This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json) Hash identifier: /lAXgGS9T7Zot/BmFrbsD/fLhC1XjTogOQfNF9lW/xA= Subject key identifier: F1:AE:16:5D:F8:F2:A9:C7:83:B3:55:46:F2:AA:00:62:C4:86:F1:A3 Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft Manifest number: C2 Signing time: Fri 05 Dec 2025 03:53:29 +0000 Manifest this update: Fri 05 Dec 2025 03:53:29 +0000 Manifest next update: Fri 12 Dec 2025 03:53:29 +0000 Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: +z/y6Ze+sGj/WceCGbvpA+O0mTeOCOAI6Vwlz5Voq5E=) 2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: Ac/uc/BnLL5OC5L/oElWDyPEyaU4HTEnF9nDubVxykg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Validity Not Before: Dec 5 03:53:29 2025 GMT Not After : Dec 12 03:53:29 2025 GMT Subject: CN=69325739-392a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:99:2a:ee:c8:c4:91:4d:9a:5d:8e:d0:69: 01:67:d5:3a:94:e7:71:4a:96:7d:c6:51:00:ca:c4: 34:d1:59:9b:a6:a5:39:80:fa:f6:65:f7:1b:54:82: e6:f4:f3:0c:5c:4f:af:25:e4:c5:98:cc:0d:15:30: e3:2c:e2:36:d2:be:1b:ad:b2:23:61:0a:d1:2d:6a: f6:ad:29:64:ec:b2:4d:a2:b1:5e:b4:28:48:62:a1: 42:2b:72:99:d0:f2:93:86:c9:6f:48:33:a6:db:af: 5f:f3:4a:c2:d4:69:f3:c8:f6:41:4c:72:fe:5c:f4: 42:01:d4:89:bb:b2:00:ba:74:c5:91:59:bd:6f:14: 1e:ed:74:32:6d:60:9a:9c:7e:50:4d:ff:9f:27:5a: 6f:ae:2f:60:0e:03:75:5e:cd:ff:9c:ca:d8:02:dc: 7e:6b:90:7d:12:13:0c:10:f3:52:94:e3:91:c3:bc: 61:82:5d:7c:06:f7:2b:c7:b3:44:46:a2:d5:8e:e7: 58:83:17:2a:f3:60:95:40:70:c7:04:01:0b:6b:c8: 25:0a:6f:a2:10:ec:b8:86:f5:37:c2:8e:88:07:ba: 3a:4b:06:62:70:d0:b4:c8:03:ca:5a:6a:3f:8f:48: 4b:40:48:76:ec:9c:f4:96:51:00:c9:d3:68:e0:38: 43:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AE:16:5D:F8:F2:A9:C7:83:B3:55:46:F2:AA:00:62:C4:86:F1:A3 X509v3 Authority Key Identifier: keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:61:cf:4b:16:f3:a8:9f:4d:d3:3e:63:c6:63:a9:bf:5c:19: 4d:4b:1a:78:f2:ba:d7:d9:34:e3:be:64:85:ac:b8:43:c6:85: f0:17:37:76:f3:a5:35:5c:92:89:84:4d:f1:d9:84:5f:0c:0c: b6:d3:4c:a8:23:3c:39:ff:45:48:ae:13:ab:9b:10:77:b4:86: 78:7e:08:11:c8:90:ba:ea:5d:7a:3b:54:69:e3:ad:5b:54:9b: a6:72:b5:45:49:7b:21:48:26:1f:88:4a:9e:51:eb:73:cd:0f: 49:8f:73:71:47:0c:a2:43:87:69:98:a3:c5:f3:3f:69:65:e2: df:10:6f:53:42:18:39:03:ec:59:d6:09:64:91:e0:fd:d3:ea: 7f:39:5b:47:32:4b:2d:84:31:6b:81:57:ee:f5:d6:c6:62:3b: 58:d0:fe:37:cb:1b:70:80:15:b7:1d:e5:a2:70:c8:d4:f9:ed: 35:62:56:28:0c:69:08:81:68:bf:b7:14:25:35:5e:0a:67:c1: 56:dd:a4:a6:6d:a9:3f:d8:71:1f:a7:8c:b9:73:ca:f7:dc:02: 86:f3:d4:35:e3:01:db:86:45:60:3e:48:0a:65:8c:f1:7a:b2: dd:65:c8:72:8b:c3:ad:ae:0f:55:26:0b:16:4d:ab:ef:6f:8f: 9c:6a:22:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2MjcxMTAvBgNVBAUTKDA4MEVDMTRBMDAxMjVEOTE0QzdFNjI4NURFOUM1NjY4 OUM1ODcyQTQwHhcNMjUxMjA1MDM1MzI5WhcNMjUxMjEyMDM1MzI5WjAYMRYwFAYD VQQDEw02OTMyNTczOS0zOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApd+ZKu7IxJFNml2O0GkBZ9U6lOdxSpZ9xlEAysQ00VmbpqU5gPr2ZfcbVILm 9PMMXE+vJeTFmMwNFTDjLOI20r4brbIjYQrRLWr2rSlk7LJNorFetChIYqFCK3KZ 0PKThslvSDOm269f80rC1GnzyPZBTHL+XPRCAdSJu7IAunTFkVm9bxQe7XQybWCa nH5QTf+fJ1pvri9gDgN1Xs3/nMrYAtx+a5B9EhMMEPNSlOORw7xhgl18Bvcrx7NE RqLVjudYgxcq82CVQHDHBAELa8glCm+iEOy4hvU3wo6IB7o6SwZicNC0yAPKWmo/ j0hLQEh27Jz0llEAydNo4DhD6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGuFl34 8qnHg7NVRvKqAGLEhvGjMB8GA1UdIwQYMBaAFAgOwUoAEl2RTH5ihd6cVmicWHKk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzYyNy9FN0QyNTc4NkE4 OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1haRk1mbUtGM3B4V2FKeFlj cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzYyNy9FN0QyNTc4NkE4OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1ha Rk1mbUtGM3B4V2FKeFljcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8Yc9LFvOon03TPmPGY6m/XBlNSxp48rrX2TTjvmSFrLhDxoXwFzd2 86U1XJKJhE3x2YRfDAy200yoIzw5/0VIrhOrmxB3tIZ4fggRyJC66l16O1Rp461b VJumcrVFSXshSCYfiEqeUetzzQ9Jj3NxRwyiQ4dpmKPF8z9pZeLfEG9TQhg5A+xZ 1glkkeD90+p/OVtHMksthDFrgVfu9dbGYjtY0P43yxtwgBW3HeWicMjU+e01YlYo DGkIgWi/txQlNV4KZ8FW3aSmbak/2HEfp4y5c8r33AKG89Q14wHbhkVgPkgKZYzx erLdZchyi8Otrg9VJgsWTavvb4+caiL9 -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:58 2025 by rpki-client