This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json) Hash identifier: 7JU68clps+iiy72BKc0MEBtHI01aEkLQW3oAm2+lP8w= Subject key identifier: 31:94:D0:F5:64:73:97:89:17:29:16:D5:20:AE:16:C7:0C:05:EA:E9 Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft Manifest number: 0724 Signing time: Thu 18 Dec 2025 22:26:40 +0000 Manifest this update: Thu 18 Dec 2025 22:26:39 +0000 Manifest next update: Thu 25 Dec 2025 22:26:39 +0000 Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: N93ej0rNRZ/FfZqOavgMkC2mDDKYFyuCU8YjkMrt/HA=) 2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: HpV9alDLFaENoEQRBDM1U8HrLENNv7Hd/Jy118wd7FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Validity Not Before: Dec 18 22:26:39 2025 GMT Not After : Dec 25 22:26:39 2025 GMT Subject: CN=69447fa0-5edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:a2:8e:40:bb:e2:01:b6:0e:d0:38:50:04: 85:8f:25:94:a3:8b:be:47:09:86:02:79:e8:7f:bd: 27:1d:12:9d:89:2b:32:3d:cf:2c:c3:d1:40:ea:60: dc:26:41:80:89:e4:b1:0d:85:bd:48:d9:7b:17:9f: 6e:ab:bb:8f:c4:7d:a1:d1:e2:b0:15:ac:16:d3:1a: 82:11:5d:30:bc:f4:09:b7:e0:f9:46:b8:15:1b:61: 30:f0:55:b4:50:28:9b:fa:d6:61:61:92:09:5f:c9: b4:72:7c:d8:72:cf:1c:ab:1e:e6:90:1b:a9:c4:81: e8:26:cf:93:2f:13:9f:60:6d:8d:e3:3f:8a:a2:df: 09:35:04:5e:ae:36:d7:80:ac:93:13:c8:da:cd:1f: 86:70:19:2e:15:4f:db:32:d0:54:9c:48:43:14:42: d5:8c:e1:8a:7e:c7:11:af:30:4c:67:1d:c6:c3:14: 74:d9:26:11:af:d9:1e:6c:78:58:bb:e1:48:e2:49: f0:a3:6d:11:4d:8a:67:f6:e1:d1:c6:17:32:30:28: e2:27:66:7f:7b:c3:e6:2c:70:d2:08:ed:67:d0:76: f7:48:ef:07:b7:e2:f7:8a:d1:68:4a:95:26:4c:a7: b6:7c:ba:8f:fa:cf:6a:3a:b9:db:84:a8:4a:69:d7: e0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:94:D0:F5:64:73:97:89:17:29:16:D5:20:AE:16:C7:0C:05:EA:E9 X509v3 Authority Key Identifier: keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:22:a5:cb:02:2b:85:2e:5e:8f:84:91:ae:eb:8f:7d:31:46: 08:f1:30:08:19:7c:66:a2:08:51:c7:86:33:2d:d8:20:b4:31: a3:97:a0:39:62:05:80:4e:45:3e:25:d0:13:29:8b:97:26:16: 01:d6:ab:53:df:b8:79:87:12:1e:a7:41:f3:78:6d:2d:2e:aa: 90:a6:71:4d:5e:cb:50:fc:92:81:6c:a8:c4:96:8a:91:a1:b9: f9:5c:5a:9f:6e:2e:29:57:65:08:79:70:6f:07:b1:84:63:31: 01:18:08:ae:29:bc:aa:fa:f3:0f:71:a8:ac:c2:43:32:3d:2d: 97:70:48:fe:8c:26:2d:92:23:9a:58:29:da:bd:29:5a:99:2b: 4a:52:ef:69:e2:5a:22:c6:f0:be:73:e8:47:8c:ee:61:bf:c2: 40:10:5f:90:9a:fb:92:c7:c7:4b:18:c3:28:f5:86:86:75:26: 64:2e:16:25:8c:70:13:e0:a0:2d:eb:8a:f7:b2:18:27:e5:72: 31:09:a3:f2:66:5d:2a:ac:58:c2:c0:67:e4:11:0f:1f:88:77: 39:93:bf:4c:c8:8c:d5:4c:9f:c3:81:cb:17:7c:94:e2:b9:a0: 22:51:ca:5d:61:03:06:46:24:d2:95:4b:a3:ea:ab:3a:d5:e5: 9d:75:e0:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDEyQzQ4OTcyRjI2RDA2N0E5RjIxQjRDNEZBMEM4NjYz M0UwMkMwMTkwHhcNMjUxMjE4MjIyNjM5WhcNMjUxMjI1MjIyNjM5WjAYMRYwFAYD VQQDDA02OTQ0N2ZhMC01ZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgGijkC74gG2DtA4UASFjyWUo4u+RwmGAnnof70nHRKdiSsyPc8sw9FA6mDc JkGAieSxDYW9SNl7F59uq7uPxH2h0eKwFawW0xqCEV0wvPQJt+D5RrgVG2Ew8FW0 UCib+tZhYZIJX8m0cnzYcs8cqx7mkBupxIHoJs+TLxOfYG2N4z+Kot8JNQRerjbX gKyTE8jazR+GcBkuFU/bMtBUnEhDFELVjOGKfscRrzBMZx3GwxR02SYRr9kebHhY u+FI4knwo20RTYpn9uHRxhcyMCjiJ2Z/e8PmLHDSCO1n0Hb3SO8Ht+L3itFoSpUm TKe2fLqP+s9qOrnbhKhKadfgtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGU0PVk c5eJFykW1SCuFscMBerpMB8GA1UdIwQYMBaAFBLEiXLybQZ6nyG0xPoMhmM+AsAZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJucWZJYlRFLWd5R1l6NEN3 QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJu cWZJYlRFLWd5R1l6NEN3QmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/IqXLAiuFLl6PhJGu6499MUYI8TAIGXxmoghRx4YzLdggtDGjl6A5 YgWATkU+JdATKYuXJhYB1qtT37h5hxIep0HzeG0tLqqQpnFNXstQ/JKBbKjEloqR obn5XFqfbi4pV2UIeXBvB7GEYzEBGAiuKbyq+vMPcaiswkMyPS2XcEj+jCYtkiOa WCnavSlamStKUu9p4loixvC+c+hHjO5hv8JAEF+QmvuSx8dLGMMo9YaGdSZkLhYl jHAT4KAt64r3shgn5XIxCaPyZl0qrFjCwGfkEQ8fiHc5k79MyIzVTJ/DgcsXfJTi uaAiUcpdYQMGRiTSlUuj6qs61eWddeAD -----END CERTIFICATE-----Generated at Fri Dec 19 19:25:32 2025 by rpki-client