This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft File: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json) Hash identifier: wJrB7xiE+Pb29VwZ6o0tS6g4Wca6XU5Ms5hwVd7MpqQ= Subject key identifier: A1:A4:52:37:15:66:63:42:39:5B:A1:FE:D3:D9:77:EC:70:F8:DB:25 Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Certificate serial: 3588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft Manifest number: 353E Signing time: Thu 04 Dec 2025 14:40:11 +0000 Manifest this update: Thu 04 Dec 2025 14:40:10 +0000 Manifest next update: Thu 11 Dec 2025 14:40:10 +0000 Files and hashes: 1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: v8dUviD1dYJhOcN8Chjy7kV+W18sdgA8V67Y6DbM3E4=) 2: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: fT98Wy1t5VScFWJuQupk2LhedSGkV+ojkzEZelCkDWM=) 3: 50FFD256C9C011F0A362FA0CC4F9AE02.roa (hash: FFJar29YXtEvA6a37PKSlFXmpJUHGNPwr576ju55AGI=) 4: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: dGU6CJvrS/pXM1BPExEcoLwBj3XVO3Qw6BjkQ3c5uZ8=) 5: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: d/7DMtiXfQBwX+8qOXb96W9MkSduRe+bpauiOZ+JfzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 14:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13704 (0x3588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Validity Not Before: Dec 4 14:40:10 2025 GMT Not After : Dec 11 14:40:10 2025 GMT Subject: CN=69319d4a-e6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:e7:89:44:e4:8e:e9:1c:c0:93:ca:fa:ec: 13:ae:21:b9:25:f9:e1:20:a8:22:71:b9:f8:14:b1: 77:78:e2:cc:4e:f9:84:ac:6c:0a:f7:e9:0f:e2:a2: c0:32:9d:8c:7b:31:11:ab:6e:95:45:ee:d8:99:1c: 1b:5d:4a:38:31:34:97:1c:8f:6e:d2:8e:f1:c5:35: 41:c3:8f:99:1f:84:9c:0f:0e:46:95:a0:06:06:54: aa:83:05:3b:78:ed:5f:6c:9b:0b:23:d6:eb:ff:80: 27:b5:4d:33:2a:54:c6:71:aa:22:28:fc:94:eb:e7: d7:3b:eb:89:39:4a:92:f2:c1:ba:58:b8:4d:cd:4b: 09:f4:05:7d:45:ba:c6:53:46:02:1a:e6:f3:2a:2d: 16:97:2b:3a:9c:ba:d9:c3:35:e3:16:08:0d:7e:11: 87:05:48:81:f6:a1:d9:d2:0f:46:16:4f:80:d9:e4: e4:2a:0b:5c:5d:c1:71:ad:4f:4c:55:fa:5a:41:c7: c0:a8:d4:d8:0d:73:f5:ac:e2:83:e5:85:89:80:d4: 3a:44:ff:49:3a:58:2b:fc:e5:d0:f2:62:fb:15:2c: 5c:36:60:5a:97:4c:cc:75:07:0c:f5:ec:1c:1a:44: 5a:76:ff:1a:34:f9:a7:bd:b8:96:8e:da:51:ff:26: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A4:52:37:15:66:63:42:39:5B:A1:FE:D3:D9:77:EC:70:F8:DB:25 X509v3 Authority Key Identifier: keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:72:ce:0b:93:74:0c:72:ae:2b:c9:09:a7:84:5f:84:32:9b: 53:8e:f4:46:8b:51:c1:79:10:eb:2c:95:63:7c:14:6e:ce:e7: 8e:12:b3:4e:aa:d4:42:5c:e2:ed:c3:f0:d3:33:c2:7c:a8:d7: 89:3a:18:d2:8c:70:a9:a5:b3:7c:f4:d3:4c:3c:47:4a:16:45: 34:9b:b9:3e:cf:1a:30:86:63:4c:3d:9c:fa:93:d8:ae:2c:38: 31:89:b8:88:bd:c3:45:41:6f:b1:b6:97:47:70:70:a0:20:59: bf:fb:50:38:47:94:59:01:e5:a1:d5:3f:91:d4:61:c6:ae:22: e9:fd:43:7f:22:39:09:b7:92:ba:1b:61:9c:4e:2e:dc:98:a5: 8c:63:78:c0:08:d5:5f:68:a6:03:5d:54:0b:f9:d9:19:87:18: 20:a9:e3:4d:dc:af:fe:d0:7e:a7:0b:e4:52:91:59:8c:03:a5: d6:82:72:95:ad:bf:f6:89:95:cb:06:93:c7:39:51:bf:2f:c1: 54:53:5d:8f:a8:32:4b:84:b1:6f:88:34:25:0b:81:15:42:c3: 4f:a8:f4:b5:73:66:23:52:40:41:e9:97:59:67:75:d8:09:db: 38:29:45:6e:9f:fc:29:28:7a:ed:70:13:5b:47:87:3d:c8:08: d4:d9:6a:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQjAxMTAvBgNVBAUTKDEzMjQwNDMwMjFCQjQ1RDdGRjY2RjIwQUZDNjgzOTM0 MzEzMEMzRjIwHhcNMjUxMjA0MTQ0MDEwWhcNMjUxMjExMTQ0MDEwWjAYMRYwFAYD VQQDEw02OTMxOWQ0YS1lNmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOHniUTkjukcwJPK+uwTriG5JfnhIKgicbn4FLF3eOLMTvmErGwK9+kP4qLA Mp2MezERq26VRe7YmRwbXUo4MTSXHI9u0o7xxTVBw4+ZH4ScDw5GlaAGBlSqgwU7 eO1fbJsLI9br/4AntU0zKlTGcaoiKPyU6+fXO+uJOUqS8sG6WLhNzUsJ9AV9RbrG U0YCGubzKi0Wlys6nLrZwzXjFggNfhGHBUiB9qHZ0g9GFk+A2eTkKgtcXcFxrU9M VfpaQcfAqNTYDXP1rOKD5YWJgNQ6RP9JOlgr/OXQ8mL7FSxcNmBal0zMdQcM9ewc GkRadv8aNPmnvbiWjtpR/yYdYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGkUjcV ZmNCOVuh/tPZd+xw+NslMB8GA1UdIwQYMBaAFBMkBDAhu0XX/2byCvxoOTQxMMPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCMC9FNTU3QzAwMDFE OTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1JkZl9adklLX0dnNU5ERXd3 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V5UUVNQ0c3UmRmX1p2SUtfR2c1TkRFd3dfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCMC9FNTU3QzAwMDFEOTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1Jk Zl9adklLX0dnNU5ERXd3X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+cs4Lk3QMcq4ryQmnhF+EMptTjvRGi1HBeRDrLJVjfBRuzueOErNO qtRCXOLtw/DTM8J8qNeJOhjSjHCppbN89NNMPEdKFkU0m7k+zxowhmNMPZz6k9iu LDgxibiIvcNFQW+xtpdHcHCgIFm/+1A4R5RZAeWh1T+R1GHGriLp/UN/IjkJt5K6 G2GcTi7cmKWMY3jACNVfaKYDXVQL+dkZhxggqeNN3K/+0H6nC+RSkVmMA6XWgnKV rb/2iZXLBpPHOVG/L8FUU12PqDJLhLFviDQlC4EVQsNPqPS1c2YjUkBB6ZdZZ3XY Cds4KUVun/wpKHrtcBNbR4c9yAjU2Woc -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:05 2025 by rpki-client