This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft File: EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json) Hash identifier: zIHbr1wYqcYmKVBkTypnIt11QwqGKlsHCoUmH718XCE= Subject key identifier: F8:24:7C:70:C6:FF:8E:6A:27:B5:67:4B:84:4E:3B:1D:F0:59:C4:B9 Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80 Certificate issuer: /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft Manifest number: 014B Signing time: Tue 23 Dec 2025 03:18:14 +0000 Manifest this update: Tue 23 Dec 2025 03:18:14 +0000 Manifest next update: Tue 30 Dec 2025 03:18:14 +0000 Files and hashes: 1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: a43fahmGIB8ormCJVScAqjBSBEDLbBWuFnkxKmORJtA=) 2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: J5vtQMTwpL/xmHDO4Uy4YqCD/INA3rpqnN+ZrH/2hAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380 Validity Not Before: Dec 23 03:18:14 2025 GMT Not After : Dec 30 03:18:14 2025 GMT Subject: CN=694a09f6-7922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:d4:bc:ff:fe:f3:2c:d3:4e:39:88:4a:c1: f7:9f:67:98:ab:53:3f:b9:50:e4:fd:53:2f:ff:d1: c3:b8:0c:83:92:77:ac:ca:27:11:2b:a4:16:a0:fe: 27:0d:89:ff:0b:27:80:e0:e0:a6:d9:e1:69:e2:8e: c9:15:b2:d8:a5:4c:78:b3:f6:72:a3:d5:25:b1:8f: 69:76:34:36:d7:ff:32:56:0a:ba:b4:2d:b2:81:0d: da:55:85:38:ec:bd:bf:21:ca:25:27:41:53:e5:48: b3:ef:b5:41:43:48:d8:51:da:d4:b5:01:5a:ce:bc: d1:11:02:07:2f:f9:30:d4:c9:dc:9a:4f:38:2c:37: 7b:9d:7f:66:70:98:e4:2f:1a:6a:eb:9b:46:86:89: c0:a3:ef:1e:90:3e:1b:51:3f:2c:dd:c6:47:5f:76: 49:ad:9e:22:98:b6:32:eb:59:3d:da:eb:e9:1d:77: 1d:c5:70:3e:29:02:84:40:94:9d:9e:de:39:2f:95: c4:22:f4:30:60:d3:db:14:e1:f7:86:19:c1:8f:9d: 87:2b:43:dc:90:f1:56:ab:93:0d:9a:84:5e:2a:50: e1:af:91:ba:c1:c4:81:a8:62:af:a3:fb:c6:02:ce: c7:8f:bd:fa:50:9a:1a:69:12:e5:9c:38:6a:e8:82: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:24:7C:70:C6:FF:8E:6A:27:B5:67:4B:84:4E:3B:1D:F0:59:C4:B9 X509v3 Authority Key Identifier: keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:2a:da:d8:60:26:2a:3c:2e:48:57:c9:48:9a:1e:70:cf:a5: 55:13:59:ba:30:23:e9:2a:0b:42:eb:05:a4:dc:c1:fb:51:c8: 01:80:02:d7:33:5c:0c:ad:ae:78:6e:3e:e2:0b:32:f5:20:b2: 8e:8c:83:1a:8e:01:05:67:62:99:10:5b:d8:d0:05:ee:02:01: b3:80:e4:13:6f:b3:c9:31:d5:9a:0c:2b:bb:c9:9e:3c:bb:31: 75:d1:15:a4:9e:fe:fa:4e:f5:66:7a:25:9e:6e:be:2a:49:ec: 6a:be:00:5a:4d:d5:98:4d:68:30:c9:4e:33:1b:04:88:92:59: b9:0e:b0:9c:ed:13:5a:66:d1:79:8c:ca:2f:ff:de:6f:ff:bf: a7:5e:ef:e5:bd:0f:97:2b:ab:14:e0:fa:31:d3:cf:04:7f:4f: fd:8e:dd:18:8b:e8:0b:f2:81:5b:56:1c:f7:07:34:6c:d2:01: aa:04:4f:eb:83:b7:c9:3e:65:9a:17:cb:10:3a:05:30:ab:d7: 54:03:4e:04:81:c2:a4:f4:fb:0f:96:d2:ee:87:bb:82:e3:d8: 54:46:ad:c3:05:3e:61:da:00:df:b9:11:27:7d:dc:13:46:e6: d5:63:93:df:3c:0a:59:48:af:a3:f2:ac:a9:3f:13:a0:b4:a5: c7:e5:bc:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCREExMTAvBgNVBAUTKDEwN0EzOUMxQ0MwNEYyN0NDNzI2NjNEQkY3QkFFNkQ5 MkE5NTAzODAwHhcNMjUxMjIzMDMxODE0WhcNMjUxMjMwMDMxODE0WjAYMRYwFAYD VQQDDA02OTRhMDlmNi03OTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqHUvP/+8yzTTjmISsH3n2eYq1M/uVDk/VMv/9HDuAyDknesyicRK6QWoP4n DYn/CyeA4OCm2eFp4o7JFbLYpUx4s/Zyo9UlsY9pdjQ21/8yVgq6tC2ygQ3aVYU4 7L2/IcolJ0FT5Uiz77VBQ0jYUdrUtQFazrzREQIHL/kw1Mncmk84LDd7nX9mcJjk Lxpq65tGhonAo+8ekD4bUT8s3cZHX3ZJrZ4imLYy61k92uvpHXcdxXA+KQKEQJSd nt45L5XEIvQwYNPbFOH3hhnBj52HK0PckPFWq5MNmoReKlDhr5G6wcSBqGKvo/vG As7Hj736UJoaaRLlnDhq6ILNIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgkfHDG /45qJ7VnS4ROOx3wWcS5MB8GA1UdIwQYMBaAFBB6OcHMBPJ8xyZj2/e65tkqlQOA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkJEQS82QUQzNzRBQUU2 NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThuekhKbVBiOTdybTJTcVZB NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIbzV3Y3dFOG56SEptUGI5N3JtMlNxVkE0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkJEQS82QUQzNzRBQUU2NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThu ekhKbVBiOTdybTJTcVZBNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAKtrYYCYqPC5IV8lImh5wz6VVE1m6MCPpKgtC6wWk3MH7UcgBgALX M1wMra54bj7iCzL1ILKOjIMajgEFZ2KZEFvY0AXuAgGzgOQTb7PJMdWaDCu7yZ48 uzF10RWknv76TvVmeiWebr4qSexqvgBaTdWYTWgwyU4zGwSIklm5DrCc7RNaZtF5 jMov/95v/7+nXu/lvQ+XK6sU4Pox088Ef0/9jt0Yi+gL8oFbVhz3BzRs0gGqBE/r g7fJPmWaF8sQOgUwq9dUA04EgcKk9PsPltLuh7uC49hURq3DBT5h2gDfuREnfdwT RubVY5PfPApZSK+j8qypPxOgtKXH5bxr -----END CERTIFICATE-----Generated at Thu Dec 25 01:02:55 2025 by rpki-client