This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json) Hash identifier: nTYICadPsMvrOSkToPWRWk0UWx4GL8bt1sfF86C++pc= Subject key identifier: 63:5F:91:73:30:64:DA:F7:8A:87:10:F9:53:64:24:A2:40:D6:13:71 Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft Manifest number: E3 Signing time: Fri 05 Dec 2025 03:44:18 +0000 Manifest this update: Fri 05 Dec 2025 03:44:17 +0000 Manifest next update: Fri 12 Dec 2025 03:44:17 +0000 Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: OWxR2PV5ny1KKysjcbuDffsIs3/A+Nq5wZVTWqsUk2g=) 2: A647525E853B11EFB513D149C4F9AE02.roa (hash: t1q6Mmlrz8mXbc1Vz8T8WidohHPsBk0Fmm5bZBubtH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: Dec 5 03:44:17 2025 GMT Not After : Dec 12 03:44:17 2025 GMT Subject: CN=69325512-cd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:c5:2a:cb:6d:f7:14:82:cf:22:fe:dd:5b: 08:ec:f6:af:7f:ac:12:dc:79:3a:44:99:c0:8c:a3: 40:78:77:37:8e:91:4e:80:3f:cd:2c:d4:85:e3:42: 14:ea:2f:43:d0:3a:48:e0:35:a4:90:c7:53:bc:51: 76:eb:3d:8f:c4:1e:9e:35:14:f4:07:44:11:af:41: c8:f2:8a:dd:79:13:7f:ba:b4:ea:f8:3b:63:98:b6: 8b:a7:6c:8f:63:1a:82:27:3e:5f:b4:18:16:d1:ba: 4c:37:f9:a1:91:98:7d:b2:0e:5f:19:00:4b:3d:cf: 99:f6:c6:17:28:09:3c:91:b2:ea:0f:ea:98:2a:e5: 5a:be:5c:45:11:9d:90:ba:6d:69:5f:7a:c3:93:b9: b4:f9:a8:91:06:e7:99:d8:03:9a:ce:54:27:ff:93: 83:35:81:34:4d:d7:15:9d:77:52:58:2b:16:c2:54: fb:ee:21:ff:f7:27:3c:22:c7:4a:88:f4:b4:4a:0e: 95:f1:15:f7:40:b0:8a:e0:57:50:15:09:78:4e:29: 70:a3:c8:5d:48:7f:3b:dd:32:90:d4:48:1a:6c:45: d4:19:85:da:9f:29:f6:0b:5b:22:a9:7a:fa:47:c5: 8d:1a:9d:d6:cf:9c:a7:41:30:c4:f4:c9:4d:4c:4e: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5F:91:73:30:64:DA:F7:8A:87:10:F9:53:64:24:A2:40:D6:13:71 X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:6c:80:7e:18:31:d2:17:35:f9:00:73:27:59:7c:e4:fb:86: 06:c2:92:7d:fb:70:40:31:f1:fb:c7:4a:1f:47:1d:da:0a:f9: 6b:2d:1b:73:e0:d7:c1:0f:22:ba:8e:ee:d6:38:19:e8:f8:aa: db:52:e7:4e:04:4c:bc:bc:19:54:c8:81:e8:a5:05:f3:a3:70: f2:08:a3:6c:6d:c6:3b:49:28:2e:82:e2:15:ba:c7:fa:07:ae: 67:b5:04:dd:b2:9a:aa:79:5b:26:d2:83:2f:15:3f:fa:ff:7c: 29:77:84:91:68:1d:32:4c:3c:f7:af:56:cf:13:c3:16:06:5f: 8c:46:20:e1:90:b0:ab:71:75:ea:00:89:42:d7:42:ce:1c:bc: 54:58:f3:76:00:1a:b8:f9:0b:4f:31:ad:7e:5d:ec:1b:83:cc: 17:ba:e2:cf:42:7a:a9:17:7c:de:49:ee:fe:31:f2:34:25:61: d7:e3:6b:55:dc:15:8d:ff:00:ac:37:8d:48:ec:17:06:9e:b9: a1:6b:40:6c:71:a2:87:c8:ee:7a:17:15:71:6b:f7:a0:85:04: 0c:69:cd:c4:83:dd:2d:91:5e:cf:4c:56:bd:9f:8a:54:da:ac: 20:e3:89:1d:5f:1a:ab:a7:21:d8:3f:2b:02:98:8f:0b:bb:88: 12:9a:57:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFRUQxMTAvBgNVBAUTKEVERkU3MDZDOTQ5QjVFQ0YxREJCRTQ2MERCRDA0RUZF N0MxRTEyOEIwHhcNMjUxMjA1MDM0NDE3WhcNMjUxMjEyMDM0NDE3WjAYMRYwFAYD VQQDEw02OTMyNTUxMi1jZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuzFKstt9xSCzyL+3VsI7Pavf6wS3Hk6RJnAjKNAeHc3jpFOgD/NLNSF40IU 6i9D0DpI4DWkkMdTvFF26z2PxB6eNRT0B0QRr0HI8ordeRN/urTq+DtjmLaLp2yP YxqCJz5ftBgW0bpMN/mhkZh9sg5fGQBLPc+Z9sYXKAk8kbLqD+qYKuVavlxFEZ2Q um1pX3rDk7m0+aiRBueZ2AOazlQn/5ODNYE0TdcVnXdSWCsWwlT77iH/9yc8IsdK iPS0Sg6V8RX3QLCK4FdQFQl4Tilwo8hdSH873TKQ1EgabEXUGYXanyn2C1siqXr6 R8WNGp3Wz5ynQTDE9MlNTE6XEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNfkXMw ZNr3iocQ+VNkJKJA1hNxMB8GA1UdIwQYMBaAFO3+cGyUm17PHbvkYNvQTv58HhKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEVFRC8zRkYzOTQwRTg1 M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhzOGR1LVJnMjlCT19ud2VF b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEVFRC8zRkYzOTQwRTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhz OGR1LVJnMjlCT19ud2VFb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5bIB+GDHSFzX5AHMnWXzk+4YGwpJ9+3BAMfH7x0ofRx3aCvlrLRtz 4NfBDyK6ju7WOBno+KrbUudOBEy8vBlUyIHopQXzo3DyCKNsbcY7SSguguIVusf6 B65ntQTdspqqeVsm0oMvFT/6/3wpd4SRaB0yTDz3r1bPE8MWBl+MRiDhkLCrcXXq AIlC10LOHLxUWPN2ABq4+QtPMa1+Xewbg8wXuuLPQnqpF3zeSe7+MfI0JWHX42tV 3BWN/wCsN41I7BcGnrmha0BscaKHyO56FxVxa/eghQQMac3Eg90tkV7PTFa9n4pU 2qwg44kdXxqrpyHYPysCmI8Lu4gSmleF -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:45 2025 by rpki-client