This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json) Hash identifier: lgeAtFxg7B++eo+fzEtABuC1FYrLA1Xa5IuQznggmGU= Subject key identifier: 6B:C8:CC:35:A9:0F:52:9A:58:CF:F9:6F:89:38:46:5B:F0:7B:E1:FE Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft Manifest number: 01A0 Signing time: Sat 27 Dec 2025 02:21:59 +0000 Manifest this update: Sat 27 Dec 2025 02:21:59 +0000 Manifest next update: Sat 03 Jan 2026 02:21:59 +0000 Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: QNsNtDeYXsMIXp/6FyMg3Uvn8ENeru1J73WQmDvmIBE=) 2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: 8KY8F5aAbZQBF/Qe5iecqKDmzqJcSSXnzASxQlPbo4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 02:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Validity Not Before: Dec 27 02:21:59 2025 GMT Not After : Jan 3 02:21:59 2026 GMT Subject: CN=694f42c7-7b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:8b:d4:75:d7:06:f1:41:ed:73:4f:f6:66: 28:6f:eb:e0:3c:93:06:1c:77:55:54:08:34:68:43: 6d:21:4a:3e:f0:6d:9f:4e:96:43:69:39:03:b7:38: 16:d9:cd:34:95:6d:76:fe:c1:d9:08:77:35:b9:b6: 7d:8f:98:9e:51:d8:a8:46:8b:02:5c:9c:81:0d:6b: 40:c0:a2:bc:66:ef:00:a6:47:34:42:93:70:5f:b8: 36:d0:cd:ce:c6:bc:1d:7c:32:a7:47:43:e9:cf:2a: 19:1d:32:aa:07:71:3b:78:0e:fb:40:aa:a8:ae:71: 0b:eb:ad:9b:38:92:ae:28:bf:57:2b:20:34:f7:b4: 96:a6:34:78:1f:7d:17:67:89:ae:8e:17:40:0e:76: e8:1f:eb:36:f7:a0:1f:12:e9:36:c0:8f:e2:28:f7: fe:af:a0:a3:0a:91:4e:c0:ae:1e:79:8c:7f:01:b2: d6:42:ec:0a:de:fa:d3:4e:a7:3b:c8:68:2e:a0:0a: 66:e0:0c:3b:ec:a5:c8:ff:f3:6b:a9:9e:f1:fb:85: 8c:c0:02:d6:ea:a6:b2:e2:1d:f1:af:2a:05:12:68: cb:bb:d0:90:4d:3b:1a:b7:06:ab:e7:2f:1a:a3:5d: 6a:41:bc:48:2b:2c:0a:23:93:f1:17:ac:7c:90:47: 7c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C8:CC:35:A9:0F:52:9A:58:CF:F9:6F:89:38:46:5B:F0:7B:E1:FE X509v3 Authority Key Identifier: keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:57:1d:a1:19:76:2d:2c:8c:82:c8:08:14:d7:28:86:2d:7a: 07:9d:3a:5f:b0:0e:e9:6c:e7:c2:b1:19:1a:19:45:75:8d:94: b2:9c:af:84:b4:d1:56:59:9e:d0:d8:06:d0:f7:a1:c3:27:4c: ab:4a:fa:e4:73:15:39:70:93:d6:f7:8f:f7:e2:2b:01:a0:88: d1:11:c0:44:48:cd:62:e5:b2:7a:82:66:d8:71:c4:c8:4f:1d: d8:07:04:86:a2:27:2a:61:01:08:7b:35:5c:4f:1b:6a:eb:5d: 33:2e:e5:18:50:27:84:a8:e2:2c:bb:3d:83:73:59:00:fe:0d: 9e:7e:0e:d7:63:69:0a:23:f5:b1:e4:bb:2d:67:03:71:ae:e5: e7:c8:5a:b4:ac:0e:29:59:5a:f2:ca:e3:c6:5e:1d:39:b9:7c: d6:e3:05:17:29:f7:76:34:66:f5:33:e7:17:bc:01:5e:b6:27: ea:a4:1f:a8:33:8a:57:98:16:f1:e4:0f:21:11:76:2d:b7:f8: 00:84:c8:99:3d:c7:a6:1c:4e:37:3b:9b:91:ce:17:d0:57:fa: 36:bc:17:42:34:30:a5:60:92:2f:d2:9e:d1:b6:50:2e:42:9d: 8e:80:c0:30:d1:3e:c1:16:ed:10:5f:ae:25:48:d5:4e:ac:ab: ad:bc:19:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3 QUNGMjgwMkQwHhcNMjUxMjI3MDIyMTU5WhcNMjYwMTAzMDIyMTU5WjAYMRYwFAYD VQQDDA02OTRmNDJjNy03YjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SmL1HXXBvFB7XNP9mYob+vgPJMGHHdVVAg0aENtIUo+8G2fTpZDaTkDtzgW 2c00lW12/sHZCHc1ubZ9j5ieUdioRosCXJyBDWtAwKK8Zu8Apkc0QpNwX7g20M3O xrwdfDKnR0PpzyoZHTKqB3E7eA77QKqornEL662bOJKuKL9XKyA097SWpjR4H30X Z4mujhdADnboH+s296AfEuk2wI/iKPf+r6CjCpFOwK4eeYx/AbLWQuwK3vrTTqc7 yGguoApm4Aw77KXI//NrqZ7x+4WMwALW6qay4h3xryoFEmjLu9CQTTsatwar5y8a o11qQbxIKywKI5PxF6x8kEd8cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvIzDWp D1KaWM/5b4k4Rlvwe+H+MB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2 OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ni8xQ0UyQjBDNDY2OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNS UjEtNnF5T1FFVnQ2enlnQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOVx2hGXYtLIyCyAgU1yiGLXoHnTpfsA7pbOfCsRkaGUV1jZSynK+E tNFWWZ7Q2AbQ96HDJ0yrSvrkcxU5cJPW94/34isBoIjREcBESM1i5bJ6gmbYccTI Tx3YBwSGoicqYQEIezVcTxtq610zLuUYUCeEqOIsuz2Dc1kA/g2efg7XY2kKI/Wx 5LstZwNxruXnyFq0rA4pWVryyuPGXh05uXzW4wUXKfd2NGb1M+cXvAFetifqpB+o M4pXmBbx5A8hEXYtt/gAhMiZPcemHE43O5uRzhfQV/o2vBdCNDClYJIv0p7RtlAu Qp2OgMAw0T7BFu0QX64lSNVOrKutvBlI -----END CERTIFICATE-----Generated at Sun Dec 28 05:01:29 2025 by rpki-client