This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json) Hash identifier: ekPOK/N3+/UGq/hIZdeCkmQWh9u+XxWDvWW4uUKN60U= Subject key identifier: AB:E8:7F:B3:60:F9:21:17:63:A6:11:63:53:26:69:FD:29:49:B4:49 Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft Manifest number: 014A Signing time: Tue 23 Dec 2025 03:18:45 +0000 Manifest this update: Tue 23 Dec 2025 03:18:44 +0000 Manifest next update: Tue 30 Dec 2025 03:18:44 +0000 Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: UJPReD/IF5gUgSZRp0vj8zjAwrffy9TfvKNhgIlUxlg=) 2: 306EFA64A87611F089A2B881C4F9AE02.roa (hash: PG1Zg9YWfOZJBdRe/N5qDFjYHzUKz1vx7yczTSRfIp8=) 3: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: v7bT+lzlhBzHYXIgxw7CXDLlyYjEfCYhNYxtpgDCkMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Validity Not Before: Dec 23 03:18:44 2025 GMT Not After : Dec 30 03:18:44 2025 GMT Subject: CN=694a0a14-9621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:06:4a:53:cc:f4:58:2e:bc:e5:56:8d:c5: 78:3f:c8:0b:e0:71:b8:ae:b0:ea:0d:de:00:5a:27: a3:c1:65:bb:33:31:57:2c:20:87:05:45:76:5a:7a: 91:61:c0:e3:c4:21:df:ba:38:9a:08:97:87:02:2f: ce:e6:56:65:c4:dd:54:fd:e5:93:f2:c2:6a:fc:97: b0:b8:e3:64:49:58:6b:c5:06:a7:07:4d:fe:6f:c8: 9f:00:81:91:5f:a4:ed:a1:a9:e2:02:b9:41:b7:bc: 61:33:14:d3:97:69:66:8f:18:c8:d8:cf:2c:0f:68: 09:29:0d:8a:04:11:11:ea:9d:4e:02:31:6c:dd:92: 8a:2e:64:87:de:c7:ba:89:d6:da:8c:01:9c:c7:2d: e9:7d:51:8e:8c:03:f2:a3:f2:9f:74:bb:ec:60:60: 56:6d:4c:ec:60:46:a2:86:ee:4e:9a:da:81:15:5c: 00:ae:9c:cb:fb:dd:63:3d:27:08:18:27:e8:d7:8c: 06:cb:19:0a:2f:d2:05:0f:0c:0e:cf:46:e3:df:fd: 54:62:5b:28:16:42:0b:5a:3e:31:84:41:07:24:b8: cf:f8:00:a4:ee:3c:38:a3:a6:c3:4e:db:9b:ec:00: 4a:be:5c:71:8a:40:aa:85:0c:c9:05:c0:43:dc:98: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E8:7F:B3:60:F9:21:17:63:A6:11:63:53:26:69:FD:29:49:B4:49 X509v3 Authority Key Identifier: keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:e1:87:f7:6c:06:80:9e:5e:cf:2a:f4:e7:36:85:8b:dc:86: ee:07:b7:85:a9:f0:b2:98:2e:bd:29:55:2d:d6:dd:6b:a5:aa: 5c:bc:c9:c8:dc:7a:ac:92:83:6f:5e:7b:89:c4:ba:a7:8f:e6: db:4e:4e:34:ed:18:84:ea:4d:bd:a1:8f:c5:68:4d:ca:91:f5: 78:96:88:8b:9d:13:91:1f:c4:c6:56:d2:fb:92:0e:26:31:e6: 5d:a3:3b:03:ed:59:cd:f4:4a:19:db:6d:29:4b:e5:35:6f:64: 61:d5:7f:9f:57:ce:14:60:aa:52:06:83:88:ef:91:bb:9b:a2: 3c:95:f0:3c:9c:7c:8d:e2:7a:46:d7:ef:bc:c8:a8:0f:fb:e9: e2:a9:6e:77:19:fd:d5:4a:04:62:a8:12:9d:c2:47:11:1c:b9: 6c:2d:e7:49:da:b3:8a:e9:0d:27:00:4f:58:36:2e:ee:4d:48: be:0b:36:f5:95:e0:13:88:5f:48:e9:a0:3a:ad:51:20:25:3c: 9d:d8:d1:1a:bb:43:4a:86:a4:92:3e:c3:26:84:56:99:6e:75: 0f:ca:b0:a2:5f:a3:3a:82:fd:67:13:51:92:7c:81:0b:9a:99: c7:ef:7b:74:a5:0f:b6:49:c5:c4:ab:fd:de:0d:67:a4:ff:da: 2c:97:39:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5MEIxMTAvBgNVBAUTKDA3RUVDQzQ0MjZBOEMzM0Q0NTkwQkNEQTEyRDk3NTBD NDkwNDg1N0QwHhcNMjUxMjIzMDMxODQ0WhcNMjUxMjMwMDMxODQ0WjAYMRYwFAYD VQQDDA02OTRhMGExNC05NjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphIGSlPM9FguvOVWjcV4P8gL4HG4rrDqDd4AWiejwWW7MzFXLCCHBUV2WnqR YcDjxCHfujiaCJeHAi/O5lZlxN1U/eWT8sJq/JewuONkSVhrxQanB03+b8ifAIGR X6TtoaniArlBt7xhMxTTl2lmjxjI2M8sD2gJKQ2KBBER6p1OAjFs3ZKKLmSH3se6 idbajAGcxy3pfVGOjAPyo/KfdLvsYGBWbUzsYEaihu5OmtqBFVwArpzL+91jPScI GCfo14wGyxkKL9IFDwwOz0bj3/1UYlsoFkILWj4xhEEHJLjP+ACk7jw4o6bDTtub 7ABKvlxxikCqhQzJBcBD3JiyEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvof7Ng +SEXY6YRY1Mmaf0pSbRJMB8GA1UdIwQYMBaAFAfuzEQmqMM9RZC82hLZdQxJBIV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzkwQi85Mjg0MjcwMkU3 MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6MUZrTHphRXRsMURFa0Vo WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItN01SQ2Fvd3oxRmtMemFFdGwxREVrRWhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzkwQi85Mjg0MjcwMkU3MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6 MUZrTHphRXRsMURFa0VoWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDd4Yf3bAaAnl7PKvTnNoWL3IbuB7eFqfCymC69KVUt1t1rpapcvMnI 3HqskoNvXnuJxLqnj+bbTk407RiE6k29oY/FaE3KkfV4loiLnRORH8TGVtL7kg4m MeZdozsD7VnN9EoZ220pS+U1b2Rh1X+fV84UYKpSBoOI75G7m6I8lfA8nHyN4npG 1++8yKgP++niqW53Gf3VSgRiqBKdwkcRHLlsLedJ2rOK6Q0nAE9YNi7uTUi+Czb1 leATiF9I6aA6rVEgJTyd2NEau0NKhqSSPsMmhFaZbnUPyrCiX6M6gv1nE1GSfIEL mpnH73t0pQ+2ScXEq/3eDWek/9oslzms -----END CERTIFICATE-----Generated at Tue Dec 23 21:54:47 2025 by rpki-client