This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft File: eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json) Hash identifier: gtOQTaMH4LSCvlJpUlgFwzUCxWfwPRL3uD/1YCy3o+0= Subject key identifier: 17:C9:15:38:6E:D6:EA:6A:AD:A4:A7:61:2C:B2:8C:9F:82:FD:4E:2A Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Certificate serial: 0884 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft Manifest number: 086A Signing time: Thu 04 Dec 2025 19:46:20 +0000 Manifest this update: Thu 04 Dec 2025 19:46:19 +0000 Manifest next update: Thu 11 Dec 2025 19:46:19 +0000 Files and hashes: 1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: 3BUBbaCb5VKhYCAOyopPP8CdaWUNkHJ/CF2/McRe3M8=) 2: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: XB8wSFVQZAHvqakZ35MOgP2u0Ix9DouCb4nv3BULPR8=) 3: C664689AE0F511EABB96D531C4F9AE02.roa (hash: dYyNNCNhHnZkGZCDfE/V9Ur6jl+sr7C71Nxoo9EVQmI=) 4: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: DOSZg99mo70HEeL3C6AnH+3DNlQmbU02wS7iu6QLEaI=) 5: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: B74A200MEGtzjKLkG19+x2nWM7IOpN8G2t0B9881Biw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Validity Not Before: Dec 4 19:46:19 2025 GMT Not After : Dec 11 19:46:19 2025 GMT Subject: CN=6931e50c-9d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b0:2e:e9:7a:20:e2:9e:3f:ba:6c:84:bb:a5: 6b:91:3d:8f:1c:f7:17:fa:cb:ed:10:19:54:62:a0: 3f:15:57:e6:c4:f8:0c:0a:d3:b0:b4:7b:e1:7a:dd: 75:72:ca:5b:a9:fe:94:9e:3f:07:1e:92:1a:de:f8: 06:dc:2f:50:a0:fc:75:4b:ce:3b:86:fc:47:99:3b: 01:da:e1:fa:f7:a0:4b:2c:e6:ef:89:ee:4c:ff:e7: 7d:25:c6:75:cd:2a:da:f4:cf:56:c6:cf:6e:fd:ed: 4e:7b:00:e3:35:89:33:fc:af:4d:9f:85:66:dc:b5: b2:88:72:cd:92:8c:0d:46:4d:1a:8a:fe:f3:76:2d: 76:7e:1d:48:c6:0a:51:eb:40:f0:78:d0:4a:24:35: 12:6f:1c:09:37:94:3a:dd:67:59:1a:ec:d5:f3:f7: 29:d0:b8:b9:66:fd:02:7a:87:58:09:87:21:4b:04: 8e:f7:42:4b:93:de:39:98:6a:9e:ba:e7:fd:ec:93: d6:7d:a8:d2:63:8e:e2:25:ca:2f:0d:e2:85:b6:03: 95:a9:a4:74:00:a8:7c:81:9f:1a:16:18:35:f5:e8: 54:f6:70:fa:fc:57:3c:e1:c6:17:4d:67:5a:45:b0: 9d:bd:31:c1:3b:14:d0:28:1d:c6:70:bf:fe:bf:c1: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C9:15:38:6E:D6:EA:6A:AD:A4:A7:61:2C:B2:8C:9F:82:FD:4E:2A X509v3 Authority Key Identifier: keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:66:10:3f:34:0c:a7:fd:2e:b4:7c:37:7e:7e:ea:b4:3e:80: 69:22:ac:66:66:de:0d:59:b5:39:9c:6e:fc:f2:8d:08:29:ec: 40:4b:cb:7e:59:fc:1b:9a:97:b8:f4:58:ce:03:ab:28:c9:bb: fa:15:ff:f2:8b:e1:b2:80:e3:1d:f8:cd:ed:d2:bc:14:90:34: 0a:ee:a2:83:21:62:ab:10:ae:3a:8f:a5:2a:fd:0b:5c:af:bc: 47:c7:cc:b5:1d:2d:aa:96:a4:a0:75:36:90:b3:95:e3:13:64: 51:e9:02:76:a4:ec:27:55:46:e5:1c:10:a6:b3:b0:f8:5a:d9: 57:46:e4:0a:74:fc:b4:a7:27:fb:33:ea:0d:29:09:55:ec:f3: 80:06:61:4c:a3:47:f2:9f:6e:53:5c:e9:f8:d3:fa:02:df:4f: 98:98:39:db:d8:49:a8:51:16:60:9a:09:0a:88:4a:9b:ab:6b: 60:27:65:c2:a4:17:d4:31:44:38:3a:cd:01:58:34:ed:00:52: bb:f2:4d:08:83:dd:79:36:66:4f:bb:3c:11:22:1c:55:8b:e2: 45:7d:34:3e:7d:de:d5:68:68:be:cc:88:5c:b4:24:04:d7:bc: 9e:27:81:fc:db:d5:04:37:46:50:84:08:fc:3a:4c:49:71:80: 6a:4a:09:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2 OTQ5RUJFQzIwHhcNMjUxMjA0MTk0NjE5WhcNMjUxMjExMTk0NjE5WjAYMRYwFAYD VQQDEw02OTMxZTUwYy05ZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67Au6Xog4p4/umyEu6VrkT2PHPcX+svtEBlUYqA/FVfmxPgMCtOwtHvhet11 cspbqf6Unj8HHpIa3vgG3C9QoPx1S847hvxHmTsB2uH696BLLObvie5M/+d9JcZ1 zSra9M9Wxs9u/e1OewDjNYkz/K9Nn4Vm3LWyiHLNkowNRk0aiv7zdi12fh1IxgpR 60DweNBKJDUSbxwJN5Q63WdZGuzV8/cp0Li5Zv0CeodYCYchSwSO90JLk945mGqe uuf97JPWfajSY47iJcovDeKFtgOVqaR0AKh8gZ8aFhg19ehU9nD6/Fc84cYXTWda RbCdvTHBOxTQKB3GcL/+v8HXiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfJFThu 1upqraSnYSyyjJ+C/U4qMB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkZFNS85REFGNDg2RURERUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6 N0I2VWE4RVBnVGRwU2V2c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfZhA/NAyn/S60fDd+fuq0PoBpIqxmZt4NWbU5nG788o0IKexAS8t+ Wfwbmpe49FjOA6soybv6Ff/yi+GygOMd+M3t0rwUkDQK7qKDIWKrEK46j6Uq/Qtc r7xHx8y1HS2qlqSgdTaQs5XjE2RR6QJ2pOwnVUblHBCms7D4WtlXRuQKdPy0pyf7 M+oNKQlV7POABmFMo0fyn25TXOn40/oC30+YmDnb2EmoURZgmgkKiEqbq2tgJ2XC pBfUMUQ4Os0BWDTtAFK78k0Ig915NmZPuzwRIhxVi+JFfTQ+fd7VaGi+zIhctCQE 17yeJ4H829UEN0ZQhAj8OkxJcYBqSgmc -----END CERTIFICATE-----Generated at Sat Dec 6 16:59:08 2025 by rpki-client