This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft File: 07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json) Hash identifier: gEBM2NJb8FlE0DTRS/tuyXuaoGvQH5DTJPCp1nCZVQs= Subject key identifier: 13:D7:F7:E5:D3:F7:33:CF:56:4E:1B:E4:9E:6D:36:55:5E:17:97:16 Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft Manifest number: 020E Signing time: Fri 05 Dec 2025 00:36:44 +0000 Manifest this update: Fri 05 Dec 2025 00:36:44 +0000 Manifest next update: Fri 12 Dec 2025 00:36:44 +0000 Files and hashes: 1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: 5yJ7Zlgln+oW/vQ+88wD0xN75f4jfqdKouVSlLeTX4s=) 2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: Wygmj2JKO4aGkrYbl9Bny2rS0iiXkwLAfqO4thXRj+k=) 3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: zelXEh8AZUnkEzzh5nIKoVPZYcm1u2v7VkQCFQEcMjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Validity Not Before: Dec 5 00:36:44 2025 GMT Not After : Dec 12 00:36:44 2025 GMT Subject: CN=6932291c-19cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2d:a8:50:26:e5:65:18:34:d1:39:fa:e1:28: 39:e2:ab:c1:cb:3f:a8:3e:51:1d:ab:0b:8a:34:d6: 7a:44:66:cf:98:25:fe:89:f5:7f:0e:f0:43:d0:68: cc:a1:21:35:e5:4a:b2:98:02:f5:43:fa:a0:65:68: b2:80:1d:a6:af:15:1b:89:79:e6:12:14:cf:ee:fc: f9:2f:b8:93:8b:d3:3c:c8:71:1f:6a:f5:8c:ae:c4: 60:d2:11:da:af:6f:f0:03:5e:4b:d7:01:dd:14:f3: c0:6d:3e:09:67:58:e3:64:88:35:d6:64:19:96:c0: 8e:b8:91:b8:98:10:3e:af:e4:c0:e6:bb:b9:89:a9: 0f:63:f1:19:75:51:18:6c:33:e2:45:ba:f8:65:59: 0e:32:6c:0d:5c:d8:e6:62:90:93:6e:e0:5d:07:a2: c1:10:08:aa:84:e8:b2:1a:3e:3d:bd:f3:19:c1:fd: 6e:53:6d:e2:d9:7f:e5:0f:98:0b:2a:2a:ca:d2:06: 2b:47:92:12:40:a4:d9:b0:b4:0a:fb:2f:70:df:7d: 3a:96:35:01:d4:1a:19:21:c5:22:53:00:75:cf:56: 11:2c:4b:f8:53:86:e9:42:43:f9:09:2a:83:8a:81: 08:28:60:a1:93:cb:df:13:15:a7:75:39:2e:bc:a5: c5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D7:F7:E5:D3:F7:33:CF:56:4E:1B:E4:9E:6D:36:55:5E:17:97:16 X509v3 Authority Key Identifier: keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e2:41:3c:44:25:b4:e8:42:10:65:a4:ef:d6:8d:8d:a0:10: 5d:e7:90:ea:13:13:98:5b:58:3e:f8:fb:fc:cf:3c:47:7d:54: 7e:0f:8a:d8:f1:8b:36:7c:b4:c9:67:1f:23:e9:fa:f6:69:77: 8c:24:20:1e:fa:5f:76:dd:dc:c6:30:1c:4a:64:9a:bc:e1:b9: 68:06:ea:77:5a:83:f9:34:74:d9:96:fd:65:ee:4e:e8:46:46: 9e:9f:43:e7:31:23:24:e4:a4:67:8c:3d:3a:3c:b3:12:70:3e: 39:6d:b9:72:dd:1f:75:38:21:8c:51:d7:61:89:d6:21:dd:d7: 2c:ee:db:1d:e7:43:d2:77:35:18:57:40:1e:07:e6:80:6f:fd: 2a:37:24:6c:bb:bc:96:d5:cf:bf:62:ec:85:54:92:40:e6:f7: 50:ab:97:42:60:3e:45:c0:d8:d1:f4:e0:e8:4b:5c:13:43:8c: 85:43:03:f8:92:80:01:17:3e:9a:91:45:be:b2:42:07:f9:d6: 03:2e:a1:77:77:26:79:d5:3a:2f:15:f4:2c:9a:52:11:4e:d8: 88:5a:f6:88:ac:88:86:1c:d6:f8:3f:5d:8b:6e:6a:3a:70:4f: 4f:43:a3:80:05:db:37:c4:64:c3:ca:42:89:f5:a2:b3:59:64: 19:5a:b1:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNzkxMTAvBgNVBAUTKEQzQkIwQUZGMTk1OUUwMjkyNkM3Mzc1NDhBN0NCRTQx MERCOTA5NkIwHhcNMjUxMjA1MDAzNjQ0WhcNMjUxMjEyMDAzNjQ0WjAYMRYwFAYD VQQDEw02OTMyMjkxYy0xOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4S2oUCblZRg00Tn64Sg54qvByz+oPlEdqwuKNNZ6RGbPmCX+ifV/DvBD0GjM oSE15UqymAL1Q/qgZWiygB2mrxUbiXnmEhTP7vz5L7iTi9M8yHEfavWMrsRg0hHa r2/wA15L1wHdFPPAbT4JZ1jjZIg11mQZlsCOuJG4mBA+r+TA5ru5iakPY/EZdVEY bDPiRbr4ZVkOMmwNXNjmYpCTbuBdB6LBEAiqhOiyGj49vfMZwf1uU23i2X/lD5gL KirK0gYrR5ISQKTZsLQK+y9w3306ljUB1BoZIcUiUwB1z1YRLEv4U4bpQkP5CSqD ioEIKGChk8vfExWndTkuvKXF0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPX9+XT 9zPPVk4b5J5tNlVeF5cWMB8GA1UdIwQYMBaAFNO7Cv8ZWeApJsc3VIp8vkENuQlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE3OS8xQjVDMUY0MEIw RjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRDa214emRVaW55LVFRMjVD V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3c0tfeGxaNENrbXh6ZFVpbnktUVEyNUNXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE3OS8xQjVDMUY0MEIwRjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRD a214emRVaW55LVFRMjVDV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB04kE8RCW06EIQZaTv1o2NoBBd55DqExOYW1g++Pv8zzxHfVR+D4rY 8Ys2fLTJZx8j6fr2aXeMJCAe+l923dzGMBxKZJq84bloBup3WoP5NHTZlv1l7k7o Rkaen0PnMSMk5KRnjD06PLMScD45bbly3R91OCGMUddhidYh3dcs7tsd50PSdzUY V0AeB+aAb/0qNyRsu7yW1c+/YuyFVJJA5vdQq5dCYD5FwNjR9ODoS1wTQ4yFQwP4 koABFz6akUW+skIH+dYDLqF3dyZ51TovFfQsmlIRTtiIWvaIrIiGHNb4P12Lbmo6 cE9PQ6OABds3xGTDykKJ9aKzWWQZWrFG -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:23 2025 by rpki-client