This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json) Hash identifier: mzR7BuZQg8Vl36jO22SV9bLKjLpzHLA5l7cbR3AANhc= Subject key identifier: E4:27:A3:8D:F3:0A:39:4C:2F:98:15:18:C3:D3:10:B8:28:82:EF:8D Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft Manifest number: 01A8 Signing time: Thu 04 Dec 2025 15:15:48 +0000 Manifest this update: Thu 04 Dec 2025 15:15:47 +0000 Manifest next update: Thu 11 Dec 2025 15:15:47 +0000 Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: 9zpNYW7kY0e+8HAfuZRk7M3Fd3c9EXZrtQXlkidJ7jI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Validity Not Before: Dec 4 15:15:47 2025 GMT Not After : Dec 11 15:15:47 2025 GMT Subject: CN=6931a5a3-877d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:64:cd:96:90:08:59:fe:dc:8b:90:44:d5:31: c6:9f:18:e6:f3:3c:62:36:f6:06:22:80:01:fa:50: f7:b2:0f:cb:ed:ee:c1:63:74:c4:36:97:11:1d:62: be:b0:b5:f5:98:92:3b:f4:20:26:42:01:9b:68:07: f0:66:08:0e:01:1b:5f:3f:d7:24:15:60:73:49:6f: c2:d6:30:8f:d7:8e:d0:34:d0:fb:3f:e5:8b:4a:5b: b1:26:d6:fc:4d:b2:3a:dc:0f:ca:92:3e:11:c2:e8: 79:76:52:92:04:7a:52:0e:0a:5a:95:de:14:e8:0a: ec:55:56:3e:b3:05:c8:f8:e7:83:60:b6:72:80:56: c8:62:cc:d4:e7:82:3d:ef:6f:0b:ff:48:2c:2b:a2: b8:ea:41:f8:1e:c8:99:88:08:05:ac:1a:e0:2b:1c: 67:0b:82:17:9c:d9:8a:48:3f:70:95:d6:d7:c6:60: 08:91:1b:81:f3:30:fd:60:89:da:47:d1:05:c2:b6: 03:d4:c5:d7:ab:74:2c:56:13:1f:bc:02:7d:9b:77: 89:11:c8:54:66:07:ea:6d:8d:8f:09:b6:5d:26:5f: c7:d5:cf:4e:c6:61:71:d4:38:da:a1:15:81:ce:18: a5:4c:b7:bb:bf:36:a3:55:05:00:f3:ad:de:ee:e6: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:27:A3:8D:F3:0A:39:4C:2F:98:15:18:C3:D3:10:B8:28:82:EF:8D X509v3 Authority Key Identifier: keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:e4:8f:cf:d6:7e:46:1a:7a:58:ca:2a:af:0a:f8:9e:9e:06: dd:a2:37:63:c8:86:4b:81:6e:83:61:84:46:76:9d:1e:c4:d9: fd:b1:2b:94:1c:93:40:d3:51:3a:71:35:7d:21:c2:cd:18:c5: 3b:7e:4e:8d:b8:b7:11:ac:e0:79:3a:ad:b3:ee:10:7c:d5:8e: 40:ca:9c:26:3e:8d:60:85:5e:e3:f0:44:cf:9c:c3:0d:78:51: 52:ba:ca:a6:fe:be:86:14:49:11:f6:72:98:ff:ba:94:78:d0: 5b:ab:e8:54:32:46:92:4d:46:4e:e2:64:4a:43:76:00:f5:b1: 29:76:fa:10:39:bd:62:be:b3:d8:c0:fc:56:58:89:5f:a6:5b: 4f:79:bf:db:c2:bf:a7:77:49:85:21:9c:93:2e:25:61:97:8a: 23:02:a6:f7:0f:b6:0c:bd:af:83:8e:89:bb:0b:4d:cb:6d:5a: ce:63:d8:09:ed:55:10:a3:95:19:f5:0b:64:e7:58:32:cf:25: 9d:b8:44:d0:8e:53:6b:8f:07:9c:b2:dd:00:84:df:b0:d6:95: df:c0:e0:dc:95:5d:5d:3b:1b:cd:55:af:fd:87:1b:2d:06:e7: 50:e9:fb:3e:cf:8d:b4:47:67:e0:3f:69:67:b3:4f:01:21:ee: a9:ad:4a:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDExMDlGQkM3M0ExODlCM0Q2NDcxM0ExRjZDNDg2QTA0 RTdCNDNCMTcwHhcNMjUxMjA0MTUxNTQ3WhcNMjUxMjExMTUxNTQ3WjAYMRYwFAYD VQQDEw02OTMxYTVhMy04NzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWTNlpAIWf7ci5BE1THGnxjm8zxiNvYGIoAB+lD3sg/L7e7BY3TENpcRHWK+ sLX1mJI79CAmQgGbaAfwZggOARtfP9ckFWBzSW/C1jCP147QNND7P+WLSluxJtb8 TbI63A/Kkj4Rwuh5dlKSBHpSDgpald4U6ArsVVY+swXI+OeDYLZygFbIYszU54I9 728L/0gsK6K46kH4HsiZiAgFrBrgKxxnC4IXnNmKSD9wldbXxmAIkRuB8zD9YIna R9EFwrYD1MXXq3QsVhMfvAJ9m3eJEchUZgfqbY2PCbZdJl/H1c9OxmFx1DjaoRWB zhilTLe7vzajVQUA863e7uZKqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQno43z CjlML5gVGMPTELgogu+NMB8GA1UdIwQYMBaAFBEJ+8c6GJs9ZHE6H2xIagTntDsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS9BOTBGOERBNDRD NzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16MWtjVG9mYkVocUJPZTBP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VRbjd4em9ZbXoxa2NUb2ZiRWhxQk9lME94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS9BOTBGOERBNDRDNzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16 MWtjVG9mYkVocUJPZTBPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDe5I/P1n5GGnpYyiqvCviengbdojdjyIZLgW6DYYRGdp0exNn9sSuU HJNA01E6cTV9IcLNGMU7fk6NuLcRrOB5Oq2z7hB81Y5AypwmPo1ghV7j8ETPnMMN eFFSusqm/r6GFEkR9nKY/7qUeNBbq+hUMkaSTUZO4mRKQ3YA9bEpdvoQOb1ivrPY wPxWWIlfpltPeb/bwr+nd0mFIZyTLiVhl4ojAqb3D7YMva+Djom7C03LbVrOY9gJ 7VUQo5UZ9Qtk51gyzyWduETQjlNrjwecst0AhN+w1pXfwODclV1dOxvNVa/9hxst BudQ6fs+z420R2fgP2lns08BIe6prUpk -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:02 2025 by rpki-client