This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft File: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json) Hash identifier: PD7dAQfxP3uZs1ygRXEvP7WRu5qINujT5ht4XeMosWI= Subject key identifier: 56:9C:38:66:AE:93:ED:A7:55:69:85:7C:19:E6:1B:F8:5A:D1:E3:52 Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 Certificate issuer: /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft Manifest number: BE Signing time: Fri 05 Dec 2025 03:56:15 +0000 Manifest this update: Fri 05 Dec 2025 03:56:15 +0000 Manifest next update: Fri 12 Dec 2025 03:56:15 +0000 Files and hashes: 1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: m46zDRSpf1yYcn1KxwDeMS+8u2jFzpZ94i0XlsEQ9IU=) 2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 2DuyIR+wk4mvn+XwoOsHwRQcxItN+5KREj3DX0f4tYs=) 3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: GhFLUJsibCVFeaw+HURiwfIuyrQYgDP+XOZxzfH6Sw0=) 4: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: 1/AZpd9pLcHU8N9tmsYLkTIAugSfqWDpWEBhQfVHYVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Validity Not Before: Dec 5 03:56:15 2025 GMT Not After : Dec 12 03:56:15 2025 GMT Subject: CN=693257df-baec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:63:a4:18:70:f3:cd:85:a1:0c:2b:22:69: 2e:c8:1a:45:11:8c:25:38:48:11:15:ac:38:09:a8: 35:17:50:a6:c3:7f:0e:c2:a0:23:ef:75:69:2a:b6: ec:f7:e0:77:db:c0:4e:e6:5a:3d:e2:c8:77:98:ed: ec:b2:90:22:6b:5a:5c:c4:5f:f4:97:c1:af:6b:b2: 8a:75:d5:43:e5:3d:12:b5:c9:d2:85:58:7c:0d:92: 38:5a:3e:60:4e:c1:08:12:34:f5:c3:9f:61:fe:58: 5f:98:02:1a:68:5a:90:ba:a4:bf:95:e6:fd:77:51: 83:aa:b7:a8:2c:06:88:57:21:ef:3e:bb:63:05:18: 95:c8:d0:8b:00:32:25:24:2a:f9:5e:10:6e:e6:94: 34:b0:fc:40:4a:16:cd:e6:29:cc:d9:ec:19:bc:e5: 15:c3:7c:5a:fa:73:d1:28:5a:2a:8f:99:3a:49:f4: b5:df:ce:d2:4b:96:11:6e:71:56:84:e3:0c:b9:22: db:08:4f:45:8b:b1:6b:99:dc:b4:ef:fd:3f:91:12: a4:9a:3d:1d:d4:5d:e4:56:90:50:b6:a2:6f:59:a1: 5c:16:8a:db:b7:92:cd:7d:8d:f1:4e:8a:b1:2a:84: 59:55:6a:7e:c8:ab:b8:f7:2a:71:b9:fd:64:b7:8e: f4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9C:38:66:AE:93:ED:A7:55:69:85:7C:19:E6:1B:F8:5A:D1:E3:52 X509v3 Authority Key Identifier: keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:32:08:08:d2:fd:fc:a7:06:98:ca:c9:55:16:54:4a:16:13: 19:ca:f9:e6:a9:f9:69:b6:61:89:6a:9a:a3:95:6d:f0:1e:93: 9f:f8:d7:18:7a:5d:99:76:10:96:9c:38:ab:f6:3a:a7:0e:1e: 4b:d0:b2:db:05:69:a4:ea:14:38:07:ec:eb:d6:71:e3:8a:b5: 4a:c9:77:b0:d3:93:b7:78:59:af:1d:99:7c:6d:d7:b4:86:ad: 5d:8b:88:22:a1:ba:99:25:36:d2:45:0a:ab:6e:9d:89:2f:6f: 04:87:8a:94:ec:29:94:4b:5e:f4:db:7f:68:58:f4:37:85:15: 3c:28:e2:2b:e3:f2:df:a8:2e:8f:79:36:bb:42:ba:91:1f:c5: ab:99:7b:0e:23:8d:12:e7:a5:e6:22:3a:bf:cd:8f:55:a2:19: fd:45:ec:5e:51:24:7f:61:9c:c1:36:40:d3:5d:14:3f:a1:e7: 22:da:a9:89:11:46:fb:f7:58:e9:f6:46:7a:07:7c:1f:f0:e7: d1:12:c3:4c:56:6f:ef:44:b4:51:1f:18:8f:61:c2:f4:a0:52: 91:18:12:79:d9:3a:40:49:2c:36:99:4d:b1:66:63:f2:31:ed: ea:01:2a:1e:ca:76:a2:9f:65:87:f0:08:c5:5a:c2:e3:b0:2a: 31:7e:f6:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMkExMTAvBgNVBAUTKEVDRkYzMjQ0MEM0RUUxRDI3OTQzQ0RCNzJBN0Q0OTEw NjM0MDJERjEwHhcNMjUxMjA1MDM1NjE1WhcNMjUxMjEyMDM1NjE1WjAYMRYwFAYD VQQDEw02OTMyNTdkZi1iYWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVljpBhw882FoQwrImkuyBpFEYwlOEgRFaw4Cag1F1Cmw38OwqAj73VpKrbs 9+B328BO5lo94sh3mO3sspAia1pcxF/0l8Gva7KKddVD5T0StcnShVh8DZI4Wj5g TsEIEjT1w59h/lhfmAIaaFqQuqS/leb9d1GDqreoLAaIVyHvPrtjBRiVyNCLADIl JCr5XhBu5pQ0sPxAShbN5inM2ewZvOUVw3xa+nPRKFoqj5k6SfS1387SS5YRbnFW hOMMuSLbCE9Fi7Frmdy07/0/kRKkmj0d1F3kVpBQtqJvWaFcForbt5LNfY3xToqx KoRZVWp+yKu49ypxuf1kt470iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFacOGau k+2nVWmFfBnmG/ha0eNSMB8GA1UdIwQYMBaAFOz/MkQMTuHSeUPNtyp9SRBjQC3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9COUQ0Q0Y0MkFF M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRkSjVRODIzS24xSkVHTkFM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdQOHlSQXhPNGRKNVE4MjNLbjFKRUdOQUxmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyQS9COUQ0Q0Y0MkFFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRk SjVRODIzS24xSkVHTkFMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgMggI0v38pwaYyslVFlRKFhMZyvnmqflptmGJapqjlW3wHpOf+NcY el2ZdhCWnDir9jqnDh5L0LLbBWmk6hQ4B+zr1nHjirVKyXew05O3eFmvHZl8bde0 hq1di4giobqZJTbSRQqrbp2JL28Eh4qU7CmUS170239oWPQ3hRU8KOIr4/LfqC6P eTa7QrqRH8WrmXsOI40S56XmIjq/zY9Vohn9RexeUSR/YZzBNkDTXRQ/oeci2qmJ EUb791jp9kZ6B3wf8OfREsNMVm/vRLRRHxiPYcL0oFKRGBJ52TpASSw2mU2xZmPy Me3qASoeynain2WH8AjFWsLjsCoxfvaW -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:27 2025 by rpki-client