This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft (raw, json) Hash identifier: 2YEtqsd55BLbMT3AEoy/mHkydb4DTV+Y6qa5sLIr5c0= Subject key identifier: 83:ED:AB:C4:7C:BF:EE:5A:87:1D:35:64:EE:18:7C:B5:CE:17:54:FD Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0BC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft Manifest number: 0BB0 Signing time: Mon 22 Dec 2025 18:29:22 +0000 Manifest this update: Mon 22 Dec 2025 18:29:22 +0000 Manifest next update: Mon 29 Dec 2025 18:29:22 +0000 Files and hashes: 1: EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl (hash: zSqdIcXFsH1LGsY8z0yysUL8/zHmyK37kf4aR/lQ6qk=) 2: 2A08F1A4369211EAA64E320BC4F9AE02.roa (hash: dZNG5vW2l8zDaTZFXpzRrbU/LlNl+Cok+DnqXn1U2+I=) 3: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (hash: 69pkK44GCEYYO1DQ/J3aSzjtWc5Cn9UqeLLTzO9Yidc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3010 (0xbc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: Dec 22 18:29:22 2025 GMT Not After : Dec 29 18:29:22 2025 GMT Subject: CN=69498e02-6531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:df:3c:38:a7:98:4b:ba:da:07:31:2e:1c:d1: a5:d2:e6:8f:eb:4c:9f:cc:70:1c:68:d3:8a:46:ae: 38:05:54:e7:8d:58:35:47:53:31:a6:26:a9:be:05: c6:b8:31:15:a7:ea:ce:80:51:9a:06:0a:fa:09:61: d5:95:cb:38:ff:b3:72:fe:4e:50:3f:d1:7c:f7:5e: 8c:b9:0b:9d:2d:a7:de:ea:ee:d1:e3:31:77:ff:b0: 80:8c:eb:bb:d5:29:78:09:e5:6e:cb:dc:50:f0:70: 21:f6:74:67:dd:1c:e7:f1:ea:68:c1:9e:ab:8d:ae: e3:32:b4:37:83:b7:7f:c9:fc:27:c7:e6:ec:72:b1: 27:5c:05:89:2b:a2:e6:60:56:97:c1:5d:6d:0c:95: b4:26:91:6d:33:1d:62:74:9a:e1:e8:93:f8:d6:34: 3f:4e:66:ad:b3:ad:aa:79:02:82:7b:ef:ff:57:1f: c9:ea:26:93:4b:31:66:5a:2f:3a:39:b8:74:3f:e5: 73:62:2d:63:81:6c:47:93:05:d4:79:a2:49:61:b9: da:c4:63:b5:37:0c:dd:d8:bd:e8:17:a0:dd:fb:4c: 7d:85:99:c6:8f:21:5b:b9:c3:e1:2e:ac:97:46:b4: e3:33:2e:f7:d5:8f:ed:ac:f8:39:a0:4b:59:37:1a: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:ED:AB:C4:7C:BF:EE:5A:87:1D:35:64:EE:18:7C:B5:CE:17:54:FD X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:05:24:5c:c3:9b:30:40:a3:8b:59:0d:0a:6e:06:f3:bb:49: fe:f0:af:93:21:dd:7b:da:a2:2f:11:81:cd:2b:61:c9:5c:dd: af:77:8b:70:87:6a:87:63:ec:46:5d:0a:de:6b:ee:fa:e8:a0: 17:c2:15:e1:7e:f1:ec:9f:53:ba:7a:c6:fd:c8:a9:2e:ab:d7: b0:7c:1f:bf:19:54:fe:ef:ef:43:6f:42:7e:e3:14:80:d9:93: b9:8f:a9:b4:1b:3e:b9:6f:c4:91:74:3f:6d:a8:2d:f6:0e:fe: 32:32:f0:2f:cf:06:23:a7:c8:d3:ad:bd:a5:ba:5b:63:b1:83: 2f:1f:73:85:88:91:8f:26:ed:28:a2:2d:b9:9b:a8:e1:32:e8: fd:87:ae:ed:d1:e1:66:19:ac:ae:0a:2d:04:ae:0c:15:ba:d2: 89:38:70:49:eb:f9:6f:de:d6:a1:aa:ca:d4:d7:ce:a8:b3:00: 27:db:bc:2f:03:9a:5f:b5:03:f7:c3:74:23:df:79:d6:9c:bf: 35:c2:9d:1f:a7:b2:7b:dc:c1:aa:8b:f4:a3:db:47:2e:56:02: 0c:aa:32:71:49:0a:01:e7:68:63:74:19:a1:8f:67:d7:36:cc: 03:7e:f3:d4:8c:d8:7f:5b:94:df:19:d4:87:e0:c9:ea:69:72: e0:e0:c9:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjUxMjIyMTgyOTIyWhcNMjUxMjI5MTgyOTIyWjAYMRYwFAYD VQQDDA02OTQ5OGUwMi02NTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyd88OKeYS7raBzEuHNGl0uaP60yfzHAcaNOKRq44BVTnjVg1R1MxpiapvgXG uDEVp+rOgFGaBgr6CWHVlcs4/7Ny/k5QP9F8916MuQudLafe6u7R4zF3/7CAjOu7 1Sl4CeVuy9xQ8HAh9nRn3Rzn8epowZ6rja7jMrQ3g7d/yfwnx+bscrEnXAWJK6Lm YFaXwV1tDJW0JpFtMx1idJrh6JP41jQ/Tmats62qeQKCe+//Vx/J6iaTSzFmWi86 Obh0P+VzYi1jgWxHkwXUeaJJYbnaxGO1Nwzd2L3oF6Dd+0x9hZnGjyFbucPhLqyX RrTjMy731Y/trPg5oEtZNxofgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPtq8R8 v+5ahx01ZO4YfLXOF1T9MB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTBGQS9BQUEwRUJFMDM2OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVY QnNadUY3OGIwLW1XSjZHQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqBSRcw5swQKOLWQ0Kbgbzu0n+8K+TId172qIvEYHNK2HJXN2vd4tw h2qHY+xGXQrea+766KAXwhXhfvHsn1O6esb9yKkuq9ewfB+/GVT+7+9Db0J+4xSA 2ZO5j6m0Gz65b8SRdD9tqC32Dv4yMvAvzwYjp8jTrb2lultjsYMvH3OFiJGPJu0o oi25m6jhMuj9h67t0eFmGayuCi0ErgwVutKJOHBJ6/lv3tahqsrU186oswAn27wv A5pftQP3w3Qj33nWnL81wp0fp7J73MGqi/Sj20cuVgIMqjJxSQoB52hjdBmhj2fX NswDfvPUjNh/W5TfGdSH4MnqaXLg4MkZ -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:43 2025 by rpki-client