This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: 5XfV2MuCgf+D4K8tMpIcgioqnIRICWvEe59oEhyADKU= Subject key identifier: 1F:0B:C6:89:E7:F2:96:95:DA:C9:8B:D6:56:71:58:13:94:B1:C2:02 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 0405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 03DC Signing time: Sat 06 Dec 2025 23:19:33 +0000 Manifest this update: Sat 06 Dec 2025 23:19:32 +0000 Manifest next update: Sat 13 Dec 2025 23:19:32 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: bVduLeJPvH2p+P9WiGMWytv1gGvsEzpSOp9M+eTZFXs=) 2: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: c8xFCddcnF0FXPYTeBOXBWlSAzFr4WalC4h3RJBUm0g=) 3: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: DiuzbA0Eyu2SFjBtadVHxxhq9EQIpll9WL5oTCeuzso=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: Keth2970vjYbkSSDZ7cyyc004SjVLXN/KW/3yleZzSU=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: sxadIBziqD0gGHzlLgMeF3y6MatZTVAVquFeXL0wHHA=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk=) 7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: JIzx72Iu5kXzy1zuPq6JcTLGHOjrjN0dOL1PQPVedEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1029 (0x405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Dec 6 23:19:32 2025 GMT Not After : Dec 13 23:19:32 2025 GMT Subject: CN=6934ba05-dfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:08:1a:90:02:f5:38:91:ee:5f:d3:67:65: 9f:ea:30:b7:df:7b:5b:2b:91:a9:e5:58:27:3a:03: 5d:95:82:40:00:58:a7:5a:8c:ca:1e:52:58:b9:7d: 09:35:c1:41:41:00:37:d4:a9:3e:49:12:3e:18:34: af:71:56:91:91:0c:5c:d0:e6:01:e8:97:55:62:20: 2b:e4:dc:3f:92:75:2c:a7:fb:13:00:92:19:b0:4f: 3e:bd:65:7b:c2:4f:c8:06:9a:cb:b3:e7:c8:26:ae: a9:45:98:9d:6e:35:70:3b:32:2d:3b:e7:4c:04:ff: 60:d2:a6:cf:3c:38:b7:5d:d9:ee:d9:f6:99:ce:da: c3:b9:82:d5:f1:72:73:a7:60:86:25:b2:4e:6d:03: b1:5d:47:98:68:73:91:6c:f7:23:21:83:55:65:a3: 74:1c:3c:b9:e8:13:08:28:96:2a:7f:05:ee:bb:94: ff:34:08:38:64:11:f9:8d:01:64:6b:57:51:61:13: 4a:12:94:7c:09:33:09:17:ba:18:15:94:9d:f2:87: 40:39:7c:34:c6:9e:79:03:a2:29:2f:92:45:d7:e9: 63:37:97:c5:6f:ce:8a:90:49:b9:70:20:ae:04:e3: 96:ae:99:f5:59:71:17:3a:30:6b:9f:ba:06:b0:b7: ec:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0B:C6:89:E7:F2:96:95:DA:C9:8B:D6:56:71:58:13:94:B1:C2:02 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:97:95:bc:ec:4d:6b:29:7b:cb:90:58:97:c1:ba:74:91:5c: d4:2e:e2:d2:b4:28:c7:91:75:0d:ae:79:64:91:9b:0e:d2:31: 36:68:98:33:7f:00:40:ed:64:0a:97:26:a7:77:8a:0e:66:18: 33:02:df:3e:14:d2:99:d7:bc:98:7c:5a:d0:0f:7c:c7:11:85: ff:84:ee:aa:b0:a2:ca:f2:ba:33:a0:54:89:84:6d:7c:4b:88: 4c:59:52:19:8d:de:ba:1f:7c:5f:e0:78:2e:2c:af:d6:a3:45: ae:64:56:88:cf:41:f4:32:29:d2:ef:91:70:74:c2:45:f9:aa: 02:c2:f3:38:2d:b0:8f:30:04:d0:ee:8c:fb:05:66:7d:cb:ea: 09:09:64:e8:f3:96:18:ee:22:cc:f8:ef:0f:25:9d:00:2d:a4: b4:fc:be:41:37:84:a1:af:d1:8f:60:e9:36:ec:2e:09:47:2d: b3:1a:04:49:d9:8b:f4:b2:56:a7:c8:87:a0:c0:e5:a6:9a:0c: 2d:9d:bb:d9:85:09:d8:29:b5:43:e2:24:53:1b:52:03:55:c4: db:19:47:24:79:93:5a:5c:21:e0:ba:96:22:c1:b4:00:c1:9d: 44:c1:9f:24:d2:4c:b7:56:ba:9f:45:a6:a9:41:34:2a:0a:67: 16:2c:f8:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUxMjA2MjMxOTMyWhcNMjUxMjEzMjMxOTMyWjAYMRYwFAYD VQQDEw02OTM0YmEwNS1kZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPsIGpAC9TiR7l/TZ2Wf6jC333tbK5Gp5VgnOgNdlYJAAFinWozKHlJYuX0J NcFBQQA31Kk+SRI+GDSvcVaRkQxc0OYB6JdVYiAr5Nw/knUsp/sTAJIZsE8+vWV7 wk/IBprLs+fIJq6pRZidbjVwOzItO+dMBP9g0qbPPDi3Xdnu2faZztrDuYLV8XJz p2CGJbJObQOxXUeYaHORbPcjIYNVZaN0HDy56BMIKJYqfwXuu5T/NAg4ZBH5jQFk a1dRYRNKEpR8CTMJF7oYFZSd8odAOXw0xp55A6IpL5JF1+ljN5fFb86KkEm5cCCu BOOWrpn1WXEXOjBrn7oGsLfsxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8Lxonn 8paV2smL1lZxWBOUscICMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARl5W87E1rKXvLkFiXwbp0kVzULuLStCjHkXUNrnlkkZsO0jE2aJgz fwBA7WQKlyand4oOZhgzAt8+FNKZ17yYfFrQD3zHEYX/hO6qsKLK8rozoFSJhG18 S4hMWVIZjd66H3xf4HguLK/Wo0WuZFaIz0H0MinS75FwdMJF+aoCwvM4LbCPMATQ 7oz7BWZ9y+oJCWTo85YY7iLM+O8PJZ0ALaS0/L5BN4Shr9GPYOk27C4JRy2zGgRJ 2Yv0slanyIegwOWmmgwtnbvZhQnYKbVD4iRTG1IDVcTbGUckeZNaXCHgupYiwbQA wZ1EwZ8k0ky3VrqfRaapQTQqCmcWLPiH -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:16 2025 by rpki-client