This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft File: eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json) Hash identifier: D6OIaCwLUGKUBXqp/fqIDYYzBonL+LxBbQvN9DKlR7o= Subject key identifier: F9:1B:A8:76:FF:EF:30:EC:18:08:7C:06:1A:78:83:1A:34:0A:D8:71 Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 Certificate issuer: /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft Manifest number: 93 Signing time: Mon 29 Dec 2025 05:32:28 +0000 Manifest this update: Mon 29 Dec 2025 05:32:27 +0000 Manifest next update: Mon 05 Jan 2026 05:32:27 +0000 Files and hashes: 1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: PsJ2afjrvC6NwU3NpuwNOe5MJQFSJ0rWccNFI88MkY4=) 2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: vF2hPrjWnGE1wVLs/Ml1OeBVYR8W6IECJw4qVwfrJO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Validity Not Before: Dec 29 05:32:27 2025 GMT Not After : Jan 5 05:32:27 2026 GMT Subject: CN=6952126c-a4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:db:e9:8d:37:85:c0:d6:80:d5:9d:cb:1b:ac: c1:c2:3c:06:d3:6f:89:39:93:9b:0b:0c:6e:1d:73: 4c:45:66:d7:97:19:cc:45:45:78:c0:4d:33:8d:0e: 5f:fd:cb:24:fd:d7:05:28:61:18:0e:46:c5:02:f4: 94:4c:6f:75:ca:16:5a:eb:2f:a9:32:d4:d1:5d:70: c4:e2:dc:f4:c4:73:92:c6:d6:cb:fa:a6:c0:38:68: 8e:53:42:aa:fe:f2:a8:3d:d5:b9:59:82:c3:4d:ff: 57:2e:d4:5f:b6:9b:3f:43:18:1f:e4:2a:4a:5e:01: 7c:ff:5f:85:cb:e7:21:f6:29:67:c6:e0:df:cc:71: 02:c5:0b:d4:f8:14:e0:8f:e4:9a:c1:7b:a2:99:3b: 12:36:fe:77:60:db:4a:53:24:e5:e6:6e:f7:8b:e5: 10:96:d4:fd:b6:89:95:43:7a:26:0e:51:86:d4:e2: 27:66:1a:1a:71:33:80:95:d7:84:b2:b1:b6:20:84: 50:b7:40:94:58:77:29:b5:d3:36:de:a8:73:33:f6: 0e:79:56:35:7c:67:bb:2a:55:3d:9d:d1:54:85:7b: bf:e7:8a:ea:df:b9:fa:36:d8:27:cf:e0:ce:40:f2: 75:98:e7:62:03:bf:cf:61:f0:29:fd:67:8a:8c:f8: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1B:A8:76:FF:EF:30:EC:18:08:7C:06:1A:78:83:1A:34:0A:D8:71 X509v3 Authority Key Identifier: keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b0:c9:5e:8a:62:9f:a1:d6:9e:d0:77:d8:64:1a:03:74:c3: d1:4b:63:6d:cd:30:7b:45:c4:18:ad:07:34:ff:f5:29:56:61: e0:e6:ab:31:f9:58:ee:60:e0:30:63:04:ed:a1:23:cc:65:03: 46:d6:61:2f:81:4d:e4:86:c0:80:ee:0f:ac:77:5d:6d:0f:58: 3a:83:10:1e:f6:e7:e3:69:bc:54:8d:dc:fc:9b:8a:2b:27:81: cb:11:3f:48:af:31:0f:99:22:19:dd:ea:42:e6:84:a8:9c:1e: 72:4e:f0:63:9a:a1:3e:39:2b:ea:ea:c2:25:3c:26:cb:f0:39: c3:5e:f6:a9:ad:bc:a5:df:7c:e4:97:f9:a9:9f:0b:b7:5c:6b: 57:12:d0:1e:ef:a3:32:b0:04:b1:3a:76:42:1b:01:39:a1:a0: f0:39:12:7b:9c:ac:10:7e:bb:63:97:2a:e1:19:85:32:a4:e8: 47:7d:f9:c2:9e:8a:16:bf:3c:ba:8e:e7:29:3e:5a:84:c4:53: 39:80:26:09:b2:56:d6:ad:83:13:71:cd:b1:f3:53:ff:52:7f: a2:4a:75:8c:dc:03:66:87:24:8a:89:cf:23:ef:c0:ce:20:68: 57:50:db:af:dc:f6:22:c2:a7:38:9c:d1:57:f7:bc:3b:bb:f3: b8:55:44:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM4RjUxMTAvBgNVBAUTKDc5NTY4QTM4RUNEQjYxN0U2NzhDMDhBNkNDNDNDNEQ2 NTAyQ0VDNjIwHhcNMjUxMjI5MDUzMjI3WhcNMjYwMTA1MDUzMjI3WjAYMRYwFAYD VQQDDA02OTUyMTI2Yy1hNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntvpjTeFwNaA1Z3LG6zBwjwG02+JOZObCwxuHXNMRWbXlxnMRUV4wE0zjQ5f /csk/dcFKGEYDkbFAvSUTG91yhZa6y+pMtTRXXDE4tz0xHOSxtbL+qbAOGiOU0Kq /vKoPdW5WYLDTf9XLtRftps/Qxgf5CpKXgF8/1+Fy+ch9ilnxuDfzHECxQvU+BTg j+SawXuimTsSNv53YNtKUyTl5m73i+UQltT9tomVQ3omDlGG1OInZhoacTOAldeE srG2IIRQt0CUWHcptdM23qhzM/YOeVY1fGe7KlU9ndFUhXu/54rq37n6Ntgnz+DO QPJ1mOdiA7/PYfAp/WeKjPik8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkbqHb/ 7zDsGAh8Bhp4gxo0CthxMB8GA1UdIwQYMBaAFHlWijjs22F+Z4wIpsxDxNZQLOxi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzhGNS9FODAyODE5RTAy NUIxMUYwOUFDRkQ5MTBDNEY5QUUwMi9lVmFLT096YllYNW5qQWltekVQRTFsQXM3 R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2VWYUtPT3piWVg1bmpBaW16RVBFMWxBczdHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzhGNS9FODAyODE5RTAyNUIxMUYwOUFDRkQ5MTBDNEY5QUUwMi9lVmFLT096YllY NW5qQWltekVQRTFsQXM3R0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCasMleimKfodae0HfYZBoDdMPRS2NtzTB7RcQYrQc0//UpVmHg5qsx +VjuYOAwYwTtoSPMZQNG1mEvgU3khsCA7g+sd11tD1g6gxAe9ufjabxUjdz8m4or J4HLET9IrzEPmSIZ3epC5oSonB5yTvBjmqE+OSvq6sIlPCbL8DnDXvaprbyl33zk l/mpnwu3XGtXEtAe76MysASxOnZCGwE5oaDwORJ7nKwQfrtjlyrhGYUypOhHffnC nooWvzy6jucpPlqExFM5gCYJslbWrYMTcc2x81P/Un+iSnWM3ANmhySKic8j78DO IGhXUNuv3PYiwqc4nNFX97w7u/O4VUTZ -----END CERTIFICATE-----Generated at Mon Dec 29 08:49:16 2025 by rpki-client