This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: 24MTefGP+7J+AlZAOYw9Kg9UDDEt2WHdCQKDX+m8fMA= Subject key identifier: 42:3B:9B:01:A7:92:D9:D1:62:3D:1A:F3:A6:96:F6:99:EC:3B:61:84 Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 0238 Signing time: Fri 05 Dec 2025 00:14:30 +0000 Manifest this update: Fri 05 Dec 2025 00:14:29 +0000 Manifest next update: Fri 12 Dec 2025 00:14:29 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: O/N1IVnUyF5VMZHWd85ecyxs4MHxS/3L628+zt8IN8Y=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: j+WiIpQXx8bOOXda/N2C9r1k53EnBU4V+zrlR0ZwoY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: Dec 5 00:14:29 2025 GMT Not After : Dec 12 00:14:29 2025 GMT Subject: CN=693223e6-7b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1c:0e:c9:67:3c:4d:85:56:89:9e:89:42:f7: 20:86:67:35:22:bb:1f:2e:1c:ca:12:38:07:9a:17: 80:33:25:d3:33:00:de:ff:35:0c:4d:be:55:e9:97: 76:79:06:d9:57:cf:b9:06:3c:21:39:f5:b4:52:fd: ef:23:15:4a:03:a3:50:57:64:1c:44:33:20:24:c0: 9e:37:5d:6a:8f:8e:a4:02:6d:db:03:ab:9e:50:a5: 7e:eb:c2:f7:b7:2b:bc:b9:26:1c:32:ed:34:21:fa: a7:9e:2b:a6:26:82:9e:ed:60:8a:00:25:42:5b:c7: 2a:48:2e:40:e5:5c:9f:3d:9b:33:d4:0d:54:e8:a4: 4d:59:0b:18:2c:4d:d5:4f:04:5e:ab:71:59:91:67: 9c:f8:e7:ad:43:5c:f4:22:2f:5e:40:c5:a9:b8:5e: 32:62:c4:34:e2:2c:e4:a2:c3:3a:cb:8d:48:d8:40: 07:e5:10:00:3a:ac:37:fe:32:4a:68:53:74:6c:dc: 5d:a1:6a:d6:59:80:1e:f4:a6:81:39:7c:3d:40:3b: e3:35:01:35:b9:db:88:cc:47:e8:1c:03:f9:83:0d: 16:1d:bf:0c:f8:54:3d:b5:4f:2c:22:05:36:83:6f: 94:4a:3b:5b:28:1e:f3:ab:71:3d:da:b5:14:d1:ff: 6c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3B:9B:01:A7:92:D9:D1:62:3D:1A:F3:A6:96:F6:99:EC:3B:61:84 X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:02:28:d0:b1:a3:24:73:03:67:2f:b3:fe:fb:75:9a:a3:2d: ae:73:c6:f8:d0:d5:ce:e2:ef:a6:96:6e:da:30:3f:a4:ac:5f: d3:0b:69:af:13:3e:ba:66:f0:b8:0c:82:03:8e:fe:e5:a2:9f: 81:09:b0:24:4e:55:81:eb:37:f1:80:d1:be:40:39:99:09:67: 69:2a:53:7f:8f:81:92:24:7f:fb:94:f6:57:a1:42:22:a2:63: 18:ce:57:9a:29:2a:ea:10:f2:21:a3:6f:4b:ea:77:e1:7c:56: 7b:2e:5f:d9:f8:7b:6d:a6:b5:54:81:27:e1:fb:e9:b2:a4:43: a5:29:46:e2:fc:ba:69:12:fe:38:2b:a0:30:43:a2:be:88:a1: 4b:84:86:ec:4f:df:d1:8a:1a:0b:ed:15:87:c4:6e:fe:97:5a: 12:73:fc:e3:fb:65:7e:a3:01:18:b6:3a:9c:d5:b9:5f:b0:3a: a8:fd:0c:00:fa:78:3a:03:98:83:70:0d:51:98:4f:3c:4b:7a: e8:0d:24:17:6a:47:58:6b:28:df:94:cc:02:09:c3:88:a6:54: c7:51:97:f2:20:86:7b:76:08:86:5a:50:d7:fe:0b:89:3d:43: 97:50:40:81:50:c7:ec:94:eb:20:9d:b2:3e:6f:d2:59:b0:2d: 49:58:23:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUxMjA1MDAxNDI5WhcNMjUxMjEyMDAxNDI5WjAYMRYwFAYD VQQDEw02OTMyMjNlNi03YjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xwOyWc8TYVWiZ6JQvcghmc1IrsfLhzKEjgHmheAMyXTMwDe/zUMTb5V6Zd2 eQbZV8+5BjwhOfW0Uv3vIxVKA6NQV2QcRDMgJMCeN11qj46kAm3bA6ueUKV+68L3 tyu8uSYcMu00IfqnniumJoKe7WCKACVCW8cqSC5A5VyfPZsz1A1U6KRNWQsYLE3V TwReq3FZkWec+OetQ1z0Ii9eQMWpuF4yYsQ04izkosM6y41I2EAH5RAAOqw3/jJK aFN0bNxdoWrWWYAe9KaBOXw9QDvjNQE1uduIzEfoHAP5gw0WHb8M+FQ9tU8sIgU2 g2+USjtbKB7zq3E92rUU0f9sCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI7mwGn ktnRYj0a86aW9pnsO2GEMB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcAijQsaMkcwNnL7P++3Waoy2uc8b40NXO4u+mlm7aMD+krF/TC2mv Ez66ZvC4DIIDjv7lop+BCbAkTlWB6zfxgNG+QDmZCWdpKlN/j4GSJH/7lPZXoUIi omMYzleaKSrqEPIho29L6nfhfFZ7Ll/Z+HttprVUgSfh++mypEOlKUbi/LppEv44 K6AwQ6K+iKFLhIbsT9/RihoL7RWHxG7+l1oSc/zj+2V+owEYtjqc1blfsDqo/QwA +ng6A5iDcA1RmE88S3roDSQXakdYayjflMwCCcOIplTHUZfyIIZ7dgiGWlDX/guJ PUOXUECBUMfslOsgnbI+b9JZsC1JWCPC -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:12 2025 by rpki-client