This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft File: mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft (raw, json) Hash identifier: a430KgTHWikgN/ynG6cCn7HjLKpF5wQmNESemOPAiaU= Subject key identifier: 52:62:D6:EB:DC:98:D5:C6:57:93:D3:CD:B0:11:4F:F8:A6:66:A8:8B Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 Certificate issuer: /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft Manifest number: 0217 Signing time: Sun 21 Dec 2025 01:28:52 +0000 Manifest this update: Sun 21 Dec 2025 01:28:51 +0000 Manifest next update: Sun 28 Dec 2025 01:28:51 +0000 Files and hashes: 1: mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl (hash: GdS3eLKGpFUfPfwIch/Q5qdlnk6uB/irkU96GXKawrs=) 2: EE4D73F2AE5611EDA021E516C4F9AE02.roa (hash: rHhV9X+494LZVhsBFnMPP35cu2Qc4CF3Pf3vW78mDqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E67, serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Validity Not Before: Dec 21 01:28:51 2025 GMT Not After : Dec 28 01:28:51 2025 GMT Subject: CN=69474d53-2388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:da:08:00:80:8a:a7:b0:d9:7f:a2:e6:b1: f6:b1:91:20:6d:bf:57:77:79:cf:df:ec:77:7b:10: b1:f7:33:51:dc:e4:97:a6:eb:c5:08:be:43:a0:da: 99:cd:f5:8c:7b:78:d3:aa:ac:2f:9e:54:a2:54:65: 3d:57:7c:fe:9c:0a:bf:97:67:f5:aa:7e:8e:e5:e8: 01:98:04:ce:80:80:e3:23:d7:2e:e7:3e:ba:fc:3e: 05:76:0c:24:15:73:a4:18:8a:c1:f3:37:15:8a:12: 61:c4:f8:cb:a7:18:08:87:30:2c:d0:cb:6b:75:a2: 64:9b:8f:10:28:4a:e3:7a:01:39:63:95:7f:18:a2: 29:5e:b0:0c:eb:ba:a4:38:12:bc:b8:23:33:9b:fb: 7d:61:bf:01:8e:73:e0:4c:39:75:a4:8c:e9:95:32: 0a:d7:cc:99:4b:8c:da:1c:ea:d4:eb:46:08:aa:61: 52:f4:18:75:91:ae:62:ea:a9:60:c9:15:8c:97:c1: be:60:4d:ca:8c:e8:87:2f:2e:bc:4d:5a:3d:8d:30: b9:e9:21:df:f4:3a:62:2a:1b:9a:83:93:cf:79:74: 38:e3:a2:12:4a:23:2b:fa:08:74:6c:1a:3e:c5:c1: e9:3c:93:b4:f3:1f:9d:59:12:3d:9d:21:2a:d9:f9: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:62:D6:EB:DC:98:D5:C6:57:93:D3:CD:B0:11:4F:F8:A6:66:A8:8B X509v3 Authority Key Identifier: keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d4:ef:c7:c1:f2:89:0a:59:a9:55:60:bc:8e:6b:05:57:4c: 84:7b:a0:34:a9:93:0a:49:e2:f2:48:f7:fc:5b:28:d9:24:0e: b6:20:d7:1a:d2:ed:92:54:0b:4b:2a:1c:64:39:d4:fd:fd:ba: 5b:83:81:de:96:c8:59:02:6f:24:0b:eb:4d:5c:c1:61:cd:d3: 3c:ed:24:5e:33:ab:2b:7c:93:3d:38:95:f5:e9:f5:ec:49:6c: bd:09:45:3f:f1:7c:97:1d:d3:ce:9c:a1:fd:3f:4f:47:fd:73: 06:07:c5:ef:28:07:46:13:d3:7b:89:b1:b1:ef:3c:a2:e6:e9: 50:7e:28:ff:9e:e7:43:1a:48:33:b8:35:6e:5e:74:6b:1a:b3: 08:e6:7f:cf:f0:59:82:e6:c5:6c:13:7d:49:4f:3d:e3:a1:99: a2:c7:fd:57:73:46:14:0c:39:a0:58:88:86:0a:2f:30:07:ee: 50:e7:35:18:80:31:8c:8e:69:33:1a:91:dc:be:08:6b:03:c7: 71:68:4a:24:78:2d:cc:65:bb:0e:e3:c1:85:e6:fb:3f:29:31: dc:77:b5:6a:91:f2:9b:74:e5:26:17:48:01:32:ff:28:aa:e9: 09:25:45:b8:02:de:1a:21:4c:87:8a:ea:99:1b:45:95:31:f9: 93:91:b2:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFNjcxMTAvBgNVBAUTKDk4NDNDODkyNzdBODEyQUJEN0ZBREFCNTJEMUQ2MUQy NzhCQTJCMTkwHhcNMjUxMjIxMDEyODUxWhcNMjUxMjI4MDEyODUxWjAYMRYwFAYD VQQDDA02OTQ3NGQ1My0yMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1XaCACAiqew2X+i5rH2sZEgbb9Xd3nP3+x3exCx9zNR3OSXpuvFCL5DoNqZ zfWMe3jTqqwvnlSiVGU9V3z+nAq/l2f1qn6O5egBmATOgIDjI9cu5z66/D4Fdgwk FXOkGIrB8zcVihJhxPjLpxgIhzAs0MtrdaJkm48QKErjegE5Y5V/GKIpXrAM67qk OBK8uCMzm/t9Yb8BjnPgTDl1pIzplTIK18yZS4zaHOrU60YIqmFS9Bh1ka5i6qlg yRWMl8G+YE3KjOiHLy68TVo9jTC56SHf9DpiKhuag5PPeXQ446ISSiMr+gh0bBo+ xcHpPJO08x+dWRI9nSEq2fkPRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJi1uvc mNXGV5PTzbART/imZqiLMB8GA1UdIwQYMBaAFJhDyJJ3qBKr1/ratS0dYdJ4uisZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUU2Ny8yMkMxNDUyOEFF NTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0VxdlgtdHExTFIxaDBuaTZL eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21FUElrbmVvRXF2WC10cTFMUjFoMG5pNkt4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUU2Ny8yMkMxNDUyOEFFNTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0Vx dlgtdHExTFIxaDBuaTZLeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY1O/HwfKJClmpVWC8jmsFV0yEe6A0qZMKSeLySPf8WyjZJA62INca 0u2SVAtLKhxkOdT9/bpbg4HelshZAm8kC+tNXMFhzdM87SReM6srfJM9OJX16fXs SWy9CUU/8XyXHdPOnKH9P09H/XMGB8XvKAdGE9N7ibGx7zyi5ulQfij/nudDGkgz uDVuXnRrGrMI5n/P8FmC5sVsE31JTz3joZmix/1Xc0YUDDmgWIiGCi8wB+5Q5zUY gDGMjmkzGpHcvghrA8dxaEokeC3MZbsO48GF5vs/KTHcd7VqkfKbdOUmF0gBMv8o qukJJUW4At4aIUyHiuqZG0WVMfmTkbLM -----END CERTIFICATE-----Generated at Mon Dec 22 06:50:29 2025 by rpki-client