This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json) Hash identifier: u7qY9n9sf+sL2bm/sgxk5idPbl1EaKjN5Ni+iAaV8/Q= Subject key identifier: E0:17:0F:62:0B:73:E6:65:9F:99:7F:E5:71:25:B1:9E:E4:C9:E3:87 Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft Manifest number: 45 Signing time: Fri 05 Dec 2025 05:15:50 +0000 Manifest this update: Fri 05 Dec 2025 05:15:49 +0000 Manifest next update: Fri 12 Dec 2025 05:15:49 +0000 Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: waGqZEmRMZPGkDi9mj1Z9A6edSev84FbZbqhY407mU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Validity Not Before: Dec 5 05:15:49 2025 GMT Not After : Dec 12 05:15:49 2025 GMT Subject: CN=69326a85-3815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:10:be:e0:98:ae:85:39:49:87:b6:ef:f3: 0c:33:11:08:2c:4f:e0:f7:aa:f2:94:4b:11:a3:f3: 3d:39:04:3c:ba:59:26:00:f6:5d:3b:f5:31:28:a1: 69:f3:57:1c:63:42:25:3f:cc:f2:c0:6e:78:73:09: 19:68:6e:e2:56:20:3f:3f:42:38:1c:34:56:d2:60: bb:65:03:11:b6:17:ab:20:96:81:d0:59:43:0c:7c: c0:cc:72:64:a7:ce:a4:ef:d3:19:14:6e:22:5d:da: b1:25:c8:62:99:8c:18:3f:35:c4:25:52:19:00:38: d1:90:5b:e0:c0:f9:29:25:15:6e:ab:5b:98:7d:e9: 2f:b3:2d:4d:1c:ab:07:30:c5:0d:7a:14:92:b9:60: c2:59:73:30:12:a3:80:db:99:57:2f:a0:f7:9d:ce: ec:af:7a:20:69:ad:77:7d:bb:da:2e:c0:57:89:3c: 73:98:88:da:b6:67:8a:53:d5:ad:a5:04:f3:62:6b: ad:c0:3d:b4:9b:a9:ca:38:fb:aa:19:60:72:0f:35: 9b:e4:ee:f3:e0:63:e7:7b:24:52:b3:50:be:8b:a5: 0c:af:2b:ae:32:75:57:68:df:36:40:68:7a:c8:5a: 87:2f:a1:8c:c5:07:21:10:95:15:55:1c:a0:c0:b5: b4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:17:0F:62:0B:73:E6:65:9F:99:7F:E5:71:25:B1:9E:E4:C9:E3:87 X509v3 Authority Key Identifier: keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:d7:3c:69:f9:e3:e8:c3:4d:f6:f7:f9:49:81:e7:96:dd:23: 12:26:4d:ba:5e:7e:35:0c:34:be:4d:53:67:63:67:d5:30:31: b4:59:c4:ed:6e:51:c1:09:ac:b1:db:ab:8e:07:e8:31:2a:8a: e8:c0:57:f8:a7:e9:e0:a9:3d:d8:b2:3e:ef:42:20:24:44:56: 9f:56:3e:a5:b2:77:ec:57:32:b9:ac:fb:92:c7:ec:cc:6b:bc: 3c:51:e0:f3:84:ac:2e:9c:81:21:48:79:fb:c4:6d:8a:f0:55: 5c:bd:44:e8:0c:28:22:e4:ef:a3:ef:26:70:ff:48:0e:90:b9: b7:8e:92:0a:1b:40:03:6d:eb:46:29:88:8e:20:68:44:82:43: 34:0c:9d:63:69:8b:8f:f2:e9:e0:b8:1d:a2:2c:69:2b:23:1a: 13:a0:e0:c9:1c:45:c5:18:e1:f7:47:9e:bc:1c:a0:ba:c4:4a: a5:13:1b:9c:85:fa:cd:5d:7d:a1:96:d3:ec:ec:7c:ec:6b:09: 9c:cd:c2:7e:2a:6b:1d:cf:ac:c8:5f:8f:1f:c8:d7:a5:be:9e: dc:b9:cd:c5:2e:68:4f:3e:8a:6c:01:82:b3:02:dd:b4:1e:22: e6:46:8f:66:45:f4:b6:41:ae:a7:47:bb:bb:68:40:58:ae:d2: 9b:f6:de:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkRDMDExMC8GA1UEBRMoMTE3QzBENkQxOUJGQkE0OEI1RkE5RTUxN0QwRTY5MjY1 NUM5OEM0NDAeFw0yNTEyMDUwNTE1NDlaFw0yNTEyMTIwNTE1NDlaMBgxFjAUBgNV BAMTDTY5MzI2YTg1LTM4MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+CxC+4JiuhTlJh7bv8wwzEQgsT+D3qvKUSxGj8z05BDy6WSYA9l079TEooWnz VxxjQiU/zPLAbnhzCRlobuJWID8/QjgcNFbSYLtlAxG2F6sgloHQWUMMfMDMcmSn zqTv0xkUbiJd2rElyGKZjBg/NcQlUhkAONGQW+DA+SklFW6rW5h96S+zLU0cqwcw xQ16FJK5YMJZczASo4DbmVcvoPedzuyveiBprXd9u9ouwFeJPHOYiNq2Z4pT1a2l BPNia63APbSbqco4+6oZYHIPNZvk7vPgY+d7JFKzUL6LpQyvK64ydVdo3zZAaHrI WocvoYzFByEQlRVVHKDAtbTPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4BcPYgtz 5mWfmX/lcSWxnuTJ44cwHwYDVR0jBBgwFoAUEXwNbRm/uki1+p5RfQ5pJlXJjEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGREMwLzMzMTFGMEVFNjlF OTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVh3TmJSbV91a2kxLXA1UmZRNXBKbFhKakVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG REMwLzMzMTFGMEVFNjlFOTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtp MS1wNVJmUTVwSmxYSmpFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFLXPGn54+jDTfb3+UmB55bdIxImTbpefjUMNL5NU2djZ9UwMbRZxO1u UcEJrLHbq44H6DEqiujAV/in6eCpPdiyPu9CICREVp9WPqWyd+xXMrms+5LH7Mxr vDxR4POErC6cgSFIefvEbYrwVVy9ROgMKCLk76PvJnD/SA6QubeOkgobQANt60Yp iI4gaESCQzQMnWNpi4/y6eC4HaIsaSsjGhOg4MkcRcUY4fdHnrwcoLrESqUTG5yF +s1dfaGW0+zsfOxrCZzNwn4qax3PrMhfjx/I16W+nty5zcUuaE8+imwBgrMC3bQe IuZGj2ZF9LZBrqdHu7toQFiu0pv23sc= -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:13 2025 by rpki-client