This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json) Hash identifier: qPSV+mXWvSqVssRdv8LHOCIHMiZ+ywNwUqmHC4Q98Ws= Subject key identifier: 99:02:79:E7:1B:2C:D7:7D:93:38:00:55:29:F7:38:A0:D9:1C:94:19 Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 039F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft Manifest number: 0397 Signing time: Fri 19 Dec 2025 00:01:45 +0000 Manifest this update: Fri 19 Dec 2025 00:01:44 +0000 Manifest next update: Fri 26 Dec 2025 00:01:44 +0000 Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: 3r4BU+8BaL0HrEhUgf0sC5c0SJqw1pyoG71aUdmDHFk=) 2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 5H3doinpQy2aJUR8V/Iyn/j6ZGC3RyvpumpsTRmuHeE=) 3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: lc1pPdhpDyedJmN9wKoMqneYMH913sVIQlr9uEAlmPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Validity Not Before: Dec 19 00:01:44 2025 GMT Not After : Dec 26 00:01:44 2025 GMT Subject: CN=694495e9-dd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:34:78:dd:03:0c:14:d3:0a:13:53:dd:f4:3d: 54:4b:1d:1d:f6:bc:3c:ff:2c:73:22:da:7d:38:8c: d7:96:90:c1:c6:30:e7:47:a1:01:4a:dc:74:7b:98: 28:bc:05:be:41:bd:17:bc:ea:c2:7e:5e:22:1d:e2: 57:cb:fd:ee:1b:21:71:04:9a:24:7c:12:0e:e9:3d: c9:ba:a9:9e:88:4b:f9:c3:f2:0a:e9:93:a2:89:88: 65:6f:be:97:c8:67:30:e1:58:e8:fc:4e:36:6a:ae: 29:ec:35:b7:51:77:41:41:0c:65:23:c5:d3:22:1b: 23:0f:99:e9:fa:0b:81:a5:f0:4e:74:26:e9:37:64: 58:37:59:a0:3b:04:e3:d7:ab:1b:8a:05:46:3d:56: e8:f3:cc:2f:a2:df:85:e7:e4:cd:c3:cb:d6:ec:cd: 15:c7:a0:b8:07:35:ff:4d:de:31:7b:23:74:d9:91: 4d:55:b6:da:9b:79:eb:e9:83:a2:f3:ca:95:63:83: 77:04:fe:93:f0:eb:c4:a5:17:fa:72:4c:22:c0:05: 3d:f1:04:74:c0:e9:98:dc:15:96:ee:54:74:5c:5d: ef:59:ac:1e:bc:bc:7d:9a:b0:91:2a:8f:d8:8b:77: cd:7d:6d:45:b3:9f:4e:79:f8:6d:e6:f0:10:aa:7b: 67:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:02:79:E7:1B:2C:D7:7D:93:38:00:55:29:F7:38:A0:D9:1C:94:19 X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:cb:c9:6d:13:f5:9f:da:58:8b:57:4d:f0:2b:af:30:27:bd: 40:cb:0f:8b:a3:35:ab:f2:f4:55:e3:d7:09:8f:6a:c9:2a:df: 23:68:5d:49:73:3c:e9:c0:a3:48:a6:d5:fe:ef:c8:a4:13:70: bf:c4:87:39:1c:80:5b:c0:d8:01:17:2b:53:5f:bb:19:22:79: 73:c3:36:2b:d6:93:9d:3b:d9:df:14:12:11:e8:b9:71:19:8a: 6d:a6:65:1f:31:5a:eb:1b:1e:74:c1:84:9d:65:1c:de:b9:b0: 0f:27:49:d8:11:da:e0:e8:e0:f0:bf:ff:30:4a:53:31:40:d1: cb:67:7c:b0:8e:d8:e8:cb:a7:2e:8b:c2:07:cd:10:c9:aa:7c: 28:ca:e8:f2:6f:ed:16:aa:d7:07:da:b3:9d:32:66:84:7a:1f: 8d:38:35:84:9a:14:5e:79:e6:e8:2c:4a:89:1c:60:15:5a:db: 69:d3:8a:3b:d7:a8:ba:c8:f0:ef:c9:8e:96:44:01:e2:cd:39: 85:b5:25:c2:99:6d:64:0d:5a:ea:21:51:6f:19:4b:e9:3a:18: 1f:22:d5:20:59:3c:af:95:6f:98:a0:f7:37:0e:d6:ed:ef:f4: 1c:d2:b7:4e:c8:60:b9:8b:b9:de:a2:da:e0:d4:02:8b:29:fa: 98:ae:6e:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjUxMjE5MDAwMTQ0WhcNMjUxMjI2MDAwMTQ0WjAYMRYwFAYD VQQDDA02OTQ0OTVlOS1kZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjzR43QMMFNMKE1Pd9D1USx0d9rw8/yxzItp9OIzXlpDBxjDnR6EBStx0e5go vAW+Qb0XvOrCfl4iHeJXy/3uGyFxBJokfBIO6T3JuqmeiEv5w/IK6ZOiiYhlb76X yGcw4Vjo/E42aq4p7DW3UXdBQQxlI8XTIhsjD5np+guBpfBOdCbpN2RYN1mgOwTj 16sbigVGPVbo88wvot+F5+TNw8vW7M0Vx6C4BzX/Td4xeyN02ZFNVbbam3nr6YOi 88qVY4N3BP6T8OvEpRf6ckwiwAU98QR0wOmY3BWW7lR0XF3vWawevLx9mrCRKo/Y i3fNfW1Fs59Oefht5vAQqntnfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkCeecb LNd9kzgAVSn3OKDZHJQZMB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3y8ltE/Wf2liLV03wK68wJ71Ayw+LozWr8vRV49cJj2rJKt8jaF1J czzpwKNIptX+78ikE3C/xIc5HIBbwNgBFytTX7sZInlzwzYr1pOdO9nfFBIR6Llx GYptpmUfMVrrGx50wYSdZRzeubAPJ0nYEdrg6ODwv/8wSlMxQNHLZ3ywjtjoy6cu i8IHzRDJqnwoyujyb+0WqtcH2rOdMmaEeh+NODWEmhReeeboLEqJHGAVWttp04o7 16i6yPDvyY6WRAHizTmFtSXCmW1kDVrqIVFvGUvpOhgfItUgWTyvlW+YoPc3Dtbt 7/Qc0rdOyGC5i7neotrg1AKLKfqYrm4W -----END CERTIFICATE-----Generated at Fri Dec 19 18:34:41 2025 by rpki-client