This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.mft File: eqF9y0Q-PfjajmchB6USkODpoBM.mft (raw, json) Hash identifier: WE0sahdysgqfCaufDppfRRYSRz/FL651T6wvdfIqoPA= Subject key identifier: 9B:6A:A0:97:6D:27:A2:8D:37:C3:2B:98:93:C5:28:7D:6E:5F:FD:4F Authority key identifier: 7A:A1:7D:CB:44:3E:3D:F8:DA:8E:67:21:07:A5:12:90:E0:E9:A0:13 Certificate issuer: /CN=A918233C/serialNumber=7AA17DCB443E3DF8DA8E672107A51290E0E9A013 Certificate serial: 049A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqF9y0Q-PfjajmchB6USkODpoBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.mft Manifest number: 0517 Signing time: Thu 18 Dec 2025 23:24:34 +0000 Manifest this update: Thu 18 Dec 2025 23:24:34 +0000 Manifest next update: Thu 25 Dec 2025 23:24:34 +0000 Files and hashes: 1: eqF9y0Q-PfjajmchB6USkODpoBM.crl (hash: rNwAHGFWZdndjHb6riHsQvOhlB1+jC107INO6HCCtSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.crl rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqF9y0Q-PfjajmchB6USkODpoBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918233C, serialNumber=7AA17DCB443E3DF8DA8E672107A51290E0E9A013 Validity Not Before: Dec 18 23:24:34 2025 GMT Not After : Dec 25 23:24:34 2025 GMT Subject: CN=69448d32-bb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:0b:ac:d9:2d:58:e5:f9:27:66:9a:d7:21: 71:71:92:84:87:56:38:b5:88:ad:dc:83:42:54:36: 3a:d6:4f:4d:9f:8a:da:9c:da:a2:6a:f2:1a:c8:b3: e8:da:15:22:d2:9a:b4:13:db:3a:1c:e1:ee:af:62: dd:95:2f:3c:c8:8e:e6:89:3c:8c:e5:f8:22:c9:af: 01:7b:d6:db:10:38:9b:f4:34:e0:c6:fe:e1:24:be: f0:bb:39:26:41:79:bc:74:fd:4b:44:c0:0c:d4:86: 7e:6a:d7:77:d2:28:f0:26:c0:7a:ba:bd:aa:f6:42: b0:31:1c:12:c2:96:a2:0e:fe:43:0a:80:46:83:92: 97:24:b3:21:2b:e1:78:b6:bc:b8:26:02:30:0c:47: c0:a4:41:66:8b:3f:c5:df:4d:0e:03:0b:a8:7d:79: 9c:19:f1:5e:5a:1f:00:67:e8:c2:af:a7:b3:5d:02: 65:58:cb:9c:dc:a5:73:fa:d9:1f:29:7d:14:c8:03: 42:92:2f:bf:9e:e1:ad:ba:94:f2:ff:fc:08:20:42: e6:8a:62:5d:e0:2e:fb:37:50:ea:bf:9d:21:64:26: 69:ff:77:68:f3:12:e1:06:58:20:3f:32:2d:59:f1: af:0a:87:f7:04:1d:2c:82:42:cc:a7:d1:33:39:12: cd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6A:A0:97:6D:27:A2:8D:37:C3:2B:98:93:C5:28:7D:6E:5F:FD:4F X509v3 Authority Key Identifier: keyid:7A:A1:7D:CB:44:3E:3D:F8:DA:8E:67:21:07:A5:12:90:E0:E9:A0:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqF9y0Q-PfjajmchB6USkODpoBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/eqF9y0Q-PfjajmchB6USkODpoBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:54:91:b9:7a:62:16:97:84:b2:ac:f4:3b:3e:68:cd:e7:88: a4:59:1f:a9:36:f1:ae:d6:40:44:da:e3:e4:3e:af:83:8f:5c: 8a:c4:75:ca:c2:1e:be:98:2f:1c:32:7d:45:7b:fd:60:c5:c3: 16:31:1e:a2:f5:15:5d:85:84:11:4e:54:1a:35:80:d8:f9:fd: fd:df:e4:e5:41:3b:f6:11:f2:b9:3f:ac:96:7d:69:1d:db:98: 6a:7d:88:77:f4:fa:a7:46:f5:8b:1d:be:da:c4:b7:38:78:2d: ac:f7:aa:b8:ce:07:67:51:20:13:68:19:0c:02:cd:61:c2:f4: 43:db:f3:ec:d9:ce:52:36:7e:f2:f2:a8:52:f2:b7:a6:89:98: 80:ba:d7:8e:11:c3:b2:1a:db:f0:4e:03:ae:f1:38:55:ff:3b: ae:a8:d1:fa:0a:60:8f:35:e4:ba:54:9b:29:ca:cd:1e:74:68: 62:e1:a2:d1:30:31:0e:8d:3e:9d:cb:17:a4:a1:5d:e8:cf:b8: fa:00:dc:17:78:a5:ab:16:71:54:81:07:21:54:7a:54:34:14: d5:73:f6:59:56:52:8a:29:02:e0:2b:e2:23:dc:7b:d3:9d:20: 05:e1:34:89:f2:fd:0f:12:2d:9c:5a:be:75:ac:ee:cb:31:af: 1a:47:de:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzM0MxMTAvBgNVBAUTKDdBQTE3RENCNDQzRTNERjhEQThFNjcyMTA3QTUxMjkw RTBFOUEwMTMwHhcNMjUxMjE4MjMyNDM0WhcNMjUxMjI1MjMyNDM0WjAYMRYwFAYD VQQDDA02OTQ0OGQzMi1iYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwQLrNktWOX5J2aa1yFxcZKEh1Y4tYit3INCVDY61k9Nn4ranNqiavIayLPo 2hUi0pq0E9s6HOHur2LdlS88yI7miTyM5fgiya8Be9bbEDib9DTgxv7hJL7wuzkm QXm8dP1LRMAM1IZ+atd30ijwJsB6ur2q9kKwMRwSwpaiDv5DCoBGg5KXJLMhK+F4 try4JgIwDEfApEFmiz/F300OAwuofXmcGfFeWh8AZ+jCr6ezXQJlWMuc3KVz+tkf KX0UyANCki+/nuGtupTy//wIIELmimJd4C77N1Dqv50hZCZp/3do8xLhBlggPzIt WfGvCof3BB0sgkLMp9EzORLNJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtqoJdt J6KNN8MrmJPFKH1uX/1PMB8GA1UdIwQYMBaAFHqhfctEPj342o5nIQelEpDg6aAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjMzQy9FNjQ5MUZFMjYy MTQxMUVDQjAwNjcxMkNDNEY5QUUwMi9lcUY5eTBRLVBmamFqbWNoQjZVU2tPRHBv Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VxRjl5MFEtUGZqYWptY2hCNlVTa09EcG9CTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjMzQy9FNjQ5MUZFMjYyMTQxMUVDQjAwNjcxMkNDNEY5QUUwMi9lcUY5eTBRLVBm amFqbWNoQjZVU2tPRHBvQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASVJG5emIWl4SyrPQ7PmjN54ikWR+pNvGu1kBE2uPkPq+Dj1yKxHXK wh6+mC8cMn1Fe/1gxcMWMR6i9RVdhYQRTlQaNYDY+f393+TlQTv2EfK5P6yWfWkd 25hqfYh39PqnRvWLHb7axLc4eC2s96q4zgdnUSATaBkMAs1hwvRD2/Ps2c5SNn7y 8qhS8remiZiAuteOEcOyGtvwTgOu8ThV/zuuqNH6CmCPNeS6VJspys0edGhi4aLR MDEOjT6dyxekoV3oz7j6ANwXeKWrFnFUgQchVHpUNBTVc/ZZVlKKKQLgK+Ij3HvT nSAF4TSJ8v0PEi2cWr51rO7LMa8aR952 -----END CERTIFICATE-----Generated at Fri Dec 19 19:14:45 2025 by rpki-client