This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft File: EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json) Hash identifier: ocAICwF05JfkqmnoGEJ2v8wkA5qKa1gObP8F17akOK0= Subject key identifier: E0:B8:69:7A:F7:50:33:A8:69:71:E4:D7:2B:92:0E:15:27:22:26:F1 Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 Certificate issuer: /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Certificate serial: 20DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft Manifest number: 20D6 Signing time: Mon 22 Dec 2025 15:46:04 +0000 Manifest this update: Mon 22 Dec 2025 15:46:04 +0000 Manifest next update: Mon 29 Dec 2025 15:46:04 +0000 Files and hashes: 1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: 7u2ytFFLeYM08rSsUrtiIPw1tYn+w4zFFFxwQ87QSIo=) 2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: 4cmAc73Ya3K4uXCXYcHrxMilUHhYgfgcQY7RcTrdD4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8414 (0x20de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Validity Not Before: Dec 22 15:46:04 2025 GMT Not After : Dec 29 15:46:04 2025 GMT Subject: CN=694967bc-b749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:0f:9f:c9:10:47:c6:0d:6c:32:f6:bd:d6: 1b:aa:4b:5d:86:d2:c0:1b:8b:84:e2:15:73:dd:c4: b3:75:d4:df:59:ba:8e:40:ef:04:f4:f6:c6:f3:2d: b7:8d:88:29:27:9d:98:6d:3d:1b:4f:a9:84:17:15: 46:d6:29:8e:b3:15:5d:94:65:49:61:e6:0e:51:89: b7:cc:ac:a9:8d:1c:08:71:fb:52:d0:81:65:90:f5: bf:87:b0:b0:18:0b:47:8d:6c:73:a9:3f:8d:b1:ea: 2c:de:a4:6c:56:64:ad:64:c9:55:f9:e7:6f:ba:4f: 30:e9:8f:a2:ef:f4:be:5b:75:d1:5f:58:1f:d9:ca: 7d:27:45:d2:0f:44:65:70:44:6b:4e:fa:bc:80:d1: e5:bb:e6:3d:79:86:1e:e8:d6:55:1c:95:4e:b9:dd: 3b:f4:59:8f:14:cd:eb:50:92:e9:4d:18:97:43:21: 47:74:7b:30:80:15:55:4b:59:3d:cb:9d:ed:68:39: db:43:24:e7:75:02:d7:f6:d8:76:99:ad:df:87:eb: c9:c7:58:60:f0:25:78:ec:b7:17:27:de:79:c5:08: 62:62:02:1e:54:43:c6:57:b1:c4:83:f3:cf:48:84: 89:98:b1:62:25:93:09:3c:ec:43:56:7e:88:e3:c1: 7a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B8:69:7A:F7:50:33:A8:69:71:E4:D7:2B:92:0E:15:27:22:26:F1 X509v3 Authority Key Identifier: keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:c1:4d:29:7b:77:d9:7f:1e:b0:ab:80:d8:24:99:01:6c:23: ff:d8:95:3a:b2:43:4a:f0:b6:e4:c4:2f:c2:56:07:c6:cd:e8: ed:bb:16:f6:4f:c6:e9:4b:b6:96:11:62:20:1a:de:2f:bd:3d: 23:91:7e:43:68:22:cb:51:30:98:3f:0c:97:7a:85:39:d7:88: 50:e8:4d:81:db:0e:71:5f:e3:ad:0a:c1:3d:bf:b9:34:03:8e: 3a:d4:86:21:01:d2:2c:30:ed:f8:72:72:87:26:de:44:4e:f8: 54:1b:ae:95:49:4f:c4:f6:72:eb:31:45:59:ab:7e:f7:d3:18: 65:45:81:ba:9d:6f:89:c3:4d:ec:1e:36:70:b4:9b:17:ae:39: f9:e6:88:6a:c1:99:55:62:e1:e7:b3:58:1e:00:71:85:42:c0: 30:ae:da:66:1d:a1:44:9e:ed:4e:bd:8b:c6:b0:3a:d2:07:2e: 7b:fe:25:54:45:6e:b4:8e:b9:b7:fe:71:51:1a:06:b7:52:00: 02:32:dd:77:72:4b:29:32:6d:b9:86:e9:20:31:fa:35:7b:98: 04:da:ea:75:e1:95:32:a2:1e:4e:df:61:1f:60:b9:90:e1:24: 05:73:d1:30:1a:a7:12:d2:0f:9d:21:9c:02:02:55:fd:68:d7: 8b:71:e7:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKDEwQUU3RkEwQ0Y5Q0ZBQTg3RUJBRDg0NENEOEM0MjZB QzFDM0E1RTcwHhcNMjUxMjIyMTU0NjA0WhcNMjUxMjI5MTU0NjA0WjAYMRYwFAYD VQQDDA02OTQ5NjdiYy1iNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoMPn8kQR8YNbDL2vdYbqktdhtLAG4uE4hVz3cSzddTfWbqOQO8E9PbG8y23 jYgpJ52YbT0bT6mEFxVG1imOsxVdlGVJYeYOUYm3zKypjRwIcftS0IFlkPW/h7Cw GAtHjWxzqT+Nseos3qRsVmStZMlV+edvuk8w6Y+i7/S+W3XRX1gf2cp9J0XSD0Rl cERrTvq8gNHlu+Y9eYYe6NZVHJVOud079FmPFM3rUJLpTRiXQyFHdHswgBVVS1k9 y53taDnbQyTndQLX9th2ma3fh+vJx1hg8CV47LcXJ955xQhiYgIeVEPGV7HEg/PP SISJmLFiJZMJPOxDVn6I48F6TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOC4aXr3 UDOoaXHk1yuSDhUnIibxMB8GA1UdIwQYMBaAFBCuf6DPnPqofrrYRM2MQmrBw6Xn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi9GMjkwODI5QTEw REExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1xaC11dGhFell4Q2FzSERw ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VLNV9vTS1jLXFoLXV0aEV6WXhDYXNIRHBlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi9GMjkwODI5QTEwREExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1x aC11dGhFell4Q2FzSERwZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuwU0pe3fZfx6wq4DYJJkBbCP/2JU6skNK8LbkxC/CVgfGzejtuxb2 T8bpS7aWEWIgGt4vvT0jkX5DaCLLUTCYPwyXeoU514hQ6E2B2w5xX+OtCsE9v7k0 A4461IYhAdIsMO34cnKHJt5ETvhUG66VSU/E9nLrMUVZq3730xhlRYG6nW+Jw03s HjZwtJsXrjn55ohqwZlVYuHns1geAHGFQsAwrtpmHaFEnu1OvYvGsDrSBy57/iVU RW60jrm3/nFRGga3UgACMt13ckspMm25hukgMfo1e5gE2up14ZUyoh5O32EfYLmQ 4SQFc9EwGqcS0g+dIZwCAlX9aNeLcedW -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:22 2025 by rpki-client