This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft File: EQTOLG2R752aM5VvBzHZ4j8Tr74.mft (raw, json) Hash identifier: t2Az+512p40w53bHKqXqp5Zvw+w/pYHo7ardJO1doms= Subject key identifier: 02:B6:A5:82:42:0F:93:54:49:47:90:8B:88:67:DE:18:58:C0:BE:16 Authority key identifier: 11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE Certificate issuer: /CN=A916EC8B/serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft Manifest number: 0245 Signing time: Sun 21 Dec 2025 01:08:24 +0000 Manifest this update: Sun 21 Dec 2025 01:08:23 +0000 Manifest next update: Sun 28 Dec 2025 01:08:23 +0000 Files and hashes: 1: EQTOLG2R752aM5VvBzHZ4j8Tr74.crl (hash: bccoN57z5kbhndy6EDwWZxH/kdXgzkp+VrzPJO8ZHJM=) 2: 4B9461EE360211F0B340176EC4F9AE02.roa (hash: bOe8nr2E8t1ATROZ4KuuEHTILvcglG1TUoH86rOv6Xs=) 3: 9F13CA9AC60C11F0BE755750C4F9AE02.roa (hash: PyeUHh2Ng6SJ5El0I6XUEocd+w1I2M5sfj3R1NBqgdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EC8B, serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE Validity Not Before: Dec 21 01:08:23 2025 GMT Not After : Dec 28 01:08:23 2025 GMT Subject: CN=69474888-f38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:d1:b1:c5:ec:c1:5d:22:6c:bf:aa:86:65: f0:e1:d3:2a:a4:80:98:85:d5:0f:40:33:ad:1e:41: 58:81:ff:71:d2:6e:c8:d5:b2:15:0c:9d:73:1d:93: 1b:b4:6f:96:10:50:ae:f4:46:f7:e3:63:01:b4:62: ff:e8:4b:d5:bc:dd:f6:4e:56:1b:54:fa:fd:49:bd: 71:16:76:3f:3b:b1:5f:c5:53:94:41:c2:c7:bc:a6: 20:ff:55:22:e5:2f:df:7b:10:5c:b1:23:64:65:74: cd:d3:34:83:8f:18:1f:24:39:e7:49:71:7f:5c:55: c6:c9:35:ac:ca:99:fc:a4:62:f0:49:58:48:19:f4: 5e:fb:f9:49:bc:43:fb:b7:27:1d:80:97:2e:13:b2: 45:d2:8c:68:9b:9d:d9:9b:95:cd:42:f6:b5:76:48: 22:72:10:6d:da:10:c0:c0:5c:e6:2b:25:79:30:5c: a3:7d:a7:21:09:09:d7:a5:cf:85:c3:2e:a3:f7:28: 35:2e:10:ef:5d:44:ce:81:fd:65:e7:c5:52:b0:7b: 56:64:6a:f7:b8:75:f6:b9:55:c1:49:91:37:a0:08: fd:e3:1b:33:60:f0:04:75:ef:ce:64:0d:45:53:13: ff:bb:69:f4:cd:31:bc:73:d1:48:af:ff:34:3a:f5: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B6:A5:82:42:0F:93:54:49:47:90:8B:88:67:DE:18:58:C0:BE:16 X509v3 Authority Key Identifier: keyid:11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:7d:ee:9f:9a:f9:a2:60:b3:0d:03:51:5b:90:d2:51:9c:34: fb:7a:a4:b3:cd:e6:08:f0:9b:c9:d9:dd:3d:64:cf:60:08:d7: ed:00:7b:96:0e:aa:fb:52:57:37:9d:d6:4d:62:d2:d4:fb:4f: 9d:4c:f8:00:c9:4b:03:ff:d1:e5:29:c5:5a:b2:8f:53:5d:0a: 81:40:da:02:a7:15:0d:3c:3c:8b:a7:78:10:ed:dd:2a:a3:76: 75:4e:47:40:31:d1:50:71:92:d5:a5:17:16:f5:65:e7:68:bf: 7a:50:97:b2:0c:7a:7b:10:c5:36:41:04:61:73:3d:73:c8:da: dd:de:1d:9d:01:2e:a2:83:e4:1d:7d:48:f4:96:47:1b:ac:76: 48:2b:5c:e7:71:c3:09:5a:d2:5d:2b:5b:9a:70:e9:1b:3a:85: 1f:f6:9a:db:f6:ae:fb:4f:0c:a9:48:4b:30:85:77:e4:71:7d: 4f:a3:1c:99:37:a1:5b:83:c2:5b:c1:e0:bc:68:ca:8a:00:96: a7:4e:de:4c:dc:fd:0f:2d:23:2a:d6:c2:f1:04:f9:9d:ba:dc: 1d:de:9a:d3:bf:07:e3:b7:71:e4:5b:11:fe:d8:79:35:87:4a: 33:c5:a8:7c:d8:db:36:01:c8:c7:dc:a8:e1:60:a4:96:41:38: 50:27:db:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVDOEIxMTAvBgNVBAUTKDExMDRDRTJDNkQ5MUVGOUQ5QTMzOTU2RjA3MzFEOUUy M0YxM0FGQkUwHhcNMjUxMjIxMDEwODIzWhcNMjUxMjI4MDEwODIzWjAYMRYwFAYD VQQDDA02OTQ3NDg4OC1mMzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnrRscXswV0ibL+qhmXw4dMqpICYhdUPQDOtHkFYgf9x0m7I1bIVDJ1zHZMb tG+WEFCu9Eb342MBtGL/6EvVvN32TlYbVPr9Sb1xFnY/O7FfxVOUQcLHvKYg/1Ui 5S/fexBcsSNkZXTN0zSDjxgfJDnnSXF/XFXGyTWsypn8pGLwSVhIGfRe+/lJvEP7 tycdgJcuE7JF0oxom53Zm5XNQva1dkgichBt2hDAwFzmKyV5MFyjfachCQnXpc+F wy6j9yg1LhDvXUTOgf1l58VSsHtWZGr3uHX2uVXBSZE3oAj94xszYPAEde/OZA1F UxP/u2n0zTG8c9FIr/80OvU2bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAK2pYJC D5NUSUeQi4hn3hhYwL4WMB8GA1UdIwQYMBaAFBEEzixtke+dmjOVbwcx2eI/E6++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUM4Qi9EODFENTM3MDZG Q0UxMUVEQkMwMjk0NURDNEY5QUUwMi9FUVRPTEcyUjc1MmFNNVZ2QnpIWjRqOFRy NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VRVE9MRzJSNzUyYU01VnZCekhaNGo4VHI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUM4Qi9EODFENTM3MDZGQ0UxMUVEQkMwMjk0NURDNEY5QUUwMi9FUVRPTEcyUjc1 MmFNNVZ2QnpIWjRqOFRyNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5fe6fmvmiYLMNA1FbkNJRnDT7eqSzzeYI8JvJ2d09ZM9gCNftAHuW Dqr7Ulc3ndZNYtLU+0+dTPgAyUsD/9HlKcVaso9TXQqBQNoCpxUNPDyLp3gQ7d0q o3Z1TkdAMdFQcZLVpRcW9WXnaL96UJeyDHp7EMU2QQRhcz1zyNrd3h2dAS6ig+Qd fUj0lkcbrHZIK1znccMJWtJdK1uacOkbOoUf9prb9q77TwypSEswhXfkcX1PoxyZ N6Fbg8JbweC8aMqKAJanTt5M3P0PLSMq1sLxBPmdutwd3prTvwfjt3HkWxH+2Hk1 h0ozxah82Ns2AcjH3KjhYKSWQThQJ9sS -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:52 2025 by rpki-client