This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft File: eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json) Hash identifier: CYCvzxTESJMisPj32cOdshUEFfvgztpV7j8auyBev0o= Subject key identifier: A0:F1:77:2C:C9:C2:33:9C:2F:ED:E9:33:A0:AD:19:BC:15:37:FD:B6 Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Certificate serial: 04B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft Manifest number: 04AB Signing time: Thu 18 Dec 2025 23:17:46 +0000 Manifest this update: Thu 18 Dec 2025 23:17:45 +0000 Manifest next update: Thu 25 Dec 2025 23:17:45 +0000 Files and hashes: 1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: rzwVoKmA7e9vA6j1aPHr8e1ut71X0IZxB01qXC225uw=) 2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: OAezeEI6RpBOiUJ8ewJfs0Sho5+yDdMl9kVco4ydsjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1200 (0x4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Validity Not Before: Dec 18 23:17:45 2025 GMT Not After : Dec 25 23:17:45 2025 GMT Subject: CN=69448b9a-5d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:0f:b1:fe:4f:f3:b2:97:e7:db:de:a6:9c: d4:fc:58:a7:b2:50:70:70:72:11:6a:35:ea:c4:10: c1:34:72:7c:bc:1d:3c:52:4e:9f:98:a8:be:a1:65: 02:7e:f4:af:e0:a1:e6:c7:fa:95:30:5f:36:b0:bd: 83:9e:ce:a2:af:be:1b:18:e7:2b:d7:72:65:87:03: e7:c5:dd:a0:81:f3:ea:e8:19:1e:c7:38:cb:22:b2: 27:99:e3:1b:20:d6:c5:0c:b0:4b:63:ab:77:a9:d8: c5:32:3f:3a:1c:d3:21:68:67:2a:f4:92:5f:a6:e9: d4:cb:7b:2a:81:7e:6b:f5:e6:be:3d:88:e9:dd:1a: 94:05:70:e7:02:6b:73:0b:a4:8a:c9:1e:77:2c:fe: dc:31:b1:5c:56:8a:2f:af:ee:e6:e0:96:09:3e:1d: 5a:2f:2f:42:c0:f4:26:17:0a:60:f6:e8:a8:09:3d: af:d6:f3:59:00:2e:b8:e1:d9:12:2a:a5:12:95:53: 67:69:f4:91:29:8f:49:2d:a5:20:ae:a8:81:9d:1e: 5e:67:ee:bc:b1:37:bd:d9:08:23:f0:0c:3d:37:86: 94:d4:77:0e:29:b6:f3:c4:76:c9:17:4e:e8:28:a0: b1:a7:ff:48:15:51:5c:f5:b8:1f:8f:fc:c3:e7:0f: 88:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F1:77:2C:C9:C2:33:9C:2F:ED:E9:33:A0:AD:19:BC:15:37:FD:B6 X509v3 Authority Key Identifier: keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:de:af:57:d0:b3:f2:f2:71:82:c5:63:04:d2:8e:90:3e:75: cc:63:67:33:6c:b3:00:0d:6b:6a:b4:29:b9:b8:c1:bd:f0:a3: e8:e4:dc:f1:d0:40:fe:06:61:33:7e:f1:70:92:a5:45:36:02: b2:e5:35:3f:97:3c:87:c6:3f:05:1b:17:2a:3e:27:07:c6:93: b2:fc:ab:41:c3:25:ff:c8:7c:49:85:63:d7:56:da:08:5e:de: b5:0e:e7:30:d8:c4:ed:c8:ed:2e:3d:29:c1:67:3e:e8:53:e8: cb:c6:83:86:4a:8a:9d:08:95:31:05:56:25:c8:9f:cc:b1:cd: 37:3e:3e:3f:80:ba:ef:64:36:72:97:ae:e3:bb:88:b5:5e:44: 77:91:3a:5c:dd:96:85:f5:6c:92:e4:aa:d5:f6:c1:af:b2:74: 5b:16:c3:29:0e:3c:cc:ca:48:2d:28:42:c6:d7:be:d4:b9:dd: 83:73:8e:26:b1:12:9f:1e:f0:f4:b2:d8:9b:61:d1:07:39:60: 60:4d:33:9f:3c:91:e4:4a:2d:ad:f7:45:15:70:01:7a:cb:12: 1b:18:df:c2:e1:fa:17:1a:f2:34:ec:1c:63:32:42:dc:8f:b7: 73:a2:b1:d6:5e:02:ff:c8:9a:30:99:5e:1d:86:e7:68:6b:30: d1:51:6e:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3MEQxMTAvBgNVBAUTKDc4NzY2RDYwMkE0MEVGNTcwMTQyNjg0QTcyM0U4QTM0 MEM2RkYzODIwHhcNMjUxMjE4MjMxNzQ1WhcNMjUxMjI1MjMxNzQ1WjAYMRYwFAYD VQQDDA02OTQ0OGI5YS01ZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gcPsf5P87KX59veppzU/FinslBwcHIRajXqxBDBNHJ8vB08Uk6fmKi+oWUC fvSv4KHmx/qVMF82sL2Dns6ir74bGOcr13JlhwPnxd2ggfPq6BkexzjLIrInmeMb INbFDLBLY6t3qdjFMj86HNMhaGcq9JJfpunUy3sqgX5r9ea+PYjp3RqUBXDnAmtz C6SKyR53LP7cMbFcVoovr+7m4JYJPh1aLy9CwPQmFwpg9uioCT2v1vNZAC644dkS KqUSlVNnafSRKY9JLaUgrqiBnR5eZ+68sTe92Qgj8Aw9N4aU1HcOKbbzxHbJF07o KKCxp/9IFVFc9bgfj/zD5w+IqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDxdyzJ wjOcL+3pM6CtGbwVN/22MB8GA1UdIwQYMBaAFHh2bWAqQO9XAUJoSnI+ijQMb/OC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTcwRC8xMTE0QzlCQTU5 NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcxY0JRbWhLY2o2S05BeHY4 NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIWnRZQ3BBNzFjQlFtaEtjajZLTkF4djg0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTcwRC8xMTE0QzlCQTU5NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcx Y0JRbWhLY2o2S05BeHY4NEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ3q9X0LPy8nGCxWME0o6QPnXMY2czbLMADWtqtCm5uMG98KPo5Nzx 0ED+BmEzfvFwkqVFNgKy5TU/lzyHxj8FGxcqPicHxpOy/KtBwyX/yHxJhWPXVtoI Xt61Ducw2MTtyO0uPSnBZz7oU+jLxoOGSoqdCJUxBVYlyJ/Msc03Pj4/gLrvZDZy l67ju4i1XkR3kTpc3ZaF9WyS5KrV9sGvsnRbFsMpDjzMykgtKELG177Uud2Dc44m sRKfHvD0stibYdEHOWBgTTOfPJHkSi2t90UVcAF6yxIbGN/C4foXGvI07BxjMkLc j7dzorHWXgL/yJowmV4dhudoazDRUW6v -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:22 2025 by rpki-client