This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft File: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft (raw, json) Hash identifier: EytC5YLqsm06nd5hthB6lGGr+HWJGSwWsiwBM3CS5sc= Subject key identifier: 1E:51:55:D6:E7:80:C7:29:49:45:AC:E9:DB:69:48:5D:3D:3C:DA:9D Authority key identifier: ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3 Certificate issuer: /CN=A9152787/serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft Manifest number: D3 Signing time: Fri 05 Dec 2025 03:41:00 +0000 Manifest this update: Fri 05 Dec 2025 03:40:59 +0000 Manifest next update: Fri 12 Dec 2025 03:40:59 +0000 Files and hashes: 1: 7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl (hash: xCePOMP4920HyWU2jkW2G34KTj4+Hu6oR3ObS1Rg8TI=) 2: 45D37CC28F8111EFB699FB63C4F9AE02.roa (hash: W3ELMdd+4Z64t5VfbCPMdcy4Vijaf3NYkhFRRrOXtfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152787, serialNumber=ED82A2FD7DE147527CFCC4247A256C1A0EDB4ED3 Validity Not Before: Dec 5 03:40:59 2025 GMT Not After : Dec 12 03:40:59 2025 GMT Subject: CN=6932544b-d905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:46:85:c1:e2:51:ec:92:a8:31:1a:7b:82: b3:4e:d3:e0:91:26:04:62:a4:ed:31:7d:49:58:a1: 08:aa:a3:db:15:5e:e4:34:e2:a6:9b:53:3b:de:47: 9e:05:a9:3b:5c:e5:a7:a7:d8:75:ae:4f:9f:a1:e2: 09:5c:11:1f:b0:a4:9a:8c:8b:30:29:b0:a4:11:15: 56:a8:ee:67:a8:fc:b1:97:8b:fa:67:0d:d2:f3:c4: 63:26:92:67:e5:06:4c:3f:60:7f:1b:64:fc:d1:66: e1:14:47:d2:33:50:2f:02:36:8f:aa:7f:d9:1d:e5: da:f9:e0:2c:b4:00:cc:29:e6:b1:f8:e8:3d:6d:fb: 01:fd:f0:f5:9e:ac:70:22:9c:e9:ec:c5:a9:fb:17: 33:65:bb:14:85:f6:ac:9f:55:2f:70:f3:3e:c7:f0: b0:4f:be:24:29:39:fa:c3:79:32:3e:b2:2f:3b:b1: 8d:95:4d:eb:9d:0d:fe:e7:b4:c9:9a:e9:a4:99:79: 1d:89:0b:e9:b9:54:e3:05:5b:cb:01:20:a9:41:60: bc:6f:cf:4b:f5:85:3f:6e:8f:c4:e0:38:39:c3:78: 91:e9:22:c1:26:f5:c2:f6:bf:6b:2e:78:b2:c9:11: 25:b7:ca:0e:ca:37:59:62:d3:fc:2b:91:cb:2a:75: 28:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:51:55:D6:E7:80:C7:29:49:45:AC:E9:DB:69:48:5D:3D:3C:DA:9D X509v3 Authority Key Identifier: keyid:ED:82:A2:FD:7D:E1:47:52:7C:FC:C4:24:7A:25:6C:1A:0E:DB:4E:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YKi_X3hR1J8_MQkeiVsGg7bTtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2B1C47FE8F7911EF92AC781EC4F9AE02/7YKi_X3hR1J8_MQkeiVsGg7bTtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:2b:61:9a:9d:e1:20:0d:ec:41:05:fd:be:4a:f6:d7:a8:36: da:87:ff:43:bb:c7:df:07:a7:8a:25:1f:40:db:2f:49:0f:51: d0:2e:eb:04:47:6d:b1:2a:96:ed:72:bc:65:b9:9f:40:50:bb: e0:a5:ad:c3:e1:e6:27:7d:fb:fc:77:04:4d:86:b8:c3:11:b0: 19:e5:57:b7:e5:73:f8:76:cd:39:7b:78:8c:dc:4c:f0:c3:61: dd:6d:5b:df:42:7d:be:50:fe:13:d3:17:88:8a:e7:e2:a2:73: 73:ab:98:84:24:39:04:7d:01:af:d5:3f:9a:47:6c:15:15:95: 1f:b4:14:83:a5:4f:13:df:61:42:fa:e9:69:ce:10:5c:93:7f: d7:29:c7:4a:51:91:c4:7c:b8:0e:1e:14:43:c9:25:e0:2b:f7: 05:4e:81:66:f7:18:9c:fd:0b:55:f7:4f:7a:e6:86:87:f0:da: ea:b6:77:4a:c5:90:ab:b4:54:4e:9b:b0:d8:e4:7a:b0:11:a9: 2f:8b:77:ff:57:69:ce:91:64:5c:79:b9:f3:dd:ad:4f:d1:75: d9:1c:22:7b:94:d4:6e:af:1e:df:0c:7e:85:74:b7:b8:65:d0: a1:95:ca:6a:6f:aa:f3:c7:79:60:20:10:6f:86:3f:fc:99:5e: 6c:d5:d9:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3ODcxMTAvBgNVBAUTKEVEODJBMkZEN0RFMTQ3NTI3Q0ZDQzQyNDdBMjU2QzFB MEVEQjRFRDMwHhcNMjUxMjA1MDM0MDU5WhcNMjUxMjEyMDM0MDU5WjAYMRYwFAYD VQQDEw02OTMyNTQ0Yi1kOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnlGhcHiUeySqDEae4KzTtPgkSYEYqTtMX1JWKEIqqPbFV7kNOKmm1M73kee Bak7XOWnp9h1rk+foeIJXBEfsKSajIswKbCkERVWqO5nqPyxl4v6Zw3S88RjJpJn 5QZMP2B/G2T80WbhFEfSM1AvAjaPqn/ZHeXa+eAstADMKeax+Og9bfsB/fD1nqxw Ipzp7MWp+xczZbsUhfasn1UvcPM+x/CwT74kKTn6w3kyPrIvO7GNlU3rnQ3+57TJ mumkmXkdiQvpuVTjBVvLASCpQWC8b89L9YU/bo/E4Dg5w3iR6SLBJvXC9r9rLniy yRElt8oOyjdZYtP8K5HLKnUoWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5RVdbn gMcpSUWs6dtpSF09PNqdMB8GA1UdIwQYMBaAFO2Cov194UdSfPzEJHolbBoO207T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mjc4Ny8yQjFDNDdGRThG NzkxMUVGOTJBQzc4MUVDNEY5QUUwMi83WUtpX1gzaFIxSjhfTVFrZWlWc0dnN2JU dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZS2lfWDNoUjFKOF9NUWtlaVZzR2c3YlR0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mjc4Ny8yQjFDNDdGRThGNzkxMUVGOTJBQzc4MUVDNEY5QUUwMi83WUtpX1gzaFIx SjhfTVFrZWlWc0dnN2JUdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaK2GaneEgDexBBf2+SvbXqDbah/9Du8ffB6eKJR9A2y9JD1HQLusE R22xKpbtcrxluZ9AULvgpa3D4eYnffv8dwRNhrjDEbAZ5Ve35XP4ds05e3iM3Ezw w2HdbVvfQn2+UP4T0xeIiufionNzq5iEJDkEfQGv1T+aR2wVFZUftBSDpU8T32FC +ulpzhBck3/XKcdKUZHEfLgOHhRDySXgK/cFToFm9xic/QtV90965oaH8NrqtndK xZCrtFROm7DY5HqwEakvi3f/V2nOkWRcebnz3a1P0XXZHCJ7lNRurx7fDH6FdLe4 ZdChlcpqb6rzx3lgIBBvhj/8mV5s1dmc -----END CERTIFICATE-----Generated at Sun Dec 7 02:48:18 2025 by rpki-client