This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json) Hash identifier: MdbScEoCebxC/8giO8o+GC2UTb6FozgsPNIrfhSQkxY= Subject key identifier: D8:94:2A:C1:47:FD:4D:8E:25:9D:C9:2B:7D:A1:67:19:45:21:3F:47 Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Certificate serial: 0BBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft Manifest number: 0BBA Signing time: Mon 22 Dec 2025 18:28:13 +0000 Manifest this update: Mon 22 Dec 2025 18:28:12 +0000 Manifest next update: Mon 29 Dec 2025 18:28:12 +0000 Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: aGML1W5/uFje06VMmVnE95tcZuHGtGEb9Wayij27ZKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3006 (0xbbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167307, serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8 Validity Not Before: Dec 22 18:28:12 2025 GMT Not After : Dec 29 18:28:12 2025 GMT Subject: CN=69498dbc-0766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c4:8b:3b:50:c4:6b:dc:7b:b0:9e:95:c9:ba: 18:73:69:c7:58:f9:20:c5:05:6d:c1:05:83:8f:ab: 71:54:8c:fb:d6:63:ab:c5:44:9e:17:e4:9d:22:a3: 8e:4b:97:9c:4c:65:8b:2b:c5:95:de:2a:25:21:66: 2a:46:0f:0c:05:7d:a6:d3:4e:15:86:ef:97:0c:cd: f7:34:32:30:5d:b9:35:21:70:b7:79:ae:02:d2:b4: 52:ab:9f:d8:7a:a1:11:13:fe:bd:b9:b8:b7:7b:81: ce:48:25:d8:29:6c:f2:84:94:f3:69:26:ed:b7:a1: 85:ca:1f:1c:98:0b:02:fa:69:f1:1f:dc:1e:a8:81: fc:ba:5e:0b:3e:2e:4d:9e:01:37:82:6f:6a:e8:51: 7d:f3:a6:f0:4a:58:e7:46:47:2a:ed:ba:51:7b:43: 97:ba:cb:bb:1d:42:81:d4:cc:f7:e2:8d:5b:c6:ea: b4:f6:cc:5c:7a:b9:5f:e6:9a:a7:9e:ab:4d:55:2c: 0e:85:4f:33:bf:e4:91:c7:b4:6a:4d:dc:67:6f:71: b3:ec:02:97:3f:91:55:0c:41:9e:fd:00:32:c2:4f: 6e:e8:6b:13:dd:b6:28:64:ca:36:16:66:00:59:8d: 66:c4:a0:a2:15:bc:12:cc:fc:32:dd:fd:2f:b2:ff: c1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:94:2A:C1:47:FD:4D:8E:25:9D:C9:2B:7D:A1:67:19:45:21:3F:47 X509v3 Authority Key Identifier: keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:16:cf:ab:1f:a4:3d:4f:c1:34:f2:fb:93:c6:64:e2:35:6a: fc:79:b7:2b:28:48:f3:36:aa:88:6a:29:79:6d:b6:1c:c8:ba: a7:6e:e9:5a:37:20:d3:f8:5e:a8:2e:b1:fc:31:70:5c:ac:07: 6d:b8:31:8a:27:78:46:0c:c4:3b:6c:30:3c:80:a7:20:85:7c: b3:3f:65:76:bc:4d:f6:f9:7c:69:f6:9a:6f:ba:01:7b:ad:1a: 8b:2b:71:f9:0b:65:83:e3:a8:17:78:d7:b6:2a:73:24:74:62: a2:70:fc:49:07:d3:68:2c:6b:40:16:31:1a:5b:fb:b9:24:6d: 13:99:a2:c7:e9:af:4e:14:a2:4a:0e:d6:83:ab:42:a9:f8:3d: dd:da:83:67:05:ea:02:dc:5c:24:e4:85:47:73:ea:b3:d5:8f: e7:6d:93:e9:b0:8d:aa:23:3d:cc:2a:e0:0e:b4:68:cf:45:fe: 1e:30:24:16:4e:c6:c9:41:83:e1:96:b3:8f:7c:89:0a:7c:ef: 69:46:ba:63:2f:e8:4a:67:bf:70:bd:67:9f:25:91:8a:b8:c5: 7b:e1:6c:95:16:fb:69:dd:ad:a7:18:36:b7:00:cf:21:0d:d6: 80:5c:9c:08:7d:5e:13:76:35:21:0c:0c:88:21:d9:96:61:92: 61:b9:77:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjczMDcxMTAvBgNVBAUTKEVFRkZDRERENEVFQUJENjY2RDI0QkRGMDJDNjQ3N0Q4 NUE5RERCRDgwHhcNMjUxMjIyMTgyODEyWhcNMjUxMjI5MTgyODEyWjAYMRYwFAYD VQQDDA02OTQ5OGRiYy0wNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMSLO1DEa9x7sJ6VyboYc2nHWPkgxQVtwQWDj6txVIz71mOrxUSeF+SdIqOO S5ecTGWLK8WV3iolIWYqRg8MBX2m004Vhu+XDM33NDIwXbk1IXC3ea4C0rRSq5/Y eqERE/69ubi3e4HOSCXYKWzyhJTzaSbtt6GFyh8cmAsC+mnxH9weqIH8ul4LPi5N ngE3gm9q6FF986bwSljnRkcq7bpRe0OXusu7HUKB1Mz34o1bxuq09sxcerlf5pqn nqtNVSwOhU8zv+SRx7RqTdxnb3Gz7AKXP5FVDEGe/QAywk9u6GsT3bYoZMo2FmYA WY1mxKCiFbwSzPwy3f0vsv/BRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiUKsFH /U2OJZ3JK32hZxlFIT9HMB8GA1UdIwQYMBaAFO7/zd1O6r1mbSS98Cxkd9handvY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMwNy9EQkJDOEI2NDMz QkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZXWnRKTDN3TEdSMzJGcWQy OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2X04zVTdxdldadEpMM3dMR1IzMkZxZDI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzMwNy9EQkJDOEI2NDMzQkMxMUVBQjUxRkEwMENDNEY5QUUwMi83dl9OM1U3cXZX WnRKTDN3TEdSMzJGcWQyOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8Fs+rH6Q9T8E08vuTxmTiNWr8ebcrKEjzNqqIail5bbYcyLqnbula NyDT+F6oLrH8MXBcrAdtuDGKJ3hGDMQ7bDA8gKcghXyzP2V2vE32+Xxp9ppvugF7 rRqLK3H5C2WD46gXeNe2KnMkdGKicPxJB9NoLGtAFjEaW/u5JG0TmaLH6a9OFKJK DtaDq0Kp+D3d2oNnBeoC3Fwk5IVHc+qz1Y/nbZPpsI2qIz3MKuAOtGjPRf4eMCQW TsbJQYPhlrOPfIkKfO9pRrpjL+hKZ79wvWefJZGKuMV74WyVFvtp3a2nGDa3AM8h DdaAXJwIfV4TdjUhDAyIIdmWYZJhuXcp -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:45 2025 by rpki-client