This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft File: C7AFcf321rzGNEbrOmSR-uqpCG8.mft (raw, json) Hash identifier: nmwFXb+nV8Ylx2bprabJqijJ20WfCsouEFIj57YdfQI= Subject key identifier: 65:B5:A0:9D:68:4E:58:B5:80:CA:EB:D6:B4:E7:89:AF:CE:A0:53:FA Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F Certificate issuer: /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft Manifest number: 0598 Signing time: Thu 04 Dec 2025 21:51:00 +0000 Manifest this update: Thu 04 Dec 2025 21:50:59 +0000 Manifest next update: Thu 11 Dec 2025 21:50:59 +0000 Files and hashes: 1: C7AFcf321rzGNEbrOmSR-uqpCG8.crl (hash: HKnpEhj7w6BkNHvlRQ7vmtckUV+EAgWX9bQIo8P+i8k=) 2: 6B191E20F75811EB9C2B5D4DC4F9AE02.roa (hash: gIqEUytD692JqpeV91M06iKGJH68vEW3s4YtICieKE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F Validity Not Before: Dec 4 21:50:59 2025 GMT Not After : Dec 11 21:50:59 2025 GMT Subject: CN=69320244-3229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:49:68:ad:1a:24:b6:9b:08:5a:0a:b3:ed:27: ca:8a:51:e3:75:e8:34:75:99:3e:81:e3:cf:79:67: 2a:0a:c6:2d:66:7b:f4:c0:b2:df:06:7b:bc:24:67: 17:62:f4:ad:29:d0:60:0d:ce:24:6f:4b:e5:96:b8: 1b:50:6f:34:ef:ee:e2:ec:92:b1:cd:a1:48:2c:e7: ef:a2:11:7d:18:17:5a:d1:16:bb:dc:84:b6:94:62: 81:c5:3c:5a:58:e6:7b:65:91:f0:78:dc:59:5c:59: cc:d9:cd:19:be:13:c8:77:dd:bc:34:09:c3:c1:bd: 25:21:36:a9:53:fb:21:41:e4:43:44:7c:26:3b:3e: 31:e4:b2:95:85:9c:12:9d:ca:b6:8c:44:dd:3f:5b: eb:e2:35:b6:e2:28:db:de:2c:75:d8:31:8a:7a:aa: c0:c6:69:40:d4:c6:b5:6a:12:32:bb:dd:71:92:77: 42:7b:21:5d:5a:84:a3:48:50:fc:a0:e7:bb:60:9b: ed:ee:80:4c:f7:46:4d:9c:d4:c4:96:df:ef:d5:42: 46:97:ac:81:7a:ff:8b:79:e3:4c:93:de:55:fb:d8: 25:73:86:4c:bf:a9:39:0c:4b:00:f9:72:d6:3a:85: c6:f8:ae:5f:e7:36:b1:79:88:fb:ae:28:23:93:62: 69:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B5:A0:9D:68:4E:58:B5:80:CA:EB:D6:B4:E7:89:AF:CE:A0:53:FA X509v3 Authority Key Identifier: keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f1:b2:ee:d6:fb:be:99:b4:8e:81:4d:1f:f7:20:18:dc:5b: 35:84:1b:29:24:44:80:59:98:fb:53:bc:36:07:c1:6f:4b:7d: a7:f0:24:9b:46:49:0d:4a:85:96:e6:23:53:3d:08:a7:ae:e1: 70:f5:2f:58:4c:c9:74:69:0c:1f:9f:0e:cb:59:06:44:f9:11: 26:7c:ba:59:5b:0b:14:66:62:34:08:c2:98:42:f6:35:10:64: 64:fa:f3:5d:13:b4:28:e7:29:b4:41:70:b1:7b:0e:52:e0:89: 4b:a6:f2:3c:a4:ae:a7:d1:cf:f4:0e:bb:b9:4a:95:90:cc:a8: 97:44:df:07:3f:a3:16:32:40:22:b2:38:37:dc:b4:09:70:47: fb:5d:88:c8:e4:d8:57:a9:63:9a:2a:b4:67:f1:bc:2a:89:64: 99:29:28:fc:6e:33:66:2a:3b:62:9b:1b:a8:17:5a:6d:3b:ab: ef:a4:dc:3a:ab:c4:fb:e8:91:db:04:4c:37:49:e4:a4:68:0d: dc:16:e2:29:c9:2b:91:5a:f6:59:1b:1c:d8:5e:36:f3:4e:89: b9:4a:1b:16:40:63:41:db:48:20:66:4e:53:15:2d:f8:9a:29: 3c:3d:ee:cf:8d:3b:0e:66:a0:1d:91:20:c6:e0:67:95:21:cf: 5a:46:91:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDODMxMTAvBgNVBAUTKDBCQjAwNTcxRkRGNkQ2QkNDNjM0NDZFQjNBNjQ5MUZB RUFBOTA4NkYwHhcNMjUxMjA0MjE1MDU5WhcNMjUxMjExMjE1MDU5WjAYMRYwFAYD VQQDEw02OTMyMDI0NC0zMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UlorRoktpsIWgqz7SfKilHjdeg0dZk+gePPeWcqCsYtZnv0wLLfBnu8JGcX YvStKdBgDc4kb0vllrgbUG807+7i7JKxzaFILOfvohF9GBda0Ra73IS2lGKBxTxa WOZ7ZZHweNxZXFnM2c0ZvhPId928NAnDwb0lITapU/shQeRDRHwmOz4x5LKVhZwS ncq2jETdP1vr4jW24ijb3ix12DGKeqrAxmlA1Ma1ahIyu91xkndCeyFdWoSjSFD8 oOe7YJvt7oBM90ZNnNTElt/v1UJGl6yBev+LeeNMk95V+9glc4ZMv6k5DEsA+XLW OoXG+K5f5zaxeYj7rigjk2JpWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGW1oJ1o Tli1gMrr1rTnia/OoFP6MB8GA1UdIwQYMBaAFAuwBXH99ta8xjRG6zpkkfrqqQhv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My80QkFGQjExOEY3 NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFyekdORWJyT21TUi11cXBD RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3QUZjZjMyMXJ6R05FYnJPbVNSLXVxcENHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUM4My80QkFGQjExOEY3NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFy ekdORWJyT21TUi11cXBDRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH8bLu1vu+mbSOgU0f9yAY3Fs1hBspJESAWZj7U7w2B8FvS32n8CSb RkkNSoWW5iNTPQinruFw9S9YTMl0aQwfnw7LWQZE+REmfLpZWwsUZmI0CMKYQvY1 EGRk+vNdE7Qo5ym0QXCxew5S4IlLpvI8pK6n0c/0Dru5SpWQzKiXRN8HP6MWMkAi sjg33LQJcEf7XYjI5NhXqWOaKrRn8bwqiWSZKSj8bjNmKjtimxuoF1ptO6vvpNw6 q8T76JHbBEw3SeSkaA3cFuIpySuRWvZZGxzYXjbzTom5ShsWQGNB20ggZk5TFS34 mik8Pe7PjTsOZqAdkSDG4GeVIc9aRpE9 -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:14 2025 by rpki-client