This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft File: E8ct8cUeLKIRyldmUWjPfHx0cpI.mft (raw, json) Hash identifier: ZocKIi8zBSg4JNoEF/MIUkTIMzDyI3yHKDA4R7VQkDY= Subject key identifier: EC:E4:77:6A:56:AD:C5:B7:8E:E5:62:7C:EA:A0:78:60:FE:AE:52:05 Authority key identifier: 13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 Certificate issuer: /CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft Manifest number: 0143 Signing time: Sun 21 Dec 2025 03:36:25 +0000 Manifest this update: Sun 21 Dec 2025 03:36:25 +0000 Manifest next update: Sun 28 Dec 2025 03:36:25 +0000 Files and hashes: 1: E8ct8cUeLKIRyldmUWjPfHx0cpI.crl (hash: qBn+tSxHgLrvxM3MnO6jDOlET07SycTfRZGb+gxs86E=) 2: 7D211148F64911EEBE36B826C4F9AE02.roa (hash: 23z4JEUFNko8Hv77YRE2junsGcE7MgL4d2UYU11q19Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B73C, serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Validity Not Before: Dec 21 03:36:25 2025 GMT Not After : Dec 28 03:36:25 2025 GMT Subject: CN=69476b39-b4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4b:7f:b3:12:99:fa:38:8b:79:1d:d9:a2:ea: 27:a2:e2:01:5b:71:d4:47:25:54:44:9b:13:03:c8: e1:0e:c8:70:92:d2:95:76:98:64:dd:7f:57:8b:1c: 2e:18:fb:a2:76:45:79:82:11:48:aa:ce:70:1f:b0: b7:6c:cf:82:e5:f0:7a:fb:7f:a1:2e:e4:89:3f:2c: de:b9:30:5c:a7:ce:97:4f:d5:58:4d:a7:cd:16:28: 3e:51:44:f2:aa:73:ba:16:a5:6e:b8:cd:e7:5e:94: c4:4c:9b:91:61:6c:5e:da:4b:aa:5d:b3:0c:16:69: 6b:1b:e6:43:43:e8:38:c1:bc:97:95:d7:f7:52:ec: 92:d3:04:42:a2:52:ae:06:65:a1:b7:c1:b9:28:3c: c5:aa:23:7b:2b:de:40:ff:1b:66:0a:3e:d1:a1:b7: 10:f6:5f:c6:54:ba:e2:92:98:2f:bf:77:4f:db:17: 32:7c:1d:6c:3d:03:c2:6e:ea:67:a1:48:95:61:d3: c6:c9:83:aa:61:54:e3:e8:18:f9:98:57:8e:a0:ae: 1a:19:dc:c3:7f:d0:a0:9b:5e:57:54:a0:0c:d7:13: 62:95:5b:01:62:95:c3:8d:36:71:60:b1:43:1c:9b: 0b:5d:20:01:83:ae:56:63:b7:3a:b8:03:29:e1:76: 28:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E4:77:6A:56:AD:C5:B7:8E:E5:62:7C:EA:A0:78:60:FE:AE:52:05 X509v3 Authority Key Identifier: keyid:13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b7:31:79:c1:f0:bf:ab:aa:9e:91:1d:91:82:28:49:d2:9e: 5d:ac:bf:30:2e:3e:0d:29:73:45:80:1d:07:6d:8d:ae:5f:b3: 32:b6:08:b4:7a:0d:7e:c3:21:45:07:8d:f2:36:d4:77:e2:2c: 56:b0:73:b7:81:ef:2b:ff:0c:23:9a:cb:06:c9:cd:e6:68:af: 0b:7b:dc:6e:c1:73:5c:c4:ff:86:79:36:c1:29:7f:93:bc:92: 6d:64:e4:02:43:01:79:fd:ef:f6:61:05:a5:69:11:bc:62:49: 12:f0:d0:11:d6:ea:df:a6:ca:a4:c2:1c:b3:42:ea:40:33:49: 51:90:0b:0a:70:8a:b4:2f:68:e4:d2:1b:9f:97:bd:c4:67:c1: c4:4a:f7:0c:29:33:d2:e2:dc:46:a2:f3:46:46:4d:a8:d9:24: b6:6f:2e:bf:47:28:1b:cd:ac:9d:96:41:94:87:22:75:d6:95: a5:86:ee:bc:5b:42:ed:aa:a6:e7:e6:63:6d:f8:da:bf:41:6e: 9c:1d:c9:21:cf:39:be:0b:87:68:38:8c:70:13:a4:a0:15:83: 4d:d3:24:63:f7:c1:9c:87:fe:74:c4:c1:0b:68:49:d1:2a:fb: 2b:fd:35:c7:43:de:c6:c7:76:a5:5c:a4:e1:d6:a4:bb:87:9b: ce:62:10:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3M0MxMTAvBgNVBAUTKDEzQzcyREYxQzUxRTJDQTIxMUNBNTc2NjUxNjhDRjdD N0M3NDcyOTIwHhcNMjUxMjIxMDMzNjI1WhcNMjUxMjI4MDMzNjI1WjAYMRYwFAYD VQQDDA02OTQ3NmIzOS1iNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEt/sxKZ+jiLeR3ZouonouIBW3HURyVURJsTA8jhDshwktKVdphk3X9Xixwu GPuidkV5ghFIqs5wH7C3bM+C5fB6+3+hLuSJPyzeuTBcp86XT9VYTafNFig+UUTy qnO6FqVuuM3nXpTETJuRYWxe2kuqXbMMFmlrG+ZDQ+g4wbyXldf3UuyS0wRColKu BmWht8G5KDzFqiN7K95A/xtmCj7RobcQ9l/GVLrikpgvv3dP2xcyfB1sPQPCbupn oUiVYdPGyYOqYVTj6Bj5mFeOoK4aGdzDf9Cgm15XVKAM1xNilVsBYpXDjTZxYLFD HJsLXSABg65WY7c6uAMp4XYoXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzkd2pW rcW3juVifOqgeGD+rlIFMB8GA1UdIwQYMBaAFBPHLfHFHiyiEcpXZlFoz3x8dHKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjczQy9DQkQ2MjExQ0Y2 NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxLSVJ5bGRtVVdqUGZIeDBj cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4Y3Q4Y1VlTEtJUnlsZG1VV2pQZkh4MGNwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjczQy9DQkQ2MjExQ0Y2NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxL SVJ5bGRtVVdqUGZIeDBjcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOtzF5wfC/q6qekR2RgihJ0p5drL8wLj4NKXNFgB0HbY2uX7Mytgi0 eg1+wyFFB43yNtR34ixWsHO3ge8r/wwjmssGyc3maK8Le9xuwXNcxP+GeTbBKX+T vJJtZOQCQwF5/e/2YQWlaRG8YkkS8NAR1urfpsqkwhyzQupAM0lRkAsKcIq0L2jk 0hufl73EZ8HESvcMKTPS4txGovNGRk2o2SS2by6/RygbzaydlkGUhyJ11pWlhu68 W0Ltqqbn5mNt+Nq/QW6cHckhzzm+C4doOIxwE6SgFYNN0yRj98Gch/50xMELaEnR Kvsr/TXHQ97Gx3alXKTh1qS7h5vOYhDW -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:51 2025 by rpki-client