This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json) Hash identifier: laU/4hhoY04/E1mwTc8W6PqTPIR0QLF5cA4siHN62xQ= Subject key identifier: 5E:0F:40:EE:57:16:73:81:CD:E1:8A:66:CE:06:0B:EE:11:C7:21:B4 Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Certificate serial: 34F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft Manifest number: 34F3 Signing time: Thu 18 Dec 2025 15:07:42 +0000 Manifest this update: Thu 18 Dec 2025 15:07:41 +0000 Manifest next update: Thu 25 Dec 2025 15:07:41 +0000 Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: oTbwz1AjF9VaBzBqwFafpBscQY7AcUc27Yg57CPYI5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13555 (0x34f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Validity Not Before: Dec 18 15:07:41 2025 GMT Not After : Dec 25 15:07:41 2025 GMT Subject: CN=694418be-7fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4c:8e:59:8f:44:0f:ad:4a:68:af:06:e6:e2: 94:89:ef:ef:e4:bf:9c:18:48:5e:e5:aa:3e:39:08: 0e:9f:09:f7:fe:4a:55:ea:e7:43:fe:85:09:d5:02: 03:7c:90:67:4f:70:39:0c:e2:be:60:9c:c6:7e:3f: 82:49:66:c9:c9:a6:50:fa:f0:d2:0d:ad:d9:92:bc: 0d:57:ca:a2:80:ee:7e:c4:79:9e:23:4d:ee:ad:16: 81:25:bc:59:06:01:4d:18:8f:c9:c1:2f:2d:ed:2c: 56:e7:fd:3f:1f:8d:d9:86:cf:92:86:a9:84:b6:1f: 9a:00:1e:f4:46:d4:67:22:04:a7:7f:35:c5:6a:6c: fe:4f:2d:40:d9:5f:db:b9:cb:00:a5:23:e0:ac:f9: 7b:c5:36:6b:01:e3:18:9a:7b:ce:39:57:f7:ed:a6: 75:2a:3f:29:fa:02:42:66:c5:62:a0:1e:14:00:14: f4:3e:4f:0a:9c:d2:e1:08:25:90:fd:b9:ac:75:57: 7d:00:53:66:54:58:cc:db:a4:6c:12:3d:f6:1f:cc: b7:1f:d9:ec:90:42:db:b7:1d:a6:de:ba:9f:48:02: 69:33:b0:7a:65:d0:46:b9:8a:ff:37:80:21:7f:22: be:6a:c4:87:7d:19:1a:38:2a:93:4c:c8:17:df:b1: d1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0F:40:EE:57:16:73:81:CD:E1:8A:66:CE:06:0B:EE:11:C7:21:B4 X509v3 Authority Key Identifier: keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:17:21:6f:6c:94:a3:c3:c7:e0:6f:1b:f2:23:51:5a:83:03: 9c:5d:ce:e3:f7:2f:77:2b:d4:c5:a9:8a:d0:83:a1:3f:65:4f: 70:22:7d:95:ba:d1:71:3c:a4:df:cd:ba:6c:e7:63:79:b9:6a: 37:85:fa:87:ab:20:6d:6d:5b:c4:4c:f0:d9:2c:de:1b:b6:5e: 6e:35:ba:de:a3:4a:98:61:36:dc:ca:94:1a:eb:07:c3:b2:08: 64:14:3c:a2:4d:39:94:e2:51:87:85:42:76:44:07:ad:c6:a1: c6:e6:ee:4d:51:04:93:e0:72:ed:cd:37:01:a8:d4:fc:b8:90: 78:77:d8:53:e3:1b:ec:e5:a0:1a:a4:86:53:b8:0a:85:7d:bb: 5f:cc:6a:9b:37:a4:61:2e:44:54:90:29:9e:73:b4:3b:db:33: 1b:8a:ea:60:00:dd:8e:dd:1d:b3:19:46:8b:c1:8a:6b:65:90: 5c:1c:59:19:92:c8:f2:5c:ef:a8:f0:63:4f:33:bc:f8:0f:75: 4e:94:d9:7a:63:b7:ce:9d:4f:de:91:a2:8e:23:3b:0f:be:cd: 69:ca:c9:e9:66:60:e8:52:71:f1:94:fc:1a:4c:db:50:78:a9: 6e:12:3b:8c:32:f4:7b:2d:8a:64:c3:eb:73:c2:c0:1e:16:a6: 95:2a:43:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0 MkZCM0Q0M0IwHhcNMjUxMjE4MTUwNzQxWhcNMjUxMjI1MTUwNzQxWjAYMRYwFAYD VQQDDA02OTQ0MThiZS03ZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkyOWY9ED61KaK8G5uKUie/v5L+cGEhe5ao+OQgOnwn3/kpV6udD/oUJ1QID fJBnT3A5DOK+YJzGfj+CSWbJyaZQ+vDSDa3ZkrwNV8qigO5+xHmeI03urRaBJbxZ BgFNGI/JwS8t7SxW5/0/H43Zhs+ShqmEth+aAB70RtRnIgSnfzXFamz+Ty1A2V/b ucsApSPgrPl7xTZrAeMYmnvOOVf37aZ1Kj8p+gJCZsVioB4UABT0Pk8KnNLhCCWQ /bmsdVd9AFNmVFjM26RsEj32H8y3H9nskELbtx2m3rqfSAJpM7B6ZdBGuYr/N4Ah fyK+asSHfRkaOCqTTMgX37HRKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4PQO5X FnOBzeGKZs4GC+4RxyG0MB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBFyFvbJSjw8fgbxvyI1FagwOcXc7j9y93K9TFqYrQg6E/ZU9wIn2V utFxPKTfzbps52N5uWo3hfqHqyBtbVvETPDZLN4btl5uNbreo0qYYTbcypQa6wfD sghkFDyiTTmU4lGHhUJ2RAetxqHG5u5NUQST4HLtzTcBqNT8uJB4d9hT4xvs5aAa pIZTuAqFfbtfzGqbN6RhLkRUkCmec7Q72zMbiupgAN2O3R2zGUaLwYprZZBcHFkZ ksjyXO+o8GNPM7z4D3VOlNl6Y7fOnU/ekaKOIzsPvs1pysnpZmDoUnHxlPwaTNtQ eKluEjuMMvR7LYpkw+tzwsAeFqaVKkPk -----END CERTIFICATE-----Generated at Fri Dec 19 06:18:17 2025 by rpki-client