This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json) Hash identifier: JYKpyfDMCjlGWLVfEPBlEg9fMXKIIhdLHa8x0e6UERM= Subject key identifier: 92:54:81:9D:0F:73:CA:75:16:FE:72:68:D1:03:DF:8D:23:41:FD:58 Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft Manifest number: 0124 Signing time: Fri 05 Dec 2025 02:39:16 +0000 Manifest this update: Fri 05 Dec 2025 02:39:15 +0000 Manifest next update: Fri 12 Dec 2025 02:39:15 +0000 Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: u5K9p9J3nEreqjy+1qjAiQKd0u+R3QmewhuzIu/NSjA=) 2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: 9jOhdF/kHfoeUCq9Rv7j7FuoVMJgstRNSAmVQVVYx6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Validity Not Before: Dec 5 02:39:15 2025 GMT Not After : Dec 12 02:39:15 2025 GMT Subject: CN=693245d4-313b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:7b:c9:7f:18:d3:c5:07:1b:14:2e:57:f5: 16:2f:4e:98:25:7e:e6:b5:08:bb:cf:29:a2:af:69: ed:1e:83:80:f6:60:88:5d:43:17:ae:09:69:4f:63: 2b:43:42:70:27:26:a4:27:bc:ba:04:3a:57:cb:4d: 9b:fb:47:63:84:78:45:b7:52:0f:0d:7e:d3:c3:39: 58:9e:87:ee:21:ba:cb:cd:57:33:a6:ac:3d:d5:77: 43:f0:fb:8d:ed:2a:0b:37:74:8c:f6:d6:e6:1a:02: f8:b7:21:28:d3:24:df:cb:18:bb:59:69:08:a6:35: 25:27:1c:9a:a7:27:1c:b7:42:59:0f:60:e0:9c:60: 97:18:56:ed:67:76:11:fd:af:73:f2:ea:45:44:7d: 56:45:d1:35:12:9f:ce:3a:9e:5e:ec:27:dd:6d:bc: 7d:61:6e:76:be:63:a5:69:72:72:ff:0f:e5:7c:ed: ed:72:04:03:a1:b0:d7:83:67:0a:6e:50:6a:72:10: 89:4c:5b:70:a1:b2:26:78:b4:16:9d:c2:ca:6b:bd: 78:24:3a:db:d1:60:3d:20:08:b6:35:88:d2:d1:4d: c1:51:6b:7c:9a:0b:19:f7:35:b5:93:5f:1a:24:4f: c0:4b:3e:08:28:62:49:52:94:4a:66:5b:b6:c9:8e: e2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:54:81:9D:0F:73:CA:75:16:FE:72:68:D1:03:DF:8D:23:41:FD:58 X509v3 Authority Key Identifier: keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a0:cf:c1:dd:7e:54:cc:e7:e7:41:cd:29:7a:75:a8:52:c8: c5:8f:65:4d:cb:56:88:2c:44:4c:4b:b9:03:d2:ce:c0:7d:47: a0:00:b0:d2:a3:f4:1d:b8:bf:a1:94:b2:e7:b9:57:19:28:ad: 37:e9:9a:a8:73:19:1a:2a:be:57:70:8e:5f:ec:62:f1:d6:67: 77:8b:72:03:c8:a6:1c:df:c1:34:19:47:73:7f:66:36:e6:c0: e0:e9:7e:8a:fe:1d:da:43:64:cc:91:e9:59:e1:55:76:1b:ac: 64:af:a6:06:f4:42:ec:d3:33:29:71:36:92:72:f1:56:22:4f: 8d:ef:dc:1b:34:4e:d0:4d:76:fa:71:00:81:3d:23:8d:a6:f1: 08:56:b8:b0:d8:04:9a:51:8d:82:ce:06:65:2f:19:41:d5:18: 64:fb:90:91:7d:6d:a1:d8:ae:3e:9e:a1:f5:8c:eb:c7:23:c8: eb:5b:3a:bf:9a:ff:4b:7c:f6:f2:17:47:14:72:c0:69:cf:bb: 72:e4:b4:65:9f:b0:63:6e:95:86:1a:27:0b:8d:bb:e8:92:19: fe:03:7c:fd:76:fc:39:21:10:95:b0:68:5e:1e:1d:97:2a:12: 94:c2:66:09:95:75:ad:cc:c6:3a:52:3d:8c:f9:33:6c:e8:e5: 30:7b:b0:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwOEExMTAvBgNVBAUTKEQwREVDRjEwOEQyNjgwMUI3Qzk3RTM0OTAyOUFGMUZD RjkwQTg1NUUwHhcNMjUxMjA1MDIzOTE1WhcNMjUxMjEyMDIzOTE1WjAYMRYwFAYD VQQDEw02OTMyNDVkNC0zMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUt7yX8Y08UHGxQuV/UWL06YJX7mtQi7zymir2ntHoOA9mCIXUMXrglpT2Mr Q0JwJyakJ7y6BDpXy02b+0djhHhFt1IPDX7TwzlYnofuIbrLzVczpqw91XdD8PuN 7SoLN3SM9tbmGgL4tyEo0yTfyxi7WWkIpjUlJxyapycct0JZD2DgnGCXGFbtZ3YR /a9z8upFRH1WRdE1Ep/OOp5e7Cfdbbx9YW52vmOlaXJy/w/lfO3tcgQDobDXg2cK blBqchCJTFtwobImeLQWncLKa714JDrb0WA9IAi2NYjS0U3BUWt8mgsZ9zW1k18a JE/ASz4IKGJJUpRKZlu2yY7ipwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJUgZ0P c8p1Fv5yaNED340jQf1YMB8GA1UdIwQYMBaAFNDezxCNJoAbfJfjSQKa8fz5CoVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDA4QS8xODg0NUY2QzE4 QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdCdDhsLU5KQXByeF9Qa0to VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBON1BFSTBtZ0J0OGwtTkpBcHJ4X1BrS2hWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDA4QS8xODg0NUY2QzE4QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdC dDhsLU5KQXByeF9Qa0toVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLoM/B3X5UzOfnQc0penWoUsjFj2VNy1aILERMS7kD0s7AfUegALDS o/QduL+hlLLnuVcZKK036ZqocxkaKr5XcI5f7GLx1md3i3IDyKYc38E0GUdzf2Y2 5sDg6X6K/h3aQ2TMkelZ4VV2G6xkr6YG9ELs0zMpcTaScvFWIk+N79wbNE7QTXb6 cQCBPSONpvEIVriw2ASaUY2CzgZlLxlB1Rhk+5CRfW2h2K4+nqH1jOvHI8jrWzq/ mv9LfPbyF0cUcsBpz7ty5LRln7BjbpWGGicLjbvokhn+A3z9dvw5IRCVsGheHh2X KhKUwmYJlXWtzMY6Uj2M+TNs6OUwe7An -----END CERTIFICATE-----Generated at Sun Dec 7 01:59:28 2025 by rpki-client