This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft File: Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json) Hash identifier: iKYTJhwwmiggjqMR5cmWklV0TiuYKv4Yko37wq8PUPs= Subject key identifier: DA:32:03:39:31:70:7C:D7:40:0C:D9:FF:3E:D5:3F:4D:10:28:29:F0 Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C Certificate issuer: /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft Manifest number: 0109 Signing time: Tue 23 Dec 2025 04:00:14 +0000 Manifest this update: Tue 23 Dec 2025 04:00:14 +0000 Manifest next update: Tue 30 Dec 2025 04:00:14 +0000 Files and hashes: 1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: Kl0LaI4K9+fR7oNiVLMjEMn8TKvezwuJKTBu9u1gNpk=) 2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: zqJNwHFdCb0AxU+IvLXH1ZXde2U8qe3vhEETfh5OWwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Validity Not Before: Dec 23 04:00:14 2025 GMT Not After : Dec 30 04:00:14 2025 GMT Subject: CN=694a13ce-806d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:3b:4f:98:79:d6:ef:c3:d5:e2:a1:a5:85: e9:f4:60:0a:bc:0d:4f:9e:48:4f:95:ef:04:80:7a: eb:c8:ef:ad:1a:9e:f3:3b:4c:20:61:d8:cf:d6:a3: eb:64:fb:fc:65:c9:44:b3:91:eb:e4:0b:a1:60:c4: 72:af:d8:51:fd:22:93:14:d7:68:ed:a7:2c:bc:6f: c2:cb:e4:b8:3b:d1:44:a1:34:e7:bd:74:af:2a:ed: c4:76:1d:94:2c:55:78:53:d6:9a:88:c3:27:34:d7: 0f:18:2b:a8:ec:ff:e0:7a:b2:78:be:0b:df:dd:dd: 3f:bb:a1:16:87:a8:8c:73:38:74:8f:1c:64:7a:ef: 25:bf:72:eb:11:64:89:c1:53:b0:4e:dc:f2:b5:d0: a5:8b:00:e0:0e:a7:4c:20:57:12:fe:fe:92:bd:c1: dc:6a:b6:23:1e:c1:ad:ad:80:ab:cf:b9:98:28:3d: 8b:58:51:49:ae:47:2f:24:3e:ca:9f:cd:c5:d6:c1: 78:55:86:53:a1:ef:46:a9:83:5f:3c:a2:40:87:f4: 54:27:98:7c:c4:8a:61:a2:00:55:33:40:0c:1b:42: 82:b4:07:a9:0f:0a:91:04:e4:f7:b4:ed:32:ca:a5: 70:ab:9d:1a:d6:14:7c:87:d6:0d:56:dd:a8:c2:c3: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:32:03:39:31:70:7C:D7:40:0C:D9:FF:3E:D5:3F:4D:10:28:29:F0 X509v3 Authority Key Identifier: keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:1b:40:23:4c:26:ce:2b:98:81:a2:cc:65:1c:5b:60:61:42: 47:77:25:87:58:2a:c2:38:b3:2a:fb:f1:70:e9:65:be:12:0d: bf:46:33:ea:67:16:1b:cc:b4:c2:2b:b9:bd:54:b3:80:b1:ee: d4:f2:1a:3c:4b:3b:ae:dc:59:03:ca:61:79:d2:3c:9f:bf:96: 07:2c:10:0c:40:6d:0f:d9:68:0e:89:fe:1d:7f:3c:08:93:e2: d0:8d:0f:d8:89:11:23:b2:3e:77:b8:3e:f4:c4:d6:4d:fe:c8: e5:ef:23:80:ac:1d:84:01:38:9a:b5:b9:52:0b:7d:1a:b2:89: f3:04:96:14:0d:a9:b2:fb:77:63:a2:95:d0:a0:55:b7:a2:c5: 3f:59:29:45:2a:c4:90:5d:81:be:22:4c:26:6f:d9:ea:35:df: d3:cd:7e:fd:48:bf:ba:b5:5d:bb:3e:21:99:da:77:e1:2f:51: 07:4c:b8:13:ad:95:76:0b:cf:12:a5:f6:f3:c3:14:94:83:01: d0:7e:eb:c1:01:98:51:1f:23:62:aa:28:24:e3:ed:32:0a:18: 74:fb:a8:6d:68:f9:06:b2:7f:82:5d:de:38:39:c6:b3:2d:06: 41:78:d7:67:2c:38:dc:ce:de:6b:9a:4e:08:88:78:d8:ec:8a: 80:b2:1c:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDEzMUVGNjJFMTIxQjExREU2MTA0MkMzRTIyNUU3MTZC Qjk0NzlFMkMwHhcNMjUxMjIzMDQwMDE0WhcNMjUxMjMwMDQwMDE0WjAYMRYwFAYD VQQDDA02OTRhMTNjZS04MDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAs7T5h51u/D1eKhpYXp9GAKvA1PnkhPle8EgHrryO+tGp7zO0wgYdjP1qPr ZPv8ZclEs5Hr5AuhYMRyr9hR/SKTFNdo7acsvG/Cy+S4O9FEoTTnvXSvKu3Edh2U LFV4U9aaiMMnNNcPGCuo7P/gerJ4vgvf3d0/u6EWh6iMczh0jxxkeu8lv3LrEWSJ wVOwTtzytdCliwDgDqdMIFcS/v6SvcHcarYjHsGtrYCrz7mYKD2LWFFJrkcvJD7K n83F1sF4VYZToe9GqYNfPKJAh/RUJ5h8xIphogBVM0AMG0KCtAepDwqRBOT3tO0y yqVwq50a1hR8h9YNVt2owsP/cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoyAzkx cHzXQAzZ/z7VP00QKCnwMB8GA1UdIwQYMBaAFBMe9i4SGxHeYQQsPiJecWu5R54s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xQzEzN0MyMDQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVkNWhCQ3ctSWw1eGE3bEhu aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4NzJMaEliRWQ1aEJDdy1JbDV4YTdsSG5pdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xQzEzN0MyMDQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVk NWhCQ3ctSWw1eGE3bEhuaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhG0AjTCbOK5iBosxlHFtgYUJHdyWHWCrCOLMq+/Fw6WW+Eg2/RjPq ZxYbzLTCK7m9VLOAse7U8ho8Szuu3FkDymF50jyfv5YHLBAMQG0P2WgOif4dfzwI k+LQjQ/YiREjsj53uD70xNZN/sjl7yOArB2EATiatblSC30asonzBJYUDamy+3dj opXQoFW3osU/WSlFKsSQXYG+Ikwmb9nqNd/TzX79SL+6tV27PiGZ2nfhL1EHTLgT rZV2C88SpfbzwxSUgwHQfuvBAZhRHyNiqigk4+0yChh0+6htaPkGsn+CXd44Ocaz LQZBeNdnLDjczt5rmk4IiHjY7IqAshyL -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:07 2025 by rpki-client