This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: iNMD9WLO0ah3zD/VV+f9hfk8/EqfQ+UCO5guxAknEb0= Subject key identifier: 8B:30:E8:6E:64:1D:D5:23:37:2F:11:BC:68:66:C3:05:C3:B8:A1:19 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 0426 Signing time: Thu 04 Dec 2025 22:50:42 +0000 Manifest this update: Thu 04 Dec 2025 22:50:41 +0000 Manifest next update: Thu 11 Dec 2025 22:50:41 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: 7iWQHx24YieA/weyJ5t4LQp+I4/udMgFtD9mcoZirHU=) 2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: pCfOqKvpPAi6jCM2mIS9Dx/Yc8Tm67F8AtZbfbW0m70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Dec 4 22:50:41 2025 GMT Not After : Dec 11 22:50:41 2025 GMT Subject: CN=69321041-89e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:8f:fd:6b:a7:96:de:f3:b7:f4:a6:d4:ae: 19:62:78:53:ed:d2:bb:f4:25:ff:c1:b6:51:7d:43: b2:39:62:67:f3:fd:8b:9a:54:2e:35:70:a5:21:7c: a4:07:56:30:dc:9d:35:68:f6:7a:fd:a7:a2:e7:74: 13:61:60:88:4f:34:2d:73:8b:8b:9a:4f:73:84:1e: 24:f9:e5:c0:80:cb:fa:ef:0b:9f:9f:d0:0b:cb:1a: 6f:89:c2:f8:60:be:ee:c4:b0:a0:11:8f:1e:eb:69: 0f:f8:f2:a5:f0:70:98:ea:fa:41:05:b2:8d:0b:e2: 0d:fd:c0:a6:f6:f7:b5:e2:7b:e9:c4:af:e1:de:3a: b1:a2:be:9f:37:ab:ba:5b:0c:fd:91:69:15:53:36: 00:85:64:72:3f:88:ef:41:bb:26:09:91:e7:43:d9: 5a:5c:f2:98:52:12:17:62:30:dd:3b:cb:35:51:04: 94:65:18:74:0e:24:f3:08:ab:a0:a0:4f:76:34:d5: f7:2c:ee:cd:38:bc:74:f3:da:4e:55:b2:18:22:00: 5a:9c:88:a8:21:3a:7c:fb:aa:90:8e:73:b3:e1:67: 31:17:43:36:f5:a4:d7:27:ae:fa:6a:da:9e:99:49: 0d:7e:53:81:88:b9:f2:8b:03:36:de:10:72:57:de: 5a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:30:E8:6E:64:1D:D5:23:37:2F:11:BC:68:66:C3:05:C3:B8:A1:19 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9d:63:9f:53:f9:d6:61:2e:ac:52:34:c7:fa:4f:c6:ce:88: 4a:44:17:5c:c8:19:25:77:83:a8:dc:7a:86:4c:4b:b1:6c:8d: cd:a4:6e:de:0d:e9:31:62:47:24:83:78:16:ad:b6:e4:c7:bf: b2:95:bc:3b:7f:7a:78:34:8e:2c:48:d0:82:2b:dd:4d:65:51: fb:96:a1:ea:96:a3:ef:eb:14:46:b9:d1:b2:09:9b:82:02:88: da:4b:64:c2:fc:43:1d:51:60:56:f7:32:1d:0d:a6:7e:e2:99: 98:6a:97:9e:f7:d6:b2:b1:18:6d:a5:67:ce:c3:43:b5:d7:96: 92:c4:89:bf:8c:b3:60:60:77:31:35:02:cf:00:1c:53:bc:6a: 7a:be:89:fa:52:89:00:87:5b:77:2c:0b:0e:39:a0:24:3a:d9: d1:30:fb:17:25:eb:17:b9:bd:29:d5:69:02:ac:36:cb:57:da: 8a:a0:1e:7d:7f:ae:e7:7e:52:9b:73:5d:eb:07:26:80:c4:c9: 80:b5:ee:ae:02:16:c7:9e:7d:9f:0b:67:ea:ee:31:a4:d1:2a: 34:a3:e6:76:a9:d5:ac:c0:29:ed:90:ba:4b:50:ec:b4:cc:79: 64:16:fa:0e:1f:75:cc:86:03:7a:39:f5:b3:4d:0a:45:b6:3b: e3:06:d1:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUxMjA0MjI1MDQxWhcNMjUxMjExMjI1MDQxWjAYMRYwFAYD VQQDEw02OTMyMTA0MS04OWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxliP/Wunlt7zt/Sm1K4ZYnhT7dK79CX/wbZRfUOyOWJn8/2LmlQuNXClIXyk B1Yw3J01aPZ6/aei53QTYWCITzQtc4uLmk9zhB4k+eXAgMv67wufn9ALyxpvicL4 YL7uxLCgEY8e62kP+PKl8HCY6vpBBbKNC+IN/cCm9ve14nvpxK/h3jqxor6fN6u6 Wwz9kWkVUzYAhWRyP4jvQbsmCZHnQ9laXPKYUhIXYjDdO8s1UQSUZRh0DiTzCKug oE92NNX3LO7NOLx089pOVbIYIgBanIioITp8+6qQjnOz4WcxF0M29aTXJ676atqe mUkNflOBiLnyiwM23hByV95acwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsw6G5k HdUjNy8RvGhmwwXDuKEZMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBenWOfU/nWYS6sUjTH+k/GzohKRBdcyBkld4Oo3HqGTEuxbI3NpG7e DekxYkckg3gWrbbkx7+ylbw7f3p4NI4sSNCCK91NZVH7lqHqlqPv6xRGudGyCZuC AojaS2TC/EMdUWBW9zIdDaZ+4pmYapee99aysRhtpWfOw0O115aSxIm/jLNgYHcx NQLPABxTvGp6von6UokAh1t3LAsOOaAkOtnRMPsXJesXub0p1WkCrDbLV9qKoB59 f67nflKbc13rByaAxMmAte6uAhbHnn2fC2fq7jGk0So0o+Z2qdWswCntkLpLUOy0 zHlkFvoOH3XMhgN6OfWzTQpFtjvjBtFj -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:39 2025 by rpki-client