This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft File: EpTEi8aWr-ggvRWC80NnutqwJDI.mft (raw, json) Hash identifier: 1gEgVeyTPvnPXZt5p7llHd3KeWoBG/jOIqFO1c0R6tg= Subject key identifier: B1:A0:C8:B0:FE:BE:A4:7B:DA:72:3C:7E:9C:A2:3F:3C:A0:B5:BB:95 Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32 Certificate issuer: /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432 Certificate serial: 04DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft Manifest number: 04D2 Signing time: Fri 26 Dec 2025 22:55:51 +0000 Manifest this update: Fri 26 Dec 2025 22:55:50 +0000 Manifest next update: Fri 02 Jan 2026 22:55:50 +0000 Files and hashes: 1: EpTEi8aWr-ggvRWC80NnutqwJDI.crl (hash: RYuYKd4+ZcUlIlrCXza7kkWtTW6se3kq1oKHyCsR8hI=) 2: 2A84118CE0A311EC9CF2B738C4F9AE02.roa (hash: m8kc5pmxyNUtzE4T6XJqZukX44I+76FHWWNgV7rp9ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117817, serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432 Validity Not Before: Dec 26 22:55:50 2025 GMT Not After : Jan 2 22:55:50 2026 GMT Subject: CN=694f1277-3803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:22:51:5f:75:ae:d7:59:e6:63:9d:8b:5f:53: 68:df:27:d6:64:f5:44:ee:b4:90:4d:74:6e:6e:49: c2:f2:92:15:a2:20:c6:3a:83:15:da:3a:2c:24:dd: 48:99:bd:7a:6e:82:3e:e1:11:41:83:94:49:13:76: 03:ee:6c:c7:be:f1:ea:55:ca:e0:b1:0e:c7:4c:3c: e7:8f:68:fb:c0:6f:16:d8:6c:79:06:90:85:bd:15: 10:30:75:d2:e2:7b:dc:3e:2b:0f:63:53:c9:a8:ab: dc:3b:b5:66:9c:b0:94:e2:6c:e6:17:c5:8e:d1:e2: 94:a4:78:ab:5f:a7:dd:a3:7d:c2:3a:1a:fa:4a:cb: 6f:7c:39:af:fe:a1:d4:ee:8f:02:ee:a1:88:e2:c7: 38:2e:47:c5:3d:97:1f:77:88:8c:5e:e3:36:8d:8f: f6:c4:f3:92:06:9b:7e:ff:64:21:2f:ac:29:9b:52: f5:f5:23:5a:55:02:1c:df:05:fb:76:e1:0a:ee:9e: fb:65:8e:a8:fc:23:f6:4c:a3:58:e8:7d:d2:dc:be: 6d:f6:b0:48:14:5e:c9:54:ac:83:5c:c9:73:30:cf: d3:97:52:a9:0d:fe:ff:10:f9:a9:e8:3e:08:f6:49: c7:ec:81:4d:21:29:31:74:d8:3c:88:b2:85:8f:2a: 98:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A0:C8:B0:FE:BE:A4:7B:DA:72:3C:7E:9C:A2:3F:3C:A0:B5:BB:95 X509v3 Authority Key Identifier: keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:95:c3:57:76:94:67:42:c6:e4:19:23:35:78:68:9b:aa:6c: 19:c2:7f:03:62:72:e6:52:66:eb:51:f9:1c:d9:78:fe:5a:ff: 1d:4b:7d:99:8c:db:f8:c6:03:a7:e0:c0:0d:8c:24:a4:91:1a: f8:e9:ed:83:3a:ef:da:ef:9c:46:2e:d3:6d:70:6d:e7:67:5a: 30:73:01:b1:2e:d7:0b:3d:a3:73:b3:14:87:f5:20:39:0f:a4: df:93:18:dd:e1:05:64:03:a2:1c:63:40:d6:98:7f:0a:fb:48: 4d:4c:06:8f:26:95:b4:bb:52:f7:99:7b:8b:93:bb:ee:ae:77: ed:7a:cc:8b:80:52:f1:6f:0f:79:f1:68:a0:7c:92:46:32:12: 6a:a3:6c:8c:84:bd:8e:15:97:5f:c7:f4:24:9a:ae:fa:f8:d8: 0b:39:ea:a8:1b:65:40:13:c5:c4:19:9c:ba:77:5c:55:ee:65: ea:3e:40:e6:24:3a:73:cd:70:12:8b:de:80:da:8e:c4:cd:49: 4f:f3:63:ef:0a:be:de:f0:0b:b4:05:4c:43:e7:26:dd:8f:9e: 30:67:a3:c2:0c:53:ca:49:4e:dc:a9:57:e0:55:47:9a:6b:3b: cc:02:47:3c:0f:fc:c3:eb:5b:9f:bf:f2:20:bf:2f:0b:10:50: f6:d8:34:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4MTcxMTAvBgNVBAUTKDEyOTRDNDhCQzY5NkFGRTgyMEJEMTU4MkYzNDM2N0JB REFCMDI0MzIwHhcNMjUxMjI2MjI1NTUwWhcNMjYwMTAyMjI1NTUwWjAYMRYwFAYD VQQDDA02OTRmMTI3Ny0zODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iJRX3Wu11nmY52LX1No3yfWZPVE7rSQTXRubknC8pIVoiDGOoMV2josJN1I mb16boI+4RFBg5RJE3YD7mzHvvHqVcrgsQ7HTDznj2j7wG8W2Gx5BpCFvRUQMHXS 4nvcPisPY1PJqKvcO7VmnLCU4mzmF8WO0eKUpHirX6fdo33COhr6SstvfDmv/qHU 7o8C7qGI4sc4LkfFPZcfd4iMXuM2jY/2xPOSBpt+/2QhL6wpm1L19SNaVQIc3wX7 duEK7p77ZY6o/CP2TKNY6H3S3L5t9rBIFF7JVKyDXMlzMM/Tl1KpDf7/EPmp6D4I 9knH7IFNISkxdNg8iLKFjyqYdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGgyLD+ vqR72nI8fpyiPzygtbuVMB8GA1UdIwQYMBaAFBKUxIvGlq/oIL0VgvNDZ7rasCQy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgxNy8wNjgzRUI3MDRE QUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3ItZ2d2UldDODBObnV0cXdK REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VwVEVpOGFXci1nZ3ZSV0M4ME5udXRxd0pESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzgxNy8wNjgzRUI3MDREQUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3It Z2d2UldDODBObnV0cXdKREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6lcNXdpRnQsbkGSM1eGibqmwZwn8DYnLmUmbrUfkc2Xj+Wv8dS32Z jNv4xgOn4MANjCSkkRr46e2DOu/a75xGLtNtcG3nZ1owcwGxLtcLPaNzsxSH9SA5 D6Tfkxjd4QVkA6IcY0DWmH8K+0hNTAaPJpW0u1L3mXuLk7vurnftesyLgFLxbw95 8WigfJJGMhJqo2yMhL2OFZdfx/Qkmq76+NgLOeqoG2VAE8XEGZy6d1xV7mXqPkDm JDpzzXASi96A2o7EzUlP82PvCr7e8Au0BUxD5ybdj54wZ6PCDFPKSU7cqVfgVUea azvMAkc8D/zD61ufv/Igvy8LEFD22DQi -----END CERTIFICATE-----Generated at Sun Dec 28 05:50:24 2025 by rpki-client