This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft File: 2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json) Hash identifier: bxCvubxSUAw6SoiRJ8rI97KfCY9ynIsz0sRe7sSgtOw= Subject key identifier: 23:6B:C8:3E:D7:3A:95:87:6B:0C:E7:BC:FD:93:C1:14:C4:89:BB:A3 Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft Manifest number: 7A Signing time: Fri 05 Dec 2025 04:45:40 +0000 Manifest this update: Fri 05 Dec 2025 04:45:40 +0000 Manifest next update: Fri 12 Dec 2025 04:45:40 +0000 Files and hashes: 1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: d5AxnG+QYCZCfppErzW+C6Bonc0reZ9GFiF4HnfWp44=) 2: 998CA7F6B29611F0A9620F65C4F9AE02.roa (hash: h/qo7UbEbLV18o6jkscnIksGW89xzlKj6ySEYB/Jbpk=) 3: E31A926E6EAF11F088699976C4F9AE02.roa (hash: P2RdO098bgYaocfJCLZoV5dDTfBgyVfqd+4HH9FeoeI=) 4: F5CE8322AA8A11F0B2091087C4F9AE02.roa (hash: FXPDJuq/zjZiA2D6rc5QgOXQ/HXgvP43gQ4VPzDOmQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Validity Not Before: Dec 5 04:45:40 2025 GMT Not After : Dec 12 04:45:40 2025 GMT Subject: CN=69326374-c379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:c4:11:25:c0:c5:a1:fe:19:02:00:c1:d1: 21:e8:cd:c5:d6:01:66:ea:9b:fa:43:d6:1c:bf:46: b9:d3:20:88:fa:ad:af:b3:15:a2:ee:9f:45:83:06: c3:fe:cb:f5:ca:6d:2c:39:ad:35:a2:6a:ba:6c:0b: fb:c4:56:c0:4f:56:5e:a1:e0:58:93:76:c8:94:9e: 75:2c:64:36:f8:a9:8f:ac:07:17:b6:1d:87:23:99: a8:be:ed:d3:28:99:a5:ac:38:81:b3:3d:5e:ea:01: e6:23:f3:d2:db:82:cd:8f:1a:b7:f6:24:ff:fa:c3: bd:30:92:fa:72:75:aa:eb:80:0e:14:80:58:85:b7: 5a:bc:4a:bd:f4:32:19:6c:3e:a3:13:77:b8:69:c7: 7f:e1:7e:00:71:17:88:ce:cd:31:be:60:a8:f1:14: 3e:79:e7:b7:38:cc:ae:55:72:dd:a9:bb:e8:65:0a: 1b:a4:c8:9b:dd:56:7e:61:ae:28:39:1f:dd:f6:a2: 53:54:1e:35:88:8f:b1:47:02:52:50:12:71:01:ce: c8:c7:eb:d1:9e:f8:2a:12:8a:48:c5:4f:d3:6e:a2: c5:5b:db:39:9f:dc:89:37:0d:98:57:36:1c:07:fe: df:46:e0:97:44:ae:2e:e5:b6:bf:de:51:20:39:32: 85:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6B:C8:3E:D7:3A:95:87:6B:0C:E7:BC:FD:93:C1:14:C4:89:BB:A3 X509v3 Authority Key Identifier: keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:da:a4:a2:e7:80:f8:f0:40:bd:c7:c9:c7:b4:46:a4:67:9c: b9:51:db:41:dd:60:74:ee:73:89:26:9e:df:01:2d:0d:9f:62: 78:74:08:41:e5:f1:30:74:8a:d9:e1:a1:bc:75:f7:91:76:7d: f7:6d:eb:dd:59:54:94:6b:f1:3e:06:28:d1:21:de:73:10:2a: b4:7c:9c:85:dc:f7:26:af:45:8c:13:3c:88:7b:26:30:9e:1c: cd:77:05:e9:07:13:bc:95:a6:d2:f3:69:ab:ab:98:df:ee:9f: 30:83:29:06:5e:ef:1c:35:52:eb:4f:0c:60:97:61:62:6a:06: 33:db:e1:f8:53:57:de:b3:22:29:2f:fe:54:79:6b:c8:67:c1: 18:94:f3:9b:3c:2a:a4:96:a3:01:ea:92:96:51:e0:35:da:0e: 5c:f7:4f:77:90:27:b7:e5:07:c2:39:f8:86:e2:cc:62:58:f3: 35:92:e7:9b:c8:14:fd:7d:b0:5b:ef:4b:ba:64:38:08:05:6c: b7:e0:31:c7:bb:62:81:62:92:cf:b8:69:0d:cc:28:50:fd:86: 81:e7:88:78:81:08:4d:24:fe:c2:07:4e:6a:a9:dc:4a:61:cd: 58:a2:91:9f:4b:e4:37:1b:ca:89:3a:af:e3:c8:a6:3f:b5:75: d9:2f:ce:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI2QkMxMTAvBgNVBAUTKEQ4QkVFOTY5NUQ0M0IzMzlFNzU2M0YyNDEzQjcyMzE5 RDE2Nzc0QjEwHhcNMjUxMjA1MDQ0NTQwWhcNMjUxMjEyMDQ0NTQwWjAYMRYwFAYD VQQDEw02OTMyNjM3NC1jMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6TEESXAxaH+GQIAwdEh6M3F1gFm6pv6Q9Ycv0a50yCI+q2vsxWi7p9FgwbD /sv1ym0sOa01omq6bAv7xFbAT1ZeoeBYk3bIlJ51LGQ2+KmPrAcXth2HI5movu3T KJmlrDiBsz1e6gHmI/PS24LNjxq39iT/+sO9MJL6cnWq64AOFIBYhbdavEq99DIZ bD6jE3e4acd/4X4AcReIzs0xvmCo8RQ+eee3OMyuVXLdqbvoZQobpMib3VZ+Ya4o OR/d9qJTVB41iI+xRwJSUBJxAc7Ix+vRnvgqEopIxU/TbqLFW9s5n9yJNw2YVzYc B/7fRuCXRK4u5ba/3lEgOTKFWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNryD7X OpWHawznvP2TwRTEibujMB8GA1UdIwQYMBaAFNi+6WldQ7M551Y/JBO3IxnRZ3Sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjZCQy9BMDMwQ0QzMDIw NEMxMUYwOTYzRUI1NzVDNEY5QUUwMi8yTDdwYVYxRHN6bm5WajhrRTdjakdkRm5k TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMN3BhVjFEc3publZqOGtFN2NqR2RGbmRMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjZCQy9BMDMwQ0QzMDIwNEMxMUYwOTYzRUI1NzVDNEY5QUUwMi8yTDdwYVYxRHN6 bm5WajhrRTdjakdkRm5kTEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO2qSi54D48EC9x8nHtEakZ5y5UdtB3WB07nOJJp7fAS0Nn2J4dAhB 5fEwdIrZ4aG8dfeRdn33bevdWVSUa/E+BijRId5zECq0fJyF3Pcmr0WMEzyIeyYw nhzNdwXpBxO8labS82mrq5jf7p8wgykGXu8cNVLrTwxgl2FiagYz2+H4U1fesyIp L/5UeWvIZ8EYlPObPCqklqMB6pKWUeA12g5c9093kCe35QfCOfiG4sxiWPM1kueb yBT9fbBb70u6ZDgIBWy34DHHu2KBYpLPuGkNzChQ/YaB54h4gQhNJP7CB05qqdxK Yc1YopGfS+Q3G8qJOq/jyKY/tXXZL86A -----END CERTIFICATE-----Generated at Sat Dec 6 23:24:23 2025 by rpki-client