This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: LxLmv0/Tac+NptHbr1sy0dKog7mlvi8FbkU/Ib/gpO4= Subject key identifier: 3C:77:9D:19:CB:9C:2E:58:5A:05:AD:96:A6:A2:F5:96:2E:24:EC:74 Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 023F Signing time: Fri 19 Dec 2025 01:05:07 +0000 Manifest this update: Fri 19 Dec 2025 01:05:06 +0000 Manifest next update: Fri 26 Dec 2025 01:05:06 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: NZ99K90mwCxNKWmV4A5OyuBiK567GLvO23K9OWpwu18=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: j+WiIpQXx8bOOXda/N2C9r1k53EnBU4V+zrlR0ZwoY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: Dec 19 01:05:06 2025 GMT Not After : Dec 26 01:05:06 2025 GMT Subject: CN=6944a4c2-bb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e5:7c:a0:f9:6d:35:42:0c:fb:c9:c8:13:43: 4a:7b:40:d9:5c:ed:84:31:0f:5a:99:a3:68:d3:aa: bb:49:dc:6d:f4:7e:be:5c:70:af:53:8f:fc:fc:de: d5:1d:e0:f9:75:11:2c:36:20:db:5b:a3:09:fd:88: cf:c4:fe:38:4c:5b:5f:05:62:71:c7:6a:3b:dc:e2: 0d:09:7a:31:27:8f:79:b7:10:2a:aa:15:7e:f8:51: 09:e9:de:ca:a2:13:c5:6e:91:1f:66:49:76:f3:bb: 78:37:2b:44:ed:4f:c7:59:42:c3:80:d6:12:b6:ec: e3:98:1c:53:99:be:ed:19:40:38:11:cb:b9:c5:5f: a0:16:52:22:c3:17:60:a5:7e:92:3f:17:39:77:ba: 7f:a6:23:4b:47:40:86:c0:ee:46:6e:b3:89:e4:94: 14:71:85:e3:52:9c:db:57:6b:9b:49:1a:26:f2:05: 09:71:77:49:e4:63:eb:a1:91:76:46:c3:9f:53:a6: f5:88:c3:c1:2a:0a:42:b5:b2:50:85:50:61:7e:1f: 26:1c:42:85:61:b8:0c:a2:52:ca:b8:db:84:c1:02: d2:48:3c:9f:1c:a8:9c:cf:88:9b:f4:43:93:80:ce: e2:4b:f5:80:11:d9:22:14:2f:3e:25:63:b0:f5:e7: d6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:77:9D:19:CB:9C:2E:58:5A:05:AD:96:A6:A2:F5:96:2E:24:EC:74 X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c0:49:83:e6:3a:0a:72:68:14:92:b5:c3:12:72:3b:71:17: 60:49:32:05:ad:69:a2:54:4a:13:67:21:f0:c4:86:d0:1d:c8: 11:85:19:1a:83:29:17:7b:a3:3d:d3:6c:06:36:7d:3c:a4:89: 35:44:e7:c8:84:34:76:4d:4a:ae:89:28:93:6f:40:38:06:6f: b8:8f:2e:bf:53:6f:0f:75:d2:8f:d0:5b:92:61:6d:b4:d0:84: 99:e6:20:7a:f1:a6:7b:e4:d9:a7:8f:73:eb:6a:54:a0:77:3c: 30:3c:31:4e:56:0b:71:62:fc:53:c6:87:b4:4f:33:cf:93:2b: 2f:83:5a:58:bd:ec:79:e9:83:7a:b7:ff:b8:39:5e:4f:94:83: af:e5:90:a9:7f:45:54:e4:7d:85:3a:c2:6e:ed:c2:14:71:1f: 91:55:67:93:30:65:03:97:da:78:5a:c8:a8:1c:9a:dc:48:97: 17:96:3f:cf:c8:6c:b5:4e:5b:b1:45:01:25:55:d9:50:62:d8: 1a:c8:e0:b4:0e:ee:73:61:4f:b3:7d:d0:cc:82:de:21:66:0a: 9f:9e:18:7a:3b:58:7e:0b:73:bf:2c:73:0e:3f:c3:08:c4:61: 18:8d:bc:02:18:c5:7c:1a:d8:73:c7:ac:38:bd:ef:ad:40:83: 02:2e:a6:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUxMjE5MDEwNTA2WhcNMjUxMjI2MDEwNTA2WjAYMRYwFAYD VQQDDA02OTQ0YTRjMi1iYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OV8oPltNUIM+8nIE0NKe0DZXO2EMQ9amaNo06q7Sdxt9H6+XHCvU4/8/N7V HeD5dREsNiDbW6MJ/YjPxP44TFtfBWJxx2o73OINCXoxJ495txAqqhV++FEJ6d7K ohPFbpEfZkl287t4NytE7U/HWULDgNYStuzjmBxTmb7tGUA4Ecu5xV+gFlIiwxdg pX6SPxc5d7p/piNLR0CGwO5GbrOJ5JQUcYXjUpzbV2ubSRom8gUJcXdJ5GProZF2 RsOfU6b1iMPBKgpCtbJQhVBhfh8mHEKFYbgMolLKuNuEwQLSSDyfHKicz4ib9EOT gM7iS/WAEdkiFC8+JWOw9efW6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDx3nRnL nC5YWgWtlqai9ZYuJOx0MB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHwEmD5joKcmgUkrXDEnI7cRdgSTIFrWmiVEoTZyHwxIbQHcgRhRka gykXe6M902wGNn08pIk1ROfIhDR2TUquiSiTb0A4Bm+4jy6/U28PddKP0FuSYW20 0ISZ5iB68aZ75Nmnj3PralSgdzwwPDFOVgtxYvxTxoe0TzPPkysvg1pYvex56YN6 t/+4OV5PlIOv5ZCpf0VU5H2FOsJu7cIUcR+RVWeTMGUDl9p4WsioHJrcSJcXlj/P yGy1TluxRQElVdlQYtgayOC0Du5zYU+zfdDMgt4hZgqfnhh6O1h+C3O/LHMOP8MI xGEYjbwCGMV8Gthzx6w4ve+tQIMCLqYm -----END CERTIFICATE-----Generated at Fri Dec 19 19:03:05 2025 by rpki-client