This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json) Hash identifier: m53sA3oloczwDLOwXHXf5rEYYmR3skbmCtHf5EujtcQ= Subject key identifier: 7C:43:69:A0:58:36:C8:AB:FA:5D:CB:10:A3:37:90:0F:B3:A6:20:B3 Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft Manifest number: 0197 Signing time: Wed 03 Dec 2025 01:57:08 +0000 Manifest this update: Wed 03 Dec 2025 01:57:08 +0000 Manifest next update: Wed 10 Dec 2025 01:57:08 +0000 Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: nr20uk1c3gKQtwJd4YvTwyInBh5CHnonLw4xtFSHJrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 01:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Validity Not Before: Dec 3 01:57:08 2025 GMT Not After : Dec 10 01:57:08 2025 GMT Subject: CN=692f98f4-c4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:f4:86:c0:c2:0a:b0:d1:b0:ae:c8:90:4d: 55:60:b3:74:7f:b5:c0:7a:ec:6e:f5:dc:54:d4:e1: 2b:80:f6:74:bb:35:46:95:58:61:4e:69:dd:f5:56: 18:bb:74:1e:1f:08:a4:56:53:c5:50:f0:80:73:00: 67:a3:e6:48:6d:63:c4:84:49:4a:67:28:f3:0d:44: ac:20:9b:7f:b7:7b:e9:93:0b:ec:e9:39:51:06:48: bf:f4:80:df:71:ee:11:11:e5:59:47:26:81:2b:de: a5:71:26:b8:4c:3e:df:f7:cb:ef:7c:99:25:68:81: d6:8b:01:23:64:cd:ec:3d:37:bf:4b:45:8e:68:9a: f9:3e:e0:9f:70:2e:de:68:36:66:90:e3:c2:3b:4d: 5b:40:16:8a:2a:74:fe:c3:e4:83:88:e0:10:8d:5b: cb:56:42:d7:59:19:92:ea:d3:0b:1d:70:ed:ed:f9: c6:d6:91:96:03:47:1b:b3:72:50:c5:72:97:f0:57: f5:26:7b:b0:10:47:c5:cc:fc:ac:ac:64:43:f0:6e: 74:25:82:fa:94:59:7b:33:a5:85:25:df:1f:00:a0: c1:55:5b:a1:2a:5f:7e:28:08:7a:3c:bc:6c:96:24: 0e:5e:ab:fb:7c:5a:98:f8:23:49:f3:12:72:09:fc: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:43:69:A0:58:36:C8:AB:FA:5D:CB:10:A3:37:90:0F:B3:A6:20:B3 X509v3 Authority Key Identifier: keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:69:8a:4b:1e:a5:0e:fe:3c:0e:f6:51:b7:df:19:18:60:b5: ad:ae:3b:10:91:02:c3:1c:39:e1:6a:82:55:29:24:cb:e3:e5: 89:1f:70:02:fa:68:5b:12:6b:33:f0:26:a7:4d:54:62:50:1d: 31:35:71:71:c9:72:be:0e:c2:98:3d:80:8b:35:ab:df:7f:03: b9:36:cf:20:cb:18:c3:91:40:d6:02:3b:8d:32:68:31:83:e7: 9a:4c:05:96:20:b6:c8:5f:63:93:4e:47:56:2d:97:f7:2d:68: 09:e2:93:2d:f2:5a:bb:12:08:b7:d5:dc:af:b4:e7:b7:c8:ce: e0:6a:e5:1f:ff:9f:6e:be:75:f2:f8:e1:77:c1:c4:1f:9e:69: 66:06:e1:2e:a2:01:88:02:94:82:b2:32:a2:ee:e7:30:f5:2e: 27:af:f1:05:40:d8:f3:70:56:a6:18:b8:02:98:16:2a:4c:b2: 2b:c8:41:93:c9:51:9d:33:f6:68:69:41:3e:83:4c:f8:99:e5: 26:c4:72:5c:f7:a3:df:ff:a9:83:43:21:63:cb:86:fa:39:15: 0b:d6:b8:81:95:3e:6b:20:1e:25:e5:54:5e:b6:17:0b:06:58: 15:a8:20:73:0c:ce:58:24:0f:59:7d:6d:9c:bb:54:19:46:ca: 30:80:72:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB MEVCRDdENEIwHhcNMjUxMjAzMDE1NzA4WhcNMjUxMjEwMDE1NzA4WjAYMRYwFAYD VQQDEw02OTJmOThmNC1jNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQf0hsDCCrDRsK7IkE1VYLN0f7XAeuxu9dxU1OErgPZ0uzVGlVhhTmnd9VYY u3QeHwikVlPFUPCAcwBno+ZIbWPEhElKZyjzDUSsIJt/t3vpkwvs6TlRBki/9IDf ce4REeVZRyaBK96lcSa4TD7f98vvfJklaIHWiwEjZM3sPTe/S0WOaJr5PuCfcC7e aDZmkOPCO01bQBaKKnT+w+SDiOAQjVvLVkLXWRmS6tMLHXDt7fnG1pGWA0cbs3JQ xXKX8Ff1JnuwEEfFzPysrGRD8G50JYL6lFl7M6WFJd8fAKDBVVuhKl9+KAh6PLxs liQOXqv7fFqY+CNJ8xJyCfzxHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxDaaBY Nsir+l3LEKM3kA+zpiCzMB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ VU44Tnl5MG5hV3VnNjlmVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0aYpLHqUO/jwO9lG33xkYYLWtrjsQkQLDHDnhaoJVKSTL4+WJH3AC +mhbEmsz8CanTVRiUB0xNXFxyXK+DsKYPYCLNavffwO5Ns8gyxjDkUDWAjuNMmgx g+eaTAWWILbIX2OTTkdWLZf3LWgJ4pMt8lq7Egi31dyvtOe3yM7gauUf/59uvnXy +OF3wcQfnmlmBuEuogGIApSCsjKi7ucw9S4nr/EFQNjzcFamGLgCmBYqTLIryEGT yVGdM/ZoaUE+g0z4meUmxHJc96Pf/6mDQyFjy4b6ORUL1riBlT5rIB4l5VRethcL BlgVqCBzDM5YJA9ZfW2cu1QZRsowgHLK -----END CERTIFICATE-----Generated at Wed Dec 3 16:22:48 2025 by rpki-client