This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft File: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json) Hash identifier: VcGsWKuHdCnKDZQHLW4QNarDTIleV0+C/8ZORFaZSwU= Subject key identifier: 1D:F2:9B:6B:58:48:3C:C4:CF:A8:98:AF:E0:7C:DD:15:04:45:A8:71 Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF Certificate issuer: /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft Manifest number: 0116 Signing time: Mon 15 Dec 2025 04:12:21 +0000 Manifest this update: Mon 15 Dec 2025 04:12:21 +0000 Manifest next update: Mon 22 Dec 2025 04:12:21 +0000 Files and hashes: 1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: A2acoiyKOqIpaGxTXzwx5Zj25gpYwEcscNEpP6IIOGI=) 2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: C2fRd73u6c1TtG+Y4uQ1VIRzkyl10Cv6nEiy2Ao9xH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 04:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Validity Not Before: Dec 15 04:12:21 2025 GMT Not After : Dec 22 04:12:21 2025 GMT Subject: CN=693f8aa5-f077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:3b:55:dd:cb:3c:1f:fb:18:34:2e:e4:ca: 94:34:09:a5:f6:cc:8a:7e:9c:3e:d4:f9:56:88:72: b4:8f:30:cb:b7:a0:5d:74:02:0e:20:a2:b0:83:a6: b7:e5:a1:59:34:be:ae:f7:b5:58:35:14:a4:1b:1a: 10:81:56:07:30:ea:84:48:b0:64:4e:9e:39:ac:9b: f3:2e:f5:a4:3c:f9:ae:b9:01:75:0e:e3:70:4a:93: 86:4d:8e:0c:28:ad:6e:68:b0:aa:8d:e8:cb:e7:0d: 3e:ad:92:6f:4f:ef:49:e7:99:30:e3:42:e4:6b:1d: 0e:ce:f8:48:e5:c3:14:91:f3:c3:36:d2:49:d6:d9: d6:ba:0e:32:d7:d3:50:d3:68:a1:da:db:59:32:c9: 24:33:6a:ff:a2:6e:d3:00:96:7b:b7:81:51:26:80: 51:14:89:b6:b3:c0:23:46:13:d4:09:24:5c:06:d1: 6c:07:6f:c8:bf:fa:18:7f:1b:d1:17:d4:40:28:f7: 19:ce:18:21:9e:b8:94:6a:1e:b4:5f:0c:b0:84:62: e0:02:cf:00:5b:9d:3e:be:87:77:a7:60:d6:0b:80: 34:5c:78:46:0e:18:eb:5d:9a:d0:36:bc:5a:e7:05: c5:e0:ca:50:dd:c5:57:35:04:75:c3:05:46:38:65: 6c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F2:9B:6B:58:48:3C:C4:CF:A8:98:AF:E0:7C:DD:15:04:45:A8:71 X509v3 Authority Key Identifier: keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:20:15:29:3e:b6:34:ca:08:f6:0b:da:cf:23:e2:14:bd:11: 9d:d1:9a:2d:89:c9:1e:24:9a:25:f9:c3:89:1c:40:f8:12:de: a6:70:1b:3c:b8:f6:7a:73:e8:0f:cf:01:3b:0f:d3:44:55:da: 94:9b:26:59:a7:ee:0e:2a:f6:8e:f7:4a:8f:b2:27:0d:69:6a: 54:a0:f0:62:1e:6c:9e:1e:b2:24:e7:40:14:40:fe:10:f6:17: 15:37:70:13:ca:f2:1d:c5:4c:08:9c:c9:d1:1b:1f:39:4f:6b: b8:1b:99:6e:4e:0f:69:c4:97:89:2b:c6:90:fc:36:dc:0f:5b: da:d6:99:72:09:c9:fb:ce:cc:3d:0d:e3:15:7e:c1:36:ab:f1: ad:fa:04:00:48:08:ab:23:b9:09:9f:2a:c5:14:de:a8:7d:fb: 2f:5d:05:ed:10:af:15:1a:21:7b:3f:61:df:cf:fe:6f:f9:42: a8:3c:bb:61:b4:2a:4e:bd:b5:f1:73:cd:6d:fe:a2:fc:8f:1b: 3e:83:15:b6:d0:60:16:01:ec:1c:97:72:90:63:79:21:06:1d: a0:da:b2:bc:cc:b8:02:5e:fd:11:b8:12:14:3b:22:18:8e:b0: 99:97:01:9a:f6:5c:51:6d:2b:2e:49:6a:b1:ed:24:c7:44:3c: a2:63:0a:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKEVDRTJFMDE2MDE2MUI2Rjc3RkM3NDk3NkZBN0Q0NkMz RTQyMzJERUYwHhcNMjUxMjE1MDQxMjIxWhcNMjUxMjIyMDQxMjIxWjAYMRYwFAYD VQQDDA02OTNmOGFhNS1mMDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzys7Vd3LPB/7GDQu5MqUNAml9syKfpw+1PlWiHK0jzDLt6BddAIOIKKwg6a3 5aFZNL6u97VYNRSkGxoQgVYHMOqESLBkTp45rJvzLvWkPPmuuQF1DuNwSpOGTY4M KK1uaLCqjejL5w0+rZJvT+9J55kw40Lkax0OzvhI5cMUkfPDNtJJ1tnWug4y19NQ 02ih2ttZMskkM2r/om7TAJZ7t4FRJoBRFIm2s8AjRhPUCSRcBtFsB2/Iv/oYfxvR F9RAKPcZzhghnriUah60XwywhGLgAs8AW50+vod3p2DWC4A0XHhGDhjrXZrQNrxa 5wXF4MpQ3cVXNQR1wwVGOGVsfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3ym2tY SDzEz6iYr+B83RUERahxMB8GA1UdIwQYMBaAFOzi4BYBYbb3f8dJdvp9RsPkIy3v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi83RDk5QUNBQzMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2ZF94MGwyLW4xR3ctUWpM ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdPTGdGZ0ZodHZkX3gwbDItbjFHdy1RakxlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi83RDk5QUNBQzMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2 ZF94MGwyLW4xR3ctUWpMZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4IBUpPrY0ygj2C9rPI+IUvRGd0ZotickeJJol+cOJHED4Et6mcBs8 uPZ6c+gPzwE7D9NEVdqUmyZZp+4OKvaO90qPsicNaWpUoPBiHmyeHrIk50AUQP4Q 9hcVN3ATyvIdxUwInMnRGx85T2u4G5luTg9pxJeJK8aQ/DbcD1va1plyCcn7zsw9 DeMVfsE2q/Gt+gQASAirI7kJnyrFFN6offsvXQXtEK8VGiF7P2Hfz/5v+UKoPLth tCpOvbXxc81t/qL8jxs+gxW20GAWAewcl3KQY3khBh2g2rK8zLgCXv0RuBIUOyIY jrCZlwGa9lxRbSsuSWqx7STHRDyiYwr0 -----END CERTIFICATE-----Generated at Wed Dec 17 01:23:12 2025 by rpki-client