This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json) Hash identifier: nhiI2gQXofwZKoMsSybNnlZ13Ro3C1UVSf4nZ7fVjZc= Subject key identifier: B1:43:8E:1D:BB:CF:EA:FA:54:7F:C7:C5:4A:D6:03:8B:5C:D4:1A:12 Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Certificate serial: 062B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft Manifest number: 061C Signing time: Sat 06 Dec 2025 21:43:06 +0000 Manifest this update: Sat 06 Dec 2025 21:43:06 +0000 Manifest next update: Sat 13 Dec 2025 21:43:06 +0000 Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: opTQbyW/imv9O4kI4b90YZDsOy2FYpCAGFqKP3S/cUo=) 2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: a4WQSUXqPLBs6hBYXUzBgrWs1nsWnI2pLDicQNKog6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1579 (0x62b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4 Validity Not Before: Dec 6 21:43:06 2025 GMT Not After : Dec 13 21:43:06 2025 GMT Subject: CN=6934a36a-c7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:73:c8:29:32:a5:3a:0d:be:97:bd:25:31: d0:91:58:26:c1:90:37:00:ec:f9:79:d2:82:b2:b8: 93:5d:df:2f:de:51:d4:e2:3b:03:45:fc:8c:62:f8: 57:d9:44:dd:7d:cf:a8:7e:32:70:d4:e8:be:b9:0a: 38:46:91:26:76:ac:5d:29:45:70:30:27:f7:9e:21: d4:f8:1b:02:b8:c8:6f:24:f3:ad:c1:f5:44:86:24: 1c:1e:24:5a:7c:71:6d:7a:68:68:6e:1d:a9:f8:fc: 43:c6:09:ac:93:49:4b:5d:df:73:3f:b5:a6:a4:0d: eb:3e:8a:48:dc:53:ed:24:2d:e4:ef:97:eb:d7:be: 68:39:22:d9:36:14:da:06:d2:d7:4f:1a:44:e5:e5: 22:de:59:c6:5f:45:1b:7f:fe:d7:37:75:b0:c3:75: 21:14:e8:5e:69:8e:7e:20:74:b0:e8:9d:18:4f:8a: 26:19:53:99:2d:bd:b1:32:d2:49:b2:a7:60:c2:28: ad:a8:44:b2:5f:c4:79:8e:56:b4:eb:4b:cd:a7:a4: 57:40:bb:2e:be:d6:8e:0d:fa:d2:67:e3:16:1a:97: 98:55:8b:f4:27:c3:d3:47:63:2a:44:72:28:90:b4: 72:7e:03:42:ff:0c:ee:cc:af:a3:6e:a9:ed:a6:0e: 07:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:43:8E:1D:BB:CF:EA:FA:54:7F:C7:C5:4A:D6:03:8B:5C:D4:1A:12 X509v3 Authority Key Identifier: keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:7e:7c:1b:5b:8e:25:ec:a8:f7:60:6b:67:61:76:b5:d4:2b: 3c:8b:06:98:74:cc:3a:1f:ca:35:0c:29:1d:c6:e7:5c:c6:7d: c5:aa:ba:0c:8d:42:5a:4d:e3:3c:0f:3c:60:62:96:96:04:16: 16:bb:f2:c1:f4:ff:37:75:59:dc:e6:6b:ff:66:55:f6:ea:0e: af:92:1f:ec:73:6c:34:bb:5f:4e:a1:13:0f:76:fb:43:1e:04: 11:14:34:86:c2:ed:0b:5b:2b:b4:1a:72:8a:97:aa:4e:6f:57: 87:35:11:82:fb:21:f0:c6:9a:62:80:d3:3a:97:d0:dd:b6:da: 95:4b:09:c5:81:44:41:76:bf:0b:37:67:52:09:9a:f7:3a:a2: 59:56:f9:b6:51:c6:92:4e:24:b2:bc:0d:f8:d4:c3:f0:03:37: 9c:69:6a:0e:86:87:cf:9e:1f:ee:d4:56:97:c3:1a:03:aa:74: 79:c8:84:a1:aa:e0:53:a8:b0:b6:d9:45:19:93:b6:2b:9d:aa: 2d:ef:1c:10:9a:43:40:c2:33:aa:97:a7:5e:f2:e1:d7:de:a3: 9b:fa:07:64:f7:34:87:d0:56:57:53:2a:e6:91:75:5e:8e:98: 9a:ee:94:db:3f:43:2c:e0:65:b3:bd:b4:f4:28:a2:8e:3d:1b: 66:0f:2e:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKDdGQjIzOTE2MDM3RTkzMzI5NjYzNzZGMkUwNzU1NDEy MjQxNjJBRjQwHhcNMjUxMjA2MjE0MzA2WhcNMjUxMjEzMjE0MzA2WjAYMRYwFAYD VQQDEw02OTM0YTM2YS1jN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVtzyCkypToNvpe9JTHQkVgmwZA3AOz5edKCsriTXd8v3lHU4jsDRfyMYvhX 2UTdfc+ofjJw1Oi+uQo4RpEmdqxdKUVwMCf3niHU+BsCuMhvJPOtwfVEhiQcHiRa fHFtemhobh2p+PxDxgmsk0lLXd9zP7WmpA3rPopI3FPtJC3k75fr175oOSLZNhTa BtLXTxpE5eUi3lnGX0Ubf/7XN3Www3UhFOheaY5+IHSw6J0YT4omGVOZLb2xMtJJ sqdgwiitqESyX8R5jla060vNp6RXQLsuvtaODfrSZ+MWGpeYVYv0J8PTR2MqRHIo kLRyfgNC/wzuzK+jbqntpg4HtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFDjh27 z+r6VH/HxUrWA4tc1BoSMB8GA1UdIwQYMBaAFH+yORYDfpMylmN28uB1VBIkFir0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zMjBDM0E5QUM5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6S1dZM2J5NEhWVUVpUVdL dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Y3STVGZ04ta3pLV1kzYnk0SFZVRWlRV0t2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zMjBDM0E5QUM5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6 S1dZM2J5NEhWVUVpUVdLdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZfnwbW44l7Kj3YGtnYXa11Cs8iwaYdMw6H8o1DCkdxudcxn3FqroM jUJaTeM8DzxgYpaWBBYWu/LB9P83dVnc5mv/ZlX26g6vkh/sc2w0u19OoRMPdvtD HgQRFDSGwu0LWyu0GnKKl6pOb1eHNRGC+yHwxppigNM6l9DdttqVSwnFgURBdr8L N2dSCZr3OqJZVvm2UcaSTiSyvA341MPwAzecaWoOhofPnh/u1FaXwxoDqnR5yISh quBTqLC22UUZk7Yrnaot7xwQmkNAwjOql6de8uHX3qOb+gdk9zSH0FZXUyrmkXVe jpia7pTbP0Ms4GWzvbT0KKKOPRtmDy4X -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:57 2025 by rpki-client