This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: KM84vdkNHupdGzFo812IeC056ve+X70boKWxj15GhyQ= Subject key identifier: 75:5E:79:2F:26:90:EB:3F:BC:EC:1D:96:B9:D6:C7:26:6C:59:6E:29 Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 189C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 187B Signing time: Sat 06 Dec 2025 16:07:30 +0000 Manifest this update: Sat 06 Dec 2025 16:07:29 +0000 Manifest next update: Sat 13 Dec 2025 16:07:29 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: 4agyIa4SzfovHpF7K4p5ojI1M3mloGb0OHeOgCi+uzM=) 2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 4Q+SEdvBQGfYmmHeFRyy/2R/EHACTjORm2A/+Pw5UxE=) 3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: p3nDO3WF2LVR/VuRYdJhLml5b3M6N0ju1bV/+dQUHBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6300 (0x189c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: Dec 6 16:07:29 2025 GMT Not After : Dec 13 16:07:29 2025 GMT Subject: CN=693454c2-a6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:04:f9:e7:51:86:16:6a:c5:f6:ba:aa:31: bb:43:61:53:61:d8:95:f5:6c:25:a0:5b:a7:9a:d0: 0a:b4:4d:df:28:d0:0b:c7:87:42:7b:86:57:59:0c: 1c:4d:cc:93:1a:4a:4c:c5:db:92:61:f0:38:f1:42: ac:17:37:22:24:43:b2:15:4c:24:c3:b2:d1:fa:4b: e1:67:66:73:10:ff:d5:0a:1b:f3:e8:2a:48:d4:71: 07:7e:2a:69:26:51:0b:82:51:66:10:03:bd:fc:00: be:ea:9f:d9:c0:1f:65:cd:85:4c:73:53:95:74:a6: af:36:46:4f:32:65:86:f6:b7:46:77:11:73:55:84: 6a:19:ec:b7:7f:84:97:7f:43:83:7c:80:7b:27:02: 6b:f8:ca:4e:49:4f:ac:76:6a:dc:c6:06:05:e2:6f: e2:32:1d:11:07:ed:5b:4a:49:3a:31:43:16:65:b7: aa:b3:4a:d5:8a:10:9b:ad:42:3e:b5:9b:cc:fe:fd: 72:81:f0:64:e5:bf:e0:c6:6a:2e:2a:a0:bf:8e:44: b4:f6:09:98:dd:47:84:a0:7d:b0:5e:92:d1:98:45: 71:c9:dd:f5:06:e5:a5:74:78:d3:db:ef:05:85:e9: 1d:49:ed:7f:6d:f4:24:d3:6d:6e:d1:7e:18:31:36: 87:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5E:79:2F:26:90:EB:3F:BC:EC:1D:96:B9:D6:C7:26:6C:59:6E:29 X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:9d:63:0d:7f:50:43:9c:e0:70:23:34:d3:92:63:25:a3:08: f2:16:ca:1f:c0:c2:fd:6f:64:54:65:ff:3a:7f:e5:1d:4b:b2: be:36:b9:51:57:4c:c0:e3:d9:76:39:e6:14:c0:87:55:44:48: 2b:41:8e:2d:63:b0:19:01:68:8e:16:3b:94:27:dc:bf:16:b6: 35:da:9f:0d:d0:7c:c8:53:d9:29:af:3b:3c:f0:2a:1d:ae:e7: 4c:20:9e:9e:33:d1:86:02:0f:c8:b5:f6:f5:c7:df:a0:6d:ba: 1f:b5:fb:a1:52:9d:e8:8c:bd:c7:10:ba:e7:94:fd:c8:72:3c: 26:56:56:2c:de:a0:5f:c7:e7:bf:53:64:f4:13:0c:f1:ce:00: 92:c1:c6:7f:e0:25:18:01:92:da:7b:40:f7:a6:7a:77:ad:af: 47:24:d2:9d:00:05:64:a1:ce:33:84:0e:1f:2d:34:79:ff:5b: c8:3d:d1:62:41:9c:46:37:03:84:31:f0:3e:6b:ec:52:7a:cf: 31:85:72:d2:ec:9d:2d:53:51:d0:6e:d9:09:63:f1:6d:d6:41: 1a:cf:fc:4e:82:84:45:4c:6d:84:39:a4:f7:d7:f8:7f:18:ef: a4:3d:a8:04:b8:36:a8:34:1d:70:9c:b3:cb:18:36:db:11:b7: 6f:fb:2e:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjUxMjA2MTYwNzI5WhcNMjUxMjEzMTYwNzI5WjAYMRYwFAYD VQQDEw02OTM0NTRjMi1hNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybAE+edRhhZqxfa6qjG7Q2FTYdiV9WwloFunmtAKtE3fKNALx4dCe4ZXWQwc TcyTGkpMxduSYfA48UKsFzciJEOyFUwkw7LR+kvhZ2ZzEP/VChvz6CpI1HEHfipp JlELglFmEAO9/AC+6p/ZwB9lzYVMc1OVdKavNkZPMmWG9rdGdxFzVYRqGey3f4SX f0ODfIB7JwJr+MpOSU+sdmrcxgYF4m/iMh0RB+1bSkk6MUMWZbeqs0rVihCbrUI+ tZvM/v1ygfBk5b/gxmouKqC/jkS09gmY3UeEoH2wXpLRmEVxyd31BuWldHjT2+8F hekdSe1/bfQk021u0X4YMTaHwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVeeS8m kOs/vOwdlrnWxyZsWW4pMB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABnWMNf1BDnOBwIzTTkmMlowjyFsofwML9b2RUZf86f+UdS7K+NrlR V0zA49l2OeYUwIdVREgrQY4tY7AZAWiOFjuUJ9y/FrY12p8N0HzIU9kprzs88Cod rudMIJ6eM9GGAg/Itfb1x9+gbboftfuhUp3ojL3HELrnlP3IcjwmVlYs3qBfx+e/ U2T0EwzxzgCSwcZ/4CUYAZLae0D3pnp3ra9HJNKdAAVkoc4zhA4fLTR5/1vIPdFi QZxGNwOEMfA+a+xSes8xhXLS7J0tU1HQbtkJY/Ft1kEaz/xOgoRFTG2EOaT31/h/ GO+kPagEuDaoNB1wnLPLGDbbEbdv+y6C -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:56 2025 by rpki-client