This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft File: EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json) Hash identifier: fwM6wIKZMu9WZadewv8BAihelCr9lBPxvsa1m10ookA= Subject key identifier: 4A:74:3C:4E:99:9E:1E:15:48:25:33:72:43:75:99:CC:D9:93:AF:5D Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8 Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft Manifest number: 49 Signing time: Fri 05 Dec 2025 05:15:27 +0000 Manifest this update: Fri 05 Dec 2025 05:15:26 +0000 Manifest next update: Fri 12 Dec 2025 05:15:26 +0000 Files and hashes: 1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: MKbOPEZIgrbSddyNzfo9KWhcpT3teTDM6WgcL3+48i0=) 2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: ZEiyTfU7RbfvPc28RELNIE+Hy2mvvU85jmuWJWVYc2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8 Validity Not Before: Dec 5 05:15:26 2025 GMT Not After : Dec 12 05:15:26 2025 GMT Subject: CN=69326a6f-290c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:22:30:ed:e5:ec:05:4f:b9:a4:f3:9b:87: 64:93:38:13:9d:b1:b2:0a:6f:83:53:18:81:9d:fa: 73:d3:e4:79:43:8d:90:79:f5:03:25:84:e2:be:ec: 39:ff:3d:68:f8:15:6d:4e:32:0b:54:99:a8:cb:bd: f4:c9:63:0e:f8:25:cb:4e:2e:1b:a8:51:c2:49:10: 82:f8:bf:fa:0b:d6:a1:97:df:4c:32:3b:3d:8f:bf: 65:6a:51:9f:2b:87:7b:e7:1c:dc:28:98:c2:21:2a: fc:ba:57:c9:70:ea:22:74:62:8d:9a:05:87:7e:71: 75:ce:da:86:02:c4:50:d5:07:47:75:7c:4a:02:b5: d9:8b:68:ec:5f:54:3c:b9:d1:6e:65:1b:62:41:a3: 6f:18:68:4c:80:51:73:ff:0b:71:9c:14:66:9c:38: 1d:77:2a:f7:c7:91:79:2b:bd:1a:2b:73:4a:44:ac: 08:28:6a:e1:b2:10:9c:cd:6f:77:2d:7b:b8:05:3c: 53:35:33:a1:53:62:09:13:ee:ca:60:f1:02:63:70: be:90:05:d6:f9:f6:94:f0:38:8f:3e:10:b1:a9:a6: 85:53:b3:c2:c4:a1:b4:11:c4:5c:94:2d:02:86:1f: 30:84:5f:5a:00:f9:28:3b:72:19:61:55:9c:93:c3: 31:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:74:3C:4E:99:9E:1E:15:48:25:33:72:43:75:99:CC:D9:93:AF:5D X509v3 Authority Key Identifier: keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:1f:7b:0f:31:87:79:7c:b1:d0:52:96:36:61:d9:37:73:84: 0b:3b:ee:0c:59:c8:a5:66:a2:07:1a:56:df:8a:e7:ae:50:45: 5d:d6:d5:4e:fa:fd:37:02:60:e8:ed:24:af:f6:8c:ee:f3:12: 6a:40:16:46:b1:55:a2:f8:e0:45:f5:ce:02:79:e4:9e:a4:ed: cf:c1:77:52:a0:a2:3b:67:5b:43:1e:3a:39:ce:3d:7e:5e:a4: 5c:44:af:a6:01:b7:ce:8a:f4:0d:c9:98:e1:f2:39:71:c6:34: e6:92:b3:b8:0d:b5:7e:89:59:69:a0:ec:f1:dd:57:e7:60:10: 1d:55:5e:f9:65:1f:7c:12:b7:3b:5a:5d:60:c6:30:b5:5c:50: 9f:45:dc:10:22:d7:1c:fc:bf:e6:31:3b:19:73:32:99:82:04: 25:0c:8d:c8:59:37:1c:35:77:60:27:85:ac:43:42:a5:56:b1: 33:30:15:30:57:a8:24:48:86:9e:41:31:bc:6b:6a:43:2a:60: 58:62:b7:41:d5:84:ef:07:70:54:88:99:3d:8f:f8:0b:95:fb: 78:eb:85:f7:27:97:16:db:b3:c4:f6:f8:12:1a:9e:87:06:ee: de:a7:ef:62:be:b6:af:08:7f:ac:cf:79:a0:94:a0:92:9a:f5: 47:45:6d:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0Q1QjExMC8GA1UEBRMoMTBBQzYzMDY2RTlBQkM0MjJBQzVGNDVBMjI3MTBENTAy RUJFNDJDODAeFw0yNTEyMDUwNTE1MjZaFw0yNTEyMTIwNTE1MjZaMBgxFjAUBgNV BAMTDTY5MzI2YTZmLTI5MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDawCIw7eXsBU+5pPObh2STOBOdsbIKb4NTGIGd+nPT5HlDjZB59QMlhOK+7Dn/ PWj4FW1OMgtUmajLvfTJYw74JctOLhuoUcJJEIL4v/oL1qGX30wyOz2Pv2VqUZ8r h3vnHNwomMIhKvy6V8lw6iJ0Yo2aBYd+cXXO2oYCxFDVB0d1fEoCtdmLaOxfVDy5 0W5lG2JBo28YaEyAUXP/C3GcFGacOB13KvfHkXkrvRorc0pErAgoauGyEJzNb3ct e7gFPFM1M6FTYgkT7spg8QJjcL6QBdb59pTwOI8+ELGppoVTs8LEobQRxFyULQKG HzCEX1oA+Sg7chlhVZyTwzGfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSnQ8Tpme HhVIJTNyQ3WZzNmTr10wHwYDVR0jBBgwFoAUEKxjBm6avEIqxfRaInENUC6+Qsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3RDVCLzc5ODMzODVBNjky RTExRjBCRDBGNjgxOUM0RjlBRTAyL0VLeGpCbTZhdkVJcXhmUmFJbkVOVUM2LVFz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUt4akJtNmF2RUlxeGZSYUluRU5VQzYtUXNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 RDVCLzc5ODMzODVBNjkyRTExRjBCRDBGNjgxOUM0RjlBRTAyL0VLeGpCbTZhdkVJ cXhmUmFJbkVOVUM2LVFzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMIfew8xh3l8sdBSljZh2TdzhAs77gxZyKVmogcaVt+K565QRV3W1U76 /TcCYOjtJK/2jO7zEmpAFkaxVaL44EX1zgJ55J6k7c/Bd1KgojtnW0MeOjnOPX5e pFxEr6YBt86K9A3JmOHyOXHGNOaSs7gNtX6JWWmg7PHdV+dgEB1VXvllH3wStzta XWDGMLVcUJ9F3BAi1xz8v+YxOxlzMpmCBCUMjchZNxw1d2AnhaxDQqVWsTMwFTBX qCRIhp5BMbxrakMqYFhit0HVhO8HcFSImT2P+AuV+3jrhfcnlxbbs8T2+BIanocG 7t6n72K+tq8If6zPeaCUoJKa9UdFbUI= -----END CERTIFICATE-----Generated at Sun Dec 7 04:55:22 2025 by rpki-client