This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json) Hash identifier: h4u6d1+2mndT9HX/iT5cNT8sLm672IeqrhJm282+6hU= Subject key identifier: 15:17:85:18:5B:5A:F0:92:96:50:67:A9:97:96:AA:E0:F9:AE:D2:DE Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft Manifest number: 4C Signing time: Fri 19 Dec 2025 06:17:46 +0000 Manifest this update: Fri 19 Dec 2025 06:17:45 +0000 Manifest next update: Fri 26 Dec 2025 06:17:45 +0000 Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: OEFYXCMud5PyJZhrmGZwNCjMhiMCjZuOWW0Goe7lRlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Validity Not Before: Dec 19 06:17:45 2025 GMT Not After : Dec 26 06:17:45 2025 GMT Subject: CN=6944ee0a-8469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:f8:eb:f9:96:c5:21:8c:2c:68:33:40:8b: bc:24:78:dd:f1:ce:c6:27:c4:20:df:1b:42:9e:89: 74:8e:71:e9:80:dd:fb:41:a5:4e:64:85:96:c6:7c: e6:5a:8c:0a:d2:b3:1f:9d:ee:2f:ff:12:f7:a5:82: 18:c1:f7:56:a8:35:52:03:92:01:bb:b2:08:59:ae: f4:28:6d:91:e0:7c:a3:47:04:30:e8:3f:13:57:13: 33:45:66:8f:57:3c:64:bf:21:62:cf:13:0f:e0:4d: 2e:2e:f8:30:a7:af:cd:70:74:93:90:94:94:da:79: 84:09:36:f4:76:bb:94:88:77:4c:9f:fb:7d:bc:5e: 8a:d5:9e:91:1b:a3:a4:54:cf:39:f3:00:76:fd:44: 40:ed:cd:50:e9:e0:98:99:76:9a:43:64:40:35:38: 4d:7b:7f:6a:99:23:75:90:b3:c4:a0:d3:b7:dd:50: f2:bc:4d:54:45:60:af:fe:94:0f:b7:f5:88:14:68: f1:27:65:ce:7c:7b:6d:88:cf:25:1b:8b:28:d3:b4: 03:6b:e3:3a:fa:5d:f8:c3:6d:6f:94:53:d7:54:9e: 5b:ef:af:9a:9f:27:6c:07:5d:08:2a:b5:fc:20:e2: 69:14:29:23:e1:73:83:c8:7d:c7:1e:80:d7:2f:2d: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:17:85:18:5B:5A:F0:92:96:50:67:A9:97:96:AA:E0:F9:AE:D2:DE X509v3 Authority Key Identifier: keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ee:52:19:eb:f6:c3:e7:93:a2:5b:26:93:90:a5:11:c5:69: 1c:3a:27:fb:eb:d4:03:f5:2f:3d:91:94:35:51:9b:9c:4c:ae: 97:c0:fc:b7:9f:18:99:19:60:68:4c:14:94:35:12:5c:2b:0a: 9f:6d:6b:03:3d:53:41:fb:3b:2c:72:1f:d2:ba:3c:1d:a4:2e: 8e:ff:71:89:e8:2f:d1:2c:95:ba:3a:d0:52:4a:fc:ed:a3:6a: 8b:ee:51:94:3b:8e:d0:b7:91:b1:fc:77:7c:65:98:a3:66:3d: 73:49:14:3d:13:de:87:b4:ef:29:6f:a4:d7:55:37:f9:cc:a2: 3c:64:c9:7c:5b:a3:9a:9a:6f:34:82:7c:31:36:c5:69:f8:af: 1b:87:6a:7d:5d:e8:b2:1f:4f:ac:4a:7b:34:fa:dd:d2:ec:21: 6c:5c:0f:5e:00:db:a0:85:68:16:25:32:5d:41:7d:cf:a8:1b: f1:82:20:61:71:2b:b6:24:3e:d6:22:f3:6e:c5:c8:4a:ef:c4: 60:e8:c2:a3:68:3b:cd:bc:53:0e:86:34:1a:5c:06:40:3c:d0: 8c:4f:b3:ed:42:c7:b0:20:76:f6:2c:8c:8c:80:58:33:ff:73: 40:e5:c2:0e:49:5c:f5:f8:c8:86:30:68:6c:6e:af:fe:14:6d: d4:a6:2c:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkRDMDExMC8GA1UEBRMoMTE3QzBENkQxOUJGQkE0OEI1RkE5RTUxN0QwRTY5MjY1 NUM5OEM0NDAeFw0yNTEyMTkwNjE3NDVaFw0yNTEyMjYwNjE3NDVaMBgxFjAUBgNV BAMMDTY5NDRlZTBhLTg0NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL6vjr+ZbFIYwsaDNAi7wkeN3xzsYnxCDfG0KeiXSOcemA3ftBpU5khZbGfOZa jArSsx+d7i//EvelghjB91aoNVIDkgG7sghZrvQobZHgfKNHBDDoPxNXEzNFZo9X PGS/IWLPEw/gTS4u+DCnr81wdJOQlJTaeYQJNvR2u5SId0yf+328XorVnpEbo6RU zznzAHb9REDtzVDp4JiZdppDZEA1OE17f2qZI3WQs8Sg07fdUPK8TVRFYK/+lA+3 9YgUaPEnZc58e22IzyUbiyjTtANr4zr6XfjDbW+UU9dUnlvvr5qfJ2wHXQgqtfwg 4mkUKSPhc4PIfccegNcvLcN/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFReFGFta 8JKWUGepl5aq4Pmu0t4wHwYDVR0jBBgwFoAUEXwNbRm/uki1+p5RfQ5pJlXJjEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGREMwLzMzMTFGMEVFNjlF OTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVh3TmJSbV91a2kxLXA1UmZRNXBKbFhKakVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG REMwLzMzMTFGMEVFNjlFOTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtp MS1wNVJmUTVwSmxYSmpFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAILuUhnr9sPnk6JbJpOQpRHFaRw6J/vr1AP1Lz2RlDVRm5xMrpfA/Lef GJkZYGhMFJQ1ElwrCp9tawM9U0H7OyxyH9K6PB2kLo7/cYnoL9Eslbo60FJK/O2j aovuUZQ7jtC3kbH8d3xlmKNmPXNJFD0T3oe07ylvpNdVN/nMojxkyXxbo5qabzSC fDE2xWn4rxuHan1d6LIfT6xKezT63dLsIWxcD14A26CFaBYlMl1Bfc+oG/GCIGFx K7YkPtYi827FyErvxGDowqNoO828Uw6GNBpcBkA80IxPs+1Cx7AgdvYsjIyAWDP/ c0Dlwg5JXPX4yIYwaGxur/4UbdSmLBU= -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:03 2025 by rpki-client