This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json) Hash identifier: ldldDzWnhP1vZB2vHjgpPyqSzaYxPNQfVJeG+PqFrec= Subject key identifier: AB:B3:DC:8D:F8:B3:4C:DB:A9:B5:8D:92:C3:C4:0C:7E:6C:6B:13:E7 Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Certificate serial: 07E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft Manifest number: 0FD8 Signing time: Mon 22 Dec 2025 20:27:51 +0000 Manifest this update: Mon 22 Dec 2025 20:27:51 +0000 Manifest next update: Mon 29 Dec 2025 20:27:51 +0000 Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: 6y6XMyr5+3ZT3H88+Hu1ce+psislTaxc6ajuio7sr88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2023 (0x7e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388 Validity Not Before: Dec 22 20:27:51 2025 GMT Not After : Dec 29 20:27:51 2025 GMT Subject: CN=6949a9c7-2387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3d:a6:dc:2e:78:07:7b:b9:37:06:69:e7:16: a0:20:df:d1:42:9f:fd:47:92:af:13:bd:33:ca:94: 51:68:c2:8f:50:be:1f:36:46:19:a8:f1:24:0d:60: 46:31:34:c5:7d:a2:d0:3b:4b:1e:c4:98:eb:ad:ec: 42:48:f5:2e:b1:ee:d9:2c:ff:20:a3:a7:cd:b5:d8: 57:87:11:f5:3c:0a:78:f9:17:ed:38:46:48:44:a2: 43:03:31:e4:87:c5:89:93:4b:3a:e3:1a:0c:4e:4f: d9:60:a8:d2:31:e5:69:1f:19:85:92:c1:6e:51:5b: af:4f:fb:9c:ee:20:d0:eb:65:1c:5e:2b:4e:2a:64: 2b:11:03:1d:1e:f8:bf:e2:19:27:ca:49:63:a1:e9: c6:f3:e3:2e:70:ee:16:5e:ae:0d:b8:09:2b:5b:e1: 55:d5:4e:51:c1:0f:66:35:d2:31:60:e3:1b:b0:dd: b5:5b:4f:47:69:69:63:93:5e:d5:77:de:8e:b2:83: 99:69:d5:7f:97:91:32:e1:49:15:df:b0:62:c0:28: 81:d2:eb:0a:5e:51:45:ad:3c:9b:eb:1d:97:f1:3b: 40:e3:d3:a3:e7:9c:f8:ac:75:b8:fe:ca:8a:cf:55: 10:02:b2:5c:35:e1:eb:6d:c0:05:1b:b5:3e:dc:5e: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B3:DC:8D:F8:B3:4C:DB:A9:B5:8D:92:C3:C4:0C:7E:6C:6B:13:E7 X509v3 Authority Key Identifier: keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f5:0a:2a:15:3c:6e:25:7f:9e:4a:03:b1:58:85:e2:58:a3: 12:2b:7e:c9:20:72:47:70:4f:47:30:20:05:98:78:4b:62:c4: 79:57:14:8d:41:ee:ee:08:67:27:f1:9f:e5:05:15:ee:08:ba: 0a:b4:07:c1:b7:08:60:87:d6:1e:50:77:9b:3b:cb:ef:ec:ce: 53:49:99:26:b5:30:65:30:49:8c:5c:d9:e2:9d:19:01:83:1f: 89:9e:df:30:8f:b1:3b:38:d4:b0:0c:ed:f9:24:57:17:63:d0: 58:58:fc:40:11:31:66:c3:92:25:b7:39:1e:49:63:af:de:a6: a8:ef:3e:86:7a:db:be:21:a4:ef:49:0b:a4:d4:1f:8a:f7:c4: 81:00:50:fa:8f:a8:2a:a8:65:82:b3:ac:a2:5a:ee:c0:f3:9c: a8:57:0f:e7:19:ad:f4:10:fc:81:88:d1:d2:07:07:8d:70:a7: bc:17:ce:d1:5c:2a:76:d3:b7:91:e7:dc:ee:e8:2f:78:b1:50: de:fe:6b:39:30:77:f4:1a:28:42:78:30:52:74:a0:44:44:57: 3d:fb:b4:e8:52:43:77:12:9b:b2:0e:91:34:d5:92:dc:19:03: 65:df:ef:42:30:f2:d1:90:da:64:24:33:be:33:6d:b1:5c:b6: d5:36:dd:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD NTY3QkUzODgwHhcNMjUxMjIyMjAyNzUxWhcNMjUxMjI5MjAyNzUxWjAYMRYwFAYD VQQDDA02OTQ5YTljNy0yMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7j2m3C54B3u5NwZp5xagIN/RQp/9R5KvE70zypRRaMKPUL4fNkYZqPEkDWBG MTTFfaLQO0sexJjrrexCSPUuse7ZLP8go6fNtdhXhxH1PAp4+RftOEZIRKJDAzHk h8WJk0s64xoMTk/ZYKjSMeVpHxmFksFuUVuvT/uc7iDQ62UcXitOKmQrEQMdHvi/ 4hknykljoenG8+MucO4WXq4NuAkrW+FV1U5RwQ9mNdIxYOMbsN21W09HaWljk17V d96OsoOZadV/l5Ey4UkV37BiwCiB0usKXlFFrTyb6x2X8TtA49Oj55z4rHW4/sqK z1UQArJcNeHrbcAFG7U+3F6GKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuz3I34 s0zbqbWNksPEDH5saxPnMB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N UjFkZWIwN2d3T2pGWjc0NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk9QoqFTxuJX+eSgOxWIXiWKMSK37JIHJHcE9HMCAFmHhLYsR5VxSN Qe7uCGcn8Z/lBRXuCLoKtAfBtwhgh9YeUHebO8vv7M5TSZkmtTBlMEmMXNninRkB gx+Jnt8wj7E7ONSwDO35JFcXY9BYWPxAETFmw5IltzkeSWOv3qao7z6Getu+IaTv SQuk1B+K98SBAFD6j6gqqGWCs6yiWu7A85yoVw/nGa30EPyBiNHSBweNcKe8F87R XCp207eR59zu6C94sVDe/ms5MHf0GihCeDBSdKBERFc9+7ToUkN3EpuyDpE01ZLc GQNl3+9CMPLRkNpkJDO+M22xXLbVNt3F -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:59 2025 by rpki-client