This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft File: ej5CbJYle98kPDxjt4A4NAUlwqk.mft (raw, json) Hash identifier: gJKwtulYFIUtILj8vQqEl9qd3EJE7N7vWYm40RxHYG0= Subject key identifier: 37:03:AE:C7:84:EC:02:CB:E0:BA:AC:EE:8E:D7:04:4F:CB:4B:17:5D Authority key identifier: 7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 Certificate issuer: /CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft Manifest number: 03FC Signing time: Thu 04 Dec 2025 23:55:41 +0000 Manifest this update: Thu 04 Dec 2025 23:55:40 +0000 Manifest next update: Thu 11 Dec 2025 23:55:40 +0000 Files and hashes: 1: ej5CbJYle98kPDxjt4A4NAUlwqk.crl (hash: +x2gTlEcPYHylqYr60pcfrGb0JpW0jGCT8zNo9zvCIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Validity Not Before: Dec 4 23:55:40 2025 GMT Not After : Dec 11 23:55:40 2025 GMT Subject: CN=69321f7c-f3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:72:9a:16:88:f4:63:4c:85:c2:dc:53:70: 1d:a6:98:06:20:83:a2:68:df:5b:31:bc:97:c1:a2: 0a:7e:2e:28:11:34:0b:49:38:2c:a3:a0:43:90:05: 40:b4:15:0f:40:2a:a8:b6:1e:e4:46:a9:3d:f6:22: 97:58:3a:ca:57:9a:5a:a7:c3:a4:18:41:a3:55:9b: 33:a5:f8:77:0e:d0:f9:6f:c7:27:9a:55:ea:1d:a9: 03:ee:02:54:79:df:5b:62:aa:c1:7c:35:b0:49:7c: 4f:99:fd:74:08:74:37:6f:e3:5d:bc:dd:a9:33:a0: d1:54:4c:9c:0f:66:57:c3:29:b5:4d:91:90:6c:d4: a7:1b:b4:20:8d:3b:85:da:b4:0f:f9:82:db:1c:0a: 0c:a2:7f:98:7b:74:b6:1f:09:23:f2:12:65:52:86: 9d:30:0f:93:ca:ec:0c:39:86:b8:f9:37:aa:64:9e: 6b:64:94:b7:51:b5:c3:28:e4:ae:f9:b5:01:82:24: 3a:67:b4:18:dd:ae:04:ca:ce:20:e1:40:4e:24:e5: 66:d5:24:a0:c5:57:60:c1:33:9e:2e:34:13:51:e2: 90:77:69:38:5d:ad:af:30:9b:2e:44:83:8b:95:16: e2:f4:02:98:0e:1d:fb:b3:64:91:b7:0e:d7:54:1e: c6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:03:AE:C7:84:EC:02:CB:E0:BA:AC:EE:8E:D7:04:4F:CB:4B:17:5D X509v3 Authority Key Identifier: keyid:7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:82:ca:74:b8:df:f9:92:ee:8b:53:ef:a2:15:b3:90:ef:a7: c4:ad:60:8c:57:f1:77:ba:38:62:eb:25:3b:56:2d:30:b0:38: b4:d7:e0:8e:71:04:71:fc:6d:d9:d8:b4:c7:7f:f3:5a:9a:6a: 91:55:12:d3:9c:ab:0d:89:95:84:06:fe:e5:10:82:ca:0f:5d: 16:1b:b8:be:bc:ab:e5:9a:9b:dd:03:92:e1:dc:5f:bd:c7:39: 30:64:f2:f4:14:38:98:97:a4:7f:1b:34:a1:60:9b:94:fa:94: 7c:f1:dd:2f:5e:a4:ed:a6:20:99:8c:74:16:e8:3e:fa:17:ba: f7:d4:b1:bf:29:1d:5a:e4:b6:7c:86:4a:8f:d7:1a:f8:8f:f8: ba:af:6c:19:0d:0b:fa:1c:20:8c:60:37:5c:cc:e9:12:12:66: 8c:d9:c6:d6:99:5d:7a:bd:d2:af:7c:f3:a7:c1:b2:06:a4:9b: 01:93:bf:65:85:96:cb:5c:e7:6e:02:ca:6e:26:4c:72:d6:0e: bf:9e:12:77:3b:33:74:fc:d9:bb:9d:e9:a2:73:76:43:39:9a: 69:25:f8:e1:38:0b:10:e4:ae:b7:69:aa:83:49:a2:ae:0e:14: 7d:f1:9e:14:0a:03:07:37:56:a1:9e:44:d9:4b:92:7f:94:6b: 16:fd:a2:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKDdBM0U0MjZDOTYyNTdCREYyNDNDM0M2M0I3ODAzODM0 MDUyNUMyQTkwHhcNMjUxMjA0MjM1NTQwWhcNMjUxMjExMjM1NTQwWjAYMRYwFAYD VQQDEw02OTMyMWY3Yy1mM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RxymhaI9GNMhcLcU3AdppgGIIOiaN9bMbyXwaIKfi4oETQLSTgso6BDkAVA tBUPQCqoth7kRqk99iKXWDrKV5pap8OkGEGjVZszpfh3DtD5b8cnmlXqHakD7gJU ed9bYqrBfDWwSXxPmf10CHQ3b+NdvN2pM6DRVEycD2ZXwym1TZGQbNSnG7QgjTuF 2rQP+YLbHAoMon+Ye3S2Hwkj8hJlUoadMA+TyuwMOYa4+TeqZJ5rZJS3UbXDKOSu +bUBgiQ6Z7QY3a4Eys4g4UBOJOVm1SSgxVdgwTOeLjQTUeKQd2k4Xa2vMJsuRIOL lRbi9AKYDh37s2SRtw7XVB7GvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcDrseE 7ALL4Lqs7o7XBE/LSxddMB8GA1UdIwQYMBaAFHo+QmyWJXvfJDw8Y7eAODQFJcKp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5OGtQRHhqdDRBNE5BVWx3 cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqNUNiSllsZTk4a1BEeGp0NEE0TkFVbHdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5 OGtQRHhqdDRBNE5BVWx3cWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLgsp0uN/5ku6LU++iFbOQ76fErWCMV/F3ujhi6yU7Vi0wsDi01+CO cQRx/G3Z2LTHf/NammqRVRLTnKsNiZWEBv7lEILKD10WG7i+vKvlmpvdA5Lh3F+9 xzkwZPL0FDiYl6R/GzShYJuU+pR88d0vXqTtpiCZjHQW6D76F7r31LG/KR1a5LZ8 hkqP1xr4j/i6r2wZDQv6HCCMYDdczOkSEmaM2cbWmV16vdKvfPOnwbIGpJsBk79l hZbLXOduAspuJkxy1g6/nhJ3OzN0/Nm7nemic3ZDOZppJfjhOAsQ5K63aaqDSaKu DhR98Z4UCgMHN1ahnkTZS5J/lGsW/aIF -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:09 2025 by rpki-client