This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft File: eFqwsi3OWhJmUAwQZrT2sF91ysA.mft (raw, json) Hash identifier: 3AgUCYFCJQwi0ADQOqw/54aoXLbWeTkTL7zGDVOvmxg= Subject key identifier: D2:E5:6C:D5:4C:EB:DB:46:AA:9B:85:B7:6E:A3:D1:13:BE:D7:1D:34 Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Certificate serial: 1123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft Manifest number: 1118 Signing time: Sat 20 Dec 2025 16:59:46 +0000 Manifest this update: Sat 20 Dec 2025 16:59:45 +0000 Manifest next update: Sat 27 Dec 2025 16:59:45 +0000 Files and hashes: 1: eFqwsi3OWhJmUAwQZrT2sF91ysA.crl (hash: 37dTOqP/VM+Kux+2313fKYN+B6I0ZJiykcXNuqSw4Iw=) 2: B3250BC6307B11E989188B3BC4F9AE02.roa (hash: i5f3IsLQcqkFQbLcTMdHVFZRfy5na+MUmyuuokwDYXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4387 (0x1123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Validity Not Before: Dec 20 16:59:45 2025 GMT Not After : Dec 27 16:59:45 2025 GMT Subject: CN=6946d601-4135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:02:b5:42:7a:93:21:44:b4:65:fb:89:48:22: 94:36:6f:c6:fd:45:8a:d1:22:6c:dd:44:08:c6:86: 71:ae:6c:04:11:93:73:1c:d9:70:67:00:44:c2:2e: d6:97:e6:5c:95:15:aa:56:6a:e6:91:cf:ed:37:7d: 08:f6:9a:4f:9b:de:c6:09:22:cb:bc:4c:b9:80:ce: 03:de:5d:0a:5d:75:49:50:f3:73:02:b8:8c:ec:f1: 20:62:5e:3e:07:17:7f:1a:a3:7b:de:ec:e1:fc:58: 08:90:5b:19:4b:37:2f:70:56:82:74:f0:93:d6:f1: ad:14:0b:5f:e4:0e:70:c1:4c:07:c9:f0:64:a9:15: 0a:60:4b:4e:02:5b:e2:e9:cd:ba:55:6a:9f:17:80: eb:4e:23:06:99:d9:8d:47:33:dd:9b:33:4d:4e:b6: 4c:25:e5:18:d7:4c:7d:a8:48:f6:01:09:01:51:cf: a0:e7:dc:31:05:c6:03:03:64:2f:29:41:cb:91:c7: 0e:22:e8:2a:ce:ea:8d:69:64:39:ec:60:74:bb:b2: 7c:b8:b8:ab:95:14:0c:48:a8:0a:61:5c:a7:e0:b3: 5c:e1:22:f0:df:69:e9:bf:80:bb:cd:6b:d1:75:8e: 6b:9b:be:a3:06:ee:83:22:2f:e0:24:74:4c:cd:82: 45:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E5:6C:D5:4C:EB:DB:46:AA:9B:85:B7:6E:A3:D1:13:BE:D7:1D:34 X509v3 Authority Key Identifier: keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e8:d9:35:86:4b:b5:1b:fe:d3:f0:27:b4:b4:e5:b8:69:d5: de:7c:5e:a1:55:a7:cc:24:b7:b1:28:b1:2b:2a:1f:ae:27:b6: 8a:4f:3a:91:fc:16:d8:8b:57:ff:e0:c9:9f:b6:1e:fa:94:37: fa:8c:dc:1a:52:a2:ac:bd:79:49:b1:dd:10:22:38:1a:53:3d: 02:f6:a5:ea:3e:6f:3b:b9:40:d8:a7:a6:e4:fa:3e:81:21:21: 9c:61:40:fc:95:a0:d4:44:78:05:84:ab:9d:bc:70:cb:78:0b: 4c:3a:6b:72:62:c1:90:92:6a:f3:1a:99:d9:aa:f5:64:d9:d5: 5d:22:bd:00:46:37:cc:11:fd:3b:ec:33:eb:35:bd:24:cf:43: 4d:b1:17:c7:6f:0d:47:70:4a:eb:58:ed:99:2c:c3:c1:fd:d5: 0d:ab:0f:a0:1c:0f:09:62:0c:a1:c7:66:0c:cd:1d:a1:d3:07: 27:f5:17:fe:f7:9c:0f:2e:a2:82:57:c7:d3:bd:de:79:8a:39: ee:15:66:bd:e2:2f:2d:94:d5:d1:e4:03:8b:f7:01:2d:2e:da: eb:ca:93:9e:b6:b3:86:ea:7d:31:01:80:b6:85:4b:fb:27:92: 49:34:de:01:19:1d:ba:e2:1c:0a:f7:0f:9d:83:4b:f7:d7:b7: c2:a3:6d:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDRTkxMTAvBgNVBAUTKDc4NUFCMEIyMkRDRTVBMTI2NjUwMEMxMDY2QjRGNkIw NUY3NUNBQzAwHhcNMjUxMjIwMTY1OTQ1WhcNMjUxMjI3MTY1OTQ1WjAYMRYwFAYD VQQDDA02OTQ2ZDYwMS00MTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AK1QnqTIUS0ZfuJSCKUNm/G/UWK0SJs3UQIxoZxrmwEEZNzHNlwZwBEwi7W l+ZclRWqVmrmkc/tN30I9ppPm97GCSLLvEy5gM4D3l0KXXVJUPNzAriM7PEgYl4+ Bxd/GqN73uzh/FgIkFsZSzcvcFaCdPCT1vGtFAtf5A5wwUwHyfBkqRUKYEtOAlvi 6c26VWqfF4DrTiMGmdmNRzPdmzNNTrZMJeUY10x9qEj2AQkBUc+g59wxBcYDA2Qv KUHLkccOIugqzuqNaWQ57GB0u7J8uLirlRQMSKgKYVyn4LNc4SLw32npv4C7zWvR dY5rm76jBu6DIi/gJHRMzYJFrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLlbNVM 69tGqpuFt26j0RO+1x00MB8GA1UdIwQYMBaAFHhasLItzloSZlAMEGa09rBfdcrA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNFOS84NzEwNkQzRTI3 MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1doSm1VQXdRWnJUMnNGOTF5 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGcXdzaTNPV2hKbVVBd1FaclQyc0Y5MXlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNFOS84NzEwNkQzRTI3MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1do Sm1VQXdRWnJUMnNGOTF5c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC6Nk1hku1G/7T8Ce0tOW4adXefF6hVafMJLexKLErKh+uJ7aKTzqR /BbYi1f/4Mmfth76lDf6jNwaUqKsvXlJsd0QIjgaUz0C9qXqPm87uUDYp6bk+j6B ISGcYUD8laDURHgFhKudvHDLeAtMOmtyYsGQkmrzGpnZqvVk2dVdIr0ARjfMEf07 7DPrNb0kz0NNsRfHbw1HcErrWO2ZLMPB/dUNqw+gHA8JYgyhx2YMzR2h0wcn9Rf+ 95wPLqKCV8fTvd55ijnuFWa94i8tlNXR5AOL9wEtLtrrypOetrOG6n0xAYC2hUv7 J5JJNN4BGR264hwK9w+dg0v317fCo20V -----END CERTIFICATE-----Generated at Sun Dec 21 18:01:27 2025 by rpki-client