This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft File: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json) Hash identifier: gPvy7HQoHZ4umjgOrjEUDWQLLMonah9rlaEIBZfa7YA= Subject key identifier: F4:88:35:09:0C:EF:4D:32:6E:20:F1:9D:AE:D8:4F:98:8B:C0:A2:9F Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 Certificate issuer: /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Certificate serial: 065E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft Manifest number: 0658 Signing time: Thu 18 Dec 2025 22:00:16 +0000 Manifest this update: Thu 18 Dec 2025 22:00:15 +0000 Manifest next update: Thu 25 Dec 2025 22:00:15 +0000 Files and hashes: 1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: t5U2f0jSbr/5xO0kCosk/63TYjwi5W2/zNGeE4Cy+4Q=) 2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: ijiCAPwBqro/NY/HWHS1Qe1Is15S0zP4v93++I4AYLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1630 (0x65e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Validity Not Before: Dec 18 22:00:15 2025 GMT Not After : Dec 25 22:00:15 2025 GMT Subject: CN=69447970-5b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:cb:21:fe:0a:9e:85:0f:a7:07:66:86:4c: 45:b6:bf:67:e1:7b:7c:c0:e6:5f:05:98:e2:67:a1: e2:23:b1:45:75:4a:f3:46:58:15:60:26:55:5d:e4: 87:ac:91:67:81:8b:13:22:5b:3a:58:ac:b1:a1:78: 6c:bd:4d:35:34:18:91:97:25:9d:9e:2b:40:a5:7d: a5:b1:5c:b0:3f:e5:7d:61:2a:5b:c9:2b:59:32:5a: 85:b5:28:cc:a5:77:85:34:12:97:6a:b9:34:4d:cf: 32:43:6f:67:fc:0a:de:94:c4:12:80:7c:c6:cd:6e: 7b:64:17:4f:0f:89:3a:3e:1e:e6:87:12:54:d8:46: 5f:70:ec:97:6c:2c:cf:fa:4e:78:41:54:b8:f0:7f: a1:2e:5b:c0:a6:c4:a4:38:9b:98:c7:61:3e:6e:04: d0:f0:4d:21:21:f5:1d:ed:35:48:4d:f2:85:62:c8: 2f:0c:a6:52:95:ad:f1:5f:b7:d2:65:e0:7b:89:b6: bb:66:a7:d1:c2:64:70:5c:87:3d:90:b2:d5:72:1d: 2c:44:cd:4c:7d:09:7f:61:6d:12:37:b9:f7:28:d2: 2f:58:b4:b6:61:9d:b3:6e:73:7a:b4:08:b0:f4:25: 7f:4d:ae:5a:2b:5e:b4:80:04:da:39:b1:b1:36:8b: b5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:88:35:09:0C:EF:4D:32:6E:20:F1:9D:AE:D8:4F:98:8B:C0:A2:9F X509v3 Authority Key Identifier: keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5c:04:65:f0:ec:67:4d:47:8c:4b:e1:a1:6b:fb:dc:aa:c2: 24:85:ee:06:f5:8e:2d:1b:fb:8e:1d:d0:9a:65:b5:c4:30:4d: d1:b0:42:7e:1f:87:df:5d:ec:a7:5b:74:5b:44:3b:9c:65:9a: e0:bf:1c:42:63:f7:ad:c8:7c:98:81:f9:db:56:91:6a:33:ab: 85:d8:2a:cb:38:06:78:c1:d1:2a:8c:80:ed:1d:dd:47:e6:bf: 14:ab:37:34:a3:89:7f:a8:2c:79:a9:1f:fa:98:af:d9:41:75: 51:69:57:ae:4e:61:5e:89:46:b2:4f:10:09:1c:5c:ee:f4:14: b0:e9:fb:60:75:83:09:f6:bd:45:38:f8:88:3f:70:e8:d8:96: ae:a2:d0:a9:00:ea:b5:6c:91:83:bd:e9:09:de:81:22:2a:8a: d8:d0:6e:d2:d8:a1:06:d8:77:f5:ac:9f:ac:10:24:43:1a:3b: 78:c9:14:ba:e2:96:04:1b:d6:3e:01:1a:60:a4:81:ac:a6:97: 26:0b:f4:00:cb:66:d6:a8:38:64:75:eb:c5:d6:4c:10:42:ba: 41:0e:c5:e5:60:9b:cb:25:ca:16:12:11:65:2a:20:33:43:7a: b3:91:59:c0:e7:76:55:11:8b:2a:c8:28:94:74:52:39:e5:e0: d1:98:b6:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz RUQxOTY3OTgwHhcNMjUxMjE4MjIwMDE1WhcNMjUxMjI1MjIwMDE1WjAYMRYwFAYD VQQDDA02OTQ0Nzk3MC01YjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqLLIf4KnoUPpwdmhkxFtr9n4Xt8wOZfBZjiZ6HiI7FFdUrzRlgVYCZVXeSH rJFngYsTIls6WKyxoXhsvU01NBiRlyWdnitApX2lsVywP+V9YSpbyStZMlqFtSjM pXeFNBKXark0Tc8yQ29n/ArelMQSgHzGzW57ZBdPD4k6Ph7mhxJU2EZfcOyXbCzP +k54QVS48H+hLlvApsSkOJuYx2E+bgTQ8E0hIfUd7TVITfKFYsgvDKZSla3xX7fS ZeB7iba7ZqfRwmRwXIc9kLLVch0sRM1MfQl/YW0SN7n3KNIvWLS2YZ2zbnN6tAiw 9CV/Ta5aK160gATaObGxNou1oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSINQkM 700ybiDxna7YT5iLwKKfMB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83MjMxQzNEQUFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0Zt OGQya0lzNjNJZTQtMFpaNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdXARl8OxnTUeMS+Gha/vcqsIkhe4G9Y4tG/uOHdCaZbXEME3RsEJ+ H4ffXeynW3RbRDucZZrgvxxCY/etyHyYgfnbVpFqM6uF2CrLOAZ4wdEqjIDtHd1H 5r8Uqzc0o4l/qCx5qR/6mK/ZQXVRaVeuTmFeiUayTxAJHFzu9BSw6ftgdYMJ9r1F OPiIP3Do2JauotCpAOq1bJGDvekJ3oEiKorY0G7S2KEG2Hf1rJ+sECRDGjt4yRS6 4pYEG9Y+ARpgpIGsppcmC/QAy2bWqDhkdevF1kwQQrpBDsXlYJvLJcoWEhFlKiAz Q3qzkVnA53ZVEYsqyCiUdFI55eDRmLa4 -----END CERTIFICATE-----Generated at Sat Dec 20 00:58:52 2025 by rpki-client