This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json) Hash identifier: PUMCzPsu89II7y6RpGwX2mkyynf3tOIpTQY/r+KLo2k= Subject key identifier: E3:BB:D4:5E:1A:36:E4:DC:AE:3C:D3:6D:DA:85:88:DB:4D:ED:58:71 Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Certificate serial: 2191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft Manifest number: 2191 Signing time: Mon 22 Dec 2025 15:43:40 +0000 Manifest this update: Mon 22 Dec 2025 15:43:40 +0000 Manifest next update: Mon 29 Dec 2025 15:43:40 +0000 Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: E23qHa3qvbx+M1jov/exE7SLfKjvzGVQeQZqOn1jB04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8593 (0x2191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Validity Not Before: Dec 22 15:43:40 2025 GMT Not After : Dec 29 15:43:40 2025 GMT Subject: CN=6949672c-0e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:cd:83:88:51:63:c3:9b:a9:7e:cc:d6:5b: 5b:9c:7b:56:0b:ea:0d:8b:62:70:17:eb:b7:7a:01: 47:bd:cd:f3:a9:d0:46:10:2f:6c:f4:58:de:12:2c: 53:ab:bb:d6:ed:23:1f:a1:be:3b:7a:c6:dc:ec:88: b8:b3:5e:86:1b:7c:82:7a:92:8e:4b:e5:b0:c7:1a: a0:b7:ec:63:42:8a:39:63:6c:57:d7:e0:7e:b4:63: b4:e8:57:de:6d:73:a8:f2:2d:d5:cd:5f:89:d5:20: 2f:d9:3c:a0:0b:5e:f6:66:a2:f8:62:7d:6a:fe:a2: ee:a7:43:dc:f3:73:a3:be:6f:63:e4:85:7b:25:94: 55:8d:91:d2:ae:db:af:54:48:b5:6f:7d:04:9b:eb: 71:07:57:42:d3:77:06:09:ab:4e:46:35:cb:9c:c5: c4:be:dd:d1:59:82:08:e6:15:e4:78:fa:45:ac:db: 51:5e:54:8a:5a:af:b6:cf:75:07:1b:8c:61:03:3b: da:fe:51:0e:0d:b6:9f:4a:ca:f5:ab:bc:0c:5d:d2: 30:89:d6:ff:e6:46:6a:13:ae:f6:f1:19:66:d4:7c: 46:57:8f:2e:6b:a2:d1:e7:8a:5d:9f:63:65:5f:a2: 1c:3a:18:0e:47:2f:1d:ab:ba:4c:bd:2f:71:03:20: 1a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BB:D4:5E:1A:36:E4:DC:AE:3C:D3:6D:DA:85:88:DB:4D:ED:58:71 X509v3 Authority Key Identifier: keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:28:e6:d2:b3:3e:c4:41:e4:ac:9d:95:c3:5e:78:36:bb:10: 64:3f:d2:b0:e9:b3:2c:35:8c:d4:3a:b2:6a:92:73:bb:9f:5e: 74:fa:c7:e7:d8:61:42:05:56:7f:65:c3:80:ff:23:c9:ee:39: 15:e5:ab:02:43:e7:a9:83:f7:a7:8b:76:3c:48:36:be:09:b6: 1a:b8:c0:4a:9c:64:99:0b:37:60:48:41:31:27:8f:f0:7a:5a: 55:9a:e7:a0:ce:1d:d2:ab:bf:16:cb:22:52:c9:4f:14:a6:a3: c9:26:0e:cc:e4:24:3b:03:b2:41:89:b8:36:e7:27:80:7e:db: 83:54:e6:4d:b8:3e:a3:83:58:88:e4:29:22:3e:f4:72:86:06: 3c:08:d5:b8:72:d7:4a:4c:d0:16:c3:32:59:9c:6b:a2:61:c1: e2:4d:14:60:f8:12:96:e9:e6:3d:f6:0a:83:0c:97:78:e9:36: 60:04:21:09:c2:08:2d:99:1a:7b:8c:c6:14:0e:15:41:46:9f: 34:44:15:ae:59:c4:9d:ba:34:2a:3c:d9:30:ef:28:65:fa:6d: cb:25:46:d9:37:c1:f6:02:a8:f5:e2:9d:64:a5:3a:d3:69:30: b9:99:53:c8:0a:db:67:31:b3:6a:c3:a4:ba:3f:ef:7c:7d:d0: 72:29:9c:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw RkRFMTY3NUYwHhcNMjUxMjIyMTU0MzQwWhcNMjUxMjI5MTU0MzQwWjAYMRYwFAYD VQQDDA02OTQ5NjcyYy0wZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrLNg4hRY8ObqX7M1ltbnHtWC+oNi2JwF+u3egFHvc3zqdBGEC9s9FjeEixT q7vW7SMfob47esbc7Ii4s16GG3yCepKOS+Wwxxqgt+xjQoo5Y2xX1+B+tGO06Ffe bXOo8i3VzV+J1SAv2TygC172ZqL4Yn1q/qLup0Pc83Ojvm9j5IV7JZRVjZHSrtuv VEi1b30Em+txB1dC03cGCatORjXLnMXEvt3RWYII5hXkePpFrNtRXlSKWq+2z3UH G4xhAzva/lEODbafSsr1q7wMXdIwidb/5kZqE6728Rlm1HxGV48ua6LR54pdn2Nl X6IcOhgORy8dq7pMvS9xAyAaXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOO71F4a NuTcrjzTbdqFiNtN7VhxMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5 QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOKObSsz7EQeSsnZXDXng2uxBkP9Kw6bMsNYzUOrJqknO7n150+sfn 2GFCBVZ/ZcOA/yPJ7jkV5asCQ+epg/eni3Y8SDa+CbYauMBKnGSZCzdgSEExJ4/w elpVmuegzh3Sq78WyyJSyU8UpqPJJg7M5CQ7A7JBibg25yeAftuDVOZNuD6jg1iI 5CkiPvRyhgY8CNW4ctdKTNAWwzJZnGuiYcHiTRRg+BKW6eY99gqDDJd46TZgBCEJ wggtmRp7jMYUDhVBRp80RBWuWcSdujQqPNkw7yhl+m3LJUbZN8H2Aqj14p1kpTrT aTC5mVPICttnMbNqw6S6P+98fdByKZwr -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:07 2025 by rpki-client