This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json) Hash identifier: hZkQgP7pg6OUJqGfa526IxNiaI0hoPuQCiZNEKeyvGs= Subject key identifier: 65:1B:9F:5D:F3:E5:55:CF:B5:90:70:B5:AE:E4:AA:73:E3:12:6A:DF Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft Manifest number: 024B Signing time: Sun 07 Dec 2025 00:15:38 +0000 Manifest this update: Sun 07 Dec 2025 00:15:38 +0000 Manifest next update: Sun 14 Dec 2025 00:15:38 +0000 Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: kYLKwvkwixAigCDCcn2RX0XOQyVjw96gxvVUdXA4oWQ=) 2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: UfOYe6RywBqkEJraeZHWTOUfrLHgXDOJgx5fH4IP4aM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Validity Not Before: Dec 7 00:15:38 2025 GMT Not After : Dec 14 00:15:38 2025 GMT Subject: CN=6934c72a-84f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:88:64:b3:dd:52:ec:0c:b1:b7:c6:1f:c7: 8e:78:f7:98:4e:46:59:a6:f6:6e:34:5b:8b:bd:36: c8:d4:ef:fb:5d:96:b8:f7:e1:29:1f:bf:6e:76:ec: 55:bb:76:ad:52:19:52:a0:6b:e5:3a:2a:e0:50:15: 52:40:e8:91:d5:57:27:42:97:28:ba:2e:c7:64:55: 9e:2c:bd:9b:d6:a6:25:d9:da:38:1a:92:1c:6d:e9: 79:1a:c4:c4:37:7d:42:b1:41:ab:49:f8:1e:26:1e: c1:60:dc:19:79:5f:97:71:14:1d:0f:4b:eb:9d:91: 31:48:5c:a0:72:03:92:a8:b4:db:28:f4:dc:66:61: ea:80:19:e1:67:ad:09:61:3f:d0:71:71:f5:90:2f: 75:6d:68:11:ba:dd:5c:2d:fb:63:ea:f3:24:4c:dc: 52:6c:fc:a7:56:d0:3c:9d:8e:db:0b:ea:9c:f4:0c: ab:47:20:e3:fa:80:10:97:22:66:b8:b2:88:61:d5: e9:00:4c:7d:b3:15:e6:3f:90:b1:c0:53:b3:d1:a3: ac:0f:9f:59:0a:a9:5d:bf:45:5d:82:b2:26:3a:c7: 53:aa:9c:db:dd:84:74:84:bf:19:90:93:88:17:82: 2d:46:45:0a:8c:e9:90:19:fc:f6:68:64:2f:3e:97: b0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1B:9F:5D:F3:E5:55:CF:B5:90:70:B5:AE:E4:AA:73:E3:12:6A:DF X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:85:37:0c:98:44:38:6f:0d:36:87:eb:e6:6d:20:ce:71:e4: fd:22:46:ec:bd:f5:db:a5:bf:77:d2:1c:05:39:4d:d4:2f:e0: ce:84:d4:19:85:ad:24:15:6d:53:7b:3a:ac:01:21:e6:85:f1: ea:ca:29:53:d0:58:ef:50:be:c2:48:36:4a:d8:f6:52:17:c7: 2d:1b:8b:07:7d:6c:c3:90:82:46:2e:60:e0:af:ff:63:f0:30: 35:55:18:a7:d7:60:97:19:ef:7b:60:54:7d:b4:0c:88:1a:8c: 84:26:12:ca:66:85:22:7f:09:49:62:41:12:60:8f:bc:5b:9e: 49:d4:2c:37:55:9a:24:d3:b5:9b:94:b8:25:2e:7b:3d:9b:68: 4c:75:1e:d7:c0:20:d3:5f:87:15:6d:ca:6e:8e:e6:f3:34:fd: 44:09:73:d6:fb:da:c0:90:fc:17:0c:6d:b8:7f:f3:78:9f:d9: 5d:00:09:29:29:2a:45:e1:6f:d3:96:38:a1:81:04:ce:9d:9a: 7e:c9:a1:39:bb:c7:9c:28:9f:89:39:e4:66:dd:ac:32:e3:b0: a0:dc:8a:22:e3:50:fe:77:54:28:4a:72:f1:f0:45:af:92:c3: 66:1e:4d:ab:bd:dd:58:f8:b1:a3:dd:be:5f:85:2f:b5:d8:e6: 56:18:ba:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjUxMjA3MDAxNTM4WhcNMjUxMjE0MDAxNTM4WjAYMRYwFAYD VQQDEw02OTM0YzcyYS04NGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsiIZLPdUuwMsbfGH8eOePeYTkZZpvZuNFuLvTbI1O/7XZa49+EpH79uduxV u3atUhlSoGvlOirgUBVSQOiR1VcnQpcoui7HZFWeLL2b1qYl2do4GpIcbel5GsTE N31CsUGrSfgeJh7BYNwZeV+XcRQdD0vrnZExSFygcgOSqLTbKPTcZmHqgBnhZ60J YT/QcXH1kC91bWgRut1cLftj6vMkTNxSbPynVtA8nY7bC+qc9AyrRyDj+oAQlyJm uLKIYdXpAEx9sxXmP5CxwFOz0aOsD59ZCqldv0VdgrImOsdTqpzb3YR0hL8ZkJOI F4ItRkUKjOmQGfz2aGQvPpew3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUbn13z 5VXPtZBwta7kqnPjEmrfMB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1 SDFZaXJld1BHV0dFazh1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHhTcMmEQ4bw02h+vmbSDOceT9IkbsvfXbpb930hwFOU3UL+DOhNQZ ha0kFW1TezqsASHmhfHqyilT0FjvUL7CSDZK2PZSF8ctG4sHfWzDkIJGLmDgr/9j 8DA1VRin12CXGe97YFR9tAyIGoyEJhLKZoUifwlJYkESYI+8W55J1Cw3VZok07Wb lLglLns9m2hMdR7XwCDTX4cVbcpujubzNP1ECXPW+9rAkPwXDG24f/N4n9ldAAkp KSpF4W/TljihgQTOnZp+yaE5u8ecKJ+JOeRm3awy47Cg3Ioi41D+d1QoSnLx8EWv ksNmHk2rvd1Y+LGj3b5fhS+12OZWGLoX -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:55 2025 by rpki-client