This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft File: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft (raw, json) Hash identifier: YeEGL3RQ8DeS0YDVZfV3mlFIn6p1Gda579DA+h13xek= Subject key identifier: 58:C7:F4:4F:84:95:88:2C:E9:89:69:7B:AE:7C:41:A4:DE:26:07:78 Authority key identifier: EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C Certificate issuer: /CN=A9193369/serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft Manifest number: 01A9 Signing time: Tue 23 Dec 2025 02:12:12 +0000 Manifest this update: Tue 23 Dec 2025 02:12:12 +0000 Manifest next update: Tue 30 Dec 2025 02:12:12 +0000 Files and hashes: 1: 7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl (hash: I3X/Z6Zak7LXmmbKcWzMzp1R+N9k8PLu6DKbk0pFN5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193369, serialNumber=EEAE52923B0BAE72C983D0105F509DF210BC091C Validity Not Before: Dec 23 02:12:12 2025 GMT Not After : Dec 30 02:12:12 2025 GMT Subject: CN=6949fa7c-29dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1a:f7:3f:90:82:80:d4:90:87:da:89:f4:c3: 89:c1:bb:69:6a:43:ec:e5:ce:e4:89:bc:72:4a:65: 87:f3:56:90:e5:1b:7c:05:8d:4f:32:88:73:47:7b: 9b:a0:1e:21:19:3e:b8:33:ef:d5:7b:59:f1:1a:eb: 3f:5e:b5:66:a5:1b:f4:f6:65:12:a7:84:94:64:ce: f1:1e:e7:02:c1:7b:78:75:b6:92:fb:bc:6a:39:67: 6c:ab:c8:53:8f:46:9a:5a:54:b3:85:42:ee:08:02: eb:89:b4:fc:99:3f:23:09:46:59:86:d0:5b:a9:8a: f6:79:41:ad:21:de:49:b4:59:c5:71:35:5f:fa:1b: 5c:89:d0:3a:99:a2:a3:25:3f:0a:b4:fa:2d:d9:5d: 55:af:cc:a2:56:d1:7d:bc:d3:4d:8b:87:c7:94:01: 19:02:f2:94:9b:f0:cc:d8:f4:06:ba:bb:e0:82:fd: 75:a4:78:62:19:ec:ff:ac:e0:15:4c:9a:c9:c3:fd: ec:14:6f:fc:ba:79:cd:49:6e:28:82:65:77:52:e5: 4f:57:9f:fc:b3:d7:4a:15:d1:ff:64:78:b4:3d:d7: e3:f1:b7:9e:43:f6:0f:5d:cc:f9:3e:39:ed:2e:67: a1:71:f8:df:4c:d0:ba:d8:54:bd:57:d4:2e:d0:63: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C7:F4:4F:84:95:88:2C:E9:89:69:7B:AE:7C:41:A4:DE:26:07:78 X509v3 Authority Key Identifier: keyid:EE:AE:52:92:3B:0B:AE:72:C9:83:D0:10:5F:50:9D:F2:10:BC:09:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193369/A51C4CAA4EFE11EE9D911C6EC4F9AE02/7q5SkjsLrnLJg9AQX1Cd8hC8CRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:44:2a:fc:ae:38:f3:48:99:68:7d:99:1d:27:be:11:e6:af: b7:e2:ac:2e:bb:d2:4e:d4:ff:c0:eb:48:2b:8e:35:82:44:a1: 9d:e4:4e:53:af:a8:45:b8:ba:ca:86:bb:90:fc:d2:42:d8:75: cb:72:1d:3b:ec:11:09:ea:b3:74:45:a8:65:78:fa:d7:6c:64: e2:fd:d6:76:6b:cc:32:d6:45:3e:a8:4b:bf:70:bf:bc:4a:72: 40:e4:31:f5:71:0f:12:ec:df:5e:1c:f4:b6:db:d7:54:4a:dd: ce:0f:34:7f:e5:bc:77:80:c9:1b:14:99:22:70:69:1e:c8:df: ea:0b:b5:96:4a:22:4e:dc:f6:fe:ad:07:0f:91:9f:c3:a5:2e: 4a:27:c1:1a:38:0b:31:7b:59:1f:42:41:bb:b3:0d:df:6a:3f: 75:b9:e6:a6:ee:a4:84:e1:44:1f:ad:d9:26:6c:41:a7:d2:04: 75:25:c0:54:9e:82:5e:05:15:b6:0f:b8:6d:5f:57:c5:0f:7c: fa:7f:6c:fe:eb:83:2e:40:32:e8:77:08:2e:f6:67:09:31:90: 6e:52:16:da:c8:17:a8:3c:bc:05:22:05:a5:46:b9:ed:1e:1d: 56:76:52:07:49:da:f1:80:f0:b3:9e:fa:54:8b:64:32:9c:c4: 04:b1:a8:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzNjkxMTAvBgNVBAUTKEVFQUU1MjkyM0IwQkFFNzJDOTgzRDAxMDVGNTA5REYy MTBCQzA5MUMwHhcNMjUxMjIzMDIxMjEyWhcNMjUxMjMwMDIxMjEyWjAYMRYwFAYD VQQDDA02OTQ5ZmE3Yy0yOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Rr3P5CCgNSQh9qJ9MOJwbtpakPs5c7kibxySmWH81aQ5Rt8BY1PMohzR3ub oB4hGT64M+/Ve1nxGus/XrVmpRv09mUSp4SUZM7xHucCwXt4dbaS+7xqOWdsq8hT j0aaWlSzhULuCALribT8mT8jCUZZhtBbqYr2eUGtId5JtFnFcTVf+htcidA6maKj JT8KtPot2V1Vr8yiVtF9vNNNi4fHlAEZAvKUm/DM2PQGurvggv11pHhiGez/rOAV TJrJw/3sFG/8unnNSW4ogmV3UuVPV5/8s9dKFdH/ZHi0Pdfj8beeQ/YPXcz5Pjnt LmehcfjfTNC62FS9V9Qu0GOTHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjH9E+E lYgs6Ylpe658QaTeJgd4MB8GA1UdIwQYMBaAFO6uUpI7C65yyYPQEF9QnfIQvAkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM2OS9BNTFDNENBQTRF RkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pzTHJuTEpnOUFRWDFDZDhoQzhD UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxNVNranNMcm5MSmc5QVFYMUNkOGhDOENSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM2OS9BNTFDNENBQTRFRkUxMUVFOUQ5MTFDNkVDNEY5QUUwMi83cTVTa2pzTHJu TEpnOUFRWDFDZDhoQzhDUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWRCr8rjjzSJlofZkdJ74R5q+34qwuu9JO1P/A60grjjWCRKGd5E5T r6hFuLrKhruQ/NJC2HXLch077BEJ6rN0RahlePrXbGTi/dZ2a8wy1kU+qEu/cL+8 SnJA5DH1cQ8S7N9eHPS229dUSt3ODzR/5bx3gMkbFJkicGkeyN/qC7WWSiJO3Pb+ rQcPkZ/DpS5KJ8EaOAsxe1kfQkG7sw3faj91ueam7qSE4UQfrdkmbEGn0gR1JcBU noJeBRW2D7htX1fFD3z6f2z+64MuQDLodwgu9mcJMZBuUhbayBeoPLwFIgWlRrnt Hh1WdlIHSdrxgPCznvpUi2QynMQEsahx -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:05 2025 by rpki-client