This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: sb98dIoFDaY4dH9J+SDFMYB+99hm3Gn/VXlHAWBEv/E= Subject key identifier: 28:D8:78:F8:A1:2A:55:C3:04:8A:1F:B1:0F:E9:3B:5A:22:D0:08:78 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 09CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 09C6 Signing time: Sat 06 Dec 2025 19:10:32 +0000 Manifest this update: Sat 06 Dec 2025 19:10:32 +0000 Manifest next update: Sat 13 Dec 2025 19:10:32 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: oXpJCuiSqPEi2A3a9mWEX76D4gNuJj2N+88mcpyYRP8=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: y29+eLqwD1TM2B3iSaNDq0mQUyWoEIqAhmsup5cKXZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2509 (0x9cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Dec 6 19:10:32 2025 GMT Not After : Dec 13 19:10:32 2025 GMT Subject: CN=69347fa8-f8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7b:ce:25:d3:40:76:df:e4:7f:d7:43:c1:6c: 07:df:83:8d:30:0a:07:cf:56:e9:d4:f5:33:f9:4d: 55:fc:30:ab:09:e5:9e:a4:7f:cb:85:21:e2:83:8c: b6:32:22:1d:10:75:78:e3:4e:fc:ce:75:9f:bc:7b: d2:ef:bb:ed:3e:eb:86:b4:92:06:7a:e9:98:25:e2: cc:90:fe:b6:84:82:26:2f:9e:db:4c:cf:cc:7d:10: ec:88:81:aa:f6:02:18:3b:f7:a2:e2:75:6f:cb:80: 05:b4:96:31:d9:63:f4:9c:e7:98:33:69:c5:21:dc: 74:de:e3:9b:3e:f5:5c:5a:19:0b:86:82:cf:9b:fe: 27:c1:8d:f9:b5:bc:57:f4:cb:cb:8d:09:72:dd:02: 0a:e0:ee:76:40:18:96:ff:cf:ce:0c:f0:f4:7c:b8: 5d:d6:86:72:9f:6a:be:60:0f:77:1b:d0:de:4c:1f: 99:97:ab:8a:be:fc:5e:7e:dc:cf:23:9d:af:e8:95: 68:62:83:17:8b:85:1b:e4:01:1d:a2:42:6a:89:61: 42:3e:fb:f3:21:a1:9f:ec:dd:d6:8e:6c:ec:38:ff: f4:44:c2:53:43:9b:10:9c:08:51:66:eb:e4:60:13: aa:d2:d5:d4:b0:9b:a7:2f:74:9b:86:61:a6:ba:d4: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D8:78:F8:A1:2A:55:C3:04:8A:1F:B1:0F:E9:3B:5A:22:D0:08:78 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:bc:08:bf:ea:45:9f:53:61:e0:21:df:08:10:df:ff:47:dd: 7d:de:03:18:8a:84:a4:08:06:34:6b:d0:ca:a1:55:34:0a:32: 14:9e:f9:8c:54:c7:6e:86:b7:a3:04:5d:cc:a0:08:41:04:2e: 43:2f:2f:74:cd:dd:cd:ae:e2:d5:70:bb:3b:5f:22:b8:36:6a: 20:42:a8:68:b2:8f:b9:08:f3:40:6f:8c:14:eb:e2:42:4d:75: be:ab:43:22:be:09:ac:d4:3a:0c:39:e7:bf:b7:ec:be:10:e7: a6:e6:2e:6b:c9:82:6e:4e:57:12:6b:97:83:f6:1f:d1:37:c2: 04:4b:f7:04:f7:e6:31:2e:8f:e9:78:0d:ee:6e:6a:56:fb:7d: 37:ed:e7:bc:5d:88:6c:e7:51:d4:d2:5d:a3:bf:6e:db:0e:1e: c3:c3:dd:83:a3:5d:0c:16:ae:c0:eb:c6:e7:ad:89:6a:77:9e: b8:98:53:87:99:ab:80:02:78:b6:2b:40:77:44:37:04:b2:ff: 93:f5:fb:be:40:83:5a:3a:c0:37:5d:81:97:be:d0:23:79:9c: e8:d5:22:18:03:8d:3d:bd:1e:c1:65:36:e8:a6:f0:35:bb:2c: 9e:d6:16:9c:41:55:db:f1:86:a3:4a:d0:ea:61:c8:a1:05:3d: af:c3:bb:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjUxMjA2MTkxMDMyWhcNMjUxMjEzMTkxMDMyWjAYMRYwFAYD VQQDEw02OTM0N2ZhOC1mOGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnvOJdNAdt/kf9dDwWwH34ONMAoHz1bp1PUz+U1V/DCrCeWepH/LhSHig4y2 MiIdEHV44078znWfvHvS77vtPuuGtJIGeumYJeLMkP62hIImL57bTM/MfRDsiIGq 9gIYO/ei4nVvy4AFtJYx2WP0nOeYM2nFIdx03uObPvVcWhkLhoLPm/4nwY35tbxX 9MvLjQly3QIK4O52QBiW/8/ODPD0fLhd1oZyn2q+YA93G9DeTB+Zl6uKvvxeftzP I52v6JVoYoMXi4Ub5AEdokJqiWFCPvvzIaGf7N3WjmzsOP/0RMJTQ5sQnAhRZuvk YBOq0tXUsJunL3SbhmGmutRVRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjYePih KlXDBIofsQ/pO1oi0Ah4MB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRvAi/6kWfU2HgId8IEN//R9193gMYioSkCAY0a9DKoVU0CjIUnvmM VMduhrejBF3MoAhBBC5DLy90zd3NruLVcLs7XyK4NmogQqhoso+5CPNAb4wU6+JC TXW+q0Mivgms1DoMOee/t+y+EOem5i5ryYJuTlcSa5eD9h/RN8IES/cE9+YxLo/p eA3ubmpW+3037ee8XYhs51HU0l2jv27bDh7Dw92Do10MFq7A68bnrYlqd564mFOH mauAAni2K0B3RDcEsv+T9fu+QINaOsA3XYGXvtAjeZzo1SIYA409vR7BZTbopvA1 uyye1hacQVXb8YajStDqYcihBT2vw7tq -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:41 2025 by rpki-client