This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json) Hash identifier: Q+8OBaAjiv/eZedbCqZxsu+FHCd9ZjeHi54xPuf6Ojk= Subject key identifier: DE:7E:ED:AF:74:07:1A:C9:53:2B:F8:B8:A3:F8:61:01:DE:81:95:06 Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 0996 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft Manifest number: 0979 Signing time: Thu 04 Dec 2025 19:21:31 +0000 Manifest this update: Thu 04 Dec 2025 19:21:31 +0000 Manifest next update: Thu 11 Dec 2025 19:21:31 +0000 Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: KtPseCGxe1zk/U1+3193lxv4ZJ6czL3BSrVuECkYoPY=) 2: 42B13940C3C011EE86C2C317C4F9AE02.roa (hash: ohub1su2eLkcxe2mnfMUSQeEjo+GPwYrkG+K0CsdsDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2454 (0x996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: Dec 4 19:21:31 2025 GMT Not After : Dec 11 19:21:31 2025 GMT Subject: CN=6931df3b-e5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:e0:d5:19:5d:e7:e5:d0:21:b1:8c:32:b2: 35:da:73:a2:6b:b1:dc:8e:fa:21:11:16:91:5a:77: be:0d:43:19:50:e1:65:28:3a:a5:eb:41:8c:f2:09: 21:c5:8d:95:1f:df:f3:e2:d2:68:ea:58:7f:51:81: 32:66:24:a6:fd:68:08:e6:68:31:de:3c:14:54:11: 74:40:1f:07:dc:22:46:7f:cb:ab:2d:c6:40:e0:b3: d8:f3:9e:34:7c:e3:e2:05:dc:6c:4f:d0:09:f8:70: 39:bb:11:bc:62:2e:bd:9d:dd:63:46:e5:00:b3:7c: 1b:e1:a6:70:8f:07:d9:20:9f:b5:c8:47:df:c0:d8: a0:6f:46:f1:40:71:7b:bd:10:59:f2:ca:5f:d0:3b: 16:b5:41:5d:c8:13:3a:b4:1f:21:0b:9c:cb:71:0b: 08:4f:37:71:ff:e8:cc:dc:6e:21:ec:fb:a4:e4:fb: 15:09:55:b4:72:93:4b:4d:8d:05:76:c8:b7:0f:a5: de:c1:c1:12:a0:42:46:31:c4:2c:23:ed:7a:5d:ee: 0b:c3:c1:ed:8c:1e:ca:23:a1:df:16:e7:ae:58:16: 94:46:4d:55:46:26:e3:40:5b:79:3a:50:f4:4a:a8: 46:c9:9e:ad:49:5b:5e:9e:15:9c:b0:f3:9a:ed:9c: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7E:ED:AF:74:07:1A:C9:53:2B:F8:B8:A3:F8:61:01:DE:81:95:06 X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6a:41:7e:4c:a2:71:7d:a7:87:2a:41:dd:d2:77:a5:05:9f: e9:76:1f:bf:d3:80:8e:ac:b5:c7:46:d6:5c:9b:26:31:f4:98: 10:5b:34:e2:49:23:88:c1:3a:ca:83:33:82:ce:d7:7f:48:c0: d5:f5:40:dc:9c:cf:e0:fb:dc:77:3a:68:c4:74:21:7c:1a:6c: c7:31:82:e1:35:85:f7:7c:c7:00:cc:bf:4c:9c:e0:3e:3d:dd: 13:01:b5:40:46:33:34:09:db:ea:a0:ec:5c:ac:3c:a1:c8:3b: 1a:9b:31:73:7f:d5:64:5b:f0:ca:11:d4:46:14:c3:b2:b4:fc: a7:bc:d2:74:59:d5:f6:90:e7:36:90:56:8c:a6:d2:7d:b9:62: bb:60:f6:e2:ba:71:70:86:64:bf:8a:b7:15:e1:c5:71:41:c4: 28:cc:84:c4:da:4a:73:1b:00:be:ab:2e:b0:b0:ab:d5:20:bd: c7:70:39:31:f2:45:45:d3:8d:2c:9d:79:0e:ca:04:4a:16:2b: 5c:f8:a8:d6:e6:5c:6b:99:37:c1:85:de:2c:31:16:fd:b9:36: 03:99:34:b8:36:3a:42:30:90:67:bd:75:bd:df:da:e0:b4:e5: 7c:8d:26:50:1d:5f:eb:dc:81:ab:22:dc:70:84:10:90:51:16: a9:52:ab:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjUxMjA0MTkyMTMxWhcNMjUxMjExMTkyMTMxWjAYMRYwFAYD VQQDEw02OTMxZGYzYi1lNWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRfg1Rld5+XQIbGMMrI12nOia7HcjvohERaRWne+DUMZUOFlKDql60GM8gkh xY2VH9/z4tJo6lh/UYEyZiSm/WgI5mgx3jwUVBF0QB8H3CJGf8urLcZA4LPY8540 fOPiBdxsT9AJ+HA5uxG8Yi69nd1jRuUAs3wb4aZwjwfZIJ+1yEffwNigb0bxQHF7 vRBZ8spf0DsWtUFdyBM6tB8hC5zLcQsITzdx/+jM3G4h7Puk5PsVCVW0cpNLTY0F dsi3D6XewcESoEJGMcQsI+16Xe4Lw8HtjB7KI6HfFueuWBaURk1VRibjQFt5OlD0 SqhGyZ6tSVtenhWcsPOa7ZzbWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5+7a90 BxrJUyv4uKP4YQHegZUGMB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkJDOS84M0ZGOUZFQ0FBODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29a NzlMbmN2bTZlbnZjYnVEU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNakF+TKJxfaeHKkHd0nelBZ/pdh+/04COrLXHRtZcmyYx9JgQWzTi SSOIwTrKgzOCztd/SMDV9UDcnM/g+9x3OmjEdCF8GmzHMYLhNYX3fMcAzL9MnOA+ Pd0TAbVARjM0CdvqoOxcrDyhyDsamzFzf9VkW/DKEdRGFMOytPynvNJ0WdX2kOc2 kFaMptJ9uWK7YPbiunFwhmS/ircV4cVxQcQozITE2kpzGwC+qy6wsKvVIL3HcDkx 8kVF040snXkOygRKFitc+KjW5lxrmTfBhd4sMRb9uTYDmTS4NjpCMJBnvXW939rg tOV8jSZQHV/r3IGrItxwhBCQURapUqvU -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:42 2025 by rpki-client