This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.mft (raw, json) Hash identifier: +OdaqL6McWtv/CxAT6vpgI8s8NkjxjSY+kmixH2nYeI= Subject key identifier: 56:B5:1E:F7:07:E7:D1:53:E0:77:5F:63:D6:CF:BF:19:82:77:5A:9F Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 Certificate issuer: /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Certificate serial: 1291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft Manifest number: 127F Signing time: Sat 06 Dec 2025 16:37:33 +0000 Manifest this update: Sat 06 Dec 2025 16:37:32 +0000 Manifest next update: Sat 13 Dec 2025 16:37:32 +0000 Files and hashes: 1: 7ulOOvQOrIyjbcMuSeREbs-zNQU.crl (hash: /3vQXomGvAra6nvWwScBEVvcLcb4U+ZeEqUl3C6ZUdU=) 2: 0DE55A7CAA4411F0B070DC19C4F9AE02.roa (hash: RVeWzEi8FWx6+XKLQ2LvJ/XgHncVpOFiC8+2OAjSGp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4753 (0x1291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161FF7, serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Validity Not Before: Dec 6 16:37:32 2025 GMT Not After : Dec 13 16:37:32 2025 GMT Subject: CN=69345bcc-19ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:e4:ec:61:82:4b:1f:73:e2:08:19:e4:6d: 10:2a:92:6b:58:c2:9b:26:54:fb:c3:09:97:98:d6: de:52:31:ad:e3:b9:e5:c5:c3:2b:c5:e3:10:46:99: 01:3c:3f:a0:7b:c7:57:c9:97:0c:6c:fe:29:18:c4: 9f:18:16:05:bc:f6:e3:89:2c:92:9b:77:e1:c6:9c: 52:32:4f:e2:d3:f2:88:69:2b:20:0c:e6:ca:3b:04: 9c:ea:da:47:d9:d3:75:ce:88:83:e6:c9:6f:8f:c0: 61:b8:29:ac:5f:12:00:d2:38:78:8b:37:48:1c:f7: ca:b1:12:7b:74:28:10:1c:99:b5:87:c8:5b:5a:de: 73:d2:bb:ef:a5:48:1f:aa:7e:e8:df:4c:8b:ea:6c: 35:39:42:ae:90:ed:eb:c7:cc:b3:da:6c:e2:8f:0d: 07:90:1a:77:b9:59:1b:15:75:40:49:8f:55:ca:82: b9:33:7c:fb:0d:95:1e:23:8f:d6:85:04:9c:66:0a: 37:94:a2:76:ba:a7:f2:d1:ee:13:94:76:4d:08:ce: c0:88:a8:36:6c:e9:53:36:78:4b:3b:73:e8:9f:10: 23:3a:59:64:ef:20:a1:b6:08:85:e0:54:b5:37:8e: 21:7c:03:80:b0:2e:55:3b:9c:af:7c:cb:b6:5e:78: 70:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B5:1E:F7:07:E7:D1:53:E0:77:5F:63:D6:CF:BF:19:82:77:5A:9F X509v3 Authority Key Identifier: keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:3e:6b:de:29:fa:e9:84:a0:34:33:2d:f8:87:7f:c3:63:f1: 94:5b:ae:c7:db:bd:d3:4a:df:ca:e9:06:3e:be:a3:f6:71:4a: 4d:2c:42:51:f5:8e:32:1f:27:f4:7c:55:1a:f6:4a:e0:a3:81: 9f:a4:51:ff:a2:31:cf:8a:7d:25:f6:9c:55:da:41:75:45:2b: 04:f5:89:d8:ab:9e:bd:a8:b4:0a:88:9a:1a:58:71:2a:2f:db: cc:86:26:99:8a:9c:98:fe:2b:44:6a:4d:b1:72:63:aa:1e:03: 17:30:a7:88:0c:27:0a:be:43:9c:85:f9:ec:13:14:03:8e:44: b9:0c:c0:d5:5d:5c:e2:2d:4d:2e:7d:cd:e1:26:e4:cd:0f:c5: 2e:a3:15:7b:77:68:67:22:95:6d:b4:bd:d5:58:57:56:62:c8: af:19:fd:ce:5b:4a:84:cc:e3:c0:0b:bf:94:16:49:24:f6:94: ed:9b:da:c2:70:da:c8:9c:8f:ac:5c:05:9e:7e:63:fc:bf:62: 95:4b:c0:b0:cd:dc:27:93:17:b8:48:d3:a3:5f:99:a7:f8:18: 49:3e:c3:51:69:90:f5:36:a8:d7:46:99:6e:33:3d:74:8b:b1: 0e:59:83:bb:5a:01:3d:58:fa:8d:d4:75:2b:3d:4d:5c:dd:bc: 32:cc:73:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGRjcxMTAvBgNVBAUTKEVFRTk0RTNBRjQwRUFDOENBMzZEQzMyRTQ5RTQ0NDZF Q0ZCMzM1MDUwHhcNMjUxMjA2MTYzNzMyWhcNMjUxMjEzMTYzNzMyWjAYMRYwFAYD VQQDEw02OTM0NWJjYy0xOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+/k7GGCSx9z4ggZ5G0QKpJrWMKbJlT7wwmXmNbeUjGt47nlxcMrxeMQRpkB PD+ge8dXyZcMbP4pGMSfGBYFvPbjiSySm3fhxpxSMk/i0/KIaSsgDObKOwSc6tpH 2dN1zoiD5slvj8BhuCmsXxIA0jh4izdIHPfKsRJ7dCgQHJm1h8hbWt5z0rvvpUgf qn7o30yL6mw1OUKukO3rx8yz2mzijw0HkBp3uVkbFXVASY9VyoK5M3z7DZUeI4/W hQScZgo3lKJ2uqfy0e4TlHZNCM7AiKg2bOlTNnhLO3PonxAjOllk7yChtgiF4FS1 N44hfAOAsC5VO5yvfMu2XnhwGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFa1HvcH 59FT4HdfY9bPvxmCd1qfMB8GA1UdIwQYMBaAFO7pTjr0DqyMo23DLknkRG7PszUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUZGNy8yMTg2MkM2NEUw QzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJeWpiY011U2VSRWJzLXpO UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bE9PdlFPckl5amJjTXVTZVJFYnMtek5RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUZGNy8yMTg2MkM2NEUwQzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJ eWpiY011U2VSRWJzLXpOUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkPmveKfrphKA0My34h3/DY/GUW67H273TSt/K6QY+vqP2cUpNLEJR 9Y4yHyf0fFUa9krgo4GfpFH/ojHPin0l9pxV2kF1RSsE9YnYq569qLQKiJoaWHEq L9vMhiaZipyY/itEak2xcmOqHgMXMKeIDCcKvkOchfnsExQDjkS5DMDVXVziLU0u fc3hJuTND8UuoxV7d2hnIpVttL3VWFdWYsivGf3OW0qEzOPAC7+UFkkk9pTtm9rC cNrInI+sXAWefmP8v2KVS8Cwzdwnkxe4SNOjX5mn+BhJPsNRaZD1NqjXRpluMz10 i7EOWYO7WgE9WPqN1HUrPU1c3bwyzHOZ -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:45 2025 by rpki-client