This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft File: e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json) Hash identifier: UTP1VOn0bQHw95WBRtNKh6CLCiDQQxn+3ArhwSD7Kpc= Subject key identifier: EA:C1:7A:D0:30:A4:85:E9:42:C6:9B:C0:27:2B:E8:99:8F:C9:D6:C4 Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 Certificate issuer: /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Certificate serial: 07E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft Manifest number: 07D6 Signing time: Mon 22 Dec 2025 20:40:28 +0000 Manifest this update: Mon 22 Dec 2025 20:40:27 +0000 Manifest next update: Mon 29 Dec 2025 20:40:27 +0000 Files and hashes: 1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: OG1d6cYyHZMAtiCl6qMtuXT5n7CWvQwKfVjCdzYIWKc=) 2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: fq5HCtnKfkn7/JuyPv2TRFDGy6fu3YXaJZP30LJYt74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115964, serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Validity Not Before: Dec 22 20:40:27 2025 GMT Not After : Dec 29 20:40:27 2025 GMT Subject: CN=6949acbc-ea17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:29:04:1a:b1:a0:0b:8e:87:99:29:45:e8: 6b:bc:05:6f:2e:bb:8e:53:12:dc:65:23:d4:2f:63: 81:58:08:31:2b:e5:ba:51:15:b4:94:89:fe:19:ed: 95:5a:57:9a:d9:1a:e9:a9:af:00:70:12:c1:67:dc: a7:d9:f9:74:ec:7d:59:58:5d:29:2d:03:4e:b6:e9: 99:62:d8:96:b0:53:ac:a1:fa:09:91:18:e8:f5:a6: 65:eb:1c:78:41:9f:09:07:d3:7b:ac:12:24:0d:40: e2:83:73:c4:68:a2:3d:ed:68:8c:74:6a:36:72:a1: 72:fc:ed:60:fa:9c:f4:fe:d2:d2:a8:38:02:58:75: 18:f6:0b:6e:9c:05:03:b2:ac:9e:5e:00:af:c3:f3: ad:cb:e6:5f:fa:47:e4:73:c0:0f:b0:ab:24:cb:bd: 41:4e:f7:a1:17:f7:67:0c:b2:c6:b0:e6:d0:f9:bd: 97:c6:0a:e1:79:b8:eb:b5:c2:86:96:21:7f:4b:31: f4:38:b6:70:6a:43:5c:31:8f:25:cd:bd:6d:c9:a7: 0a:05:de:d0:81:b4:1b:5a:37:db:cc:0f:31:e4:9c: f3:00:79:6a:0b:9d:b1:25:9a:48:b9:29:13:fe:8e: 86:e8:ad:d5:c6:18:a1:9f:be:e7:a2:55:26:24:85: ce:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C1:7A:D0:30:A4:85:E9:42:C6:9B:C0:27:2B:E8:99:8F:C9:D6:C4 X509v3 Authority Key Identifier: keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9c:2a:a7:93:a5:0b:99:49:95:6f:cb:4f:35:8b:b6:48:7f: 57:42:f3:b6:15:0a:44:43:e1:f8:05:da:33:ad:41:2f:ea:7e: 66:48:3d:13:a4:84:a7:2b:4b:a6:08:5f:a9:14:bf:a0:10:81: dc:fe:43:7f:6c:99:8e:c3:1a:10:97:f8:22:5a:c3:cb:92:ed: 0e:e9:09:f6:39:06:e4:36:0f:bc:9c:73:11:ec:42:ca:9b:7e: 35:a8:d2:40:e0:14:29:2d:11:4d:29:64:c1:5f:e1:41:c8:86: 3c:67:7a:a0:ee:2d:9a:1d:9b:3f:20:ad:85:93:4e:b9:c8:39: 07:f7:f1:c4:35:2e:63:1c:23:9c:88:69:05:6b:52:f1:67:5c: 1b:b5:bd:40:cd:3b:45:e9:78:51:63:13:6a:1e:33:83:71:50: 46:ca:5f:b4:8b:7e:42:f2:8f:b8:4c:5c:21:ac:45:8e:c8:04: 4b:61:73:62:5b:89:19:6f:79:7c:2e:b7:24:d4:d6:90:80:7c: d1:63:66:4f:2d:7b:e8:76:1e:25:d4:23:6e:4f:0f:4a:0e:b7: e1:2f:8f:c6:2c:e9:14:bf:d0:43:0c:77:94:cb:fc:f9:6f:61: 41:25:48:e4:a9:20:36:c4:99:45:f3:dc:f0:2a:52:6c:3d:35: 6d:4d:fc:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5NjQxMTAvBgNVBAUTKDdCNzIxMzg4RkQxM0U4QUU0M0M5N0YwMzAxOTgxRDIy OTJDODg4OTcwHhcNMjUxMjIyMjA0MDI3WhcNMjUxMjI5MjA0MDI3WjAYMRYwFAYD VQQDDA02OTQ5YWNiYy1lYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr20pBBqxoAuOh5kpRehrvAVvLruOUxLcZSPUL2OBWAgxK+W6URW0lIn+Ge2V Wlea2Rrpqa8AcBLBZ9yn2fl07H1ZWF0pLQNOtumZYtiWsFOsofoJkRjo9aZl6xx4 QZ8JB9N7rBIkDUDig3PEaKI97WiMdGo2cqFy/O1g+pz0/tLSqDgCWHUY9gtunAUD sqyeXgCvw/Oty+Zf+kfkc8APsKsky71BTvehF/dnDLLGsObQ+b2XxgrhebjrtcKG liF/SzH0OLZwakNcMY8lzb1tyacKBd7QgbQbWjfbzA8x5JzzAHlqC52xJZpIuSkT /o6G6K3Vxhihn77nolUmJIXOvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrBetAw pIXpQsabwCcr6JmPydbEMB8GA1UdIwQYMBaAFHtyE4j9E+iuQ8l/AwGYHSKSyIiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTk2NC9FRkMyQ0NCQzI3 MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZLNUR5WDhEQVpnZElwTElp SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UzSVRpUDBUNks1RHlYOERBWmdkSXBMSWlKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTk2NC9FRkMyQ0NCQzI3MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZL NUR5WDhEQVpnZElwTElpSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfnCqnk6ULmUmVb8tPNYu2SH9XQvO2FQpEQ+H4BdozrUEv6n5mSD0T pISnK0umCF+pFL+gEIHc/kN/bJmOwxoQl/giWsPLku0O6Qn2OQbkNg+8nHMR7ELK m341qNJA4BQpLRFNKWTBX+FByIY8Z3qg7i2aHZs/IK2Fk065yDkH9/HENS5jHCOc iGkFa1LxZ1wbtb1AzTtF6XhRYxNqHjODcVBGyl+0i35C8o+4TFwhrEWOyARLYXNi W4kZb3l8Lrck1NaQgHzRY2ZPLXvodh4l1CNuTw9KDrfhL4/GLOkUv9BDDHeUy/z5 b2FBJUjkqSA2xJlF89zwKlJsPTVtTfz3 -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:38 2025 by rpki-client