This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft File: eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json) Hash identifier: eFLAjE6xJU2u5R4l32sLVDGEnoo9UERbB+wy2p1u5lo= Subject key identifier: E5:7B:B3:1C:C7:7F:E2:BB:B4:ED:18:48:F7:16:8E:5A:24:B0:63:71 Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Certificate serial: 3547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft Manifest number: 3518 Signing time: Sat 06 Dec 2025 14:29:05 +0000 Manifest this update: Sat 06 Dec 2025 14:29:05 +0000 Manifest next update: Sat 13 Dec 2025 14:29:05 +0000 Files and hashes: 1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: KGD4UIiiy343Zu5wjX6wEX55RfXAbeCIxMC7eZ2a5PA=) 2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: CUUb/coZVwybMNB3Q6DnZxhNxSXx7mieErXaIHIRyww=) 3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: sRvMLmzA3faCvCgnj9Kc1Nyq/athaxPg1qdQG6qTSjA=) 4: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: pLIkppbdFI2Dvba2mWRCPANXKzDe4Q3IfvnPWtwGOsc=) 5: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: gkYrWkhbDnSZnPzaW3pf3edvz0FUTHjNjGt5hZNgUcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13639 (0x3547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Validity Not Before: Dec 6 14:29:05 2025 GMT Not After : Dec 13 14:29:05 2025 GMT Subject: CN=69343db1-a859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:50:de:b1:c4:0d:40:76:65:6c:87:b7:ca: c5:c9:85:d3:2e:c7:6b:09:71:40:0d:e6:f1:36:39: 78:18:68:bb:4d:13:30:fd:2b:5f:e1:63:bc:04:46: f0:11:2c:ff:1c:34:78:35:20:4a:a6:4e:fc:f8:86: 57:a2:19:a4:de:04:fb:2c:4c:85:87:69:da:50:c2: 3f:88:f9:d7:aa:ca:a3:1f:91:8f:96:20:73:40:09: 9e:59:7c:bb:a9:d1:d8:f7:7d:34:82:22:7e:95:7f: 94:72:d7:70:19:1e:4f:0b:f9:fb:85:67:94:f5:b7: 80:b2:d5:59:cb:bb:81:da:1b:8a:0b:40:a0:e9:f8: a7:76:f5:2c:b1:85:67:07:14:8a:9f:44:43:f2:2c: 45:74:c8:c9:df:1d:00:e8:52:09:47:be:d9:de:66: 0c:02:ba:d8:0a:bb:f5:2b:2d:82:82:0f:cc:f7:f0: b2:d2:02:9e:f4:57:73:f1:ea:4a:3f:7c:35:81:87: 3d:cf:d0:e1:7c:00:7f:83:e3:1e:15:17:07:e7:1a: b1:45:be:0a:93:a6:ab:45:35:99:e7:9c:82:da:75: 9e:9e:da:4d:bd:ab:b7:55:5f:69:a0:87:53:ac:e2: db:6e:f8:33:75:26:e1:8b:7a:c3:23:d2:3f:4f:56: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7B:B3:1C:C7:7F:E2:BB:B4:ED:18:48:F7:16:8E:5A:24:B0:63:71 X509v3 Authority Key Identifier: keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:94:97:3b:b6:e2:20:18:fd:f1:57:d8:15:3f:f2:dd:0c:2b: 77:53:0c:ce:f6:a3:9f:45:eb:b2:e3:8c:cd:c9:7d:9b:46:ec: ea:f4:90:81:6d:0d:20:c5:5b:22:ba:e2:61:d9:13:80:93:2a: 86:de:7a:b9:00:4e:01:aa:a9:51:95:da:a2:c0:0b:69:05:7f: 91:28:63:c1:cd:11:1d:8a:88:76:98:d1:15:b0:54:a5:c1:2c: 4e:78:38:fb:38:6a:e7:78:7e:2e:6a:e0:24:83:a0:d4:ea:4e: d9:84:51:69:c7:e8:84:92:d1:16:01:12:68:89:b2:ac:9c:9a: ec:d9:2c:d2:51:12:e4:ef:e6:2a:de:f9:44:2f:e8:c6:94:df: 2e:ae:e9:e1:8c:30:ce:b2:41:40:28:4a:30:26:a9:ec:59:3a: 2d:8e:0d:90:d3:d9:a9:ec:2b:d6:3a:5d:b8:ea:16:41:29:46: b1:6e:18:1e:8b:96:dd:97:94:6a:ad:04:e2:35:0c:0d:f6:89: eb:4c:53:47:90:f2:be:d1:e2:65:99:2b:b4:98:b2:bc:f0:03: 8c:1f:2e:4d:66:39:1e:34:45:39:c7:42:47:d0:e0:e8:01:70: 7d:4c:cc:70:e7:35:3a:e3:f7:ba:0f:ab:d8:44:6f:a3:13:c2: dc:b3:b2:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU5QTUxMTAvBgNVBAUTKDdBQUM2N0RCQzFFQjkyOEUyOTUxMzYyRTBCQzZBQzc2 NzdFMkRDN0IwHhcNMjUxMjA2MTQyOTA1WhcNMjUxMjEzMTQyOTA1WjAYMRYwFAYD VQQDEw02OTM0M2RiMS1hODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr91Q3rHEDUB2ZWyHt8rFyYXTLsdrCXFADebxNjl4GGi7TRMw/Stf4WO8BEbw ESz/HDR4NSBKpk78+IZXohmk3gT7LEyFh2naUMI/iPnXqsqjH5GPliBzQAmeWXy7 qdHY9300giJ+lX+UctdwGR5PC/n7hWeU9beAstVZy7uB2huKC0Cg6findvUssYVn BxSKn0RD8ixFdMjJ3x0A6FIJR77Z3mYMArrYCrv1Ky2Cgg/M9/Cy0gKe9Fdz8epK P3w1gYc9z9DhfAB/g+MeFRcH5xqxRb4Kk6arRTWZ55yC2nWentpNvau3VV9poIdT rOLbbvgzdSbhi3rDI9I/T1Y6ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOV7sxzH f+K7tO0YSPcWjloksGNxMB8GA1UdIwQYMBaAFHqsZ9vB65KOKVE2LgvGrHZ34tx7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTlBNS9BMzJFRkVCODFE ODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtvNHBVVFl1Qzhhc2RuZmkz SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VxeG4yOEhya280cFVUWXVDOGFzZG5maTNIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTlBNS9BMzJFRkVCODFEODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtv NHBVVFl1Qzhhc2RuZmkzSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGlJc7tuIgGP3xV9gVP/LdDCt3UwzO9qOfReuy44zNyX2bRuzq9JCB bQ0gxVsiuuJh2ROAkyqG3nq5AE4BqqlRldqiwAtpBX+RKGPBzREdioh2mNEVsFSl wSxOeDj7OGrneH4uauAkg6DU6k7ZhFFpx+iEktEWARJoibKsnJrs2SzSURLk7+Yq 3vlEL+jGlN8urunhjDDOskFAKEowJqnsWTotjg2Q09mp7CvWOl246hZBKUaxbhge i5bdl5RqrQTiNQwN9onrTFNHkPK+0eJlmSu0mLK88AOMHy5NZjkeNEU5x0JH0ODo AXB9TMxw5zU64/e6D6vYRG+jE8Lcs7Iv -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:28 2025 by rpki-client