This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json) Hash identifier: oVAlFkDV0fL8OPXlzshvBJ7dUkEZnzhSZDyKpJTbvfs= Subject key identifier: 36:BD:7C:A5:28:60:40:B2:98:7B:CD:F1:6F:1B:63:F0:7B:14:14:E6 Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft Manifest number: 019A Signing time: Mon 29 Dec 2025 02:31:05 +0000 Manifest this update: Mon 29 Dec 2025 02:31:04 +0000 Manifest next update: Mon 05 Jan 2026 02:31:04 +0000 Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: ZdEzqg6W38OG8hH6/oSFz61WcdDyqojdu6ojdkbSqPg=) 2: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: FqhwzXNHRNY+XCePlaMxiVUp2AFCJ34p2xGpiCoaVzQ=) 3: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: 9LMpSs1G6DRXbhafQQ/fnV5UTQZp+aLbxUXgbbTPxiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 02:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Validity Not Before: Dec 29 02:31:04 2025 GMT Not After : Jan 5 02:31:04 2026 GMT Subject: CN=6951e7e9-22f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:9c:a1:9b:07:00:95:b0:33:40:f2:a3:b5: 3a:3d:bd:aa:f4:76:6b:a6:d7:cc:f6:55:a9:67:06: 38:5d:f0:90:d3:89:ba:58:e1:f2:68:4a:04:f9:81: 15:ee:6b:a9:eb:b0:9f:bf:41:ac:b5:45:8d:b2:df: 9b:e3:88:c5:1c:0b:ec:58:6d:1f:66:19:0d:46:15: 3b:90:67:ca:ad:d0:73:49:04:2d:32:e0:2b:1a:bf: be:a9:6e:76:32:f8:62:8f:d9:69:07:3b:c8:b9:30: d9:ac:e8:fb:eb:c1:c4:97:17:de:4a:3a:dc:3c:0d: 10:1e:e4:69:ec:90:ee:98:72:35:a3:0b:ea:87:59: 03:62:6d:f3:1a:41:6f:07:e3:99:8d:2e:65:8c:50: 37:17:b1:f1:fc:e5:e6:d9:92:a8:15:3e:86:9e:c3: c5:b7:d3:92:7e:19:1a:0c:7b:fc:7d:6c:86:0e:90: b1:47:e7:49:ca:a4:d6:db:43:dc:e5:8d:3b:48:a8: bc:60:63:1c:4d:e5:ba:5b:dc:10:d7:60:36:e5:1f: da:a9:06:fe:16:fd:eb:dc:9b:04:66:cf:05:a4:dd: e4:69:20:53:78:67:74:72:a9:2b:dd:14:ea:54:e2: e5:28:66:89:c2:cb:47:53:b2:84:25:e2:4b:d4:40: e6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BD:7C:A5:28:60:40:B2:98:7B:CD:F1:6F:1B:63:F0:7B:14:14:E6 X509v3 Authority Key Identifier: keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ba:62:16:76:e2:b3:db:d1:e8:a4:2c:fb:d7:fe:91:ab:be: 81:a3:18:86:63:3a:73:c0:97:b4:40:35:a5:7a:23:0e:e6:d4: aa:78:5a:f4:98:74:34:9f:40:50:c4:62:98:b3:7d:36:47:01: 68:d7:a8:7b:cb:e4:aa:01:59:00:a2:47:9f:ba:07:13:ab:17: d0:00:e7:70:27:d1:d2:21:26:49:b5:8b:14:64:f3:97:51:4a: 2c:b3:51:39:e1:2c:da:6f:17:56:32:ad:e2:61:50:0e:83:d6: ed:7a:29:07:79:74:65:c8:e5:d7:8b:13:87:8b:49:87:e6:a4: ce:cf:62:cb:a4:1a:85:5a:8c:cf:c3:05:54:30:db:35:f1:62: c9:c8:6f:76:66:58:77:7b:d1:75:95:d6:0f:bf:5a:fa:37:92: 42:5f:5e:66:e1:82:8e:4c:0e:70:54:d4:27:05:bd:28:81:09: 3a:6b:7d:43:c0:56:67:ae:fe:61:3b:1a:c0:c6:a5:2c:a0:3e: 1f:35:18:60:c7:87:3c:ba:71:4b:68:b8:80:73:12:23:4b:2e: 44:84:f3:2e:f2:3a:b7:35:5f:7a:56:fa:c7:ff:30:ac:5a:12: 1f:e9:1f:54:ec:27:b2:14:c3:3f:dc:83:d0:d8:95:cc:7c:56: 3f:3b:4c:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI4MTMxMTAvBgNVBAUTKDEwNzYxOEUzNkM5MURCRUQwQzg3NDUyOTVEMDE0OTg0 Mjc4N0FGODMwHhcNMjUxMjI5MDIzMTA0WhcNMjYwMTA1MDIzMTA0WjAYMRYwFAYD VQQDDA02OTUxZTdlOS0yMmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYacoZsHAJWwM0Dyo7U6Pb2q9HZrptfM9lWpZwY4XfCQ04m6WOHyaEoE+YEV 7mup67Cfv0GstUWNst+b44jFHAvsWG0fZhkNRhU7kGfKrdBzSQQtMuArGr++qW52 Mvhij9lpBzvIuTDZrOj768HElxfeSjrcPA0QHuRp7JDumHI1owvqh1kDYm3zGkFv B+OZjS5ljFA3F7Hx/OXm2ZKoFT6GnsPFt9OSfhkaDHv8fWyGDpCxR+dJyqTW20Pc 5Y07SKi8YGMcTeW6W9wQ12A25R/aqQb+Fv3r3JsEZs8FpN3kaSBTeGd0cqkr3RTq VOLlKGaJwstHU7KEJeJL1EDmKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa9fKUo YECymHvN8W8bY/B7FBTmMB8GA1UdIwQYMBaAFBB2GONskdvtDIdFKV0BSYQnh6+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjgxMy9BODUyNDM2QTZF MkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjItME1oMFVwWFFGSmhDZUhy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIWVk0MnlSMi0wTWgwVXBYUUZKaENlSHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjgxMy9BODUyNDM2QTZFMkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjIt ME1oMFVwWFFGSmhDZUhyNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6umIWduKz29HopCz71/6Rq76BoxiGYzpzwJe0QDWleiMO5tSqeFr0 mHQ0n0BQxGKYs302RwFo16h7y+SqAVkAokefugcTqxfQAOdwJ9HSISZJtYsUZPOX UUoss1E54SzabxdWMq3iYVAOg9bteikHeXRlyOXXixOHi0mH5qTOz2LLpBqFWozP wwVUMNs18WLJyG92Zlh3e9F1ldYPv1r6N5JCX15m4YKOTA5wVNQnBb0ogQk6a31D wFZnrv5hOxrAxqUsoD4fNRhgx4c8unFLaLiAcxIjSy5EhPMu8jq3NV96VvrH/zCs WhIf6R9U7CeyFMM/3IPQ2JXMfFY/O0yQ -----END CERTIFICATE-----Generated at Wed Dec 31 00:02:46 2025 by rpki-client