This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft File: c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json) Hash identifier: kIPknrYRnhexIKc7pl82ZsRbZpImReVC4Pc8Uzf2s+Q= Subject key identifier: B9:F9:83:CD:B1:E2:D8:3E:C2:52:B9:33:46:D9:E7:4E:95:FF:FC:88 Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Certificate serial: 084D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft Manifest number: 14DE Signing time: Thu 18 Dec 2025 18:06:29 +0000 Manifest this update: Thu 18 Dec 2025 18:06:29 +0000 Manifest next update: Thu 25 Dec 2025 18:06:29 +0000 Files and hashes: 1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: HiJVjg6j3+mCO7xtkFfXjIaCpShdBSi0b169Y6VQfBE=) 2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: Wy656K9y8HRrMZ3s/WXbZct5wLSLzkShWRKdtdLgnAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2125 (0x84d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Validity Not Before: Dec 18 18:06:29 2025 GMT Not After : Dec 25 18:06:29 2025 GMT Subject: CN=694442a5-3f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:26:ea:03:6d:5c:18:be:e7:60:7c:55:4f:91: 3f:79:b6:2b:9d:e1:ab:6e:c6:e4:af:f6:5e:ff:86: 47:f9:62:bd:dc:f2:26:08:f0:d1:71:4f:9f:c9:06: 39:a3:0f:2b:86:0d:a4:be:9b:d4:11:2f:0c:be:2c: b2:63:dd:14:c8:d3:cd:8e:c7:85:5a:36:9b:40:39: d2:97:36:51:c6:94:b3:ee:d4:ee:cd:08:fd:0f:7b: 5c:97:af:72:87:2c:8f:32:14:f5:e9:9d:93:05:36: fa:53:1f:b8:7c:53:95:7f:fc:4f:39:ce:97:88:81: 2d:21:1e:8f:cb:7f:8a:d1:d3:de:fc:e5:41:11:33: 9a:19:d4:c2:dc:53:23:99:42:c7:a8:81:d6:0c:5f: 79:ab:14:f7:bb:0e:e7:74:51:7c:d4:ff:d3:1d:e0: a9:e5:fe:a3:18:dc:d5:ad:95:ff:79:db:27:c3:f8: 52:58:c0:52:c3:60:a8:f5:a2:f1:25:94:6f:8b:64: 72:fd:7f:a0:95:9f:12:06:b8:b4:6f:1d:56:1d:3d: f0:ed:4d:1f:47:74:7f:4a:09:7b:64:51:ac:c9:0f: ea:ce:40:77:b8:d5:6a:96:78:e3:e9:b7:db:3a:ea: c7:9f:27:8f:0d:2d:b3:ef:49:3a:ee:76:7f:d8:3b: 13:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F9:83:CD:B1:E2:D8:3E:C2:52:B9:33:46:D9:E7:4E:95:FF:FC:88 X509v3 Authority Key Identifier: keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:08:f2:29:38:a5:2e:3e:9f:78:dd:8e:6e:42:d7:e5:a3:ab: 0e:7d:86:ef:e5:37:95:4c:54:61:a8:3a:79:26:ee:02:f9:b0: a1:bf:80:20:c5:e6:1d:92:f1:a8:76:74:57:82:e4:43:c6:f8: 59:d7:fc:83:86:71:45:b0:b9:0e:56:fa:24:87:9b:80:ba:49: 2a:a9:34:d7:59:92:eb:3e:66:50:4e:2d:42:26:43:4c:ce:f0: 9a:43:a4:cf:be:f7:65:e7:73:cb:48:bf:da:ec:d9:fa:df:06: 76:79:de:3e:3b:0c:e8:2c:a7:4f:8e:13:c0:c2:0a:36:c7:e5: 36:8a:1c:4f:1a:19:16:b5:dd:eb:29:92:92:4e:a9:cf:70:13: a8:c9:a7:7a:fb:3c:ae:1e:0b:34:ed:d2:2b:5b:d5:17:84:0d: dd:c6:1b:29:97:67:42:01:14:77:6b:8b:fa:98:68:2e:c1:17: 59:95:71:cd:ec:1a:ac:c5:eb:5e:29:81:75:4f:4d:d6:98:18: 92:83:f4:6d:2a:ff:d0:9a:a8:31:95:29:c4:df:1e:0e:02:8f: 4a:3c:10:75:ac:af:3e:c9:e7:73:1f:9e:a2:eb:e5:67:23:ea: 12:23:1a:28:a7:79:45:44:7b:c1:51:ae:a0:f3:62:ad:12:6f: c9:75:24:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz NzAwMTBDNTkwHhcNMjUxMjE4MTgwNjI5WhcNMjUxMjI1MTgwNjI5WjAYMRYwFAYD VQQDDA02OTQ0NDJhNS0zZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSbqA21cGL7nYHxVT5E/ebYrneGrbsbkr/Ze/4ZH+WK93PImCPDRcU+fyQY5 ow8rhg2kvpvUES8MviyyY90UyNPNjseFWjabQDnSlzZRxpSz7tTuzQj9D3tcl69y hyyPMhT16Z2TBTb6Ux+4fFOVf/xPOc6XiIEtIR6Py3+K0dPe/OVBETOaGdTC3FMj mULHqIHWDF95qxT3uw7ndFF81P/THeCp5f6jGNzVrZX/edsnw/hSWMBSw2Co9aLx JZRvi2Ry/X+glZ8SBri0bx1WHT3w7U0fR3R/Sgl7ZFGsyQ/qzkB3uNVqlnjj6bfb OurHnyePDS2z70k67nZ/2DsTtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn5g82x 4tg+wlK5M0bZ506V//yIMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEt TDlkUjVPQlF3NjAzQUJERmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9CPIpOKUuPp943Y5uQtflo6sOfYbv5TeVTFRhqDp5Ju4C+bChv4Ag xeYdkvGodnRXguRDxvhZ1/yDhnFFsLkOVvokh5uAukkqqTTXWZLrPmZQTi1CJkNM zvCaQ6TPvvdl53PLSL/a7Nn63wZ2ed4+OwzoLKdPjhPAwgo2x+U2ihxPGhkWtd3r KZKSTqnPcBOoyad6+zyuHgs07dIrW9UXhA3dxhspl2dCARR3a4v6mGguwRdZlXHN 7BqsxeteKYF1T03WmBiSg/RtKv/QmqgxlSnE3x4OAo9KPBB1rK8+yedzH56i6+Vn I+oSIxoop3lFRHvBUa6g82KtEm/JdSS/ -----END CERTIFICATE-----Generated at Sat Dec 20 00:32:26 2025 by rpki-client