This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: 1nP6YCRsbFeuq/jL5hsmoLnvpIjKhu/KCL2Y9L5bmEE= Subject key identifier: B1:6A:30:3D:7D:D7:16:A1:08:34:B5:E1:8A:44:DF:E7:27:D8:64:8A Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: 0122 Signing time: Tue 23 Dec 2025 03:45:12 +0000 Manifest this update: Tue 23 Dec 2025 03:45:12 +0000 Manifest next update: Tue 30 Dec 2025 03:45:12 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: wsMnIkKjYN/FnqeMn3JnUw2C9Z+7sKEbdpIaffqhcPM=) 2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: YJwOvl48MytuGc6I1DEuIiMXD3Gk+mKKkditJ1faO0o=) 3: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: KCTQ3tbaoeUAbY8WbJ6K6Z4PRHlUfgdv71MIHaYTETs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: Dec 23 03:45:12 2025 GMT Not After : Dec 30 03:45:12 2025 GMT Subject: CN=694a1048-3cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:24:df:89:56:f5:78:32:d2:58:c5:67:9b: 8b:66:be:f6:60:c4:03:a2:ce:1d:fb:54:26:54:92: 93:ee:83:3d:74:7e:99:ea:4e:fd:64:38:d5:72:24: b2:65:74:29:07:d6:dd:4b:73:d8:a2:e3:fd:af:e7: ad:8f:46:08:fd:7d:ef:f0:dc:33:ca:0d:bf:7d:9e: 4d:82:94:21:72:bf:2f:93:c1:57:ce:bf:65:46:7e: 16:e4:bc:ac:b6:13:2d:59:fd:df:88:ed:24:f6:77: bb:a7:db:11:f7:19:fc:88:fa:57:e0:79:53:a6:2b: 57:35:be:cc:78:68:32:c3:8d:66:94:a6:9f:05:ec: 7d:03:fa:c1:82:18:54:1c:74:82:a3:8c:a7:1f:cd: 5a:0a:f6:f2:66:bb:83:29:cc:47:3d:52:9d:d8:59: 8d:b8:d9:39:e6:a5:01:fd:76:86:d0:0c:d2:74:26: 5e:45:38:a4:92:8f:76:54:82:bb:37:cf:ab:c3:d6: 6c:35:36:30:c8:c3:1f:23:4f:99:22:32:60:88:ae: 85:c8:2e:ce:99:f1:29:dd:cf:41:df:60:68:b8:9b: 6f:46:a9:e4:f7:60:9f:78:38:fb:59:c0:bc:91:55: 01:d8:25:ec:d3:11:cf:5a:a3:cd:b0:e1:7e:74:34: 1c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:30:3D:7D:D7:16:A1:08:34:B5:E1:8A:44:DF:E7:27:D8:64:8A X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:ef:7e:86:03:9c:cf:13:90:af:68:0c:9c:dc:20:fa:0c:e6: 3f:ff:e5:c1:17:b0:30:89:2b:18:52:af:8a:50:c2:f4:78:59: fe:82:89:95:26:fa:49:01:7b:aa:24:68:05:6f:c1:f8:6f:02: cc:db:91:85:19:31:36:05:f9:d8:81:7e:f9:98:1f:f2:4e:12: c5:e0:d2:a7:26:42:36:a2:24:a6:db:03:98:e5:9f:00:26:4b: 72:1f:aa:89:46:4f:7b:93:12:a8:88:80:d2:18:7e:7b:51:39: 5f:2d:4b:cf:ec:eb:cb:d7:25:3c:ff:9e:8f:95:10:91:4a:7f: 72:00:76:a0:d6:04:0b:4f:da:a5:b0:db:16:6b:a1:81:a1:45: fb:a5:5d:1c:b8:ca:31:eb:7f:a3:29:f9:fa:3c:9d:d7:58:3d: 1e:ec:eb:48:c9:b4:61:0a:f9:8d:90:ca:ed:5b:61:6d:e3:06: d4:03:2a:db:13:5b:c9:1c:55:e7:71:e0:cd:40:62:ff:fc:60: 82:f9:5e:c7:a6:5d:3b:c7:2e:1c:ad:be:39:5c:1f:39:c6:de: 43:0b:76:6a:74:f1:0d:7d:e6:25:69:f6:d7:8f:36:d1:21:0f: 62:c8:73:3b:c9:8e:7b:2b:0b:67:fe:d1:91:36:12:11:a8:52: ee:e1:0c:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC QzdDMTg2Q0MwHhcNMjUxMjIzMDM0NTEyWhcNMjUxMjMwMDM0NTEyWjAYMRYwFAYD VQQDDA02OTRhMTA0OC0zY2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfsk34lW9Xgy0ljFZ5uLZr72YMQDos4d+1QmVJKT7oM9dH6Z6k79ZDjVciSy ZXQpB9bdS3PYouP9r+etj0YI/X3v8Nwzyg2/fZ5NgpQhcr8vk8FXzr9lRn4W5Lys thMtWf3fiO0k9ne7p9sR9xn8iPpX4HlTpitXNb7MeGgyw41mlKafBex9A/rBghhU HHSCo4ynH81aCvbyZruDKcxHPVKd2FmNuNk55qUB/XaG0AzSdCZeRTikko92VIK7 N8+rw9ZsNTYwyMMfI0+ZIjJgiK6FyC7OmfEp3c9B32BouJtvRqnk92CfeDj7WcC8 kVUB2CXs0xHPWqPNsOF+dDQcQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFqMD19 1xahCDS14YpE3+cn2GSKMB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDJEOC9FMDkyNDhFQTJBQjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhm Sm5TZjhuV0JwT2k4ZkJoc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj736GA5zPE5CvaAyc3CD6DOY//+XBF7AwiSsYUq+KUML0eFn+gomV JvpJAXuqJGgFb8H4bwLM25GFGTE2BfnYgX75mB/yThLF4NKnJkI2oiSm2wOY5Z8A JktyH6qJRk97kxKoiIDSGH57UTlfLUvP7OvL1yU8/56PlRCRSn9yAHag1gQLT9ql sNsWa6GBoUX7pV0cuMox63+jKfn6PJ3XWD0e7OtIybRhCvmNkMrtW2Ft4wbUAyrb E1vJHFXnceDNQGL//GCC+V7Hpl07xy4crb45XB85xt5DC3ZqdPENfeYlafbXjzbR IQ9iyHM7yY57Kwtn/tGRNhIRqFLu4Qxc -----END CERTIFICATE-----Generated at Tue Dec 23 16:09:56 2025 by rpki-client