This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft File: tN_eECSMkMVYSwFupua0nnge2CA.mft (raw, json) Hash identifier: 7G0432OlEiWnb17bnoLGHqZGcU0VgPBgrUow6uYIZ9g= Subject key identifier: C3:EF:2F:7E:69:4A:8C:95:87:7C:D3:9A:59:3E:C6:EB:9A:22:0E:85 Authority key identifier: B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20 Certificate issuer: /CN=A9174A5B/serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820 Certificate serial: 06FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft Manifest number: 06F7 Signing time: Mon 22 Dec 2025 21:11:39 +0000 Manifest this update: Mon 22 Dec 2025 21:11:38 +0000 Manifest next update: Mon 29 Dec 2025 21:11:38 +0000 Files and hashes: 1: tN_eECSMkMVYSwFupua0nnge2CA.crl (hash: EXeMvCbprhZai2r59bfsIwR7Rzfhu4xhbtm3UMc7VaQ=) 2: 9E9FA4C40AB011EC8906F464C4F9AE02.roa (hash: y+B4buIfbruqaejaK6x75+RSn7pa5KBjABUZlRGt/q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1789 (0x6fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A5B, serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820 Validity Not Before: Dec 22 21:11:38 2025 GMT Not After : Dec 29 21:11:38 2025 GMT Subject: CN=6949b40b-2c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e4:39:dd:ca:d9:72:a0:57:50:45:46:ae:d4: 28:8c:10:94:eb:c9:df:68:00:b1:a9:4e:13:b5:7b: f9:33:7b:79:26:54:fe:a5:23:da:1f:da:b4:b1:5e: 12:5f:7c:7f:64:07:79:ce:5e:86:97:b5:da:d6:f0: f6:bf:41:db:7c:57:a3:74:c7:51:02:4f:c5:ec:f5: 90:88:3c:0f:5b:89:94:2b:6c:e5:30:91:84:21:97: 0f:b7:f5:f2:ce:68:87:21:18:9d:54:40:1e:a7:4b: c4:ba:e4:aa:79:3e:20:d3:ba:b3:c4:93:03:e3:e4: d3:39:c7:0c:52:f0:a4:17:f5:e1:bd:dc:ca:ba:72: 82:00:e9:d7:ab:63:c1:96:19:d1:c1:10:ad:9f:d4: 2b:b6:2a:80:9a:e9:3b:6c:82:85:b2:60:f6:c3:49: 37:5c:8c:2e:87:a8:51:f9:75:d3:4a:83:b2:86:4a: 78:5d:79:23:1b:d6:c5:4c:30:65:99:79:9f:9e:c2: eb:a2:02:46:e3:82:9c:f3:e1:d3:2b:16:5c:35:7d: 1f:63:e8:78:42:c0:17:bf:54:67:65:a9:e2:93:1c: 8d:9d:1a:32:2a:49:90:ee:fc:0a:b6:76:44:d7:cb: 96:3e:e4:14:50:81:f6:50:cc:82:f9:9e:a5:38:aa: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EF:2F:7E:69:4A:8C:95:87:7C:D3:9A:59:3E:C6:EB:9A:22:0E:85 X509v3 Authority Key Identifier: keyid:B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:81:5d:c5:f8:2f:32:59:a2:29:da:c7:2a:7e:cb:f2:6f:aa: af:4e:cf:e1:cb:01:9e:c9:7a:3e:f4:3f:71:3f:5a:c7:64:1e: 3f:35:02:5e:34:48:b5:2a:52:54:db:88:17:c9:a6:c6:fe:4d: b2:c0:d4:14:77:f5:f3:00:5a:11:dc:b9:05:e4:10:de:0e:1a: bd:e6:d9:19:20:32:3c:07:0a:67:74:e5:b9:bd:8c:46:52:e3: ad:41:c8:b9:c8:b9:26:e5:e5:59:73:2b:e2:c9:0b:48:00:c3: c4:52:12:f8:29:30:e5:94:93:2c:4a:f9:7f:f9:94:3b:79:92: ac:6c:2e:63:99:07:7d:6b:43:56:08:08:97:12:f8:6d:46:6d: 7d:97:6b:3f:10:6f:5b:24:0e:28:cf:65:76:f7:cb:6a:01:59: f7:8a:de:86:44:64:e5:d6:d4:c3:81:fe:42:7b:e5:7f:49:9b: 35:21:0c:3e:0e:fd:c9:4d:b6:07:6f:c0:3e:8a:36:cd:15:da: 80:c3:4f:ed:d1:99:96:6f:be:83:6b:18:0b:4a:b0:57:7d:51: f8:56:45:eb:1e:f9:46:7a:22:0f:26:ea:34:3f:15:38:ac:46: e5:62:62:38:d3:9f:93:e0:90:66:c0:51:4f:4a:dd:65:22:68: 64:84:6d:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNUIxMTAvBgNVBAUTKEI0REZERTEwMjQ4QzkwQzU1ODRCMDE2RUE2RTZCNDlF NzgxRUQ4MjAwHhcNMjUxMjIyMjExMTM4WhcNMjUxMjI5MjExMTM4WjAYMRYwFAYD VQQDDA02OTQ5YjQwYi0yYzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiuQ53crZcqBXUEVGrtQojBCU68nfaACxqU4TtXv5M3t5JlT+pSPaH9q0sV4S X3x/ZAd5zl6Gl7Xa1vD2v0HbfFejdMdRAk/F7PWQiDwPW4mUK2zlMJGEIZcPt/Xy zmiHIRidVEAep0vEuuSqeT4g07qzxJMD4+TTOccMUvCkF/XhvdzKunKCAOnXq2PB lhnRwRCtn9QrtiqAmuk7bIKFsmD2w0k3XIwuh6hR+XXTSoOyhkp4XXkjG9bFTDBl mXmfnsLrogJG44Kc8+HTKxZcNX0fY+h4QsAXv1RnZanikxyNnRoyKkmQ7vwKtnZE 18uWPuQUUIH2UMyC+Z6lOKp4PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPvL35p SoyVh3zTmlk+xuuaIg6FMB8GA1UdIwQYMBaAFLTf3hAkjJDFWEsBbqbmtJ54Htgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE1Qi8xMUU5NkIzNDcw MTIxMUVCOEJFRTBBMUZDNEY5QUUwMi90Tl9lRUNTTWtNVllTd0Z1cHVhMG5uZ2Uy Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROX2VFQ1NNa01WWVN3RnVwdWEwbm5nZTJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE1Qi8xMUU5NkIzNDcwMTIxMUVCOEJFRTBBMUZDNEY5QUUwMi90Tl9lRUNTTWtN VllTd0Z1cHVhMG5uZ2UyQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAgV3F+C8yWaIp2scqfsvyb6qvTs/hywGeyXo+9D9xP1rHZB4/NQJe NEi1KlJU24gXyabG/k2ywNQUd/XzAFoR3LkF5BDeDhq95tkZIDI8BwpndOW5vYxG UuOtQci5yLkm5eVZcyviyQtIAMPEUhL4KTDllJMsSvl/+ZQ7eZKsbC5jmQd9a0NW CAiXEvhtRm19l2s/EG9bJA4oz2V298tqAVn3it6GRGTl1tTDgf5Ce+V/SZs1IQw+ Dv3JTbYHb8A+ijbNFdqAw0/t0ZmWb76DaxgLSrBXfVH4VkXrHvlGeiIPJuo0PxU4 rEblYmI405+T4JBmwFFPSt1lImhkhG1i -----END CERTIFICATE-----Generated at Tue Dec 23 08:00:12 2025 by rpki-client