This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json)
Hash identifier: Pdqb8xfEETAQVquHKI8OYM8fFhaYuiUDtwEx1qgNi1Y=
Subject key identifier: F4:98:4F:4F:53:D7:B7:76:20:5F:FE:EC:D2:2C:98:9E:F6:28:92:1D
Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8
Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8
Certificate serial: 0BB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
Manifest number: 0BB2
Signing time: Sat 06 Dec 2025 18:15:14 +0000
Manifest this update: Sat 06 Dec 2025 18:15:14 +0000
Manifest next update: Sat 13 Dec 2025 18:15:14 +0000
Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: UQNcc/t7fLqLBJpgdfCeui3XQdwUhwsyc2yveg1peJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl
rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2998 (0xbb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167307, serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8
Validity
Not Before: Dec 6 18:15:14 2025 GMT
Not After : Dec 13 18:15:14 2025 GMT
Subject: CN=693472b2-1cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:3d:72:af:2a:be:2f:f8:2f:0f:7b:60:fe:
1e:8c:91:89:32:60:c3:17:b6:f5:73:10:8f:02:ea:
9c:4d:7e:49:d9:7a:78:9e:97:a4:57:97:8c:59:2e:
7f:16:01:b8:d6:ea:4a:97:1b:15:75:df:fc:4b:7a:
96:6a:d1:15:a1:b8:91:f4:b5:04:01:07:a2:62:10:
c1:a3:05:e7:bf:bd:21:6d:e4:0e:79:c5:3a:a8:cf:
86:42:18:19:d8:0f:90:f4:f6:06:d1:95:d7:34:5f:
0b:a1:c7:1a:9f:91:cb:51:92:8d:a5:f1:3e:a3:2c:
4b:00:e7:3c:47:1d:47:85:6d:00:7f:82:d9:6f:7b:
d3:aa:20:c8:2e:d8:90:d2:a6:22:77:d4:14:dd:38:
85:dc:68:de:21:6a:ea:c6:de:e1:33:9a:1b:d2:04:
4e:3a:e8:f8:a4:59:e1:d7:c3:c4:f1:2e:9b:51:ff:
46:4e:1c:9e:b1:9c:80:11:6f:75:da:c4:61:a0:b0:
e7:4c:c8:33:58:2e:3e:98:9f:7d:fa:3e:77:52:a2:
f4:69:b8:55:17:a9:19:22:c6:e9:17:46:13:39:d2:
33:a7:f0:ca:06:2b:91:e5:53:4d:3e:79:d4:24:f4:
9f:28:14:25:cd:d5:1c:b5:b4:e6:e1:19:49:80:1e:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:98:4F:4F:53:D7:B7:76:20:5F:FE:EC:D2:2C:98:9E:F6:28:92:1D
X509v3 Authority Key Identifier:
keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:9b:42:ee:bd:2e:92:ac:2e:47:fc:86:95:57:14:5a:43:9e:
96:3f:96:fc:c7:5d:f3:0d:31:9b:fe:f9:bb:38:3b:3c:7f:9a:
34:bd:64:5c:7d:65:d5:19:6a:f9:de:2f:c8:43:9e:92:0f:ae:
35:5b:e3:e9:74:9c:f0:5e:1a:43:64:67:18:e4:45:d8:e8:0f:
e5:c7:07:a0:d7:c1:b6:a5:fc:c7:ef:0e:85:a8:90:b2:6b:c8:
b2:39:0d:24:04:fb:d4:5b:2c:b3:e7:71:b2:88:4d:d4:84:dd:
93:ae:fb:c5:00:24:98:99:0c:9b:b2:32:6c:04:bb:10:b4:db:
a5:e1:6e:c6:af:cd:f8:e4:e7:38:bb:35:23:a9:96:b7:24:86:
5b:da:02:68:aa:8c:1d:0e:7e:9a:9b:eb:f7:c2:5e:13:ab:5c:
ee:8a:21:02:51:ec:44:22:90:62:24:20:2d:ce:91:46:5c:8d:
a4:c4:4b:8f:93:80:c7:f0:03:56:f4:8a:dc:2c:2b:28:14:cd:
37:2f:1d:01:94:19:4b:e7:08:60:5e:38:75:5e:24:8a:b1:9d:
0c:01:32:6f:c4:54:80:0b:45:8f:62:c2:bb:a1:1c:55:de:85:
e9:b2:5f:a8:31:75:82:13:87:78:37:13:4a:15:d2:91:a4:fc:
1f:81:e4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:59 2025 by rpki-client