This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft File: Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json) Hash identifier: 2YVXr/89m0M+5LASfen/Io1Wtd4GBOYBuR9EA8fnPNI= Subject key identifier: C4:22:10:2A:A0:CD:50:F5:D7:91:50:2C:5F:DF:BB:E7:B3:3B:A2:94 Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft Manifest number: 0194 Signing time: Sun 21 Dec 2025 02:42:26 +0000 Manifest this update: Sun 21 Dec 2025 02:42:26 +0000 Manifest next update: Sun 28 Dec 2025 02:42:26 +0000 Files and hashes: 1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: 8sWwZyX6xkiNFM0JZHsLHtbs8pppNFn6Nt5Vjh98bcc=) 2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: NDSD+KkV1yB3rzPC/NhFv9JI1zaXTY8fuhw8gPA8DhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Validity Not Before: Dec 21 02:42:26 2025 GMT Not After : Dec 28 02:42:26 2025 GMT Subject: CN=69475e92-b017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:4d:ac:0c:79:26:a0:a3:83:47:d5:3c:56: a0:8e:e3:27:e1:71:1c:7e:72:08:84:be:07:9b:6e: 00:19:1a:6a:fb:1d:b8:83:d6:35:aa:c8:9d:fd:1b: d6:ea:cc:9a:ae:08:81:ee:1d:39:7b:90:c1:aa:3a: 39:64:7b:db:d2:36:b7:6a:34:c3:78:d5:a3:a5:10: 27:69:ad:56:b3:bb:5b:8c:99:e9:89:f0:2b:fe:cd: f5:91:47:16:13:f1:c3:aa:cc:09:37:30:aa:9c:7e: 5c:cd:f8:03:4e:69:11:40:6b:b0:5f:3d:8f:47:95: d4:8d:32:67:1f:e7:96:04:c4:8e:39:83:36:41:85: 46:74:91:de:19:68:27:8f:42:b2:a7:83:39:8a:13: 25:31:80:c8:c2:f8:41:95:ff:3e:8f:96:c5:73:eb: da:e8:90:a7:61:22:51:85:4c:24:31:39:2d:40:58: 59:51:e1:a1:c6:08:ec:2e:f1:d5:85:00:09:88:2e: df:1c:ef:15:af:58:d7:76:cc:02:04:9b:91:da:48: 00:2d:79:2f:06:76:7b:9d:89:43:0b:bb:b0:d8:c3: 4f:67:96:0d:91:07:27:b1:c0:62:e8:e9:c6:35:78: 58:27:62:13:42:2c:7f:0a:72:c6:f6:4f:53:56:2e: 1b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:22:10:2A:A0:CD:50:F5:D7:91:50:2C:5F:DF:BB:E7:B3:3B:A2:94 X509v3 Authority Key Identifier: keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:44:e9:1b:41:2e:f6:a6:5d:b6:45:67:1c:cd:38:a2:2b:b8: 10:df:4b:57:d1:cb:77:88:82:c4:a7:cf:c8:6c:9f:ab:3e:a7: c4:8e:ea:a3:54:1b:70:13:a2:fd:48:c3:b1:14:66:d1:39:3e: 63:68:a1:d6:e2:a0:cd:59:66:be:47:63:7e:f7:41:87:e1:98: 7b:ce:b1:6c:97:9e:31:81:ff:9b:67:94:32:84:a7:80:d9:85: 01:6f:58:e5:81:d6:54:31:98:40:1b:6c:7b:27:7d:ec:40:32: 9d:ef:1a:f8:f1:5f:f8:97:05:42:36:46:36:7c:1a:93:e7:bb: ff:f2:04:ef:b4:2e:5c:7d:a0:91:18:02:40:4e:4a:5c:66:aa: dc:3f:74:81:79:e1:58:4f:a9:52:ba:2d:70:69:7f:08:a9:7e: 48:00:3e:37:43:05:b3:19:77:1c:28:08:15:1f:14:f4:14:bd: 9c:95:bb:97:b9:1a:e0:6d:0f:d5:44:5e:cb:b8:ea:90:fa:38: 62:6e:12:1d:80:93:06:7e:7d:ac:ae:11:f0:45:6b:74:95:69: 64:1b:6a:12:2b:c2:12:a2:93:62:b4:25:46:c0:9b:4f:42:b8: fc:6c:d6:e9:02:12:12:54:5e:a5:d1:7a:57:c5:de:37:f5:01: 5b:a1:48:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERUIxMTAvBgNVBAUTKDEyOTZFN0VCQkUzMDExM0ZFMUQzRjI5NzMwMzNBNENC MzExNDQ4MUQwHhcNMjUxMjIxMDI0MjI2WhcNMjUxMjI4MDI0MjI2WjAYMRYwFAYD VQQDDA02OTQ3NWU5Mi1iMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmpNrAx5JqCjg0fVPFagjuMn4XEcfnIIhL4Hm24AGRpq+x24g9Y1qsid/RvW 6syargiB7h05e5DBqjo5ZHvb0ja3ajTDeNWjpRAnaa1Ws7tbjJnpifAr/s31kUcW E/HDqswJNzCqnH5czfgDTmkRQGuwXz2PR5XUjTJnH+eWBMSOOYM2QYVGdJHeGWgn j0Kyp4M5ihMlMYDIwvhBlf8+j5bFc+va6JCnYSJRhUwkMTktQFhZUeGhxgjsLvHV hQAJiC7fHO8Vr1jXdswCBJuR2kgALXkvBnZ7nYlDC7uw2MNPZ5YNkQcnscBi6OnG NXhYJ2ITQix/CnLG9k9TVi4bTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQiECqg zVD115FQLF/fu+ezO6KUMB8GA1UdIwQYMBaAFBKW5+u+MBE/4dPylzAzpMsxFEgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERFQi9BMzMxRjQ3NDcy NjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VUX2gwX0tYTURPa3l6RVVT QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VwYm42NzR3RVRfaDBfS1hNRE9reXpFVVNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERFQi9BMzMxRjQ3NDcyNjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VU X2gwX0tYTURPa3l6RVVTQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmROkbQS72pl22RWcczTiiK7gQ30tX0ct3iILEp8/IbJ+rPqfEjuqj VBtwE6L9SMOxFGbROT5jaKHW4qDNWWa+R2N+90GH4Zh7zrFsl54xgf+bZ5QyhKeA 2YUBb1jlgdZUMZhAG2x7J33sQDKd7xr48V/4lwVCNkY2fBqT57v/8gTvtC5cfaCR GAJATkpcZqrcP3SBeeFYT6lSui1waX8IqX5IAD43QwWzGXccKAgVHxT0FL2clbuX uRrgbQ/VRF7LuOqQ+jhibhIdgJMGfn2srhHwRWt0lWlkG2oSK8ISopNitCVGwJtP Qrj8bNbpAhISVF6l0XpXxd439QFboUh+ -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:56 2025 by rpki-client