This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft File: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft (raw, json) Hash identifier: 4OYKzSHZtCoWvwY5Fe/6dKF7yX7dbutXk+D8Rd7SSK4= Subject key identifier: 40:AE:3A:C4:97:EB:D1:D9:11:89:D9:AD:48:B6:C1:4D:7B:29:0F:41 Authority key identifier: D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88 Certificate issuer: /CN=A919874A/serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft Manifest number: A1 Signing time: Sun 21 Dec 2025 05:25:59 +0000 Manifest this update: Sun 21 Dec 2025 05:25:59 +0000 Manifest next update: Sun 28 Dec 2025 05:25:59 +0000 Files and hashes: 1: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl (hash: hBQWVL8buCj3LQNOOcv6Ay1NYlWtz5pgmSSYLNjmtxs=) 2: 7151B356EAD411EFBA2AB40EC4F9AE02.roa (hash: VSF4aaLno+UR3o6W3Jl8Y30MNxvgZ99sJu4IeD9pONk=) 3: 9A54CDE2348011F086A8BD61C4F9AE02.roa (hash: pT72WIe4fU0R7+0/z831L5zLkhO5BiW0L+nGv2+Kvtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919874A, serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788 Validity Not Before: Dec 21 05:25:59 2025 GMT Not After : Dec 28 05:25:59 2025 GMT Subject: CN=694784e7-4cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:90:f5:74:62:52:d1:82:08:57:aa:7b:e8: a3:dc:b3:80:21:3f:22:e4:91:7a:8a:1e:d5:e9:e8: 46:4c:fa:f1:3b:81:40:ae:ce:10:3f:97:a6:58:e4: 93:19:00:dd:ac:f4:0a:02:0e:32:29:7f:01:d2:a2: 3c:7a:44:ca:28:09:c5:90:93:32:8d:45:2c:36:df: c6:45:7d:e1:63:97:a4:2c:b6:c7:e2:67:78:d4:98: 73:54:fb:20:d7:7a:88:09:2e:ec:75:fd:0d:0f:04: bf:f8:2c:cb:af:39:c1:99:71:f4:91:e6:8a:04:05: d2:0e:d4:71:c8:cf:27:71:f8:57:8b:3f:17:a8:c4: b2:13:8b:24:81:71:0f:16:8b:74:16:75:6d:ad:ef: 7b:b5:a8:49:ba:bb:b3:50:bf:3f:b0:f6:b3:aa:30: 86:3a:26:9a:4a:b8:f2:ad:cc:5b:a9:7e:dc:1a:ed: c5:50:65:da:90:35:16:33:92:5d:e8:25:cd:82:b6: e3:da:62:09:fb:76:6e:45:21:63:89:55:c3:b4:6e: 0a:23:6c:50:a6:d6:dd:a7:fa:74:89:cb:37:ef:4a: 61:cc:db:42:ef:4f:9a:7a:93:8a:0c:2f:74:9f:a7: dd:51:42:d6:16:26:2e:37:cb:71:ff:35:63:af:15: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AE:3A:C4:97:EB:D1:D9:11:89:D9:AD:48:B6:C1:4D:7B:29:0F:41 X509v3 Authority Key Identifier: keyid:D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:04:25:01:71:4e:cf:2f:b7:7a:17:eb:ce:93:40:29:13:aa: 58:5e:ab:3d:ce:ae:47:9e:f5:1e:6a:b7:00:b1:ce:68:58:4f: 35:d9:26:db:0a:dd:93:43:9b:40:e1:9c:f3:48:b9:af:25:e7: 58:db:e2:80:0a:73:18:e6:e7:dc:df:dd:6c:85:97:6b:2d:28: e5:e0:fd:8e:0d:d7:57:2e:82:ef:88:65:bc:34:5a:ab:b4:68: 28:ce:ec:6b:65:75:cd:20:59:35:68:f7:6e:d8:a5:20:25:0a: 15:f1:bf:4c:6a:5d:ef:11:70:d8:25:39:00:00:ba:c3:a7:0c: f0:dd:67:a0:2b:45:55:2d:c7:c6:e1:6d:6d:c3:00:75:52:c8: d7:1f:d9:6b:b2:c7:f7:dc:47:b9:3c:6e:42:29:d2:e5:f1:f7: 01:ea:df:3a:d7:10:84:19:c6:f7:5d:1f:d8:6d:7e:86:8f:86: de:e0:9a:dc:ec:4a:10:5b:00:85:27:1c:ad:46:95:14:d8:eb: 68:fc:de:a7:c1:69:a7:9d:80:3c:00:0b:e1:14:ae:ed:38:1d: cf:31:63:4c:fd:27:19:56:fe:0a:9d:3e:8e:db:a2:00:bd:8e: 46:23:c2:bc:80:dd:7b:a7:5b:e2:2a:ed:c4:53:9f:cf:dc:c7: 36:48:72:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3NEExMTAvBgNVBAUTKEQwNDgwRkYxMDc1MDUyRkVGRUU2QzA4RTFEQkY4RTgz RTAwMTI3ODgwHhcNMjUxMjIxMDUyNTU5WhcNMjUxMjI4MDUyNTU5WjAYMRYwFAYD VQQDDA02OTQ3ODRlNy00Y2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLiQ9XRiUtGCCFeqe+ij3LOAIT8i5JF6ih7V6ehGTPrxO4FArs4QP5emWOST GQDdrPQKAg4yKX8B0qI8ekTKKAnFkJMyjUUsNt/GRX3hY5ekLLbH4md41JhzVPsg 13qICS7sdf0NDwS/+CzLrznBmXH0keaKBAXSDtRxyM8ncfhXiz8XqMSyE4skgXEP Fot0FnVtre97tahJuruzUL8/sPazqjCGOiaaSrjyrcxbqX7cGu3FUGXakDUWM5Jd 6CXNgrbj2mIJ+3ZuRSFjiVXDtG4KI2xQptbdp/p0ics370phzNtC70+aepOKDC90 n6fdUULWFiYuN8tx/zVjrxWEmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECuOsSX 69HZEYnZrUi2wU17KQ9BMB8GA1UdIwQYMBaAFNBID/EHUFL+/ubAjh2/joPgASeI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc0QS9FQ0UxNjZENEVB RDMxMUVGQjFDNENDNTVDNEY5QUUwMi8wRWdQOFFkUVV2Ny01c0NPSGItT2ctQUJK NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBFZ1A4UWRRVXY3LTVzQ09IYi1PZy1BQko0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODc0QS9FQ0UxNjZENEVBRDMxMUVGQjFDNENDNTVDNEY5QUUwMi8wRWdQOFFkUVV2 Ny01c0NPSGItT2ctQUJKNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxBCUBcU7PL7d6F+vOk0ApE6pYXqs9zq5HnvUearcAsc5oWE812Sbb Ct2TQ5tA4ZzzSLmvJedY2+KACnMY5ufc391shZdrLSjl4P2ODddXLoLviGW8NFqr tGgozuxrZXXNIFk1aPdu2KUgJQoV8b9Mal3vEXDYJTkAALrDpwzw3WegK0VVLcfG 4W1twwB1UsjXH9lrssf33Ee5PG5CKdLl8fcB6t861xCEGcb3XR/YbX6Gj4be4Jrc 7EoQWwCFJxytRpUU2Oto/N6nwWmnnYA8AAvhFK7tOB3PMWNM/ScZVv4KnT6O26IA vY5GI8K8gN17p1viKu3EU5/P3Mc2SHI/ -----END CERTIFICATE-----Generated at Sun Dec 21 12:42:18 2025 by rpki-client