This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft File: a1eqjwdnrM-oLNKqaesREse3fPw.mft (raw, json) Hash identifier: SY1MUBtsaaclCCDfd2XxTZZ5ONXHW8W0ZrFZFrkYoyw= Subject key identifier: 02:0F:A1:09:2B:3C:9E:7A:9C:9A:E2:CE:7D:E9:4E:84:4E:66:2F:6E Authority key identifier: 6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC Certificate issuer: /CN=A917EC30/serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft Manifest number: 54 Signing time: Fri 05 Dec 2025 05:06:24 +0000 Manifest this update: Fri 05 Dec 2025 05:06:24 +0000 Manifest next update: Fri 12 Dec 2025 05:06:24 +0000 Files and hashes: 1: a1eqjwdnrM-oLNKqaesREse3fPw.crl (hash: 1J9yhFYLkFat1st6vmMP95k0BD6C52ogxsKnSe5RCUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC30, serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC Validity Not Before: Dec 5 05:06:24 2025 GMT Not After : Dec 12 05:06:24 2025 GMT Subject: CN=69326850-6bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:ef:0d:d8:a6:7d:40:f0:dc:58:9b:01:75: 75:f8:f1:98:b0:7e:34:ac:84:be:b5:19:35:8d:f8: 35:b7:a4:0a:7f:9a:00:7c:97:60:a5:71:b8:b8:8f: 7d:14:b8:6a:7d:9b:31:4d:ba:5d:6a:70:24:a2:06: c4:fa:94:93:1b:b7:16:88:68:9e:ec:ec:56:74:bf: 19:e2:8a:27:05:ec:97:2e:bf:50:d6:9a:be:f3:b8: 9c:ed:b3:33:bf:6a:12:85:35:e3:2e:96:2a:fa:59: c2:cb:a9:92:ac:ab:3d:a5:10:52:cd:3b:87:2f:d4: ee:32:bb:b3:98:67:01:43:4d:ae:54:b9:6f:93:0a: f4:68:f1:aa:02:dc:d0:b6:83:c0:c6:d1:24:0c:b7: 24:f4:5d:65:6f:13:25:9e:4f:8f:3f:00:5c:f5:ab: 6d:bc:f4:02:88:1f:a2:82:31:77:5c:1f:2f:70:ee: 03:7b:fa:10:40:ca:9f:9d:13:b2:cf:97:14:dc:75: 3a:f0:d3:41:a6:ac:77:d1:f8:f3:a4:70:00:49:ed: 08:cf:5c:a4:79:cd:ac:d3:7d:93:1c:54:3d:0e:f0: 5f:28:e1:2a:3f:83:b7:20:30:a9:6c:e5:34:65:6b: 82:b4:16:2e:15:b7:f6:03:dd:e8:16:cd:0d:2d:07: 60:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0F:A1:09:2B:3C:9E:7A:9C:9A:E2:CE:7D:E9:4E:84:4E:66:2F:6E X509v3 Authority Key Identifier: keyid:6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:3c:24:a7:39:e1:4b:44:50:aa:11:a6:5e:a1:10:03:fa:72: 23:6a:f5:65:b9:29:b9:86:0b:2d:13:db:38:41:72:99:3f:bb: 01:9c:90:7a:86:3c:49:33:bc:9b:c7:a9:57:0e:f5:59:9a:2b: 13:09:cc:8a:6c:aa:1a:01:7d:aa:bc:c2:2d:2b:ad:21:c9:3b: 3d:b6:f1:32:b1:b5:f7:b1:ae:02:23:31:48:0c:2f:76:bd:57: a1:8e:23:37:c4:e5:47:7f:b7:4c:99:6a:0e:47:7c:31:e3:90: 7a:e4:b2:a7:bd:29:1a:18:f0:10:4d:b0:9a:8a:47:6f:1a:42: cf:e0:47:9c:1b:6a:ca:1e:d1:ef:15:2c:4b:06:97:0c:b8:b8: 84:8f:79:43:70:e8:ae:0c:81:9c:41:c1:a0:5b:5d:3c:45:56: 80:68:67:dc:e1:1a:ea:a9:92:17:08:74:4f:29:54:5f:94:f5: 48:48:ec:71:1f:ce:5e:15:dc:60:10:52:67:52:1b:14:6c:19: e5:25:2a:36:ed:47:64:8c:ad:bb:f5:fa:b0:21:08:85:4a:2e: 01:30:29:d7:70:5f:5c:22:74:47:60:93:0e:5d:77:9d:84:7e: 0a:c6:6e:93:cc:0e:95:53:9a:85:a3:01:7d:d7:6a:8c:16:a2: 69:3f:a2:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RUMzMDExMC8GA1UEBRMoNkI1N0FBOEYwNzY3QUNDRkE4MkNEMkFBNjlFQjExMTJD N0I3N0NGQzAeFw0yNTEyMDUwNTA2MjRaFw0yNTEyMTIwNTA2MjRaMBgxFjAUBgNV BAMTDTY5MzI2ODUwLTZiZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRc+8N2KZ9QPDcWJsBdXX48ZiwfjSshL61GTWN+DW3pAp/mgB8l2Clcbi4j30U uGp9mzFNul1qcCSiBsT6lJMbtxaIaJ7s7FZ0vxniiicF7Jcuv1DWmr7zuJztszO/ ahKFNeMulir6WcLLqZKsqz2lEFLNO4cv1O4yu7OYZwFDTa5UuW+TCvRo8aoC3NC2 g8DG0SQMtyT0XWVvEyWeT48/AFz1q2289AKIH6KCMXdcHy9w7gN7+hBAyp+dE7LP lxTcdTrw00GmrHfR+POkcABJ7QjPXKR5zazTfZMcVD0O8F8o4So/g7cgMKls5TRl a4K0Fi4Vt/YD3egWzQ0tB2C5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAg+hCSs8 nnqcmuLOfelOhE5mL24wHwYDVR0jBBgwFoAUa1eqjwdnrM+oLNKqaesREse3fPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFQzMwLzYzQ0Q2RUM0NTcz RTExRjBCQjI3RkI4NEM0RjlBRTAyL2ExZXFqd2Ruck0tb0xOS3FhZXNSRXNlM2ZQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTFlcWp3ZG5yTS1vTE5LcWFlc1JFc2UzZlB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF QzMwLzYzQ0Q2RUM0NTczRTExRjBCQjI3RkI4NEM0RjlBRTAyL2ExZXFqd2Ruck0t b0xOS3FhZXNSRXNlM2ZQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABM8JKc54UtEUKoRpl6hEAP6ciNq9WW5KbmGCy0T2zhBcpk/uwGckHqG PEkzvJvHqVcO9VmaKxMJzIpsqhoBfaq8wi0rrSHJOz228TKxtfexrgIjMUgML3a9 V6GOIzfE5Ud/t0yZag5HfDHjkHrksqe9KRoY8BBNsJqKR28aQs/gR5wbasoe0e8V LEsGlwy4uISPeUNw6K4MgZxBwaBbXTxFVoBoZ9zhGuqpkhcIdE8pVF+U9UhI7HEf zl4V3GAQUmdSGxRsGeUlKjbtR2SMrbv1+rAhCIVKLgEwKddwX1widEdgkw5dd52E fgrGbpPMDpVTmoWjAX3XaowWomk/opk= -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:43 2025 by rpki-client