This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: B7jLohMzVOZjOcQbpo+wLjqNkxdIh7r1lgipFTe5UiY= Subject key identifier: A9:97:93:F3:B2:95:30:B0:0D:C5:25:A2:2E:FB:32:4A:C6:96:8C:58 Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 0766 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 0766 Signing time: Sat 06 Dec 2025 19:36:12 +0000 Manifest this update: Sat 06 Dec 2025 19:36:11 +0000 Manifest next update: Sat 13 Dec 2025 19:36:11 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: 4I7a/nQLpqfDu1qrmzJxTUZ7pwvaQ9dq4peYL4/8/28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1894 (0x766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: Dec 6 19:36:11 2025 GMT Not After : Dec 13 19:36:11 2025 GMT Subject: CN=693485ac-4e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:da:1f:a6:26:45:45:a4:a9:f0:dd:60:e2: 02:6c:93:a1:a1:a6:34:d6:5f:bc:1f:db:41:c0:c1: e7:14:46:e2:df:0f:a9:48:fc:b4:ae:59:52:1a:2c: 31:14:27:6c:85:72:d5:36:69:8c:9e:e3:1e:a1:4d: bb:43:e2:9c:d3:be:7f:61:16:ba:fd:60:96:4b:18: 16:9d:5d:0a:74:88:04:4e:8a:f0:70:48:8d:cb:3a: a2:e9:1b:21:35:47:45:ac:60:6b:f5:e9:28:3e:c1: 78:a6:e8:93:c2:7a:b4:5e:a2:dc:11:ae:26:84:fd: d5:6a:19:a3:25:1e:fb:74:6a:17:81:79:6e:9a:79: a4:50:82:6c:8c:b3:6d:1a:34:9a:15:ae:32:5a:06: a8:ed:60:50:a6:c6:d5:6f:14:bf:07:c9:f9:28:ac: e1:53:7f:25:6d:34:4d:ca:9c:1c:40:89:d0:72:b8: bd:3e:79:ff:cc:d9:6a:90:fb:b3:53:34:c0:c2:cd: 78:2d:b6:2e:6f:f1:d4:5f:c5:29:ac:53:02:29:a9: 94:13:16:c1:b7:7e:60:dc:52:b9:19:fc:69:ab:fd: d4:d0:51:03:41:23:bf:25:91:15:52:03:c1:8b:45: 46:19:c5:93:fb:5f:10:54:fd:d6:74:c8:71:b7:5a: f6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:97:93:F3:B2:95:30:B0:0D:C5:25:A2:2E:FB:32:4A:C6:96:8C:58 X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:60:2a:04:9d:7a:84:cf:42:6c:7c:ba:92:a6:e6:8b:83:2e: 71:2f:cb:e1:93:35:b5:f9:3c:2d:7d:a9:77:bb:f3:d6:e6:c2: 1b:df:52:46:b7:d8:4b:4b:09:66:1c:f9:31:ad:5f:b0:fe:fb: 89:ba:12:3d:38:a2:c8:12:b1:69:cd:9a:ce:db:4f:c6:d5:97: 1f:84:79:ca:77:0c:1f:a6:88:76:96:8d:84:f6:46:2d:06:f0: 47:38:79:e8:81:34:c7:92:28:d2:08:d9:16:28:f5:bf:28:39: c1:a6:e5:3a:6f:94:16:ad:c5:06:54:5c:80:5e:2f:ee:ef:1b: a1:1d:b3:b3:1f:5a:97:16:b1:5b:87:7e:0e:14:45:32:da:28: dd:ec:2d:0d:3e:85:32:95:b0:6a:fa:c7:bf:2d:9f:51:74:98: bb:e8:2f:b3:46:c5:ad:26:f9:b4:c1:6e:c7:1a:94:cd:96:38: c2:3b:ff:b5:24:12:ce:9a:78:cb:f3:5e:4a:ec:f0:7b:75:a3: 45:cd:cd:20:e7:3e:3e:f9:15:02:2d:4c:b1:bf:74:d1:ce:24: e3:a2:4b:aa:f5:20:fb:c7:9a:d5:b9:de:d2:80:63:88:3d:02: 7d:e1:98:78:88:37:94:e7:2a:20:69:77:8f:d1:62:56:6d:c2: 02:a1:58:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjUxMjA2MTkzNjExWhcNMjUxMjEzMTkzNjExWjAYMRYwFAYD VQQDEw02OTM0ODVhYy00ZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ELaH6YmRUWkqfDdYOICbJOhoaY01l+8H9tBwMHnFEbi3w+pSPy0rllSGiwx FCdshXLVNmmMnuMeoU27Q+Kc075/YRa6/WCWSxgWnV0KdIgETorwcEiNyzqi6Rsh NUdFrGBr9ekoPsF4puiTwnq0XqLcEa4mhP3VahmjJR77dGoXgXlumnmkUIJsjLNt GjSaFa4yWgao7WBQpsbVbxS/B8n5KKzhU38lbTRNypwcQInQcri9Pnn/zNlqkPuz UzTAws14LbYub/HUX8UprFMCKamUExbBt35g3FK5Gfxpq/3U0FEDQSO/JZEVUgPB i0VGGcWT+18QVP3WdMhxt1r24QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmXk/Oy lTCwDcUloi77MkrGloxYMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUYCoEnXqEz0JsfLqSpuaLgy5xL8vhkzW1+Twtfal3u/PW5sIb31JG t9hLSwlmHPkxrV+w/vuJuhI9OKLIErFpzZrO20/G1ZcfhHnKdwwfpoh2lo2E9kYt BvBHOHnogTTHkijSCNkWKPW/KDnBpuU6b5QWrcUGVFyAXi/u7xuhHbOzH1qXFrFb h34OFEUy2ijd7C0NPoUylbBq+se/LZ9RdJi76C+zRsWtJvm0wW7HGpTNljjCO/+1 JBLOmnjL815K7PB7daNFzc0g5z4++RUCLUyxv3TRziTjokuq9SD7x5rVud7SgGOI PQJ94Zh4iDeU5yogaXeP0WJWbcICoVhQ -----END CERTIFICATE-----Generated at Sat Dec 6 23:04:24 2025 by rpki-client