This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: szBFWR/MRa5GbKFaU6QROc9Xh6UY0DuHu59k+e6htzk= Subject key identifier: F5:C7:68:EF:C7:53:6D:EF:8F:8C:9A:D4:29:DA:22:B8:1F:21:C3:2C Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 3586 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 3536 Signing time: Sat 06 Dec 2025 14:21:29 +0000 Manifest this update: Sat 06 Dec 2025 14:21:29 +0000 Manifest next update: Sat 13 Dec 2025 14:21:29 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: hWw05H69o7nG/oUntuJi1zYMiv4QqtblcHEegB66/9k=) 2: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: xeaHh4f0PcYoja3FW2MKcCuwzba5+DIVdsTI+jNxV6c=) 3: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: LDnpUV+i1iRAJrBm2unF32JWcSXChORTnvD3fUQwbdk=) 4: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: nUgngne0/Po1woAmp/WM+XljTraQ4HMoQ5pOy9QCPKg=) 5: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: cLWjAQfHB1XuUxPtUJRHi4idez2Y+6Lxv08uwEYGrgM=) 6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: MDzjDXZFFOaG6b4Hi2bRVyjseXED7kDvegJ5uB6PIoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13702 (0x3586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Dec 6 14:21:29 2025 GMT Not After : Dec 13 14:21:29 2025 GMT Subject: CN=69343be9-6787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:f7:19:4d:c4:cf:65:56:a5:14:20:f8:fd: f9:cc:50:2f:68:ba:0b:45:3c:d1:ac:35:55:9b:04: 0d:85:5c:ac:f2:67:66:a0:50:a6:ec:ef:42:9f:7f: 3f:95:62:77:60:82:37:4d:93:c8:5b:d5:cf:1c:85: 98:90:12:0c:9e:b3:56:87:a3:07:ff:91:b8:f1:1f: 72:39:6a:42:ff:9c:b9:24:69:bb:b7:55:52:d7:00: 0c:fc:27:df:03:8d:9f:de:d5:32:c7:b4:af:4b:20: 08:ed:e9:f6:40:ca:c5:19:55:29:29:0e:a9:0a:a3: fa:57:d3:29:1d:d9:31:f9:8a:37:1c:1c:8b:8c:40: 09:ba:85:c2:ae:6c:36:db:04:7a:ac:aa:96:15:f9: 55:2c:d3:30:e8:b4:ce:11:96:6c:2f:02:8c:8b:2c: 37:e2:7b:63:24:ce:41:dc:1b:44:b1:64:08:28:87: c2:fa:60:f0:87:da:a4:91:48:a8:2a:19:2e:b9:1f: a0:9d:ad:ad:03:5e:8f:49:e1:8b:74:57:92:ef:32: 5b:f1:88:1b:5b:8c:bd:a2:ca:29:19:10:fd:19:d8: ab:19:b5:de:46:c9:42:b0:b6:72:b2:1f:7e:f3:b4: 62:a0:c8:54:3c:1d:16:d3:55:2b:58:aa:f9:f0:cc: 17:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C7:68:EF:C7:53:6D:EF:8F:8C:9A:D4:29:DA:22:B8:1F:21:C3:2C X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:eb:1f:d4:e6:cb:58:c0:42:fb:c2:1b:50:e1:de:c6:47:99: 59:37:8e:05:f4:ff:af:41:12:56:c8:63:bc:e4:b2:ef:81:d6: e0:27:7e:75:4a:fe:7a:99:f3:e4:11:83:04:e2:24:df:55:a2: da:3b:6f:62:84:27:ed:de:0a:e9:b6:9f:8c:5d:70:57:45:1f: 7f:51:43:09:20:1e:d4:81:4a:2f:20:99:59:de:1d:ab:3b:06: 7a:ae:7e:0b:e9:e0:fe:04:5a:af:61:bb:f7:0c:0d:1b:b1:10: 9d:09:94:79:d1:17:54:6b:75:5c:f8:ec:16:00:70:bf:c8:ad: 50:a6:8c:8a:0c:ec:27:24:33:c8:b5:78:d5:de:5d:92:98:7b: bc:55:d8:06:f4:f6:9b:0d:75:25:e5:d5:f5:4f:d6:56:78:f8: 16:37:6e:a8:3a:7e:18:41:cf:f5:b4:89:ad:00:a9:2e:c4:e2: 4d:13:8f:40:02:40:d4:42:80:fb:fe:98:ec:fe:07:11:90:ff: 96:01:e3:6f:ca:fd:84:7d:ec:79:b3:a2:58:6f:38:78:b4:16: 96:c8:7e:56:d9:c1:78:e5:7f:8c:d0:f0:39:63:fc:55:5c:06: 76:8a:15:f7:79:c2:d2:5e:37:d3:7a:23:db:78:66:b8:5a:fc: f5:cd:b9:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjUxMjA2MTQyMTI5WhcNMjUxMjEzMTQyMTI5WjAYMRYwFAYD VQQDEw02OTM0M2JlOS02Nzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5n3GU3Ez2VWpRQg+P35zFAvaLoLRTzRrDVVmwQNhVys8mdmoFCm7O9Cn38/ lWJ3YII3TZPIW9XPHIWYkBIMnrNWh6MH/5G48R9yOWpC/5y5JGm7t1VS1wAM/Cff A42f3tUyx7SvSyAI7en2QMrFGVUpKQ6pCqP6V9MpHdkx+Yo3HByLjEAJuoXCrmw2 2wR6rKqWFflVLNMw6LTOEZZsLwKMiyw34ntjJM5B3BtEsWQIKIfC+mDwh9qkkUio KhkuuR+gna2tA16PSeGLdFeS7zJb8YgbW4y9osopGRD9GdirGbXeRslCsLZysh9+ 87RioMhUPB0W01UrWKr58MwXHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXHaO/H U23vj4ya1CnaIrgfIcMsMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS6x/U5stYwEL7whtQ4d7GR5lZN44F9P+vQRJWyGO85LLvgdbgJ351 Sv56mfPkEYME4iTfVaLaO29ihCft3grptp+MXXBXRR9/UUMJIB7UgUovIJlZ3h2r OwZ6rn4L6eD+BFqvYbv3DA0bsRCdCZR50RdUa3Vc+OwWAHC/yK1QpoyKDOwnJDPI tXjV3l2SmHu8VdgG9PabDXUl5dX1T9ZWePgWN26oOn4YQc/1tImtAKkuxOJNE49A AkDUQoD7/pjs/gcRkP+WAeNvyv2Efex5s6JYbzh4tBaWyH5W2cF45X+M0PA5Y/xV XAZ2ihX3ecLSXjfTeiPbeGa4Wvz1zbll -----END CERTIFICATE-----Generated at Sun Dec 7 09:02:19 2025 by rpki-client