This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json) Hash identifier: eJiNzbvGnQbWCVAbozrCVJCXQR3kZZlGN58lZqtwov4= Subject key identifier: 78:5B:6E:9E:D2:CA:EF:4F:4C:4D:92:D4:41:BA:6E:75:6C:C2:4A:89 Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft Manifest number: 062B Signing time: Sat 20 Dec 2025 22:05:57 +0000 Manifest this update: Sat 20 Dec 2025 22:05:56 +0000 Manifest next update: Sat 27 Dec 2025 22:05:56 +0000 Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: MbgPLkYUmt2ShypBXiiv/0OqRusNmhQt7ER0aeNOu5I=) 2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: PfaYVep9sxHm2ekMoNsSTDKRElztgb9iT+RAJOOQJNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Validity Not Before: Dec 20 22:05:56 2025 GMT Not After : Dec 27 22:05:56 2025 GMT Subject: CN=69471dc5-fadf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:ba:1e:33:a6:a0:60:21:f7:52:74:44:77: f2:0d:85:a3:eb:7f:49:7e:8e:3e:f2:d8:54:1d:18: d6:5f:8c:07:ab:15:73:8a:2a:2e:ed:99:60:ed:7b: 40:43:cc:80:b0:79:55:e6:6b:0c:74:4f:b1:f9:14: 6a:44:bc:4a:ad:b6:99:90:0d:4d:e0:81:54:2f:b9: 11:17:77:12:98:49:83:a0:ab:2f:74:34:63:f8:37: 6f:7f:2a:23:5b:d7:04:f6:2a:e0:1a:12:7b:38:2f: f7:b8:ee:91:26:c9:12:75:9a:62:f2:38:25:1f:1d: ac:05:01:4b:32:e3:e6:93:33:cc:ff:f8:d3:1e:c9: b4:4e:4c:a2:79:d3:00:18:36:d6:e5:3a:23:9a:c2: 0a:f1:0f:d0:60:8e:be:2b:a4:75:5c:d7:22:b4:b3: f0:59:cd:33:d0:e9:8f:05:78:cf:7d:b5:52:b1:50: 66:b9:89:db:a3:4f:23:15:cf:2a:5a:85:19:a4:02: 33:4a:32:3d:a0:e9:69:3e:aa:1b:28:76:46:48:0e: 75:6e:bb:b2:67:a6:04:60:94:5a:6d:f3:fc:bf:7c: 42:45:96:ae:6f:24:21:a6:ef:f0:73:bd:aa:95:d7: 2e:b2:16:12:9b:c4:1b:e2:1c:56:1b:2f:0f:58:df: e6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5B:6E:9E:D2:CA:EF:4F:4C:4D:92:D4:41:BA:6E:75:6C:C2:4A:89 X509v3 Authority Key Identifier: keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:25:c6:00:61:97:4b:47:5d:d6:e9:de:69:f1:e7:43:f1:96: 8f:95:1d:e2:b4:02:d0:23:2e:1f:c0:6f:2c:ab:7e:c8:53:e1: 16:58:05:20:95:d0:f8:cd:4e:01:95:80:a8:e5:33:1d:a0:b6: f7:38:7b:e5:1b:54:0d:bb:b9:e1:ad:2d:dc:07:50:48:86:bf: 7d:ea:61:0d:c2:d5:9f:94:32:5d:43:94:5e:ba:49:96:fc:0b: e8:ed:15:f0:1b:c5:b8:1e:f7:38:b6:28:48:49:6d:4a:16:91: 2d:5c:21:31:c6:50:ca:5b:a5:85:9c:2a:b1:cb:a5:c6:b8:60: f2:e5:a3:29:00:2a:52:c6:d9:72:30:0f:4f:b8:ea:d5:95:9d: 97:b8:3a:98:f0:5c:99:b1:a9:8d:cd:2c:86:b6:82:5f:ac:ec: 23:e9:65:1d:22:b4:29:8b:25:4d:e3:65:7f:38:70:cb:fe:09: 14:54:a2:f5:45:ef:52:cb:3e:47:49:73:c9:a3:fb:c0:fe:c7: b2:ef:6f:eb:c9:5c:94:93:5c:dd:b1:28:1a:8d:91:8c:f9:22: 6d:fa:12:6a:83:fe:7b:40:f4:2f:de:cb:ed:d5:44:54:b5:eb: 3f:c2:f2:d3:85:49:be:99:b2:02:1f:f8:4e:41:25:3b:38:59: 8e:df:43:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2 MzBENTcwRTkwHhcNMjUxMjIwMjIwNTU2WhcNMjUxMjI3MjIwNTU2WjAYMRYwFAYD VQQDDA02OTQ3MWRjNS1mYWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuM+6HjOmoGAh91J0RHfyDYWj639Jfo4+8thUHRjWX4wHqxVziiou7Zlg7XtA Q8yAsHlV5msMdE+x+RRqRLxKrbaZkA1N4IFUL7kRF3cSmEmDoKsvdDRj+Ddvfyoj W9cE9irgGhJ7OC/3uO6RJskSdZpi8jglHx2sBQFLMuPmkzPM//jTHsm0TkyiedMA GDbW5TojmsIK8Q/QYI6+K6R1XNcitLPwWc0z0OmPBXjPfbVSsVBmuYnbo08jFc8q WoUZpAIzSjI9oOlpPqobKHZGSA51bruyZ6YEYJRabfP8v3xCRZaubyQhpu/wc72q ldcushYSm8Qb4hxWGy8PWN/m3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhbbp7S yu9PTE2S1EG6bnVswkqJMB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS YVpoaXpLZnZKSGRqRFZjT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjJcYAYZdLR13W6d5p8edD8ZaPlR3itALQIy4fwG8sq37IU+EWWAUg ldD4zU4BlYCo5TMdoLb3OHvlG1QNu7nhrS3cB1BIhr996mENwtWflDJdQ5ReukmW /Avo7RXwG8W4Hvc4tihISW1KFpEtXCExxlDKW6WFnCqxy6XGuGDy5aMpACpSxtly MA9PuOrVlZ2XuDqY8FyZsamNzSyGtoJfrOwj6WUdIrQpiyVN42V/OHDL/gkUVKL1 Re9Syz5HSXPJo/vA/sey72/ryVyUk1zdsSgajZGM+SJt+hJqg/57QPQv3svt1URU tes/wvLThUm+mbICH/hOQSU7OFmO30Mt -----END CERTIFICATE-----Generated at Mon Dec 22 22:17:39 2025 by rpki-client