This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft File: EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json) Hash identifier: XFI+c8/NmNMU2Bc9//EEjt64CEwLslvBlbZwxErxO24= Subject key identifier: B3:EE:D2:82:09:0E:C2:15:D5:50:88:1D:D9:4E:A3:82:C6:9B:90:4E Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 Certificate issuer: /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Certificate serial: 10D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft Manifest number: 10CE Signing time: Thu 18 Dec 2025 17:10:02 +0000 Manifest this update: Thu 18 Dec 2025 17:10:01 +0000 Manifest next update: Thu 25 Dec 2025 17:10:01 +0000 Files and hashes: 1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: bXfCj9eCf1iN2+knkcwbUT3igx488YaXYiDjW+62ZSw=) 2: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: S/gVJ+TtEF1mtr8NQHi7hBzO8ZEUNieBwZ0+m5tF7pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4313 (0x10d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Validity Not Before: Dec 18 17:10:01 2025 GMT Not After : Dec 25 17:10:01 2025 GMT Subject: CN=6944356a-2ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:c6:f5:80:17:a5:14:be:fb:e5:29:cc:b2: 57:e7:af:d0:c8:28:b9:49:c7:da:c7:a0:36:0f:88: f7:c6:4f:97:8e:5e:bf:21:77:ad:4b:68:1b:fc:56: ca:15:92:52:98:16:9b:ec:7d:20:80:f0:df:de:21: 0b:2a:9f:8c:9e:bd:cb:ec:6d:6e:88:52:50:c0:00: c8:b0:0b:c7:d0:33:f7:5a:67:90:68:11:56:9c:d6: b8:a3:41:04:29:0b:11:cb:2e:33:40:83:cc:1b:4f: b1:51:57:ab:1d:df:e4:f2:e6:2b:8a:11:40:e0:23: ae:a7:10:95:2e:88:c3:b8:97:a3:aa:3c:fa:c3:63: 6d:a5:85:f1:58:f7:a8:46:46:cd:7e:c2:ba:cf:78: 62:22:dc:12:dd:bb:46:c8:aa:03:52:ee:b4:6d:83: 98:14:34:6e:da:01:6a:67:a0:fe:51:ff:b8:f6:3a: fc:e8:e4:c3:3c:0b:88:03:07:1f:ca:61:36:86:d7: 57:3b:c2:7c:83:dc:c9:dc:69:14:18:81:8b:c8:fa: 64:be:23:71:84:89:b5:a6:1a:64:34:0c:87:53:0e: ab:e0:6e:1d:da:44:12:59:71:fb:2e:2b:4f:aa:d6: f9:e9:8c:ce:77:34:9a:b3:0f:a9:6c:2e:ee:9e:74: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EE:D2:82:09:0E:C2:15:D5:50:88:1D:D9:4E:A3:82:C6:9B:90:4E X509v3 Authority Key Identifier: keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:1c:03:d9:db:ee:bc:e3:da:e7:74:ea:17:3e:24:16:d9:38: 22:97:b6:ee:40:c6:75:cb:0d:2e:4f:3a:b0:92:8a:0f:64:5e: e8:f3:cd:d7:98:98:9c:b7:7b:75:98:12:19:49:46:8c:d9:d0: 66:48:5a:af:30:b1:4c:65:c5:3a:a0:7b:bd:a2:7b:51:3f:04: 0d:79:89:cd:43:1d:b4:3a:61:96:47:f0:f4:10:ed:1e:71:5a: d8:5b:00:e7:9a:b3:b4:d3:3b:87:50:95:57:d0:b7:e8:2f:bc: 45:52:f7:3a:ae:17:5e:50:9e:2d:b9:17:12:46:ff:4e:2a:f3: 87:fc:85:87:3d:b7:f4:87:b3:3e:db:aa:b4:a4:1d:5f:8f:9b: 92:d7:0d:9e:95:e0:33:58:e1:0f:26:de:47:11:b0:79:85:ef: 38:7c:e7:38:d5:78:21:bc:16:cd:47:a3:bc:99:e6:7b:95:42: c9:2f:0a:33:bd:e7:03:d3:7a:4f:db:26:de:fa:a8:f9:84:28: d5:7e:08:0a:bc:5d:e8:1a:8b:ce:a2:9c:5c:45:05:de:9d:b2: 44:c5:8c:1d:f8:d6:41:09:74:d7:48:57:8b:43:04:35:1d:61: 62:95:66:f9:24:42:31:5c:7e:b8:ca:66:6c:c4:fb:ef:c0:22: e6:83:fe:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKDEwRjYxQzZCQkUzNjc0MDQ1MTJGQkM4M0NEREE4NUE5 OUM3RjNDNzUwHhcNMjUxMjE4MTcxMDAxWhcNMjUxMjI1MTcxMDAxWjAYMRYwFAYD VQQDDA02OTQ0MzU2YS0yYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwXG9YAXpRS+++UpzLJX56/QyCi5Scfax6A2D4j3xk+Xjl6/IXetS2gb/FbK FZJSmBab7H0ggPDf3iELKp+Mnr3L7G1uiFJQwADIsAvH0DP3WmeQaBFWnNa4o0EE KQsRyy4zQIPMG0+xUVerHd/k8uYrihFA4COupxCVLojDuJejqjz6w2NtpYXxWPeo RkbNfsK6z3hiItwS3btGyKoDUu60bYOYFDRu2gFqZ6D+Uf+49jr86OTDPAuIAwcf ymE2htdXO8J8g9zJ3GkUGIGLyPpkviNxhIm1phpkNAyHUw6r4G4d2kQSWXH7LitP qtb56YzOdzSasw+pbC7unnTgKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPu0oIJ DsIV1VCIHdlOo4LGm5BOMB8GA1UdIwQYMBaAFBD2HGu+NnQEUS+8g83ahamcfzx1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FQzgyMzBFMjNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRBUlJMN3lEemRxRnFaeF9Q SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQWWNhNzQyZEFSUkw3eUR6ZHFGcVp4X1BIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FQzgyMzBFMjNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRB UlJMN3lEemRxRnFaeF9QSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDHAPZ2+6849rndOoXPiQW2Tgil7buQMZ1yw0uTzqwkooPZF7o883X mJict3t1mBIZSUaM2dBmSFqvMLFMZcU6oHu9ontRPwQNeYnNQx20OmGWR/D0EO0e cVrYWwDnmrO00zuHUJVX0LfoL7xFUvc6rhdeUJ4tuRcSRv9OKvOH/IWHPbf0h7M+ 26q0pB1fj5uS1w2eleAzWOEPJt5HEbB5he84fOc41XghvBbNR6O8meZ7lULJLwoz vecD03pP2ybe+qj5hCjVfggKvF3oGovOopxcRQXenbJExYwd+NZBCXTXSFeLQwQ1 HWFilWb5JEIxXH64ymZsxPvvwCLmg/70 -----END CERTIFICATE-----Generated at Fri Dec 19 18:49:45 2025 by rpki-client