This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft File: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json) Hash identifier: bYWgPX83sGNKdo2AQzFiEnhmi0frr8NgxhkRDi9Z+0g= Subject key identifier: F7:A1:B4:8D:6F:7E:D8:7B:CA:E3:B2:10:49:62:F7:0F:92:17:A9:5B Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66 Certificate issuer: /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft Manifest number: B8 Signing time: Sun 21 Dec 2025 05:07:42 +0000 Manifest this update: Sun 21 Dec 2025 05:07:41 +0000 Manifest next update: Sun 28 Dec 2025 05:07:41 +0000 Files and hashes: 1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: +kwQ9WjwXTbq7/jiSIuor409OCS+r6HpdgAzzvwDCEY=) 2: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: NFkplWmsMA3dKF672WmukIl9RpnNjHUYN1V/j7l+GN0=) 3: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: FPrJ8rYYz3zXm+ulxONvcKZWR1V8127XQSJ/4rwqktA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66 Validity Not Before: Dec 21 05:07:41 2025 GMT Not After : Dec 28 05:07:41 2025 GMT Subject: CN=6947809d-f48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:3f:d1:f1:4b:aa:c8:97:7f:bc:b2:8b:36: 8f:73:18:79:9d:2b:ab:95:73:a4:69:ec:53:08:21: 85:3f:f1:7b:44:14:78:fd:44:95:ab:d4:60:06:d0: f5:cf:f3:87:dc:60:94:e6:5d:63:48:20:28:d9:7b: 55:09:d0:19:8b:51:0b:8d:6f:4d:d0:85:5d:64:04: cb:9f:19:3d:9c:cc:97:5d:d7:32:4f:be:8d:e3:69: 1c:3e:97:68:8c:35:95:89:2c:88:ea:4d:92:e3:06: 36:20:13:ac:da:83:85:9a:c5:9e:87:12:eb:5b:85: 31:ba:2a:4b:f6:f2:18:ec:05:4c:19:bc:a6:4f:a0: b7:92:08:90:e5:45:38:4f:ce:06:a0:16:5d:49:42: dc:b2:2d:e6:59:28:2f:98:5e:7b:ee:b8:5d:dc:f2: d7:db:e9:a3:dd:ce:4e:bb:db:de:a9:e3:f4:29:8a: c8:83:76:20:34:09:d8:39:b0:f3:44:c2:53:1f:3d: a0:69:8e:fe:11:08:2f:01:d4:d9:77:80:cb:19:6f: 63:ad:b0:60:3a:6c:02:bf:0c:20:ed:df:a2:12:c1: fb:a3:87:8b:0c:b0:73:0a:87:18:93:d3:ef:09:9b: ed:c2:41:11:38:1d:1c:b9:3e:22:4e:c0:d9:93:e7: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A1:B4:8D:6F:7E:D8:7B:CA:E3:B2:10:49:62:F7:0F:92:17:A9:5B X509v3 Authority Key Identifier: keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:48:9a:39:49:04:9f:0b:0a:0b:54:6b:ea:2b:7f:ef:88:22: 59:ff:e4:0e:a7:11:aa:02:53:a2:c6:6e:14:61:be:1b:27:d9: 07:60:aa:5c:17:cd:f7:41:8b:ec:e9:6b:32:ac:0d:0c:89:89: 6a:2e:4d:88:c2:b8:aa:d4:ab:b7:96:3b:1a:72:98:0c:9b:ea: d2:75:a1:7c:33:ec:a6:7a:a2:82:1c:bb:76:3f:d5:b3:3b:7f: 36:30:03:bb:7d:d4:5f:9f:99:f6:df:61:c5:9f:68:48:c3:6d: aa:b4:24:0c:b6:6d:2a:69:c7:09:66:f2:c8:13:4c:73:91:f0: 6b:21:6c:3a:f7:bf:1c:de:62:e5:53:9b:c1:ca:2d:0e:f6:ec: 48:42:b2:b2:d8:4a:aa:6b:0d:73:91:cb:f9:74:58:36:c5:17: 9d:6f:a6:5d:20:4c:2f:fe:ca:d1:bc:ab:f9:9f:c0:f8:48:ad: b2:05:0a:55:d4:d5:ef:5a:d5:02:37:51:34:70:2b:6f:cb:c4: 55:a7:dd:3d:77:6e:71:9b:21:d6:b1:ba:c6:6f:f3:13:ce:89: 9a:fa:28:76:81:94:11:95:30:ad:6f:15:f5:e5:0e:97:89:cd: 48:47:b0:9a:ed:51:35:6b:f9:ee:46:95:70:b3:b2:ff:69:d6: f7:a0:7c:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBM0MxMTAvBgNVBAUTKEVFODE5QTQ5QjhDOEE4NDQxM0VFOEZFODMyNkVGMTM3 RjUxODVDNjYwHhcNMjUxMjIxMDUwNzQxWhcNMjUxMjI4MDUwNzQxWjAYMRYwFAYD VQQDDA02OTQ3ODA5ZC1mNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBA/0fFLqsiXf7yyizaPcxh5nSurlXOkaexTCCGFP/F7RBR4/USVq9RgBtD1 z/OH3GCU5l1jSCAo2XtVCdAZi1ELjW9N0IVdZATLnxk9nMyXXdcyT76N42kcPpdo jDWViSyI6k2S4wY2IBOs2oOFmsWehxLrW4UxuipL9vIY7AVMGbymT6C3kgiQ5UU4 T84GoBZdSULcsi3mWSgvmF577rhd3PLX2+mj3c5Ou9veqeP0KYrIg3YgNAnYObDz RMJTHz2gaY7+EQgvAdTZd4DLGW9jrbBgOmwCvwwg7d+iEsH7o4eLDLBzCocYk9Pv CZvtwkEROB0cuT4iTsDZk+dFdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPehtI1v fth7yuOyEEli9w+SF6lbMB8GA1UdIwQYMBaAFO6Bmkm4yKhEE+6P6DJu8Tf1GFxm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkEzQy83QkZCNENBQ0M2 QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi83b0dhU2JqSXFFUVQ3b19vTW03eE5fVVlY R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdvR2FTYmpJcUVRVDdvX29NbTd4Tl9VWVhHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkEzQy83QkZCNENBQ0M2QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi83b0dhU2JqSXFF UVQ3b19vTW03eE5fVVlYR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCSJo5SQSfCwoLVGvqK3/viCJZ/+QOpxGqAlOixm4UYb4bJ9kHYKpc F833QYvs6WsyrA0MiYlqLk2Iwriq1Ku3ljsacpgMm+rSdaF8M+ymeqKCHLt2P9Wz O382MAO7fdRfn5n232HFn2hIw22qtCQMtm0qaccJZvLIE0xzkfBrIWw6978c3mLl U5vByi0O9uxIQrKy2Eqqaw1zkcv5dFg2xRedb6ZdIEwv/srRvKv5n8D4SK2yBQpV 1NXvWtUCN1E0cCtvy8RVp909d25xmyHWsbrGb/MTzoma+ih2gZQRlTCtbxX15Q6X ic1IR7Ca7VE1a/nuRpVws7L/adb3oHwp -----END CERTIFICATE-----Generated at Sun Dec 21 10:22:07 2025 by rpki-client