This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: AuPxuKTNDQsKmKNHOGWIiSsmpImbtQoxtaQnxwyHFQY= Subject key identifier: 5C:21:79:E3:31:A7:C7:B1:B7:8D:28:D4:B8:B4:AD:6E:DD:AE:FE:24 Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 0243 Signing time: Sat 27 Dec 2025 00:52:03 +0000 Manifest this update: Sat 27 Dec 2025 00:52:02 +0000 Manifest next update: Sat 03 Jan 2026 00:52:02 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: g7V9CHHXQytfPG7RRNN3G6DFbT3ip4qFQ97qu3sPXT8=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: j+WiIpQXx8bOOXda/N2C9r1k53EnBU4V+zrlR0ZwoY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 22:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: Dec 27 00:52:02 2025 GMT Not After : Jan 3 00:52:02 2026 GMT Subject: CN=694f2db3-b639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c4:fc:2c:e9:de:39:12:08:09:42:20:99:4e: 9f:ab:07:51:8b:03:e4:04:8c:72:17:4f:59:84:13: 1b:8c:60:5b:5b:b0:bd:aa:00:05:6b:70:a5:b7:7c: 00:10:5c:4f:f1:1d:05:53:d6:70:91:da:d4:8a:76: 9a:d1:e3:36:7c:c3:0c:be:13:5a:3e:df:7c:ae:da: cd:ca:df:b7:f4:67:25:04:0b:5d:f7:9b:17:ed:62: 8b:30:db:9f:dd:35:a1:d4:d1:3c:90:97:23:52:33: c2:5a:7c:3b:12:a4:3f:b7:24:d9:6b:0d:04:cb:f6: e0:4e:ae:a0:fb:08:54:74:3f:58:5a:30:73:05:38: 47:82:7d:7e:86:0a:cf:18:da:7c:da:b5:7e:51:00: be:ff:c6:35:05:ab:8f:07:94:d7:f7:4c:5c:f0:d0: 0f:c9:2f:91:25:0c:7a:85:df:e9:39:bd:6b:76:cd: d4:31:6c:17:a6:b0:05:cf:50:c4:68:50:91:5a:ac: 28:82:9b:a1:21:3f:52:1f:48:10:fe:53:47:4e:1d: 29:90:7d:2f:8e:bd:9c:fb:20:ca:2e:a9:72:a7:3e: 71:c0:65:68:a1:9f:c6:d1:a3:2f:ee:5c:e3:08:4b: 71:e1:5a:80:1a:f8:a2:04:9e:e0:e9:f4:fd:3d:d5: 65:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:21:79:E3:31:A7:C7:B1:B7:8D:28:D4:B8:B4:AD:6E:DD:AE:FE:24 X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ef:05:ab:96:4b:67:64:4f:e8:1a:9e:55:04:7d:08:74:ce: 02:f7:d6:8e:98:e8:ca:72:1b:9c:72:fc:f0:c8:17:25:9c:4e: 61:67:d6:dd:66:ba:9f:6a:09:38:c9:58:28:b8:7a:97:bb:47: 07:cb:d2:c2:24:30:50:02:c8:13:f1:b0:20:e6:0b:4d:1c:a6: f1:54:c7:89:9b:4c:6e:82:0d:7f:85:61:2c:78:05:19:0d:ae: da:4a:70:6b:ba:d3:ee:b8:49:10:f0:60:58:90:b0:d1:94:fb: a8:8c:17:c6:40:27:2e:28:c1:44:82:5b:f2:e8:94:38:5f:29: 2b:88:7c:82:5d:c2:e0:20:51:fd:b4:04:19:1e:ca:93:ec:73: de:fe:e7:16:bc:4a:11:80:0b:cc:08:b3:34:52:e6:66:6a:de: cd:fc:bc:7c:7d:72:5c:df:3b:d9:97:e8:17:c3:b2:4c:1d:bb: 4c:1f:f2:b0:80:8f:8f:f8:5b:1c:a9:de:ad:41:eb:d8:88:4d: 20:07:f4:da:9b:0f:f1:b0:85:28:0d:51:18:e7:76:1f:bf:87: 04:70:f3:eb:c7:58:53:9d:12:87:01:1b:ab:73:42:07:09:e0: f9:25:3f:4d:b6:87:a5:7f:18:c8:63:9c:f9:2d:6d:92:ed:50: a1:2c:4a:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUxMjI3MDA1MjAyWhcNMjYwMTAzMDA1MjAyWjAYMRYwFAYD VQQDDA02OTRmMmRiMy1iNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcT8LOneORIICUIgmU6fqwdRiwPkBIxyF09ZhBMbjGBbW7C9qgAFa3Clt3wA EFxP8R0FU9ZwkdrUinaa0eM2fMMMvhNaPt98rtrNyt+39GclBAtd95sX7WKLMNuf 3TWh1NE8kJcjUjPCWnw7EqQ/tyTZaw0Ey/bgTq6g+whUdD9YWjBzBThHgn1+hgrP GNp82rV+UQC+/8Y1BauPB5TX90xc8NAPyS+RJQx6hd/pOb1rds3UMWwXprAFz1DE aFCRWqwogpuhIT9SH0gQ/lNHTh0pkH0vjr2c+yDKLqlypz5xwGVooZ/G0aMv7lzj CEtx4VqAGviiBJ7g6fT9PdVlbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwheeMx p8ext40o1Li0rW7drv4kMB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU7wWrlktnZE/oGp5VBH0IdM4C99aOmOjKchuccvzwyBclnE5hZ9bd Zrqfagk4yVgouHqXu0cHy9LCJDBQAsgT8bAg5gtNHKbxVMeJm0xugg1/hWEseAUZ Da7aSnBrutPuuEkQ8GBYkLDRlPuojBfGQCcuKMFEglvy6JQ4XykriHyCXcLgIFH9 tAQZHsqT7HPe/ucWvEoRgAvMCLM0UuZmat7N/Lx8fXJc3zvZl+gXw7JMHbtMH/Kw gI+P+Fscqd6tQevYiE0gB/Tamw/xsIUoDVEY53Yfv4cEcPPrx1hTnRKHARurc0IH CeD5JT9NtoelfxjIY5z5LW2S7VChLEpN -----END CERTIFICATE-----Generated at Sat Dec 27 02:16:21 2025 by rpki-client