This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: xPJUfcA6CHAPVG8niCCQhAYmNnRtlEyTvcCVoGs4NCo= Subject key identifier: C3:3D:E0:CC:20:DC:81:16:AE:06:79:D9:A3:E0:F6:BB:7C:90:D4:BB Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 18A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 1881 Signing time: Thu 18 Dec 2025 16:23:16 +0000 Manifest this update: Thu 18 Dec 2025 16:23:16 +0000 Manifest next update: Thu 25 Dec 2025 16:23:16 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: gvkCMleKvdHZHsohFqohsOydFt2sw2v4fDPmdrgU7jc=) 2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 4Q+SEdvBQGfYmmHeFRyy/2R/EHACTjORm2A/+Pw5UxE=) 3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: p3nDO3WF2LVR/VuRYdJhLml5b3M6N0ju1bV/+dQUHBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6306 (0x18a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: Dec 18 16:23:16 2025 GMT Not After : Dec 25 16:23:16 2025 GMT Subject: CN=69442a74-c284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:03:68:f2:35:06:8e:03:d6:48:01:fa:7c:24: d3:04:93:6f:a0:44:72:cd:1e:ae:fb:a4:11:ed:11: 0d:f8:1e:5c:fb:2a:50:7c:b5:9a:53:54:b6:7c:83: 5a:33:df:3a:1e:13:3e:a7:2b:86:67:62:66:8c:4c: f5:4c:e6:91:2f:73:b7:e3:79:46:a2:ff:e1:83:7c: 02:71:eb:fc:d3:1b:6f:1a:0c:bc:2b:84:74:5d:47: d8:0b:81:28:29:69:a0:71:63:fa:d9:b0:ed:9f:e6: bb:e8:f8:8c:33:4f:fb:fb:f9:08:f8:97:0b:80:40: 24:74:bb:13:45:e5:f8:3a:82:8b:72:71:e9:f8:43: c4:28:f6:d7:0a:6e:f8:43:a8:82:26:48:39:1b:8c: b5:12:c0:65:3a:e9:ab:9d:61:d7:c1:b0:1d:ec:de: d3:16:35:13:ab:31:3f:44:fc:44:88:cd:f0:6c:38: c7:8b:05:38:43:00:4d:d9:85:1c:7b:f5:a5:7f:2d: 93:a3:83:81:b6:0e:5c:48:a4:a3:4a:19:c1:3c:7e: 26:66:2b:54:0f:44:60:3d:00:7b:be:a4:f3:82:36: 64:19:52:34:8b:07:f8:a5:40:f7:30:7a:3a:9e:fa: 16:32:9a:96:d4:5e:b6:e9:fb:3d:76:3f:d9:9f:ba: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3D:E0:CC:20:DC:81:16:AE:06:79:D9:A3:E0:F6:BB:7C:90:D4:BB X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:16:40:3c:0d:80:72:a3:2c:c4:3d:a9:91:51:1f:0a:d3:bd: 22:7f:d1:9e:eb:aa:f9:c0:8b:40:8b:46:55:49:fd:8a:77:9b: bc:79:f5:fa:7e:76:2e:3b:25:13:e5:fe:10:ee:bc:bb:87:ab: 49:cb:c2:da:6f:7e:79:76:38:85:8d:20:3d:5a:ff:a3:3d:94: 31:d1:48:7b:3e:60:6d:14:7f:84:23:c5:be:bb:6e:6d:ab:25: dd:a3:87:45:81:4c:6d:d7:f5:ea:10:e3:d8:6c:4a:85:4c:cc: 0f:a7:f3:d7:0a:ed:0a:42:ed:97:4c:f0:d5:05:00:13:f2:83: d8:1c:00:ca:0a:3f:ae:25:b3:0a:be:9d:6b:a0:31:1f:07:87: 9f:5f:c7:0c:0e:ad:a0:ab:cb:4e:07:2a:97:d6:41:76:bd:8a: 1f:0b:32:68:26:f2:c1:60:71:81:bf:e8:0a:34:2f:0b:4e:29: be:4b:53:4b:b7:8d:2d:0d:e2:05:75:e0:c7:67:dd:e6:80:d5: 2a:6c:84:5f:28:64:97:43:7d:6a:a5:fa:39:c3:eb:0c:b5:85: b1:b4:5c:58:e4:cc:85:50:08:a5:4e:2a:d9:4b:30:37:9a:30: 19:1d:66:d4:e1:ad:55:ab:13:cd:bf:51:69:f5:a4:3e:c5:a7: 66:8b:df:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjUxMjE4MTYyMzE2WhcNMjUxMjI1MTYyMzE2WjAYMRYwFAYD VQQDDA02OTQ0MmE3NC1jMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQNo8jUGjgPWSAH6fCTTBJNvoERyzR6u+6QR7REN+B5c+ypQfLWaU1S2fINa M986HhM+pyuGZ2JmjEz1TOaRL3O343lGov/hg3wCcev80xtvGgy8K4R0XUfYC4Eo KWmgcWP62bDtn+a76PiMM0/7+/kI+JcLgEAkdLsTReX4OoKLcnHp+EPEKPbXCm74 Q6iCJkg5G4y1EsBlOumrnWHXwbAd7N7TFjUTqzE/RPxEiM3wbDjHiwU4QwBN2YUc e/Wlfy2To4OBtg5cSKSjShnBPH4mZitUD0RgPQB7vqTzgjZkGVI0iwf4pUD3MHo6 nvoWMpqW1F626fs9dj/Zn7qkAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM94Mwg 3IEWrgZ52aPg9rt8kNS7MB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhFkA8DYByoyzEPamRUR8K070if9Ge66r5wItAi0ZVSf2Kd5u8efX6 fnYuOyUT5f4Q7ry7h6tJy8Lab355djiFjSA9Wv+jPZQx0Uh7PmBtFH+EI8W+u25t qyXdo4dFgUxt1/XqEOPYbEqFTMwPp/PXCu0KQu2XTPDVBQAT8oPYHADKCj+uJbMK vp1roDEfB4efX8cMDq2gq8tOByqX1kF2vYofCzJoJvLBYHGBv+gKNC8LTim+S1NL t40tDeIFdeDHZ93mgNUqbIRfKGSXQ31qpfo5w+sMtYWxtFxY5MyFUAilTirZSzA3 mjAZHWbU4a1VqxPNv1Fp9aQ+xadmi99N -----END CERTIFICATE-----Generated at Fri Dec 19 22:00:19 2025 by rpki-client