This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json) Hash identifier: uBa9zRV92jOsORwxlY1gF3we3qNBps/I+/c+uOqTjSM= Subject key identifier: B2:8C:81:0E:58:D8:4E:8A:ED:A8:2C:48:FF:48:A0:9B:21:20:03:6C Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft Manifest number: 0101 Signing time: Sat 27 Dec 2025 04:02:10 +0000 Manifest this update: Sat 27 Dec 2025 04:02:09 +0000 Manifest next update: Sat 03 Jan 2026 04:02:09 +0000 Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: vXL3ELLImGwMknvkOPZeanFepANBw7POZP5g9Fy5j78=) 2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: UXnC/XoVUkLq/3kEuo54UNzjcpY8CVmcAHE/kWC3Jds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 04:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Validity Not Before: Dec 27 04:02:09 2025 GMT Not After : Jan 3 04:02:09 2026 GMT Subject: CN=694f5a42-1dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:0a:0c:4b:6a:ed:11:bf:1f:88:1f:ae:ca: b7:ff:d0:d6:a6:23:be:3a:a2:a6:96:e7:c0:b0:48: f0:c7:60:62:ca:35:7d:0e:23:b6:2a:d5:3b:09:74: 60:8a:57:9c:fd:f6:af:91:17:d1:33:5f:5c:48:ea: e1:fd:58:e5:22:3d:3f:72:2c:b9:a5:5f:46:51:13: 5c:e1:7d:67:02:77:1a:10:6b:f0:8e:05:94:d2:39: 5c:1a:e9:5c:fa:4c:3a:82:7e:39:11:80:41:27:29: d6:dd:8e:fe:4d:5c:9e:51:aa:0a:6d:81:90:d3:06: ac:02:a4:0f:57:e9:9a:7b:b5:87:16:06:52:0f:00: 72:7f:46:22:b7:e1:50:25:bc:cb:cf:a8:34:05:ce: 9b:57:c2:96:9f:cb:05:30:57:5d:bd:05:31:fa:ee: fd:a9:26:77:28:e1:79:60:23:b8:13:b1:29:12:93: 26:82:10:bd:35:4c:32:be:3b:c6:76:6a:f6:a0:0d: 95:f5:47:cf:d6:e6:86:83:d3:cc:19:e0:30:fb:4b: 76:b1:44:21:b4:2a:09:b7:1a:5e:2f:32:4d:a8:06: 06:41:07:c9:ab:16:80:d0:a5:2e:4c:be:23:8f:2f: ee:d8:08:c2:ee:75:4a:e1:f8:8a:5c:ee:0a:f6:34: 51:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8C:81:0E:58:D8:4E:8A:ED:A8:2C:48:FF:48:A0:9B:21:20:03:6C X509v3 Authority Key Identifier: keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b1:19:dd:5e:49:26:ef:d5:8f:94:44:86:cd:8e:1f:b4:f8: 5b:cb:1f:17:da:24:c3:90:92:00:e2:e4:36:10:bb:fe:d4:1b: f3:6c:79:3b:a7:e9:08:1f:0f:5d:80:24:50:bb:9f:e7:70:b9: c8:2a:53:9a:a5:b6:b9:f0:42:d3:ca:14:5a:33:bb:64:37:83: 9a:07:63:fc:d1:f0:b2:4c:ad:57:fa:53:8b:47:0a:d8:1a:14: 4d:2e:6a:63:0d:2e:05:d0:6a:f5:ab:3c:93:9d:d3:22:4f:84: e4:e9:ca:16:b4:a7:81:67:03:67:f3:d8:de:24:13:0e:c6:34: 3f:c1:f5:96:c1:92:73:94:26:2f:d3:f0:21:fc:8f:b7:84:62: f1:3b:aa:e2:3b:34:ce:af:8a:93:8d:ca:4e:92:ab:32:12:73: 03:a9:aa:d0:fb:90:85:ef:e2:b6:e1:1b:e4:a4:47:7d:a3:24: e6:ef:bb:31:99:39:a0:07:0d:70:19:a8:50:fd:f3:22:0a:f7: 0a:9e:db:4b:78:d7:79:5b:16:1b:b4:47:3c:89:24:85:ed:cb: 46:6a:44:d2:fa:a0:18:f0:88:85:6b:e5:c4:b1:b5:0f:f3:73: fd:97:d6:e0:d1:cd:23:54:d0:d3:80:ca:27:8e:ff:6b:58:d2: 9b:01:b9:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5NjQxMTAvBgNVBAUTKDExNkYwQTJBNkE0QjkyNDJENzdBMjUwQjcxNzAwODE1 RDI5OEREQjkwHhcNMjUxMjI3MDQwMjA5WhcNMjYwMTAzMDQwMjA5WjAYMRYwFAYD VQQDDA02OTRmNWE0Mi0xZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVgKDEtq7RG/H4gfrsq3/9DWpiO+OqKmlufAsEjwx2BiyjV9DiO2KtU7CXRg ilec/favkRfRM19cSOrh/VjlIj0/ciy5pV9GURNc4X1nAncaEGvwjgWU0jlcGulc +kw6gn45EYBBJynW3Y7+TVyeUaoKbYGQ0wasAqQPV+mae7WHFgZSDwByf0Yit+FQ JbzLz6g0Bc6bV8KWn8sFMFddvQUx+u79qSZ3KOF5YCO4E7EpEpMmghC9NUwyvjvG dmr2oA2V9UfP1uaGg9PMGeAw+0t2sUQhtCoJtxpeLzJNqAYGQQfJqxaA0KUuTL4j jy/u2AjC7nVK4fiKXO4K9jRRtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKMgQ5Y 2E6K7agsSP9IoJshIANsMB8GA1UdIwQYMBaAFBFvCipqS5JC13olC3FwCBXSmN25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GNTMxRURFNDVC MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtrTFhlaVVMY1hBSUZkS1kz YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VXOEtLbXBMa2tMWGVpVUxjWEFJRmRLWTNiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTk2NC9GNTMxRURFNDVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtr TFhlaVVMY1hBSUZkS1kzYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNsRndXkkm79WPlESGzY4ftPhbyx8X2iTDkJIA4uQ2ELv+1BvzbHk7 p+kIHw9dgCRQu5/ncLnIKlOapba58ELTyhRaM7tkN4OaB2P80fCyTK1X+lOLRwrY GhRNLmpjDS4F0Gr1qzyTndMiT4Tk6coWtKeBZwNn89jeJBMOxjQ/wfWWwZJzlCYv 0/Ah/I+3hGLxO6riOzTOr4qTjcpOkqsyEnMDqarQ+5CF7+K24RvkpEd9oyTm77sx mTmgBw1wGahQ/fMiCvcKnttLeNd5WxYbtEc8iSSF7ctGakTS+qAY8IiFa+XEsbUP 83P9l9bg0c0jVNDTgMonjv9rWNKbAblS -----END CERTIFICATE-----Generated at Sat Dec 27 17:46:05 2025 by rpki-client