This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft File: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft (raw, json) Hash identifier: HrZQBrtFsYg83xKjIHYShdRy+K+4PR5yG54ndDT0qXo= Subject key identifier: 6F:7A:63:AD:59:4B:62:7C:10:4E:68:E6:52:31:9C:B1:80:CF:25:15 Authority key identifier: 78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32 Certificate issuer: /CN=A917ACF1/serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432 Certificate serial: 03EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft Manifest number: 03EB Signing time: Thu 04 Dec 2025 22:59:38 +0000 Manifest this update: Thu 04 Dec 2025 22:59:38 +0000 Manifest next update: Thu 11 Dec 2025 22:59:38 +0000 Files and hashes: 1: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl (hash: azGW0GL3bfY9FnIMUjDVSk3i1mEyfb8OKk0+Lf0DNuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432 Validity Not Before: Dec 4 22:59:38 2025 GMT Not After : Dec 11 22:59:38 2025 GMT Subject: CN=6932125a-c3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b9:18:2f:e2:aa:b6:db:af:08:3f:ec:ae:25: eb:30:62:67:5e:31:c5:1d:15:97:2b:64:9e:97:ca: 1f:a4:c5:c7:79:09:8e:f3:a5:23:22:f6:75:46:5b: 49:9e:02:a8:6b:de:d0:96:79:62:82:38:f2:e5:ae: 93:fd:32:1c:ea:ed:ef:88:a7:c8:5f:68:53:7c:dd: 03:b1:b8:a5:b7:57:c5:86:10:90:e4:5b:c5:66:9f: 1d:e5:94:3d:d8:ef:9e:80:ce:43:bd:dd:4f:ce:5d: 8d:fe:83:bf:b8:0d:84:4a:70:04:30:05:8f:3d:1c: 5e:e0:bc:81:da:99:0c:81:9f:69:8e:90:02:14:38: 45:6c:f9:54:b1:a5:e6:bd:66:35:ea:8e:1f:4e:8c: f2:ae:c1:c4:2c:61:6d:ba:26:cd:62:27:18:34:96: 17:4d:30:e4:6f:66:22:d1:b8:e3:7e:a5:f7:6c:a7: c8:eb:c2:17:bd:56:64:41:40:0c:e8:b2:84:59:58: e8:a9:70:8f:1f:f4:95:4b:a0:8b:05:fe:ee:6f:5b: e5:28:4b:e9:2b:30:21:e7:b0:dd:24:c4:16:80:4c: c6:73:f8:c4:ea:69:9d:b2:fa:05:cd:08:13:73:33: 47:0a:2a:8f:a6:5a:c1:15:ba:3c:fe:16:a5:11:e2: 0d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7A:63:AD:59:4B:62:7C:10:4E:68:E6:52:31:9C:B1:80:CF:25:15 X509v3 Authority Key Identifier: keyid:78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:0d:a8:be:d8:af:21:72:c4:22:71:c3:4f:29:b3:30:a6:ed: cf:81:cf:27:85:4a:9d:c2:17:66:47:a8:ca:bd:3a:b6:32:2b: 33:7f:e6:0c:52:25:17:a2:34:89:bb:63:f3:e1:25:63:fc:7a: 07:07:9d:29:bc:61:32:51:e3:01:7e:b1:eb:d9:0e:03:7f:f1: 7b:a3:a3:d9:a9:cd:ca:2c:1c:0b:54:3b:62:8b:c4:ee:f4:fd: cd:3c:ec:f8:36:45:61:91:8d:64:65:53:37:de:ae:e8:84:27: 4c:88:7d:cf:f2:38:6d:6d:92:9d:24:b2:e8:1d:ae:57:81:02: 35:01:f6:06:9d:12:95:d0:30:0a:78:c7:54:56:13:57:4c:21: 19:30:78:be:10:82:75:61:1f:5e:39:c5:96:74:2d:64:69:d9: a4:99:ee:b2:46:cf:80:32:18:84:8c:41:28:d4:5b:05:79:a2: 24:0d:59:e4:b2:bb:8a:c5:b5:8f:d0:6d:ac:ad:e9:ed:69:e1: 2b:1c:bb:ba:2a:24:95:a9:cf:00:dc:17:e1:39:42:c6:28:fa: 8c:e5:b5:ea:e3:88:5f:b2:e9:7b:2e:5b:53:df:d1:2f:4b:43: dd:d5:94:16:db:c2:a4:84:62:15:e6:94:7a:d9:9b:4a:d4:90: a4:65:b9:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKDc4MTEyNzBFNzhFNTJGODFFQzZGMEU5NkQ5OTZDNzkw OTNDMTI0MzIwHhcNMjUxMjA0MjI1OTM4WhcNMjUxMjExMjI1OTM4WjAYMRYwFAYD VQQDEw02OTMyMTI1YS1jM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprkYL+KqttuvCD/sriXrMGJnXjHFHRWXK2Sel8ofpMXHeQmO86UjIvZ1RltJ ngKoa97Qlnligjjy5a6T/TIc6u3viKfIX2hTfN0Dsbilt1fFhhCQ5FvFZp8d5ZQ9 2O+egM5Dvd1Pzl2N/oO/uA2ESnAEMAWPPRxe4LyB2pkMgZ9pjpACFDhFbPlUsaXm vWY16o4fTozyrsHELGFtuibNYicYNJYXTTDkb2Yi0bjjfqX3bKfI68IXvVZkQUAM 6LKEWVjoqXCPH/SVS6CLBf7ub1vlKEvpKzAh57DdJMQWgEzGc/jE6mmdsvoFzQgT czNHCiqPplrBFbo8/halEeIN0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG96Y61Z S2J8EE5o5lIxnLGAzyUVMB8GA1UdIwQYMBaAFHgRJw545S+B7G8OltmWx5CTwSQy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS85MDlCQzAyOEEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi9lQkVuRG5qbEw0SHNidzZXMlpiSGtKUEJK REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VCRW5EbmpsTDRIc2J3NlcyWmJIa0pQQkpESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS85MDlCQzAyOEEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi9lQkVuRG5qbEw0 SHNidzZXMlpiSGtKUEJKREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhDai+2K8hcsQiccNPKbMwpu3Pgc8nhUqdwhdmR6jKvTq2Miszf+YM UiUXojSJu2Pz4SVj/HoHB50pvGEyUeMBfrHr2Q4Df/F7o6PZqc3KLBwLVDtii8Tu 9P3NPOz4NkVhkY1kZVM33q7ohCdMiH3P8jhtbZKdJLLoHa5XgQI1AfYGnRKV0DAK eMdUVhNXTCEZMHi+EIJ1YR9eOcWWdC1kadmkme6yRs+AMhiEjEEo1FsFeaIkDVnk sruKxbWP0G2srentaeErHLu6KiSVqc8A3BfhOULGKPqM5bXq44hfsul7LltT39Ev S0Pd1ZQW28KkhGIV5pR62ZtK1JCkZbmz -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:12 2025 by rpki-client