This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: ldNgqWX4IUxu2DaGdGoU4PYt/Q/KV4W6PmoGCNEW1+M= Subject key identifier: 2A:72:2C:EF:5A:A9:3F:96:0B:F5:3C:A1:A0:1D:D8:95:33:7E:9A:3C Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 03DB Signing time: Thu 04 Dec 2025 23:08:20 +0000 Manifest this update: Thu 04 Dec 2025 23:08:19 +0000 Manifest next update: Thu 11 Dec 2025 23:08:19 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: ke+S43gOfhXxBfrytp5u7Eb1pyHZviaF92WHAaNwXHk=) 2: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: c8xFCddcnF0FXPYTeBOXBWlSAzFr4WalC4h3RJBUm0g=) 3: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: DiuzbA0Eyu2SFjBtadVHxxhq9EQIpll9WL5oTCeuzso=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: Keth2970vjYbkSSDZ7cyyc004SjVLXN/KW/3yleZzSU=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: sxadIBziqD0gGHzlLgMeF3y6MatZTVAVquFeXL0wHHA=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk=) 7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: JIzx72Iu5kXzy1zuPq6JcTLGHOjrjN0dOL1PQPVedEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Dec 4 23:08:19 2025 GMT Not After : Dec 11 23:08:19 2025 GMT Subject: CN=69321463-4cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:7b:1e:a7:45:36:4d:dc:30:09:00:e4:64: c8:72:b3:62:3e:22:2c:00:3f:e6:7b:b6:b4:17:b8: 3b:5a:d6:9e:46:cb:2b:7a:1e:c7:50:32:71:9c:96: ea:7e:97:fa:9b:e7:bd:1b:4a:76:dc:27:93:66:ae: 15:f7:a0:cb:5a:bb:82:81:80:f9:96:fd:1d:7f:1e: 0a:d4:a1:95:74:1f:d6:d7:57:50:d2:71:bc:d0:2b: 0d:55:37:56:f0:e7:fc:70:a0:fa:e7:4a:aa:13:0b: 64:9b:29:0a:5b:52:ac:a0:dc:75:3e:69:28:a8:19: 4c:1b:b9:c3:e7:2a:b3:21:20:18:83:f5:07:68:e5: e3:ee:a9:01:2c:5c:26:51:19:b1:3a:71:a6:d6:07: 1e:11:d6:d8:f6:0a:61:54:b8:04:c8:a3:eb:13:ce: f3:22:31:a0:7a:97:8e:2f:5a:26:ac:7f:7d:92:a6: 8a:10:79:f0:d7:42:57:3f:5a:b2:b9:13:c1:de:e8: 96:f3:92:29:8e:80:71:42:48:92:66:a2:2f:3f:65: 10:67:fb:9b:65:cc:51:0e:02:b1:6c:fb:74:ad:8d: 0b:61:10:91:58:d9:a5:36:67:7d:11:2f:a7:37:5f: 35:2d:95:93:ab:18:6b:ea:fe:33:ea:00:92:21:21: 10:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:72:2C:EF:5A:A9:3F:96:0B:F5:3C:A1:A0:1D:D8:95:33:7E:9A:3C X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e5:85:bc:5c:94:5f:32:d1:0a:74:ca:ae:ec:6b:f8:0f:1c: 43:f4:28:65:11:83:f7:bb:2a:98:a3:94:aa:3d:26:54:91:cd: 04:9d:24:9d:71:c3:98:5e:cc:21:3b:38:9f:4d:ec:91:a3:3b: dd:38:c9:a4:fd:f4:f2:69:08:83:f0:be:18:4f:26:73:85:c8: a7:44:45:54:96:83:4c:2e:4b:8b:c8:36:17:2f:4e:25:7a:bd: cb:20:7c:a7:1e:15:ca:df:29:6a:59:69:53:60:04:3a:9f:42: 5c:93:83:27:d0:93:72:e7:e1:d5:3e:cf:12:1a:2a:6c:7e:7f: 8d:8a:76:0d:bd:67:de:eb:3e:56:6c:12:90:7f:4b:f8:e2:64: 64:e7:68:52:71:0c:b4:07:8c:49:ef:16:98:32:9b:10:7a:e5: c2:51:15:9d:6b:63:7a:0d:18:ed:76:7b:1a:bd:ee:c5:52:b4: 1f:72:99:1c:f2:66:e1:d5:79:79:a8:f0:76:32:ca:4a:4e:91: 98:57:55:4f:05:7d:e2:7a:6f:a2:51:21:bb:b8:2f:b3:c0:ac: 4c:3d:bd:21:34:04:ab:c8:f9:88:73:c1:92:49:0c:c1:44:fc: fa:d2:b6:29:81:42:09:36:e2:a2:d4:e4:8c:c9:0d:e5:ad:9b: 03:08:37:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUxMjA0MjMwODE5WhcNMjUxMjExMjMwODE5WjAYMRYwFAYD VQQDEw02OTMyMTQ2My00Y2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5d7HqdFNk3cMAkA5GTIcrNiPiIsAD/me7a0F7g7WtaeRssreh7HUDJxnJbq fpf6m+e9G0p23CeTZq4V96DLWruCgYD5lv0dfx4K1KGVdB/W11dQ0nG80CsNVTdW 8Of8cKD650qqEwtkmykKW1KsoNx1PmkoqBlMG7nD5yqzISAYg/UHaOXj7qkBLFwm URmxOnGm1gceEdbY9gphVLgEyKPrE87zIjGgepeOL1omrH99kqaKEHnw10JXP1qy uRPB3uiW85IpjoBxQkiSZqIvP2UQZ/ubZcxRDgKxbPt0rY0LYRCRWNmlNmd9ES+n N181LZWTqxhr6v4z6gCSISEQywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpyLO9a qT+WC/U8oaAd2JUzfpo8MB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz5YW8XJRfMtEKdMqu7Gv4DxxD9ChlEYP3uyqYo5SqPSZUkc0EnSSd ccOYXswhOzifTeyRozvdOMmk/fTyaQiD8L4YTyZzhcinREVUloNMLkuLyDYXL04l er3LIHynHhXK3ylqWWlTYAQ6n0Jck4Mn0JNy5+HVPs8SGipsfn+NinYNvWfe6z5W bBKQf0v44mRk52hScQy0B4xJ7xaYMpsQeuXCURWda2N6DRjtdnsave7FUrQfcpkc 8mbh1Xl5qPB2MspKTpGYV1VPBX3iem+iUSG7uC+zwKxMPb0hNASryPmIc8GSSQzB RPz60rYpgUIJNuKi1OSMyQ3lrZsDCDcN -----END CERTIFICATE-----Generated at Sat Dec 6 21:29:16 2025 by rpki-client