This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json) Hash identifier: pWp8G1nt2iQtBXncN8GxhY0BplLdNtoT/hqdhOwecoE= Subject key identifier: DF:B8:5D:F9:FF:63:95:C9:32:8D:85:54:DC:11:2C:4C:6D:0E:A4:4F Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 0399 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft Manifest number: 0391 Signing time: Sat 06 Dec 2025 23:24:28 +0000 Manifest this update: Sat 06 Dec 2025 23:24:27 +0000 Manifest next update: Sat 13 Dec 2025 23:24:27 +0000 Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: UPxNdeycYZLbEChR1U3qv3i/HSxmp9xLcx6eaOsGQ68=) 2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 5H3doinpQy2aJUR8V/Iyn/j6ZGC3RyvpumpsTRmuHeE=) 3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: lc1pPdhpDyedJmN9wKoMqneYMH913sVIQlr9uEAlmPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 921 (0x399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Validity Not Before: Dec 6 23:24:27 2025 GMT Not After : Dec 13 23:24:27 2025 GMT Subject: CN=6934bb2b-ddf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:68:c8:d1:94:eb:83:8f:82:f2:c9:80:c2:39: a8:1f:c6:3e:85:85:bb:84:f4:1d:c8:ba:6d:ba:19: 13:f9:1a:e5:50:8d:72:2a:08:c4:d0:09:36:e0:e2: 4c:e5:5b:09:9a:18:f9:dc:68:82:11:21:b8:71:39: a9:24:42:6e:66:f8:de:dd:35:32:5e:38:c0:82:10: 3c:1e:a9:01:62:38:30:85:94:17:c6:ff:e5:55:b9: d0:c1:3b:52:72:33:e0:f2:6d:9b:67:49:07:2e:23: b8:68:3c:0f:41:40:64:23:12:f8:77:91:70:57:a7: be:08:ad:55:96:5d:fb:e0:d0:ba:f7:79:50:b9:f6: 1b:00:01:40:3d:d9:83:b1:a7:bc:f8:7b:f8:11:0f: 72:e0:5a:e7:62:40:22:74:47:9b:c0:fd:a6:54:1a: 6b:af:33:74:2f:c6:ea:a7:87:0b:8e:34:b2:ee:64: 90:f2:f7:48:d2:26:d4:74:65:4d:fe:39:6e:8d:bc: fd:c0:c5:ce:8d:f3:3d:28:36:15:38:ff:fb:79:89: 18:9c:9a:d7:eb:4c:49:0c:54:d4:79:4d:ca:7d:4e: 38:44:8c:f8:c0:d6:6b:88:22:21:7c:82:50:cc:34: 83:89:56:c6:6b:b5:31:76:34:e8:3a:42:0a:d5:88: e0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B8:5D:F9:FF:63:95:C9:32:8D:85:54:DC:11:2C:4C:6D:0E:A4:4F X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f7:c5:fc:c2:eb:88:96:36:d2:49:25:f3:3e:aa:8a:ba:c9: b4:e1:e3:eb:40:f9:a9:48:56:22:be:af:5b:fe:b3:59:72:6d: 9c:23:6a:c7:03:e0:4a:dc:68:ca:a0:a1:ce:e5:74:5a:ea:8b: b3:e5:53:90:f6:9b:eb:46:7c:b8:88:65:ed:e2:1a:93:73:7b: a4:8d:a4:4c:a2:ca:8f:c9:a7:91:42:02:d5:d0:f6:88:cf:7c: 83:34:35:6c:15:71:03:09:ea:b8:02:ba:23:6f:22:dc:f1:20: 5a:bc:3d:e4:41:22:e8:d5:5f:e3:91:eb:03:9c:8c:11:f5:b1: 70:97:6c:23:b6:99:54:89:e6:3b:bb:ea:d1:dc:96:f7:51:5c: ca:37:02:bc:b6:c9:1d:f5:4f:e8:f6:d1:dc:b3:3f:e9:77:58: 04:69:d6:63:da:97:30:cc:87:51:f7:14:22:92:da:f8:42:3e: e1:bb:d1:7f:a2:02:af:c3:dd:e2:cd:39:2f:29:c1:14:4e:4f: 89:33:4f:e7:12:ab:9d:f3:d3:e1:ec:40:ff:70:8b:be:74:43: 4c:29:97:f7:ad:8a:6f:70:a2:bb:90:10:c9:1e:69:ec:75:d9: 61:1d:ee:2b:a8:3d:85:c4:73:a5:9a:2c:e8:6f:b0:65:68:59: 4c:10:64:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjUxMjA2MjMyNDI3WhcNMjUxMjEzMjMyNDI3WjAYMRYwFAYD VQQDEw02OTM0YmIyYi1kZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmjI0ZTrg4+C8smAwjmoH8Y+hYW7hPQdyLptuhkT+RrlUI1yKgjE0Ak24OJM 5VsJmhj53GiCESG4cTmpJEJuZvje3TUyXjjAghA8HqkBYjgwhZQXxv/lVbnQwTtS cjPg8m2bZ0kHLiO4aDwPQUBkIxL4d5FwV6e+CK1Vll374NC693lQufYbAAFAPdmD sae8+Hv4EQ9y4FrnYkAidEebwP2mVBprrzN0L8bqp4cLjjSy7mSQ8vdI0ibUdGVN /jlujbz9wMXOjfM9KDYVOP/7eYkYnJrX60xJDFTUeU3KfU44RIz4wNZriCIhfIJQ zDSDiVbGa7UxdjToOkIK1YjgjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+4Xfn/ Y5XJMo2FVNwRLExtDqRPMB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa98X8wuuIljbSSSXzPqqKusm04ePrQPmpSFYivq9b/rNZcm2cI2rH A+BK3GjKoKHO5XRa6ouz5VOQ9pvrRny4iGXt4hqTc3ukjaRMosqPyaeRQgLV0PaI z3yDNDVsFXEDCeq4ArojbyLc8SBavD3kQSLo1V/jkesDnIwR9bFwl2wjtplUieY7 u+rR3Jb3UVzKNwK8tskd9U/o9tHcsz/pd1gEadZj2pcwzIdR9xQiktr4Qj7hu9F/ ogKvw93izTkvKcEUTk+JM0/nEqud89Ph7ED/cIu+dENMKZf3rYpvcKK7kBDJHmns ddlhHe4rqD2FxHOlmizob7BlaFlMEGTL -----END CERTIFICATE-----Generated at Sun Dec 7 05:40:51 2025 by rpki-client