This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json) Hash identifier: aG8E5E/7PRCETSUrEWerwOlknq6blatDTwex/21x9Ik= Subject key identifier: 6C:58:52:89:CE:7E:75:6D:6C:18:56:E6:83:4C:AF:BD:03:A9:9C:88 Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft Manifest number: 01ED Signing time: Sat 06 Dec 2025 21:52:04 +0000 Manifest this update: Sat 06 Dec 2025 21:52:03 +0000 Manifest next update: Sat 13 Dec 2025 21:52:03 +0000 Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: h6dvi03JjSizrw1G4lyLuQXV5Lp6doklVMOs4oGYJxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Validity Not Before: Dec 6 21:52:03 2025 GMT Not After : Dec 13 21:52:03 2025 GMT Subject: CN=6934a583-b4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:12:74:2a:80:ed:e1:da:4d:a8:e4:12:65: 5e:a3:09:ef:ca:16:9f:72:13:ad:18:54:4f:80:64: dd:12:18:8f:50:93:ae:cf:2c:3a:ae:a4:72:f9:ea: 84:02:a0:0d:ba:b8:e2:22:1c:cb:0e:d5:13:72:51: 96:8b:0d:88:f5:ef:07:c7:a6:ca:f3:86:9f:15:3a: ff:f9:92:7c:47:46:65:17:b9:89:93:09:8e:95:f3: 14:ec:65:8a:2a:da:ce:cf:68:e5:37:51:be:df:41: 3d:8b:d2:0b:f6:78:32:7c:6a:67:3e:05:10:d6:ff: 99:88:02:b3:70:6e:c6:45:fe:bf:3b:e2:8d:1b:b3: e3:22:d9:d3:69:b7:87:bc:57:14:2b:b6:f0:ca:82: 1c:eb:cd:9e:52:cc:21:f0:27:3e:99:ef:df:f8:96: 16:f1:73:5a:b0:86:a1:d6:3e:b6:73:73:32:95:7d: 1a:8e:2a:80:ab:ef:83:22:94:2b:46:ac:c3:6d:10: 3d:d6:bf:1a:f0:fd:df:af:5c:01:24:1a:e6:b0:42: 43:0f:b8:7f:e7:78:63:c7:8e:af:1d:e8:f8:21:04: 1f:b2:db:4a:c1:7a:bc:c2:c7:ed:7f:2c:34:ec:9e: b5:5b:4c:f8:b9:bd:d1:f2:da:4d:70:a6:cd:1e:4d: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:58:52:89:CE:7E:75:6D:6C:18:56:E6:83:4C:AF:BD:03:A9:9C:88 X509v3 Authority Key Identifier: keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:23:00:ec:8e:05:bd:09:dd:4e:67:01:f6:15:3b:68:9f:32: ea:be:bd:0f:53:ca:1a:ec:55:b6:88:26:14:a1:e5:0e:af:b9: 43:d1:1a:7d:f8:48:d5:70:3b:a5:ae:a7:9d:eb:c3:76:e9:6c: 53:28:2f:1b:e9:40:25:8a:12:15:9c:56:0a:f3:ae:5e:e4:e8: 2f:e3:16:6c:26:a3:47:c6:12:ef:73:11:25:6b:26:ab:73:51: 34:50:97:87:f1:da:9f:3e:b9:ad:11:cb:fa:8d:17:b3:61:79: cc:ce:bc:c9:75:ec:09:f5:af:ff:99:a5:39:ff:28:6f:4d:d1: ff:99:fc:27:fb:10:89:37:cd:5f:8e:11:e8:c2:17:bf:46:de: 97:a1:f6:f6:34:1e:fa:f7:f4:84:71:8e:f3:0d:4d:aa:a7:35: 8b:74:8c:5b:13:18:5b:1b:f9:de:b4:da:0d:0c:89:fe:31:f7: d4:f2:71:b3:9d:27:aa:dd:61:4e:b8:e6:7c:68:aa:69:01:97: f6:78:d8:c0:76:06:9d:0d:f6:e5:f4:8e:fb:79:52:7b:fb:3a: f0:c7:32:8c:cb:a4:ea:c5:52:36:a1:1a:ac:e9:55:26:d2:ad: 90:df:09:53:e8:c0:88:83:f8:46:12:c0:3c:82:2e:b7:54:15: b4:22:e7:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKEVDODQ3NjkxNTJCREVERENCNzBGQkMyMUQ2QzZDQTNC RkY0ODk3ODEwHhcNMjUxMjA2MjE1MjAzWhcNMjUxMjEzMjE1MjAzWjAYMRYwFAYD VQQDEw02OTM0YTU4My1iNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1ISdCqA7eHaTajkEmVeownvyhafchOtGFRPgGTdEhiPUJOuzyw6rqRy+eqE AqANurjiIhzLDtUTclGWiw2I9e8Hx6bK84afFTr/+ZJ8R0ZlF7mJkwmOlfMU7GWK KtrOz2jlN1G+30E9i9IL9ngyfGpnPgUQ1v+ZiAKzcG7GRf6/O+KNG7PjItnTabeH vFcUK7bwyoIc682eUswh8Cc+me/f+JYW8XNasIah1j62c3MylX0ajiqAq++DIpQr RqzDbRA91r8a8P3fr1wBJBrmsEJDD7h/53hjx46vHej4IQQfsttKwXq8wsftfyw0 7J61W0z4ub3R8tpNcKbNHk1ALwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxYUonO fnVtbBhW5oNMr70DqZyIMB8GA1UdIwQYMBaAFOyEdpFSve3ctw+8IdbGyjv/SJeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9FODA3MkQ4MERG RkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdkeTNEN3doMXNiS09fOUls NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJUjJrVks5N2R5M0Q3d2gxc2JLT185SWw0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9FODA3MkQ4MERGRkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdk eTNEN3doMXNiS09fOUlsNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+IwDsjgW9Cd1OZwH2FTtonzLqvr0PU8oa7FW2iCYUoeUOr7lD0Rp9 +EjVcDulrqed68N26WxTKC8b6UAlihIVnFYK865e5Ogv4xZsJqNHxhLvcxElayar c1E0UJeH8dqfPrmtEcv6jRezYXnMzrzJdewJ9a//maU5/yhvTdH/mfwn+xCJN81f jhHowhe/Rt6Xofb2NB769/SEcY7zDU2qpzWLdIxbExhbG/netNoNDIn+MffU8nGz nSeq3WFOuOZ8aKppAZf2eNjAdgadDfbl9I77eVJ7+zrwxzKMy6TqxVI2oRqs6VUm 0q2Q3wlT6MCIg/hGEsA8gi63VBW0IueI -----END CERTIFICATE-----Generated at Sun Dec 7 03:39:37 2025 by rpki-client