This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft File: eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft (raw, json) Hash identifier: D/dKo83sozcYp4YGVvltHMY48qgRpC4zs0y3T3XSVH4= Subject key identifier: 07:67:F7:17:1B:4F:71:31:B9:60:BE:1A:A6:67:F5:F6:3E:18:BB:29 Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96 Certificate issuer: /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft Manifest number: 01CE Signing time: Fri 19 Dec 2025 02:07:23 +0000 Manifest this update: Fri 19 Dec 2025 02:07:22 +0000 Manifest next update: Fri 26 Dec 2025 02:07:22 +0000 Files and hashes: 1: eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl (hash: 3Pc5xPVJoLhstHK+LgJk1vAybTVNG6sGotULKMLoO48=) 2: C110D9D23D8611EEB7F2D04BC4F9AE02.roa (hash: TxTcbAcufMja4FsqpJQTg2We2RY0eq4FwQMk5GLL3ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596 Validity Not Before: Dec 19 02:07:22 2025 GMT Not After : Dec 26 02:07:22 2025 GMT Subject: CN=6944b35b-2440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:4c:f3:c4:23:97:d0:1e:c2:5d:9e:5a:67: 79:e2:67:cf:53:e0:a2:8c:73:62:06:69:ef:44:b3: fb:51:ae:30:41:7f:34:e7:96:b3:85:5a:c8:e7:ef: f4:b0:dc:8c:fc:3e:a2:7e:25:d3:ba:da:b4:ae:0d: 4b:e8:95:a2:30:c6:8e:6e:27:04:8e:31:5c:bc:cb: 3c:98:bf:68:1f:c8:8f:77:c0:70:d1:c5:07:31:2f: 8b:83:75:9a:37:cc:5e:ed:2d:9b:8b:62:32:3c:5a: c4:e1:51:93:ac:1f:0d:8d:79:e4:02:f2:8d:a9:c1: fc:20:c0:92:49:4b:0e:25:f5:87:c9:8f:3e:e8:f3: 8c:d6:8d:e0:f3:17:85:43:dd:c5:b0:a0:a0:3b:e9: 39:1b:83:19:73:8e:50:a9:99:c7:4b:f7:ec:19:2b: 69:88:c0:37:65:37:5b:15:fe:6d:4f:1f:67:b6:fc: 80:2a:cd:c5:a5:37:e4:62:2c:a7:43:26:d2:34:18: 1e:0d:85:6d:52:3f:09:be:0e:dc:1d:b4:56:56:a9: c6:ea:c5:00:e0:33:3a:5f:1a:3d:b7:05:99:a6:52: 8d:08:b3:06:1c:bc:5f:95:27:1c:a4:b7:e8:ca:e1: bc:49:bb:e7:1a:84:d2:c1:04:01:82:23:e8:b5:53: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:67:F7:17:1B:4F:71:31:B9:60:BE:1A:A6:67:F5:F6:3E:18:BB:29 X509v3 Authority Key Identifier: keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:5a:46:17:f8:bd:96:d7:c1:9f:82:fb:ee:48:cb:fb:1f:0f: 6b:2c:03:b0:ca:ac:86:36:70:3d:1d:9b:be:64:2f:b5:00:f5: f9:c2:57:f8:9c:7e:48:a3:dc:cf:6f:d3:76:71:50:06:10:56: cc:03:57:5f:9e:7c:ee:ff:fc:4e:7c:de:b3:a1:d5:e9:67:f7: 0b:22:61:26:2a:14:d7:b6:7b:9e:34:9b:23:0f:d4:be:9d:81: da:42:ff:55:3e:2d:3a:af:66:3b:94:88:66:5f:c7:a0:87:57: 85:0f:36:0f:ac:ac:d1:fa:ec:ae:bc:44:47:d7:a5:5c:50:b5: 79:d4:65:25:42:51:d6:c1:88:39:9b:fa:9c:3a:29:0b:ba:d9: c5:ff:82:44:c5:9d:e7:b7:87:e7:49:21:55:a7:8b:03:c8:7f: f9:11:0e:b0:79:aa:d9:11:38:f4:08:3d:14:97:29:f0:4a:70: 35:ba:83:90:56:3b:9c:9b:f6:e0:f1:c1:41:f1:e2:9d:f8:c7: 70:be:1f:28:ac:e7:da:d4:a2:31:29:ec:f8:9f:9f:c3:08:10: 72:27:a0:2c:df:5f:d2:42:2d:54:a0:59:91:14:b2:f5:4d:29: 24:0e:32:a3:a8:d7:3b:f7:c0:e7:b7:08:7c:1a:73:62:f7:de: 1a:c8:45:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNBMjcxMTAvBgNVBAUTKDc5MkUwQjNFQjM2MDQ0MjdGQzg0OEY5NkM3MzRBQzRE OTlGRTc1OTYwHhcNMjUxMjE5MDIwNzIyWhcNMjUxMjI2MDIwNzIyWjAYMRYwFAYD VQQDDA02OTQ0YjM1Yi0yNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdRM88Qjl9Aewl2eWmd54mfPU+CijHNiBmnvRLP7Ua4wQX8055azhVrI5+/0 sNyM/D6ifiXTutq0rg1L6JWiMMaObicEjjFcvMs8mL9oH8iPd8Bw0cUHMS+Lg3Wa N8xe7S2bi2IyPFrE4VGTrB8NjXnkAvKNqcH8IMCSSUsOJfWHyY8+6POM1o3g8xeF Q93FsKCgO+k5G4MZc45QqZnHS/fsGStpiMA3ZTdbFf5tTx9ntvyAKs3FpTfkYiyn QybSNBgeDYVtUj8Jvg7cHbRWVqnG6sUA4DM6Xxo9twWZplKNCLMGHLxflSccpLfo yuG8SbvnGoTSwQQBgiPotVNufQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdn9xcb T3ExuWC+GqZn9fY+GLspMB8GA1UdIwQYMBaAFHkuCz6zYEQn/ISPlsc0rE2Z/nWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0EyNy81MzVFQTY0RTIx RjcxMUVFQkI4NDg2MzRDNEY5QUUwMi9lUzRMUHJOZ1JDZjhoSS1XeHpTc1Rabi1k WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VTNExQck5nUkNmOGhJLVd4elNzVFpuLWRaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0EyNy81MzVFQTY0RTIxRjcxMUVFQkI4NDg2MzRDNEY5QUUwMi9lUzRMUHJOZ1JD ZjhoSS1XeHpTc1Rabi1kWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJWkYX+L2W18GfgvvuSMv7Hw9rLAOwyqyGNnA9HZu+ZC+1APX5wlf4 nH5Io9zPb9N2cVAGEFbMA1dfnnzu//xOfN6zodXpZ/cLImEmKhTXtnueNJsjD9S+ nYHaQv9VPi06r2Y7lIhmX8egh1eFDzYPrKzR+uyuvERH16VcULV51GUlQlHWwYg5 m/qcOikLutnF/4JExZ3nt4fnSSFVp4sDyH/5EQ6wearZETj0CD0UlynwSnA1uoOQ Vjucm/bg8cFB8eKd+Mdwvh8orOfa1KIxKez4n5/DCBByJ6As31/SQi1UoFmRFLL1 TSkkDjKjqNc798Dntwh8GnNi994ayEW/ -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:57 2025 by rpki-client