This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft File: emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json) Hash identifier: f+0G4IGNtjovj80SPW/LC/8LtaIDcTv6HFEnv4ZMuK8= Subject key identifier: 22:C5:2B:A5:EC:4E:F3:92:4F:1A:DE:10:76:89:3E:66:43:DD:16:52 Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E Certificate issuer: /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E Certificate serial: 34F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft Manifest number: 34F0 Signing time: Thu 18 Dec 2025 14:56:44 +0000 Manifest this update: Thu 18 Dec 2025 14:56:43 +0000 Manifest next update: Thu 25 Dec 2025 14:56:43 +0000 Files and hashes: 1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: GEPsXto/ERFZ+RiC7sPXOcgc21nFqCPe5aBHyybM87M=) 2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: wwzdt+29bN5sRkpJd/eidoVjChYLuUnZj02CyiHrUiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13557 (0x34f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E Validity Not Before: Dec 18 14:56:43 2025 GMT Not After : Dec 25 14:56:43 2025 GMT Subject: CN=6944162b-ada2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:2b:37:f9:22:72:37:70:0b:3d:6e:6f:50: f2:08:00:d6:90:5f:74:6a:a3:8c:2c:0f:f2:79:9c: d3:1d:e6:85:b3:9c:73:da:cf:a4:1c:d1:c7:79:6e: 35:b5:a7:5e:c9:dc:bd:ce:ae:b9:c7:10:f9:20:16: 93:d9:c2:53:94:49:c5:63:66:0d:fe:2b:88:cf:8b: ec:37:63:78:a8:50:d3:11:d6:cd:71:16:9a:33:ea: 1a:7c:da:7a:17:a1:9c:08:c3:b6:06:8f:4d:b5:8f: b3:40:bd:a5:bf:29:fa:5e:92:15:76:b3:d3:9c:23: 79:ac:63:f7:31:8b:46:14:8c:52:88:4b:5e:b0:1b: ca:76:e0:69:30:51:b1:80:ba:02:4e:ad:5d:57:96: c1:90:74:9b:86:a8:d5:ca:0a:1c:68:20:13:dd:2a: d8:14:32:be:a2:6d:f1:1e:f2:76:88:8e:54:04:00: 24:55:2c:9e:7c:cb:43:6d:3e:0d:0d:34:a6:48:1f: e2:7d:33:cf:09:c5:70:5d:f2:ab:a6:13:bf:00:52: e2:3d:64:44:30:31:06:05:4a:e9:22:70:1a:82:83: 89:b2:34:b7:3d:fa:fe:d8:ad:31:f6:db:c6:f6:6b: 74:21:38:04:89:2f:23:33:fe:e1:38:cc:f8:9f:e8: 21:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C5:2B:A5:EC:4E:F3:92:4F:1A:DE:10:76:89:3E:66:43:DD:16:52 X509v3 Authority Key Identifier: keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4b:b6:1b:3d:1a:b2:56:14:02:d7:61:46:04:8d:82:ad:5b: a8:bc:68:a3:5a:2e:07:06:c1:7d:b4:33:92:4b:8e:8e:e0:d4: e0:95:e6:d9:c0:07:16:b9:a8:93:1c:52:e3:0f:fd:54:b5:ef: 90:3c:6e:2e:7f:f7:bd:7d:64:c9:ca:18:71:36:e9:a0:79:43: 20:52:ed:0d:77:f7:52:3f:50:2c:8e:d6:79:38:1d:6d:ea:0a: a5:cb:38:e7:6a:79:8e:22:bf:54:92:89:06:c3:07:a3:72:ab: 0c:05:5e:f0:fe:98:c9:0b:b1:60:e1:4b:b5:4f:03:9e:e0:40: f0:1f:0e:a3:67:4b:98:98:75:50:2f:47:4a:ae:11:4d:62:26: 86:73:d8:69:47:2f:56:07:8f:cc:d1:dd:df:64:b5:c3:4e:c1: 71:da:10:b7:df:27:8e:67:44:49:f4:e2:26:21:74:13:a7:f0: 43:a8:ae:ff:23:dc:21:10:54:26:f0:37:36:20:fd:85:ea:97: 98:30:93:2c:db:b7:f5:c3:65:0e:1b:12:4f:12:b9:a8:f2:a4: 90:8a:9f:17:b4:af:21:d7:39:9d:c6:d0:d9:c3:3f:50:b6:4e: 88:18:92:e6:18:29:e8:55:56:e6:ef:19:5f:4e:c7:97:fe:f0: 9f:48:ba:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGRjMxMTAvBgNVBAUTKDdBNjYxMDUxOTQ1Q0UyRThGQjRBRTZERTYzQjI4NDc4 QjBDRUQzNUUwHhcNMjUxMjE4MTQ1NjQzWhcNMjUxMjI1MTQ1NjQzWjAYMRYwFAYD VQQDDA02OTQ0MTYyYi1hZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHcrN/kicjdwCz1ub1DyCADWkF90aqOMLA/yeZzTHeaFs5xz2s+kHNHHeW41 tadeydy9zq65xxD5IBaT2cJTlEnFY2YN/iuIz4vsN2N4qFDTEdbNcRaaM+oafNp6 F6GcCMO2Bo9NtY+zQL2lvyn6XpIVdrPTnCN5rGP3MYtGFIxSiEtesBvKduBpMFGx gLoCTq1dV5bBkHSbhqjVygocaCAT3SrYFDK+om3xHvJ2iI5UBAAkVSyefMtDbT4N DTSmSB/ifTPPCcVwXfKrphO/AFLiPWREMDEGBUrpInAagoOJsjS3Pfr+2K0x9tvG 9mt0ITgEiS8jM/7hOMz4n+ghewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLFK6Xs TvOSTxreEHaJPmZD3RZSMB8GA1UdIwQYMBaAFHpmEFGUXOLo+0rm3mOyhHiwztNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZGMy9DRUFCQjRFNjFE OUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1ajdTdWJlWTdLRWVMRE8w MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtWVFVWlJjNHVqN1N1YmVZN0tFZUxETzAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZGMy9DRUFCQjRFNjFEOUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1 ajdTdWJlWTdLRWVMRE8wMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPS7YbPRqyVhQC12FGBI2CrVuovGijWi4HBsF9tDOSS46O4NTglebZ wAcWuaiTHFLjD/1Ute+QPG4uf/e9fWTJyhhxNumgeUMgUu0Nd/dSP1AsjtZ5OB1t 6gqlyzjnanmOIr9UkokGwwejcqsMBV7w/pjJC7Fg4Uu1TwOe4EDwHw6jZ0uYmHVQ L0dKrhFNYiaGc9hpRy9WB4/M0d3fZLXDTsFx2hC33yeOZ0RJ9OImIXQTp/BDqK7/ I9whEFQm8Dc2IP2F6peYMJMs27f1w2UOGxJPErmo8qSQip8XtK8h1zmdxtDZwz9Q tk6IGJLmGCnoVVbm7xlfTseX/vCfSLrF -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:43 2025 by rpki-client