This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft (raw, json) Hash identifier: jnhpjEHlpmvGD8lloyyhjzs6gXgInoXMGTM19DAwjoE= Subject key identifier: E1:F6:0D:98:BC:13:9B:98:76:74:9C:86:2C:D6:53:2A:FA:5E:8A:2F Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0BCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft Manifest number: 0BB8 Signing time: Tue 06 Jan 2026 18:31:14 +0000 Manifest this update: Tue 06 Jan 2026 18:31:13 +0000 Manifest next update: Tue 13 Jan 2026 18:31:13 +0000 Files and hashes: 1: EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl (hash: /nB2svJ8TCPx1+fY4hRPrxWObpccm8g/etriN1G2j5g=) 2: 2A08F1A4369211EAA64E320BC4F9AE02.roa (hash: dZNG5vW2l8zDaTZFXpzRrbU/LlNl+Cok+DnqXn1U2+I=) 3: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (hash: 69pkK44GCEYYO1DQ/J3aSzjtWc5Cn9UqeLLTzO9Yidc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 18:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3018 (0xbca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: Jan 6 18:31:13 2026 GMT Not After : Jan 13 18:31:13 2026 GMT Subject: CN=695d54f2-b3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:6b:c5:6e:da:78:29:c5:7f:17:6d:c8:80: 0a:2a:99:c0:48:b6:65:10:16:c0:14:de:e5:27:87: 3e:53:09:ef:2e:4d:65:b5:22:f7:8d:14:e3:a6:26: 69:cb:0f:94:a9:de:bd:7d:16:59:4b:b3:ae:f2:b1: 9d:4d:a6:20:01:b1:1d:72:a6:4e:3c:1a:bc:d4:d3: 4a:a7:14:10:df:dd:de:8b:22:87:f7:37:04:a4:d8: 12:e2:0f:77:22:6a:63:2b:26:f7:9b:91:eb:b4:b3: 9f:ae:1d:c9:d8:df:91:1a:49:77:21:d1:c5:c2:e9: 2d:6c:4d:21:71:a2:45:84:6c:6d:2e:a2:73:8d:d3: 5c:d6:8a:10:09:12:63:00:b1:16:2a:e1:5d:28:c5: 27:46:e1:fd:dc:12:a9:41:d6:3b:6f:f0:a3:6a:1f: 56:ce:41:8f:8f:8d:a9:eb:1f:4c:4a:06:ae:36:d3: 0e:de:a0:68:83:fb:60:f8:e9:8f:73:26:48:69:e4: b0:ff:7a:78:c3:c9:09:a0:1a:32:f8:07:83:42:83: 3d:e3:c7:35:97:b9:f7:f3:be:63:d3:72:d8:1a:e4: 96:b6:e8:24:89:c9:26:f5:e9:dd:ea:2e:5f:33:2c: dd:dd:9d:23:5e:c7:30:9d:2e:22:57:d1:c3:e5:ad: 3e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F6:0D:98:BC:13:9B:98:76:74:9C:86:2C:D6:53:2A:FA:5E:8A:2F X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:42:be:6a:72:0b:8a:f6:e8:05:23:65:9f:41:73:7b:d6:34: 14:a7:dd:09:d3:2b:67:a3:85:20:28:f9:2b:6f:17:1d:ea:c0: b2:bd:af:4f:3d:b9:e2:3e:f3:56:75:6b:af:cd:8e:cd:e9:51: 24:39:7d:3f:77:33:c6:24:12:29:3f:e2:4c:ef:55:69:f7:8b: 5f:3e:30:2a:73:0b:3a:32:b3:60:47:68:8e:63:03:e1:f6:94: 12:c3:d8:86:89:89:01:b9:49:4e:3c:35:59:2e:b2:47:09:78: cf:34:0d:93:25:8f:0e:28:2e:18:a7:8e:e0:bd:4a:91:eb:42: e8:69:59:ae:08:64:0a:48:31:67:32:52:9a:fe:b2:69:77:95: ee:44:32:dd:98:d7:47:64:1e:6e:91:ff:63:ec:e2:3b:b4:5d: 5b:73:e3:6d:46:64:11:51:5b:bc:cf:bf:f8:ce:62:19:60:af: 32:12:97:38:1b:84:64:52:da:c5:85:f2:00:ca:39:09:21:82: 3c:6b:66:54:4f:2b:a2:df:7b:b4:de:49:65:51:b0:06:e6:c2: d6:ef:9e:60:43:da:99:5e:a8:93:7d:07:a5:6b:7a:bc:a3:19: db:fe:f6:a7:04:e8:49:13:d5:71:26:24:49:04:1e:25:61:cf: 10:4a:7f:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjYwMTA2MTgzMTEzWhcNMjYwMTEzMTgzMTEzWjAYMRYwFAYD VQQDDA02OTVkNTRmMi1iM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oRrxW7aeCnFfxdtyIAKKpnASLZlEBbAFN7lJ4c+UwnvLk1ltSL3jRTjpiZp yw+Uqd69fRZZS7Ou8rGdTaYgAbEdcqZOPBq81NNKpxQQ393eiyKH9zcEpNgS4g93 ImpjKyb3m5HrtLOfrh3J2N+RGkl3IdHFwuktbE0hcaJFhGxtLqJzjdNc1ooQCRJj ALEWKuFdKMUnRuH93BKpQdY7b/Cjah9WzkGPj42p6x9MSgauNtMO3qBog/tg+OmP cyZIaeSw/3p4w8kJoBoy+AeDQoM948c1l7n3875j03LYGuSWtugkickm9end6i5f Myzd3Z0jXscwnS4iV9HD5a0+8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOH2DZi8 E5uYdnSchizWUyr6XoovMB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTBGQS9BQUEwRUJFMDM2OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVY QnNadUY3OGIwLW1XSjZHQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJQr5qcguK9ugFI2WfQXN71jQUp90J0ytno4UgKPkrbxcd6sCyva9P PbniPvNWdWuvzY7N6VEkOX0/dzPGJBIpP+JM71Vp94tfPjAqcws6MrNgR2iOYwPh 9pQSw9iGiYkBuUlOPDVZLrJHCXjPNA2TJY8OKC4Yp47gvUqR60LoaVmuCGQKSDFn MlKa/rJpd5XuRDLdmNdHZB5ukf9j7OI7tF1bc+NtRmQRUVu8z7/4zmIZYK8yEpc4 G4RkUtrFhfIAyjkJIYI8a2ZUTyui33u03kllUbAG5sLW755gQ9qZXqiTfQela3q8 oxnb/vanBOhJE9VxJiRJBB4lYc8QSn/J -----END CERTIFICATE-----Generated at Thu Jan 8 11:29:02 2026 by rpki-client