:6e:80:c0:88:99:e9:a4:d5:e2:90:ef:66:ca:2a: d4:e9:8f:1f:61:c3:ec:d7:88:85:04:e1:03:10:56: 22:16:70:ff:f8:f8:5b:1b:dd:5a:dc:2a:a7:9f:26: 55:03:4a:ce:80:94:85:2d:61:31:c0:2f:2c:00:38: 5d:98:e9:6e:82:63:55:ac:ea:8e:2b:a9:1c:aa:4e: 85:59:b9:7c:c4:97:94:56:06:31:39:84:8e:6b:9b: ff:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BA:D3:75:3E:E1:5C:26:00:9A:73:AB:63:65:E3:ED:BF:51:CC:C1 X509v3 Authority Key Identifier: keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:17:e8:42:22:b5:f1:be:cd:44:dc:27:97:30:e6:aa:42:68: 0f:05:f8:37:87:4a:8c:4a:19:35:dd:87:46:36:3a:53:18:b2: ca:06:1d:48:65:61:88:4d:63:60:78:24:b7:01:d3:94:06:f4: 60:b2:98:6d:9b:47:1f:ff:2a:c4:33:53:04:c8:f2:8e:7d:a4: 69:94:d9:0b:25:d4:32:c3:8b:ce:d4:df:b1:02:f3:6e:a7:31: e9:de:dc:ab:a4:59:6d:d4:0d:60:cc:0d:f5:20:ca:eb:31:54: 5b:f7:e4:13:79:c3:c1:6a:6e:76:4e:3c:25:90:e6:c4:66:9a: 08:71:43:dd:5b:35:ba:9a:31:ed:6e:4c:eb:b6:bc:30:8a:c4: b4:bb:a3:43:6c:6a:6a:04:33:6a:d0:87:24:c0:68:53:72:88: ca:18:44:70:77:ca:1d:88:57:bb:2f:f0:4b:23:3f:85:72:2f: 7b:b3:6f:8e:8c:73:86:f0:95:3c:29:25:05:3f:97:91:54:5b: fd:75:c7:dc:6e:2e:1b:87:92:75:fa:dc:13:18:21:6d:3e:a1: 03:6d:e4:f5:8a:2b:a4:6d:87:e4:1c:f8:83:fc:c2:56:7f:39: ef:33:f1:ec:58:f2:b6:e3:99:7b:d8:d4:0a:7c:9d:11:08:a4: 68:7a:13:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2MjcxMTAvBgNVBAUTKDA4MEVDMTRBMDAxMjVEOTE0QzdFNjI4NURFOUM1NjY4 OUM1ODcyQTQwHhcNMjUxMjIxMDQ1NTU2WhcNMjUxMjI4MDQ1NTU2WjAYMRYwFAYD VQQDDA02OTQ3N2RkZC1kMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PzcetUyaEKmgH2c8rrGV0HifhE6hATXN9ldEEmt0NiXCOeM1FdnmA8LDDCb 7sBEv9cbHmgCvKHEUjOrb0vamtUuDzXLvj67oIbXLlzAoEt5HLOrQ2Ly7UE5Eu5N 0HKs78YlW2aZdDJ6oNrsGGNBH7Pjx3Eb7sp23HMHJw/gcqqOlcKHcouBwInJse5X 9RsHXDUbHhYwtYSRnLVR3DnBZBspnot/boDAiJnppNXikO9myirU6Y8fYcPs14iF BOEDEFYiFnD/+PhbG91a3CqnnyZVA0rOgJSFLWExwC8sADhdmOlugmNVrOqOK6kc qk6FWbl8xJeUVgYxOYSOa5v/mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy603U+ 4VwmAJpzq2Nl4+2/UczBMB8GA1UdIwQYMBaAFAgOwUoAEl2RTH5ihd6cVmicWHKk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzYyNy9FN0QyNTc4NkE4 OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1haRk1mbUtGM3B4V2FKeFlj cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzYyNy9FN0QyNTc4NkE4OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1ha Rk1mbUtGM3B4V2FKeFljcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9F+hCIrXxvs1E3CeXMOaqQmgPBfg3h0qMShk13YdGNjpTGLLKBh1I ZWGITWNgeCS3AdOUBvRgsphtm0cf/yrEM1MEyPKOfaRplNkLJdQyw4vO1N+xAvNu pzHp3tyrpFlt1A1gzA31IMrrMVRb9+QTecPBam52TjwlkObEZpoIcUPdWzW6mjHt bkzrtrwwisS0u6NDbGpqBDNq0IckwGhTcojKGERwd8odiFe7L/BLIz+Fci97s2+O jHOG8JU8KSUFP5eRVFv9dcfcbi4bh5J1+twTGCFtPqEDbeT1iiukbYfkHPiD/MJW fznvM/HsWPK245l72NQKfJ0RCKRoehND -----END CERTIFICATE-----Generated at Tue Dec 23 03:50:17 2025 by rpki-client