This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft File: eERZpLZsg1_PXW5aVoctkkfUZYo.mft (raw, json) Hash identifier: hb2hXnc7JWl/Mc0LHwDN+d6So0574Crd+yguJsxAnDo= Subject key identifier: 8F:64:FC:26:2D:1E:A1:24:20:93:23:FA:AB:48:D2:6F:1D:C2:40:7D Authority key identifier: 78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A Certificate issuer: /CN=A9145258/serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft Manifest number: AB Signing time: Fri 19 Dec 2025 05:20:57 +0000 Manifest this update: Fri 19 Dec 2025 05:20:57 +0000 Manifest next update: Fri 26 Dec 2025 05:20:57 +0000 Files and hashes: 1: eERZpLZsg1_PXW5aVoctkkfUZYo.crl (hash: vl2NXHILjv29RaicAZu0J6pEYTzHJjMBEZIfspL7vhQ=) 2: 2C7AE786042711F0BCEB4A75C4F9AE02.roa (hash: ugBH0sY3xsy9vZ2jc2RKWYdBc6yrBC0CxRNIPq7VafI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145258, serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A Validity Not Before: Dec 19 05:20:57 2025 GMT Not After : Dec 26 05:20:57 2025 GMT Subject: CN=6944e0b9-30ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ca:bd:27:35:bc:5d:83:55:85:1b:a6:48:4e: 23:a3:1a:27:b7:8c:20:c2:26:50:c3:e7:e8:37:da: 2e:14:eb:ee:60:1d:ec:68:f4:58:e3:4e:91:9f:24: 77:74:64:0d:6f:bd:c8:e9:92:0c:fc:83:5e:b4:6f: 71:37:f5:37:c9:06:6f:ce:e3:d3:2a:2c:03:b8:86: ca:ec:b9:16:b3:db:27:33:24:fe:9d:6b:73:8c:c6: e8:ff:7f:4a:59:fc:47:24:a6:de:eb:af:6b:10:0c: a5:e3:f6:c1:8c:79:97:cd:27:17:e3:41:02:2e:ca: 53:b6:7e:10:64:c2:d7:13:d4:b1:86:c9:3e:82:a7: 0c:15:91:b1:b2:6e:d8:c0:74:80:82:52:5b:f2:c8: aa:a6:56:3d:78:3e:2f:d7:b6:c5:ee:9a:b5:4c:35: da:bb:82:fc:75:f4:c7:6e:ae:2f:68:d3:8f:90:ab: bf:1d:57:8d:0f:46:75:a5:1d:84:d0:f3:4f:12:09: 11:03:8a:11:13:71:2f:5d:d2:1d:c5:09:a3:88:1f: e9:ef:75:98:24:2d:bb:5f:89:2a:67:9c:0a:ef:0f: a7:3f:7d:6d:f8:31:02:3a:30:b6:56:7f:d0:79:80: d6:66:dd:3f:15:e2:a2:6e:c2:98:b1:06:b6:4f:30: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:64:FC:26:2D:1E:A1:24:20:93:23:FA:AB:48:D2:6F:1D:C2:40:7D X509v3 Authority Key Identifier: keyid:78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:76:f2:24:e8:bc:69:8d:3b:c3:6f:12:69:25:33:ff:a9:70: a9:64:ea:8d:ef:39:99:79:5d:29:d0:f2:41:a5:07:ac:43:a6: 69:c3:bf:84:c2:0e:6c:08:9d:c7:93:75:11:a5:f2:e1:bc:80: 41:42:d7:97:6a:3e:5e:f6:77:6c:dc:c3:a1:8a:cb:92:ea:bb: 96:41:22:9c:91:09:98:cd:01:ca:31:18:40:5a:f1:07:5f:a2: c1:b2:eb:33:10:b3:53:0c:5a:7d:3d:e2:44:b5:f2:28:12:32: b1:f5:6c:2f:20:11:9f:c3:7e:9e:00:83:60:4a:06:1a:e2:e5: e3:c7:a2:8e:71:5e:59:6c:74:dc:b6:4a:e9:fe:f5:13:b2:b5: c9:3e:0a:91:51:8e:0c:7a:c2:7f:32:b5:ae:18:01:18:d4:58: 9d:04:0a:db:35:c8:6b:aa:0f:57:44:9f:b8:86:b7:07:fa:8e: 1c:0e:6e:71:97:d4:ae:c9:f2:ef:08:fa:0c:b1:c3:45:46:7f: 0b:fb:13:79:7d:d1:6e:52:95:48:f7:b4:02:83:a7:0d:7c:44: 50:96:12:f4:87:4e:a6:9a:8a:85:09:de:d6:06:fc:59:da:cf: c4:2f:be:48:da:37:0c:be:50:2f:cb:34:0d:07:6d:6b:e3:42: d9:01:fc:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyNTgxMTAvBgNVBAUTKDc4NDQ1OUE0QjY2QzgzNUZDRjVENkU1QTU2ODcyRDky NDdENDY1OEEwHhcNMjUxMjE5MDUyMDU3WhcNMjUxMjI2MDUyMDU3WjAYMRYwFAYD VQQDDA02OTQ0ZTBiOS0zMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sq9JzW8XYNVhRumSE4joxont4wgwiZQw+foN9ouFOvuYB3saPRY406RnyR3 dGQNb73I6ZIM/INetG9xN/U3yQZvzuPTKiwDuIbK7LkWs9snMyT+nWtzjMbo/39K WfxHJKbe669rEAyl4/bBjHmXzScX40ECLspTtn4QZMLXE9Sxhsk+gqcMFZGxsm7Y wHSAglJb8siqplY9eD4v17bF7pq1TDXau4L8dfTHbq4vaNOPkKu/HVeND0Z1pR2E 0PNPEgkRA4oRE3EvXdIdxQmjiB/p73WYJC27X4kqZ5wK7w+nP31t+DECOjC2Vn/Q eYDWZt0/FeKibsKYsQa2TzCqOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9k/CYt HqEkIJMj+qtI0m8dwkB9MB8GA1UdIwQYMBaAFHhEWaS2bINfz11uWlaHLZJH1GWK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTI1OC9BQzA5QzZFRUUz MDYxMUVGQTgwN0IwNTNDNEY5QUUwMi9lRVJacExac2cxX1BYVzVhVm9jdGtrZlVa WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFUlpwTFpzZzFfUFhXNWFWb2N0a2tmVVpZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTI1OC9BQzA5QzZFRUUzMDYxMUVGQTgwN0IwNTNDNEY5QUUwMi9lRVJacExac2cx X1BYVzVhVm9jdGtrZlVaWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqdvIk6LxpjTvDbxJpJTP/qXCpZOqN7zmZeV0p0PJBpQesQ6Zpw7+E wg5sCJ3Hk3URpfLhvIBBQteXaj5e9nds3MOhisuS6ruWQSKckQmYzQHKMRhAWvEH X6LBsuszELNTDFp9PeJEtfIoEjKx9WwvIBGfw36eAINgSgYa4uXjx6KOcV5ZbHTc tkrp/vUTsrXJPgqRUY4MesJ/MrWuGAEY1FidBArbNchrqg9XRJ+4hrcH+o4cDm5x l9SuyfLvCPoMscNFRn8L+xN5fdFuUpVI97QCg6cNfERQlhL0h06mmoqFCd7WBvxZ 2s/EL75I2jcMvlAvyzQNB21r40LZAfwG -----END CERTIFICATE-----Generated at Fri Dec 19 19:03:02 2025 by rpki-client