This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft File: eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json) Hash identifier: 0QTD5CtYf6n3A/mR0nCddbPn7mI5J+SNXwTll8t9D3g= Subject key identifier: AE:F1:DF:92:ED:9A:54:0C:0C:55:0E:92:81:64:88:4A:02:2C:28:5A Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 Certificate issuer: /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Certificate serial: 048A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft Manifest number: 0485 Signing time: Sat 20 Dec 2025 23:20:20 +0000 Manifest this update: Sat 20 Dec 2025 23:20:20 +0000 Manifest next update: Sat 27 Dec 2025 23:20:20 +0000 Files and hashes: 1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: SqopgXYBU5YbOxpu/FBlFDVQEjqJlFIPa0msIiWPUHg=) 2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: hAIkEeLEWcB2wcEGanDh+e9b0MM5CnTkz5SOu7dH+to=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Validity Not Before: Dec 20 23:20:20 2025 GMT Not After : Dec 27 23:20:20 2025 GMT Subject: CN=69472f34-cac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:32:80:c4:38:17:b1:c8:79:1b:9e:ac:b0: 05:ca:59:82:64:6e:53:91:22:bf:fd:d1:b4:9c:f9: ff:10:58:88:53:78:d7:1c:b3:0d:05:ca:30:d5:6c: 61:6c:9e:9c:a7:77:72:05:de:5e:4f:59:a0:73:61: 17:14:11:71:65:6f:34:30:e8:6c:32:74:e9:ce:1c: 60:47:25:75:4e:9c:1b:47:6f:52:18:17:22:77:6e: 86:1e:6e:bc:2d:f0:85:c6:e3:ec:4f:eb:0f:cd:03: ae:52:3a:22:14:e4:11:be:84:93:9b:e4:0c:27:ed: 5b:04:05:03:44:f6:5f:fc:68:07:96:fc:96:3d:a6: dc:fe:78:21:3a:27:2d:90:c9:4b:44:25:8f:f4:87: 3f:d7:2f:d7:01:33:19:66:ac:be:84:7e:a7:93:b8: 2b:5a:12:3b:3b:d9:b3:ae:7d:66:46:8b:c1:3f:1f: ab:c6:34:16:e1:cc:df:66:3e:6c:78:3a:22:a1:68: ed:f7:27:8c:99:c4:af:97:d1:eb:64:40:c8:1c:b2: 46:61:c6:ca:f0:27:68:74:67:54:a4:37:d6:22:07: d5:21:0f:6a:b3:f7:bc:00:68:21:b4:9a:99:97:9b: 31:81:35:59:e5:7e:26:c4:74:92:82:c1:b7:e4:72: 68:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F1:DF:92:ED:9A:54:0C:0C:55:0E:92:81:64:88:4A:02:2C:28:5A X509v3 Authority Key Identifier: keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:23:37:86:90:a6:06:53:ff:55:19:66:79:dc:50:59:d4:3d: 5a:76:dd:c1:e1:4f:c2:88:78:9c:1e:e1:3c:44:0b:15:e7:89: 7f:8c:a4:8f:5a:78:9a:b1:1f:0f:82:83:3f:25:c1:e1:ec:41: d3:0d:0b:5e:c6:4e:d0:9b:9f:d6:a1:79:7c:3a:32:f2:2d:59: 7e:45:65:1c:26:d8:3a:ac:ba:db:9d:80:aa:77:d9:16:00:ef: e1:f4:67:a3:45:a1:8e:4e:c9:e8:f9:37:94:02:a4:99:85:c9: b5:ba:d6:f1:c2:51:66:0e:0e:bb:3e:ac:f9:79:3e:40:b8:c9: 4a:82:1e:d9:3c:60:22:47:81:e8:c4:d6:d9:fc:f5:e1:1c:86: 29:cd:e7:7a:3b:97:ad:58:ee:8d:41:26:42:03:0c:c9:53:25: 95:2e:1a:31:84:02:a2:a7:66:81:c9:45:fb:94:f0:ca:f5:b8: a1:a8:a8:7d:21:2d:20:aa:92:76:9e:80:3b:ab:b2:e9:87:53: cd:ec:b3:c6:4f:31:53:07:09:9b:18:fd:a2:8d:ee:34:89:03: c6:10:54:dd:01:35:10:6d:66:81:94:99:39:d4:a1:55:c7:cf: 09:0b:8e:7b:7b:79:7a:df:17:96:79:4c:64:a8:55:d8:64:7e: d8:92:d6:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGNTIxMTAvBgNVBAUTKDc5N0RGQTE4ODM5Rjg3RDEzMTBFOUNBOUMzNDEwQUJF QjY4MzlFNzQwHhcNMjUxMjIwMjMyMDIwWhcNMjUxMjI3MjMyMDIwWjAYMRYwFAYD VQQDDA02OTQ3MmYzNC1jYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozQygMQ4F7HIeRuerLAFylmCZG5TkSK//dG0nPn/EFiIU3jXHLMNBcow1Wxh bJ6cp3dyBd5eT1mgc2EXFBFxZW80MOhsMnTpzhxgRyV1TpwbR29SGBcid26GHm68 LfCFxuPsT+sPzQOuUjoiFOQRvoSTm+QMJ+1bBAUDRPZf/GgHlvyWPabc/nghOict kMlLRCWP9Ic/1y/XATMZZqy+hH6nk7grWhI7O9mzrn1mRovBPx+rxjQW4czfZj5s eDoioWjt9yeMmcSvl9HrZEDIHLJGYcbK8CdodGdUpDfWIgfVIQ9qs/e8AGghtJqZ l5sxgTVZ5X4mxHSSgsG35HJoMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7x35Lt mlQMDFUOkoFkiEoCLChaMB8GA1UdIwQYMBaAFHl9+hiDn4fRMQ6cqcNBCr62g550 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Y1Mi9FOTQ2NjZDQzY4 QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5RXhEcHlwdzBFS3ZyYURu blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYMzZHSU9maDlFeERweXB3MEVLdnJhRG5uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Y1Mi9FOTQ2NjZDQzY4QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5 RXhEcHlwdzBFS3ZyYURublEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVIzeGkKYGU/9VGWZ53FBZ1D1adt3B4U/CiHicHuE8RAsV54l/jKSP WniasR8PgoM/JcHh7EHTDQtexk7Qm5/WoXl8OjLyLVl+RWUcJtg6rLrbnYCqd9kW AO/h9GejRaGOTsno+TeUAqSZhcm1utbxwlFmDg67Pqz5eT5AuMlKgh7ZPGAiR4Ho xNbZ/PXhHIYpzed6O5etWO6NQSZCAwzJUyWVLhoxhAKip2aByUX7lPDK9bihqKh9 IS0gqpJ2noA7q7Lph1PN7LPGTzFTBwmbGP2ije40iQPGEFTdATUQbWaBlJk51KFV x88JC457e3l63xeWeUxkqFXYZH7Yktbc -----END CERTIFICATE-----Generated at Mon Dec 22 06:11:18 2025 by rpki-client