This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json) Hash identifier: HYN5zE7L4CT09ZM7IRt2AfLlphrCgCIWuNy73ZUzPQo= Subject key identifier: D5:4B:71:67:C4:94:D8:B6:A0:4B:CC:66:D5:29:15:91:40:24:90:44 Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft Manifest number: 0252 Signing time: Sun 21 Dec 2025 00:55:35 +0000 Manifest this update: Sun 21 Dec 2025 00:55:34 +0000 Manifest next update: Sun 28 Dec 2025 00:55:34 +0000 Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: /Jsl3tLbviKHblcqOBuobF8TQ2TC0L0Qq4kpi0l1qu4=) 2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: UfOYe6RywBqkEJraeZHWTOUfrLHgXDOJgx5fH4IP4aM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Validity Not Before: Dec 21 00:55:34 2025 GMT Not After : Dec 28 00:55:34 2025 GMT Subject: CN=69474587-d9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:18:8f:dc:d6:96:8e:34:4c:f3:c2:d5:de: 31:f0:25:90:cd:34:ee:f3:a0:61:e6:ef:b2:c0:9d: 3b:3e:0c:75:be:18:0d:9f:dc:45:e1:f5:d9:14:d8: 25:be:b5:13:88:0e:12:89:ca:30:40:f3:65:4b:8d: 6c:bf:e4:22:42:24:62:c0:58:bd:82:74:86:dc:74: 9a:a8:b6:0b:bf:6d:a6:07:d5:48:61:c5:bd:85:14: 9a:9e:99:b9:15:4a:6c:ca:f9:cb:2a:a4:33:bd:41: 5e:86:91:6c:61:ed:96:b3:17:27:76:4d:d5:ad:b8: da:d8:78:33:db:66:58:25:bb:18:ae:77:fd:aa:52: b9:bf:dd:e7:57:5f:57:37:19:15:b8:4a:ed:88:ee: 2c:45:b5:44:33:df:75:36:98:d5:40:f0:f1:54:c6: 65:46:e2:4f:a4:94:7e:1e:ab:1e:50:98:6b:64:31: a7:68:d3:29:63:b5:eb:5d:35:49:db:19:f4:ef:11: 5d:67:54:93:b0:5f:7d:ea:cc:22:b9:a3:d0:1d:ea: 6e:eb:39:cb:8c:04:39:6f:14:43:6e:02:8f:26:02: fc:e0:1a:ed:58:02:ad:98:5b:ce:9b:86:40:d8:13: a7:96:2a:75:43:a4:40:fd:57:5e:5c:41:5d:a8:96: d3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4B:71:67:C4:94:D8:B6:A0:4B:CC:66:D5:29:15:91:40:24:90:44 X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e9:0a:bd:0d:cc:b7:89:f9:eb:f6:35:40:88:be:71:6e:ef: 5a:02:8a:be:b8:6e:18:a1:d4:49:c8:59:1a:3e:16:e0:99:03: 44:7e:a7:a8:88:ec:65:cb:e3:90:14:b4:32:69:bc:93:e3:9b: bf:bb:0c:fb:ae:5a:18:7b:99:11:a5:ee:18:1d:6f:ac:11:8e: ae:90:fb:a1:6a:33:fa:b4:9b:a9:50:3e:f3:7b:6f:bc:35:2e: 1a:9f:f8:a8:a3:b4:81:ec:69:e5:84:18:53:9b:2e:39:c6:d3: 67:8a:7e:f5:c8:92:f2:5d:39:4a:88:fa:fe:1a:aa:f7:a2:0c: ca:c4:3c:47:0b:44:24:99:71:2e:96:15:8d:23:10:23:23:30: f7:cc:a7:c5:70:4a:f1:b4:62:68:ca:3e:bf:e6:a4:9b:bb:0e: 9c:80:f7:b5:a2:3d:40:be:7c:e0:39:d9:60:51:c4:1c:e5:c6: 87:a8:64:fa:16:12:e9:90:9d:2e:50:d0:e2:87:83:d1:c3:c5: 26:fa:a0:3c:f8:b4:b7:5d:45:55:5a:95:d0:57:95:c3:ea:0a: a8:f6:c4:4f:cb:b7:f4:c2:be:70:ba:d0:4b:e7:9e:f5:f1:fc: 7c:b1:f4:3a:73:e3:c5:f2:43:2e:16:4e:8a:0e:51:65:aa:81: c4:99:45:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjUxMjIxMDA1NTM0WhcNMjUxMjI4MDA1NTM0WjAYMRYwFAYD VQQDDA02OTQ3NDU4Ny1kOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqsYj9zWlo40TPPC1d4x8CWQzTTu86Bh5u+ywJ07Pgx1vhgNn9xF4fXZFNgl vrUTiA4SicowQPNlS41sv+QiQiRiwFi9gnSG3HSaqLYLv22mB9VIYcW9hRSanpm5 FUpsyvnLKqQzvUFehpFsYe2Wsxcndk3Vrbja2Hgz22ZYJbsYrnf9qlK5v93nV19X NxkVuErtiO4sRbVEM991NpjVQPDxVMZlRuJPpJR+HqseUJhrZDGnaNMpY7XrXTVJ 2xn07xFdZ1STsF996swiuaPQHepu6znLjAQ5bxRDbgKPJgL84BrtWAKtmFvOm4ZA 2BOnlip1Q6RA/VdeXEFdqJbTzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVLcWfE lNi2oEvMZtUpFZFAJJBEMB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1 SDFZaXJld1BHV0dFazh1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ6Qq9Dcy3ifnr9jVAiL5xbu9aAoq+uG4YodRJyFkaPhbgmQNEfqeo iOxly+OQFLQyabyT45u/uwz7rloYe5kRpe4YHW+sEY6ukPuhajP6tJupUD7ze2+8 NS4an/ioo7SB7GnlhBhTmy45xtNnin71yJLyXTlKiPr+Gqr3ogzKxDxHC0QkmXEu lhWNIxAjIzD3zKfFcErxtGJoyj6/5qSbuw6cgPe1oj1AvnzgOdlgUcQc5caHqGT6 FhLpkJ0uUNDih4PRw8Um+qA8+LS3XUVVWpXQV5XD6gqo9sRPy7f0wr5wutBL5571 8fx8sfQ6c+PF8kMuFk6KDlFlqoHEmUX3 -----END CERTIFICATE-----Generated at Mon Dec 22 11:35:15 2025 by rpki-client