This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft File: ej19N0jHiYbCxeULUBO-tgq0etw.mft (raw, json) Hash identifier: wFlp2MIa/xUthNDpW7lYAS5SVrqBvTs6dg5eQLT5dhw= Subject key identifier: 32:42:20:EC:78:2F:DD:1B:FF:8E:88:05:1E:AE:CA:C0:FD:31:5A:50 Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC Certificate issuer: /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft Manifest number: 02A5 Signing time: Fri 19 Dec 2025 00:44:19 +0000 Manifest this update: Fri 19 Dec 2025 00:44:18 +0000 Manifest next update: Fri 26 Dec 2025 00:44:18 +0000 Files and hashes: 1: ej19N0jHiYbCxeULUBO-tgq0etw.crl (hash: pzoXq1W9qkotODzyEnoWApDba6FpAqCfHf7+6GSn1Jk=) 2: 3303481C820B11EFA5FD6818C4F9AE02.roa (hash: 2H0Eld64nbCRlxYzVx5jvhl/a/kjGOkQyNiInr2D6fU=) 3: E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (hash: oPhIXC+OF1ykzvnTk4LHIrBmTOI6SazQOAcqVDzTk04=) 4: 28144924820B11EF8B053D18C4F9AE02.roa (hash: L95ijgoOHfXB5kg1UlOb7GIC1yp0yWNX0oJUBtsn6Nw=) 5: EA61BF885BA011F0B7D9FB0DC4F9AE02.roa (hash: yBvWFxkJxlD3BcWZvBUya2FQ/w1n1QnKpsiNpS3l1kM=) 6: 66751A7C729211F0B01C9076C4F9AE02.roa (hash: Co9xDCgNDS9o8SEzHolP1f58DGoWkILAQoEBynF1Tc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D79, serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Validity Not Before: Dec 19 00:44:18 2025 GMT Not After : Dec 26 00:44:18 2025 GMT Subject: CN=69449fe2-427b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:07:ea:07:88:4e:6a:d1:f5:ca:d6:69:18: ea:4a:b4:df:4d:01:1c:ce:8a:ed:75:51:78:1b:56: 17:20:eb:ae:11:77:32:98:5c:b4:79:3c:94:b6:58: 03:2d:49:a2:82:1f:4e:8f:b6:3c:c1:36:bc:00:1a: eb:e3:65:84:87:fd:c9:cc:f4:e9:de:e6:b4:fd:a6: 90:4a:07:fb:95:76:3f:50:8d:f9:19:7b:df:75:0f: 9f:4d:54:cc:f7:3c:fe:a7:7a:13:0a:b6:8e:9b:ba: d1:b2:a4:0f:85:ab:50:dc:46:5c:7f:3a:98:fc:2e: 45:25:f5:70:bd:25:e6:8a:15:41:e8:f3:b4:1d:8f: 3c:05:00:71:ab:32:6f:e1:8f:fb:4f:30:39:fa:5e: da:e1:3c:27:3f:e8:7c:fd:7e:bb:4a:30:bf:d0:4f: f5:9b:3b:34:1e:23:1e:9c:2b:d6:44:4d:c8:f7:7f: 5b:be:55:f9:8a:a9:6b:33:f3:0f:67:06:25:6a:af: 2e:15:3c:a2:84:aa:4c:04:b5:f4:f8:88:e4:55:61: 0a:74:ba:db:54:c9:5e:09:72:bc:ab:c8:2c:d4:21: b6:ac:a6:62:88:ec:71:76:ec:8c:ed:0b:c4:95:d3: 07:60:23:f7:e6:e4:03:40:d2:b8:5c:e4:8f:9f:cb: 07:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:42:20:EC:78:2F:DD:1B:FF:8E:88:05:1E:AE:CA:C0:FD:31:5A:50 X509v3 Authority Key Identifier: keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:b9:94:65:59:b3:8b:60:9f:3d:32:6c:dd:35:69:41:b1:4d: d5:a0:fc:24:98:c3:37:66:c5:3c:e3:68:8f:6a:2e:8d:6e:da: 49:43:ac:7a:56:74:9b:86:4c:1f:84:69:b2:68:3c:99:7b:d6: 5c:61:2d:aa:dc:67:52:92:de:85:ac:3f:09:11:c2:e1:f5:ee: 5f:07:5d:55:26:f6:44:1b:dd:ec:a1:60:b0:89:9f:b1:f3:7c: 6f:68:c7:15:fb:95:d7:4c:8f:e8:ca:ba:1c:39:83:2b:4b:d7: 68:19:cf:31:fd:43:c5:82:f9:fb:5b:89:d3:cb:44:86:92:db: 83:dc:18:ec:a5:a6:04:9c:8d:8e:52:06:4b:39:67:61:3c:1f: a4:0e:88:64:57:a0:64:11:8d:ca:c8:94:5c:60:d4:f2:ef:86: c2:64:c8:94:5f:06:a6:1e:be:4e:38:aa:47:a6:e3:58:d7:7f: a1:36:c2:8c:4e:7e:33:32:4b:29:2f:80:a0:13:68:d1:89:d0: 99:b8:d3:60:4a:62:5a:b8:91:0d:f4:72:d6:c0:4b:72:8b:72: a4:64:08:ea:a3:7e:e9:e0:19:f2:30:3a:69:eb:f0:18:bb:db: a2:1a:56:f7:84:24:6c:1f:da:ee:4d:03:43:fb:d7:42:3c:6c: 78:9f:b4:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENzkxMTAvBgNVBAUTKDdBM0Q3RDM3NDhDNzg5ODZDMkM1RTUwQjUwMTNCRUI2 MEFCNDdBREMwHhcNMjUxMjE5MDA0NDE4WhcNMjUxMjI2MDA0NDE4WjAYMRYwFAYD VQQDDA02OTQ0OWZlMi00MjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zEH6geITmrR9crWaRjqSrTfTQEczortdVF4G1YXIOuuEXcymFy0eTyUtlgD LUmigh9Oj7Y8wTa8ABrr42WEh/3JzPTp3ua0/aaQSgf7lXY/UI35GXvfdQ+fTVTM 9zz+p3oTCraOm7rRsqQPhatQ3EZcfzqY/C5FJfVwvSXmihVB6PO0HY88BQBxqzJv 4Y/7TzA5+l7a4TwnP+h8/X67SjC/0E/1mzs0HiMenCvWRE3I939bvlX5iqlrM/MP ZwYlaq8uFTyihKpMBLX0+IjkVWEKdLrbVMleCXK8q8gs1CG2rKZiiOxxduyM7QvE ldMHYCP35uQDQNK4XOSPn8sHOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJCIOx4 L90b/46IBR6uysD9MVpQMB8GA1UdIwQYMBaAFHo9fTdIx4mGwsXlC1ATvrYKtHrc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ3OS9CRjE5NEQ4MDI4 M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZYkN4ZVVMVUJPLXRncTBl dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqMTlOMGpIaVliQ3hlVUxVQk8tdGdxMGV0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ3OS9CRjE5NEQ4MDI4M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZ YkN4ZVVMVUJPLXRncTBldHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwuZRlWbOLYJ89MmzdNWlBsU3VoPwkmMM3ZsU842iPai6NbtpJQ6x6 VnSbhkwfhGmyaDyZe9ZcYS2q3GdSkt6FrD8JEcLh9e5fB11VJvZEG93soWCwiZ+x 83xvaMcV+5XXTI/oyrocOYMrS9doGc8x/UPFgvn7W4nTy0SGktuD3BjspaYEnI2O UgZLOWdhPB+kDohkV6BkEY3KyJRcYNTy74bCZMiUXwamHr5OOKpHpuNY13+hNsKM Tn4zMkspL4CgE2jRidCZuNNgSmJauJEN9HLWwEtyi3KkZAjqo37p4BnyMDpp6/AY u9uiGlb3hCRsH9ruTQND+9dCPGx4n7SA -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:53 2025 by rpki-client