This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft File: 7Ubg2mfUm_C8p7L9IOxIu86EepE.mft (raw, json) Hash identifier: 1DhAXtCF2naV0k6gfmaop4ERdfzLgpJlZmb7KhzKk4c= Subject key identifier: 29:C1:F3:E8:73:91:92:0D:F7:57:08:83:E2:E8:7E:3E:A2:26:7A:66 Authority key identifier: ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91 Certificate issuer: /CN=A915E38A/serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft Manifest number: 1A Signing time: Tue 23 Dec 2025 06:42:35 +0000 Manifest this update: Tue 23 Dec 2025 06:42:35 +0000 Manifest next update: Tue 30 Dec 2025 06:42:35 +0000 Files and hashes: 1: 7Ubg2mfUm_C8p7L9IOxIu86EepE.crl (hash: JXBPF5CQdgDWtPr55JMOA753RxpXy5jqGq7Ll8N24Kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E38A, serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91 Validity Not Before: Dec 23 06:42:35 2025 GMT Not After : Dec 30 06:42:35 2025 GMT Subject: CN=694a39db-e3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:c2:2e:d5:48:b4:f4:c0:6c:16:15:00:96: e0:71:da:4b:d9:7a:05:58:c4:81:13:df:54:4e:24: 8e:8f:7d:81:66:89:22:b9:24:3f:b7:4c:2f:41:4e: 2a:96:c4:26:87:e2:41:a6:69:39:c6:f1:94:4d:0e: f7:e8:2a:8d:69:37:1d:b9:36:3e:dd:9b:8d:b3:e4: d3:a2:41:19:31:d5:f9:98:0f:b2:79:d5:6f:b6:cf: 1c:f7:2b:5c:64:d8:47:0f:8d:62:e3:52:2f:af:ec: 79:be:cc:37:35:0a:ca:bf:45:40:02:17:87:0d:99: a3:c3:a5:ed:e2:fd:77:0f:f9:06:11:9e:dd:78:77: a8:d2:75:89:ce:f9:20:e3:4a:7e:4a:3d:97:46:1c: 68:4f:a3:be:e5:d6:7a:5a:2e:dd:e4:03:af:c6:ec: 2f:b2:8c:80:fb:b5:41:df:57:81:14:0a:02:67:06: 12:25:69:02:34:33:66:53:27:0d:c4:88:db:c9:56: 6b:09:b1:b1:3f:d8:57:77:95:88:a7:39:5a:02:28: 11:6c:b5:be:ee:81:e2:69:98:48:e6:48:c9:51:d6: ae:a2:72:9f:ba:64:80:77:f6:b9:d1:38:cd:78:4b: de:00:7b:84:73:d4:73:da:03:5c:3e:f9:8d:93:5a: a5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C1:F3:E8:73:91:92:0D:F7:57:08:83:E2:E8:7E:3E:A2:26:7A:66 X509v3 Authority Key Identifier: keyid:ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9b:34:eb:a3:5c:77:12:92:a7:f0:8d:31:34:29:13:3e:9b: 11:82:97:e1:11:1f:0e:49:89:12:43:41:6a:b7:99:d7:ed:20: a4:3e:51:da:7e:dd:ac:7d:c3:bf:57:00:d1:36:bd:bc:ec:92: 48:9c:d5:45:7e:4a:2b:e7:f7:c9:5b:25:43:f5:5d:23:70:a0: 01:b2:9c:59:c4:58:3d:ef:6e:3c:15:92:08:56:93:a9:09:da: 30:70:d2:51:9b:64:79:a9:1f:71:e2:0c:29:85:7b:cd:51:32: 06:4a:22:f8:2f:42:18:70:d9:5e:60:9a:c7:db:ec:9c:bc:d8: 0f:bb:2b:ea:8d:2c:f4:02:a6:7d:db:1c:6f:fb:c9:cc:28:87: 15:c0:8c:87:aa:65:7f:43:ec:04:5c:47:5f:73:1a:a1:ee:91: eb:2d:7d:25:cf:26:ed:0a:7d:cb:76:ab:23:75:5f:b4:9d:9e: 19:e2:64:11:b9:5d:79:2d:27:87:15:f9:55:4c:80:c9:67:4c: 1d:d1:d4:fa:81:c2:ea:0c:cf:ed:1a:4a:19:8d:2b:c5:0b:d8: ca:93:c2:32:86:63:a1:f8:49:a6:50:db:69:52:a0:f6:9a:e3: 67:90:28:88:39:c0:5d:65:c5:47:f7:87:8d:3e:cb:75:b0:29: b1:9e:3b:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTM4QTExMC8GA1UEBRMoRUQ0NkUwREE2N0Q0OUJGMEJDQTdCMkZEMjBFQzQ4QkJD RTg0N0E5MTAeFw0yNTEyMjMwNjQyMzVaFw0yNTEyMzAwNjQyMzVaMBgxFjAUBgNV BAMMDTY5NGEzOWRiLWUzZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDERcIu1Ui09MBsFhUAluBx2kvZegVYxIET31ROJI6PfYFmiSK5JD+3TC9BTiqW xCaH4kGmaTnG8ZRNDvfoKo1pNx25Nj7dm42z5NOiQRkx1fmYD7J51W+2zxz3K1xk 2EcPjWLjUi+v7Hm+zDc1Csq/RUACF4cNmaPDpe3i/XcP+QYRnt14d6jSdYnO+SDj Sn5KPZdGHGhPo77l1npaLt3kA6/G7C+yjID7tUHfV4EUCgJnBhIlaQI0M2ZTJw3E iNvJVmsJsbE/2Fd3lYinOVoCKBFstb7ugeJpmEjmSMlR1q6icp+6ZIB39rnROM14 S94Ae4Rz1HPaA1w++Y2TWqUbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKcHz6HOR kg33VwiD4uh+PqImemYwHwYDVR0jBBgwFoAU7Ubg2mfUm/C8p7L9IOxIu86EepEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMzhBLzlCQ0VFQzNDQkZD OTExRjA5N0VFNTYxOUM0RjlBRTAyLzdVYmcybWZVbV9DOHA3TDlJT3hJdTg2RWVw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1ViZzJtZlVtX0M4cDdMOUlPeEl1ODZFZXBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MzhBLzlCQ0VFQzNDQkZDOTExRjA5N0VFNTYxOUM0RjlBRTAyLzdVYmcybWZVbV9D OHA3TDlJT3hJdTg2RWVwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI2bNOujXHcSkqfwjTE0KRM+mxGCl+ERHw5JiRJDQWq3mdftIKQ+Udp+ 3ax9w79XANE2vbzskkic1UV+Sivn98lbJUP1XSNwoAGynFnEWD3vbjwVkghWk6kJ 2jBw0lGbZHmpH3HiDCmFe81RMgZKIvgvQhhw2V5gmsfb7Jy82A+7K+qNLPQCpn3b HG/7ycwohxXAjIeqZX9D7ARcR19zGqHukestfSXPJu0Kfct2qyN1X7SdnhniZBG5 XXktJ4cV+VVMgMlnTB3R1PqBwuoMz+0aShmNK8UL2MqTwjKGY6H4SaZQ22lSoPaa 42eQKIg5wF1lxUf3h40+y3WwKbGeO5o= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:27 2025 by rpki-client