This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft File: eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft (raw, json) Hash identifier: WCgqcbdNmXTMWEC37W5vC74nIvauzctVnNEAzyip16Q= Subject key identifier: 7A:3E:DE:9C:4D:9A:D6:83:C1:AA:06:1C:1E:38:54:70:D5:62:4D:0E Authority key identifier: 79:2C:45:66:B9:B0:25:8A:B1:65:53:82:2F:19:DF:FE:84:A2:DC:B8 Certificate issuer: /CN=A9136359/serialNumber=792C4566B9B0258AB16553822F19DFFE84A2DCB8 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft Manifest number: 20 Signing time: Fri 19 Dec 2025 06:40:33 +0000 Manifest this update: Fri 19 Dec 2025 06:40:32 +0000 Manifest next update: Fri 26 Dec 2025 06:40:32 +0000 Files and hashes: 1: eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl (hash: RkGkIc90in6+oYs95BqwsMc+mvY+DZex3nhD+oaKHDI=) 2: 698A914EAE2711F096416455C4F9AE02.roa (hash: 7Jh4bbECd/hNw4i818yA2WJfwAYJwUXesvOfcYZ46i8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136359, serialNumber=792C4566B9B0258AB16553822F19DFFE84A2DCB8 Validity Not Before: Dec 19 06:40:32 2025 GMT Not After : Dec 26 06:40:32 2025 GMT Subject: CN=6944f361-e400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2f:0b:8b:32:99:45:33:6c:36:de:8c:50:7f: eb:96:81:ab:8e:fc:97:cd:de:ff:b8:84:c0:dc:d4: a7:4a:86:f4:a8:91:57:e4:e6:7c:3a:3a:62:90:a5: 9c:ac:c9:2c:84:67:7e:bf:3a:1a:d8:fd:a5:9b:c6: 75:b6:4c:98:b3:a8:b9:0e:9a:80:0b:14:74:7c:60: f3:19:90:4d:d6:2b:c9:90:41:d4:fc:51:63:d8:7f: ea:0b:0a:6d:5d:0c:7e:88:f5:b9:91:86:65:0e:1c: d6:1a:79:47:a3:18:54:96:23:67:d7:bd:4a:1f:8d: 64:83:fb:d3:8a:2e:f6:b8:f6:0e:ae:55:32:b4:30: 63:f4:69:03:1f:e0:7f:68:61:2a:f5:47:f5:b2:da: 72:34:63:bd:32:89:d0:bc:2f:60:d3:9f:b6:77:bc: c9:18:22:f4:de:06:ce:3b:e9:47:df:b0:b8:10:10: 46:4e:3c:0d:94:7c:dd:16:75:aa:e5:16:2a:1f:a0: ae:05:c7:a2:b1:53:e8:d9:4a:d2:f4:8c:96:d1:7f: 37:0e:0b:7e:36:5d:92:fe:d8:68:f3:83:fc:61:ac: 3e:81:fb:7c:c2:d3:ec:80:17:52:b8:56:78:dd:8a: 72:bf:f6:1f:73:82:db:9a:c8:d4:73:23:68:f0:11: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3E:DE:9C:4D:9A:D6:83:C1:AA:06:1C:1E:38:54:70:D5:62:4D:0E X509v3 Authority Key Identifier: keyid:79:2C:45:66:B9:B0:25:8A:B1:65:53:82:2F:19:DF:FE:84:A2:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:fa:3d:10:29:a1:9c:85:6b:51:46:20:e6:cd:48:f5:a9:2c: 3f:38:a9:af:4f:b2:c8:b8:8e:c0:10:77:be:53:c3:b3:e6:d6: e2:ed:8d:98:d4:b5:39:47:1e:a9:11:76:62:41:30:55:81:f6: 94:99:e2:0e:f8:a1:e0:17:13:3d:b8:22:13:eb:ce:1f:94:f6: 36:55:22:61:d6:e5:40:50:e1:56:62:95:84:98:9a:3e:23:ea: d6:16:34:53:ea:0d:e2:7d:80:48:3d:74:56:39:31:a6:d7:68: 1a:0b:fa:de:5a:e3:e9:56:78:d0:28:6e:0b:90:4a:2f:42:87: 2b:de:e5:a6:ee:8a:1f:06:a6:18:d1:4e:df:65:77:c4:cd:15: 31:23:29:f9:14:82:a0:f2:b6:e7:3c:ff:2b:88:21:d3:93:0f: 53:f1:e7:c5:c4:7a:f8:75:7e:b9:c2:01:6a:d1:b8:69:b7:b9: 0d:52:78:f3:45:75:1a:7b:42:b9:5f:f4:08:f8:7c:d0:ea:4d: 91:54:ee:3c:2b:c4:fc:b2:18:b0:c0:d7:30:d0:41:a4:e6:f8: db:3a:8b:aa:17:71:6d:75:ad:be:a6:f0:94:2d:46:3c:08:20: fe:55:ae:92:c4:70:ac:40:c5:8e:5d:b8:f4:61:9e:1d:1e:83: ef:e8:2f:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjM1OTExMC8GA1UEBRMoNzkyQzQ1NjZCOUIwMjU4QUIxNjU1MzgyMkYxOURGRkU4 NEEyRENCODAeFw0yNTEyMTkwNjQwMzJaFw0yNTEyMjYwNjQwMzJaMBgxFjAUBgNV BAMMDTY5NDRmMzYxLWU0MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkLwuLMplFM2w23oxQf+uWgauO/JfN3v+4hMDc1KdKhvSokVfk5nw6OmKQpZys ySyEZ36/OhrY/aWbxnW2TJizqLkOmoALFHR8YPMZkE3WK8mQQdT8UWPYf+oLCm1d DH6I9bmRhmUOHNYaeUejGFSWI2fXvUofjWSD+9OKLva49g6uVTK0MGP0aQMf4H9o YSr1R/Wy2nI0Y70yidC8L2DTn7Z3vMkYIvTeBs476UffsLgQEEZOPA2UfN0Wdarl FiofoK4Fx6KxU+jZStL0jJbRfzcOC342XZL+2Gjzg/xhrD6B+3zC0+yAF1K4Vnjd inK/9h9zgtuayNRzI2jwERKVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUej7enE2a 1oPBqgYcHjhUcNViTQ4wHwYDVR0jBBgwFoAUeSxFZrmwJYqxZVOCLxnf/oSi3Lgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MzU5LzY2NjBEODhBQUUy NjExRjBCQ0ZGODA1M0M0RjlBRTAyL2VTeEZacm13SllxeFpWT0NMeG5mX29TaTNM Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVN4RlpybXdKWXF4WlZPQ0x4bmZfb1NpM0xnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MzU5LzY2NjBEODhBQUUyNjExRjBCQ0ZGODA1M0M0RjlBRTAyL2VTeEZacm13Sllx eFpWT0NMeG5mX29TaTNMZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKf6PRApoZyFa1FGIObNSPWpLD84qa9Pssi4jsAQd75Tw7Pm1uLtjZjU tTlHHqkRdmJBMFWB9pSZ4g74oeAXEz24IhPrzh+U9jZVImHW5UBQ4VZilYSYmj4j 6tYWNFPqDeJ9gEg9dFY5MabXaBoL+t5a4+lWeNAobguQSi9Chyve5abuih8GphjR Tt9ld8TNFTEjKfkUgqDytuc8/yuIIdOTD1Px58XEevh1frnCAWrRuGm3uQ1SePNF dRp7Qrlf9Aj4fNDqTZFU7jwrxPyyGLDA1zDQQaTm+Ns6i6oXcW11rb6m8JQtRjwI IP5VrpLEcKxAxY5duPRhnh0eg+/oL+g= -----END CERTIFICATE-----Generated at Fri Dec 19 18:01:40 2025 by rpki-client