This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft File: 7LSEAFYEaoqTIoTqXx4EagIzHOk.mft (raw, json) Hash identifier: /0YkcTeBdi5z4UPg2e319lljOzyAIy2qPaQLsUH6I3o= Subject key identifier: DE:E5:93:2A:D2:D4:D4:A8:00:84:50:C4:0E:F3:0E:CD:2B:DA:7F:85 Authority key identifier: EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 Certificate issuer: /CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft Manifest number: D6 Signing time: Fri 05 Dec 2025 03:43:17 +0000 Manifest this update: Fri 05 Dec 2025 03:43:17 +0000 Manifest next update: Fri 12 Dec 2025 03:43:17 +0000 Files and hashes: 1: 7LSEAFYEaoqTIoTqXx4EagIzHOk.crl (hash: mvv/RD8iox4HEztfjmOigCBEdp5EyQEe8lyHhH3cl2U=) 2: 99AA0D12924111EFB764DA22C4F9AE02.roa (hash: /mhXFSUm8wgJtNfejG+rJ98B0FGC7kHmpO9IfNRXQCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E50, serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Validity Not Before: Dec 5 03:43:17 2025 GMT Not After : Dec 12 03:43:17 2025 GMT Subject: CN=693254d5-1bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:2c:a2:ac:fa:d8:6e:ed:60:28:b9:57:a4: 1f:5e:8b:57:75:cd:b2:6c:1a:8f:e2:15:21:ac:79: 9b:45:42:5d:72:ef:0f:b1:81:bd:92:d5:ca:96:83: 03:bd:5a:59:ab:69:97:44:81:0d:f5:79:01:06:20: e7:66:87:3d:c3:6c:60:f5:d6:9b:29:b1:7b:c3:8b: 4d:3c:c4:24:2e:2d:99:b4:56:06:c8:ff:0d:5a:38: a7:fb:9e:bc:6d:45:af:a0:bd:f0:82:2e:02:1a:78: fb:0d:6b:e6:c1:aa:b6:09:cb:4b:45:20:93:e6:e9: 7e:55:5a:fd:bb:97:ad:63:13:88:43:63:64:23:3f: 26:60:24:c5:40:ab:79:2b:af:e0:12:08:a2:43:b4: 11:90:38:50:c4:b9:78:50:d4:da:f0:bf:aa:35:e9: ba:8a:ad:48:a3:cf:99:05:ed:20:5d:29:c3:d3:49: 86:25:c1:c8:ae:72:ae:a7:4a:8f:a0:da:d1:f2:81: 0c:3b:24:50:ce:b2:f4:ac:de:3c:4e:7c:6f:f2:64: 5b:16:71:9d:54:7e:ce:fa:4b:73:f7:02:d9:1a:e4: 09:2e:d9:e9:f9:03:d4:e3:37:a9:78:ce:c8:47:ec: bb:4c:81:d0:54:d6:13:fb:5c:b4:e2:ea:9c:72:24: ee:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E5:93:2A:D2:D4:D4:A8:00:84:50:C4:0E:F3:0E:CD:2B:DA:7F:85 X509v3 Authority Key Identifier: keyid:EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d9:8b:50:9f:b2:83:3c:b1:9c:23:f0:e6:6f:7c:33:d8:41: da:48:87:e3:29:b3:c6:90:7d:43:12:e7:d8:28:17:70:ff:4e: a6:70:6b:19:14:10:dc:0f:8a:b5:9a:c8:b5:47:c2:e1:fc:ed: 4d:71:6d:f2:22:3f:5b:b6:36:26:11:d2:20:87:8a:94:f3:c8: 1f:82:e0:6a:c2:20:43:74:d7:a8:68:70:15:4b:2a:84:88:e4: cc:f2:14:9d:fe:10:da:3d:aa:61:83:ba:1e:eb:54:83:08:0c: d7:27:b2:ed:8c:10:a6:ab:4b:af:14:58:61:d2:72:c4:fb:48: 18:62:24:4b:40:3c:7c:4b:12:49:f9:75:33:82:7d:8d:e0:6b: 71:90:d3:9b:23:fa:df:64:08:c1:71:29:de:af:f0:44:18:62: 4b:0c:c4:ea:67:61:ae:8b:e8:c9:0c:1b:2a:4e:77:cb:31:b1: e1:84:d2:db:11:15:5d:ff:4c:91:d3:3f:f7:ed:d9:d7:1d:a5: 5b:ff:d6:fe:28:75:89:a4:d8:f7:40:ab:af:57:0b:c9:8e:f9: a6:6d:82:b4:e9:eb:a9:79:2e:73:b1:26:f6:8f:4e:a5:55:06: 22:ce:c4:80:56:70:0c:b0:1c:0e:45:1e:61:a2:9f:57:e4:09: db:c2:d6:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFNTAxMTAvBgNVBAUTKEVDQjQ4NDAwNTYwNDZBOEE5MzIyODRFQTVGMUUwNDZB MDIzMzFDRTkwHhcNMjUxMjA1MDM0MzE3WhcNMjUxMjEyMDM0MzE3WjAYMRYwFAYD VQQDEw02OTMyNTRkNS0xYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbssoqz62G7tYCi5V6QfXotXdc2ybBqP4hUhrHmbRUJdcu8PsYG9ktXKloMD vVpZq2mXRIEN9XkBBiDnZoc9w2xg9dabKbF7w4tNPMQkLi2ZtFYGyP8NWjin+568 bUWvoL3wgi4CGnj7DWvmwaq2CctLRSCT5ul+VVr9u5etYxOIQ2NkIz8mYCTFQKt5 K6/gEgiiQ7QRkDhQxLl4UNTa8L+qNem6iq1Io8+ZBe0gXSnD00mGJcHIrnKup0qP oNrR8oEMOyRQzrL0rN48Tnxv8mRbFnGdVH7O+ktz9wLZGuQJLtnp+QPU4zepeM7I R+y7TIHQVNYT+1y04uqcciTuFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7lkyrS 1NSoAIRQxA7zDs0r2n+FMB8GA1UdIwQYMBaAFOy0hABWBGqKkyKE6l8eBGoCMxzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUU1MC8yREQ3NjM4Qzky NDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFvcVRJb1RxWHg0RWFnSXpI T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMU0VBRllFYW9xVElvVHFYeDRFYWdJekhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUU1MC8yREQ3NjM4QzkyNDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFv cVRJb1RxWHg0RWFnSXpIT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ2YtQn7KDPLGcI/Dmb3wz2EHaSIfjKbPGkH1DEufYKBdw/06mcGsZ FBDcD4q1msi1R8Lh/O1NcW3yIj9btjYmEdIgh4qU88gfguBqwiBDdNeoaHAVSyqE iOTM8hSd/hDaPaphg7oe61SDCAzXJ7LtjBCmq0uvFFhh0nLE+0gYYiRLQDx8SxJJ +XUzgn2N4GtxkNObI/rfZAjBcSner/BEGGJLDMTqZ2Gui+jJDBsqTnfLMbHhhNLb ERVd/0yR0z/37dnXHaVb/9b+KHWJpNj3QKuvVwvJjvmmbYK06eupeS5zsSb2j06l VQYizsSAVnAMsBwORR5hop9X5AnbwtZ+ -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:47 2025 by rpki-client