This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: ki6JHVT6NdScMrav13MfYm3cA3GRYB3mhdLvxPs7W28= Subject key identifier: 8F:BF:A3:02:50:A7:2E:AA:73:12:6E:F2:84:B9:A9:88:B8:1A:71:E3 Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: D5 Signing time: Fri 05 Dec 2025 03:42:09 +0000 Manifest this update: Fri 05 Dec 2025 03:42:09 +0000 Manifest next update: Fri 12 Dec 2025 03:42:09 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: mGNQfZIQg7HVyAcYsyo7+LXxmAmd7lTSoqtsXHZzH44=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: AtI/2Ua9nQqNbzSJOCRvMvTqRCV50QJmjGrd4yNCBfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Dec 5 03:42:09 2025 GMT Not After : Dec 12 03:42:09 2025 GMT Subject: CN=69325491-6d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:a9:66:31:77:55:b2:fa:67:78:75:3a:52: 5f:c8:90:22:3f:d3:70:14:5a:92:30:27:b2:9b:e6: b2:ab:da:72:34:6c:1a:f5:3c:5f:e0:b9:08:f6:fd: 58:77:d2:0d:fd:eb:68:89:fb:f6:f8:44:11:57:80: a1:79:8d:f3:fc:44:1d:03:2f:cb:55:05:c2:ed:d0: 79:be:e5:a6:33:0b:b5:0b:31:23:6e:a4:80:3d:c7: d9:fb:40:e4:b6:03:0f:9b:22:3f:10:d5:86:32:44: 32:16:ba:23:63:63:e2:02:06:7c:9e:55:89:93:54: 11:3f:eb:2e:91:27:7d:0f:c5:05:35:c8:33:f3:18: 94:63:52:0d:dc:10:c0:60:ca:4f:ac:62:b1:44:8a: 63:16:56:b8:a2:8b:9b:b0:db:ad:a9:dd:84:68:3e: 36:09:ec:26:8d:4a:be:58:8f:66:76:5e:eb:cb:c3: 22:8a:31:be:2a:27:e8:43:53:eb:83:e8:10:71:51: 71:9e:7e:ee:01:15:0d:09:96:54:f7:3a:cc:6b:c6: 5c:ed:e2:cc:f6:7e:be:39:b0:ac:4a:c4:3c:2a:12: cb:24:98:10:2e:1c:af:03:3d:6e:01:2c:7c:1a:e6: 3d:71:46:70:d8:98:88:88:a4:fa:5a:8e:2b:6c:0e: 11:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BF:A3:02:50:A7:2E:AA:73:12:6E:F2:84:B9:A9:88:B8:1A:71:E3 X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:41:e1:df:17:e4:75:30:e0:3c:73:69:b1:bc:03:19:26:6d: 33:80:cd:a0:2b:a4:69:fc:4d:91:c3:a5:d6:c2:46:1f:b5:6e: 6c:23:03:56:97:30:63:77:4b:b2:c2:c1:c2:cd:c7:c1:05:7a: f7:f5:75:8a:ed:56:46:7a:d4:5d:41:c4:9b:75:4f:05:33:bb: de:1e:3a:43:08:97:47:06:b6:d1:5c:2a:20:b9:44:08:c3:08: 55:ec:4a:1b:12:64:e6:92:7c:80:97:d3:52:cc:34:66:03:b6: cd:a5:e0:67:fd:9a:58:66:76:16:f7:ab:d5:b7:b8:aa:f0:61: c6:aa:26:1d:98:93:ef:45:5d:a0:2e:b5:9c:67:bb:21:b1:5e: f3:d1:0c:1d:ad:8e:f1:27:6d:f0:e6:d9:48:92:53:6b:d3:17: b1:f5:8e:6c:b5:7a:0e:87:1e:03:4a:98:37:fa:4e:d4:e4:e5: f3:0a:80:c3:d9:f6:23:7f:b8:73:99:9c:9f:7d:75:83:cd:0d: 9c:98:fd:20:2c:24:67:4a:76:84:db:59:e4:b2:5f:69:25:c3: ba:9e:e5:65:a1:c8:10:47:57:34:d4:be:90:93:07:9b:00:5a: 47:74:f8:b1:3f:3b:44:62:a5:01:d6:60:c0:28:37:b4:51:bc: 75:72:5b:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2RTcxMTAvBgNVBAUTKDEyNDcwODFFOUJBOTdDMTNDN0REM0Q2OEU0NDNEMUY1 NDc5QjJBRkYwHhcNMjUxMjA1MDM0MjA5WhcNMjUxMjEyMDM0MjA5WjAYMRYwFAYD VQQDEw02OTMyNTQ5MS02ZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8GpZjF3VbL6Z3h1OlJfyJAiP9NwFFqSMCeym+ayq9pyNGwa9Txf4LkI9v1Y d9IN/etoifv2+EQRV4CheY3z/EQdAy/LVQXC7dB5vuWmMwu1CzEjbqSAPcfZ+0Dk tgMPmyI/ENWGMkQyFrojY2PiAgZ8nlWJk1QRP+sukSd9D8UFNcgz8xiUY1IN3BDA YMpPrGKxRIpjFla4ooubsNutqd2EaD42CewmjUq+WI9mdl7ry8MiijG+KifoQ1Pr g+gQcVFxnn7uARUNCZZU9zrMa8Zc7eLM9n6+ObCsSsQ8KhLLJJgQLhyvAz1uASx8 GuY9cUZw2JiIiKT6Wo4rbA4RFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+/owJQ py6qcxJu8oS5qYi4GnHjMB8GA1UdIwQYMBaAFBJHCB6bqXwTx909aORD0fVHmyr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTZFNy8wNjc5QUNGNDkx MjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZCUEgzVDFvNUVQUjlVZWJL djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTZFNy8wNjc5QUNGNDkxMjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZC UEgzVDFvNUVQUjlVZWJLdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAQeHfF+R1MOA8c2mxvAMZJm0zgM2gK6Rp/E2Rw6XWwkYftW5sIwNW lzBjd0uywsHCzcfBBXr39XWK7VZGetRdQcSbdU8FM7veHjpDCJdHBrbRXCoguUQI wwhV7EobEmTmknyAl9NSzDRmA7bNpeBn/ZpYZnYW96vVt7iq8GHGqiYdmJPvRV2g LrWcZ7shsV7z0QwdrY7xJ23w5tlIklNr0xex9Y5stXoOhx4DSpg3+k7U5OXzCoDD 2fYjf7hzmZyffXWDzQ2cmP0gLCRnSnaE21nksl9pJcO6nuVlocgQR1c01L6Qkweb AFpHdPixPztEYqUB1mDAKDe0Ubx1clsN -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:02 2025 by rpki-client