This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft File: 7tgLGUJsDUqCvG8LULm7El4f04o.mft (raw, json) Hash identifier: j0HF/OVOANgG+9Ixw8a2NVHOzkFL24YJKnf3+l/b5ls= Subject key identifier: 8E:C0:A3:DD:19:B4:AE:E7:EB:12:61:E7:AC:A1:B9:18:97:EC:2D:A9 Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft Manifest number: 0539 Signing time: Sat 06 Dec 2025 15:12:29 +0000 Manifest this update: Sat 06 Dec 2025 15:12:29 +0000 Manifest next update: Sat 13 Dec 2025 15:12:29 +0000 Files and hashes: 1: 7tgLGUJsDUqCvG8LULm7El4f04o.crl (hash: ssRk1pfzyGjighylTuwp3r6Gq1E+V4GGV9y7jqSTQ5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Validity Not Before: Dec 6 15:12:29 2025 GMT Not After : Dec 13 15:12:29 2025 GMT Subject: CN=693447dd-e500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:47:68:6e:63:db:24:d1:dc:d4:db:15:bf: 58:95:a8:87:fa:d5:62:00:2d:91:8c:f4:14:b1:71: 98:13:99:04:d1:8f:02:0a:3d:2f:91:26:1b:51:37: a7:6b:47:2c:ea:b0:e6:f4:12:d3:60:64:a8:14:6a: 0e:f5:d0:89:4f:d8:da:b7:bc:43:80:0a:71:cb:e2: f5:a5:2e:1a:b3:69:5f:23:eb:4b:1d:fb:11:52:c1: 8d:08:fd:87:0b:51:d5:67:fb:07:4d:04:70:ac:25: 02:51:87:0b:13:f9:00:fb:5a:a8:8d:1d:39:e4:a5: 15:86:b3:50:a3:07:0c:b1:9d:64:22:2a:ad:3c:45: a5:cc:d5:7d:ae:01:60:c3:5c:b6:41:eb:cc:40:fd: 1a:54:56:ad:f3:28:7e:75:23:b6:97:ac:79:a9:0e: a1:c8:30:0e:de:4d:60:0c:b7:99:90:a6:23:d2:92: 87:bc:09:32:3f:24:4c:28:f2:a3:73:ad:f4:ba:d3: a9:49:6d:f8:10:06:30:ed:05:75:3b:e7:04:ba:d5: 07:06:c2:df:04:3e:94:5a:43:9d:8b:85:84:19:af: e2:c1:44:c2:c7:12:bc:2a:13:ee:cf:3b:21:51:34: 0d:a8:85:13:34:4f:1e:0c:25:9b:f4:00:50:66:20: 74:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C0:A3:DD:19:B4:AE:E7:EB:12:61:E7:AC:A1:B9:18:97:EC:2D:A9 X509v3 Authority Key Identifier: keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:67:33:1e:72:62:ae:2f:af:6a:74:f0:2b:67:cf:4b:fd:95: 56:30:5c:56:87:9d:97:07:e4:b8:3c:72:b4:3e:c9:8d:04:49: 3f:1e:c4:3c:33:17:db:7a:be:6d:9e:45:c1:7e:d5:be:c4:b6: 56:97:17:84:36:1c:34:b0:d6:d7:d9:c7:8b:6e:9e:80:0d:e4: c5:a0:b3:5c:5f:3a:3f:13:4c:3a:32:b2:f5:fa:ca:6a:48:20: 7e:77:90:7c:e7:01:fb:df:fd:39:03:d1:c1:57:cf:be:93:35: 17:01:ad:74:64:12:c9:bb:01:7c:1a:d3:4d:1e:6f:0a:4e:15: 94:ce:1e:9c:ad:8a:61:8a:7a:de:84:fa:15:54:41:fe:c7:20: 46:41:b8:d6:bb:3e:87:4e:0f:89:31:41:61:ca:fd:97:a7:5a: ba:30:03:5a:5d:2f:76:00:0e:67:45:58:13:d9:5b:bf:47:b4: 94:8a:fa:a5:7f:aa:e7:07:7a:22:19:30:e4:02:02:14:97:84: db:1f:a2:67:fd:bd:11:cc:60:fd:55:9e:78:e8:d8:37:68:75: 83:4d:c2:6d:0f:12:42:cc:cc:3f:74:7f:84:cd:aa:5f:c6:78: f5:77:c8:da:17:49:9a:c3:e0:3d:c7:e8:6d:f1:90:83:64:df: 78:19:8f:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy NUUxRkQzOEEwHhcNMjUxMjA2MTUxMjI5WhcNMjUxMjEzMTUxMjI5WjAYMRYwFAYD VQQDEw02OTM0NDdkZC1lNTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpJHaG5j2yTR3NTbFb9YlaiH+tViAC2RjPQUsXGYE5kE0Y8CCj0vkSYbUTen a0cs6rDm9BLTYGSoFGoO9dCJT9jat7xDgApxy+L1pS4as2lfI+tLHfsRUsGNCP2H C1HVZ/sHTQRwrCUCUYcLE/kA+1qojR055KUVhrNQowcMsZ1kIiqtPEWlzNV9rgFg w1y2QevMQP0aVFat8yh+dSO2l6x5qQ6hyDAO3k1gDLeZkKYj0pKHvAkyPyRMKPKj c630utOpSW34EAYw7QV1O+cEutUHBsLfBD6UWkOdi4WEGa/iwUTCxxK8KhPuzzsh UTQNqIUTNE8eDCWb9ABQZiB0PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7Ao90Z tK7n6xJh56yhuRiX7C2pMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi81NDdDODU4NjQxREExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RV cUN2RzhMVUxtN0VsNGYwNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARZzMecmKuL69qdPArZ89L/ZVWMFxWh52XB+S4PHK0PsmNBEk/HsQ8 Mxfber5tnkXBftW+xLZWlxeENhw0sNbX2ceLbp6ADeTFoLNcXzo/E0w6MrL1+spq SCB+d5B85wH73/05A9HBV8++kzUXAa10ZBLJuwF8GtNNHm8KThWUzh6crYphinre hPoVVEH+xyBGQbjWuz6HTg+JMUFhyv2Xp1q6MANaXS92AA5nRVgT2Vu/R7SUivql f6rnB3oiGTDkAgIUl4TbH6Jn/b0RzGD9VZ546Ng3aHWDTcJtDxJCzMw/dH+Ezapf xnj1d8jaF0maw+A9x+ht8ZCDZN94GY/C -----END CERTIFICATE-----Generated at Sun Dec 7 01:29:46 2025 by rpki-client