This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft File: EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft (raw, json) Hash identifier: 1qV+k0IKn1fnRzSWmv7IlvMSxujzGlnX7B3MaqzJWko= Subject key identifier: C7:4C:5A:3D:79:F7:26:D3:81:7F:EE:7B:C5:E1:2B:D7:C3:DD:71:A4 Authority key identifier: 12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D Certificate issuer: /CN=A914B46A/serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D Certificate serial: 05D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft Manifest number: 05D1 Signing time: Tue 02 Dec 2025 22:01:33 +0000 Manifest this update: Tue 02 Dec 2025 22:01:33 +0000 Manifest next update: Tue 09 Dec 2025 22:01:33 +0000 Files and hashes: 1: EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl (hash: H8v62NstCWT6t/YhZPcxwOLS/1Dpn93NTHfO7fErBNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1491 (0x5d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A, serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D Validity Not Before: Dec 2 22:01:33 2025 GMT Not After : Dec 9 22:01:33 2025 GMT Subject: CN=692f61bd-e38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:b0:97:b1:69:a5:69:12:96:24:a5:dc:8d: 5e:8d:f2:b2:2f:7b:93:e5:8c:b7:a3:d0:5e:13:8a: f2:a2:dd:91:41:7f:ed:fb:37:39:2e:e7:01:b5:c0: ad:5b:a6:33:3a:9c:dd:d6:2e:cc:71:bf:59:14:f5: f2:52:fa:f5:b6:2b:6f:ae:69:52:b0:6f:66:54:6a: 47:e7:d4:2d:49:69:72:dc:41:dd:bb:8d:82:28:71: fe:27:8b:67:9f:da:00:2e:79:11:be:16:42:5a:70: b2:f3:57:63:33:56:a1:05:94:d2:13:9b:09:22:a1: 52:79:0f:8f:0f:a3:40:69:09:94:fc:ed:55:75:a5: f7:fb:b1:ec:06:ac:9c:ca:c5:48:23:82:c2:21:cd: 68:66:a1:12:12:8e:4e:f4:76:6f:b7:a8:ff:a6:3f: dc:b1:51:5a:25:ac:6b:8e:7d:e6:3a:07:63:3c:b9: 51:2b:f6:fd:9a:e4:42:5e:b8:63:b9:0f:c3:fc:f9: 06:2c:e7:0a:4e:9e:99:a4:9c:06:17:66:76:91:9a: bf:dd:e2:1b:9b:c2:fa:50:5f:b7:ac:f9:78:a1:0e: 9f:6e:cd:a3:aa:3a:a5:94:8e:2e:86:60:87:2b:f3: 98:ba:41:22:e6:c7:fc:81:aa:de:63:74:6f:1b:db: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4C:5A:3D:79:F7:26:D3:81:7F:EE:7B:C5:E1:2B:D7:C3:DD:71:A4 X509v3 Authority Key Identifier: keyid:12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:46:9a:48:b9:44:af:ec:e9:7f:f6:26:cf:74:ec:6a:40:a2: 6b:39:db:f3:47:3a:b1:ae:e1:e4:dc:a2:b1:48:d9:34:c3:43: c9:2a:f5:a5:8c:68:a3:f5:08:f5:23:6b:f5:8d:f5:72:29:45: bb:cb:f6:be:1f:e0:59:d9:59:ec:ba:e0:20:c7:24:29:4d:f1: 1f:cc:93:58:95:26:44:b3:bf:47:6a:29:a5:6f:d5:54:42:95: ac:0b:6d:d0:44:a4:0f:94:dc:89:14:ef:0d:49:c7:ec:6a:c0: c5:73:c6:3b:00:ea:c3:49:e5:a8:a2:bf:6b:a9:04:1d:3a:6a: d6:31:4a:5d:97:74:64:37:75:7a:4f:65:c1:4e:cf:c2:6e:62: 95:17:cf:e4:ad:22:22:06:8b:c8:9b:6f:89:3c:25:49:b0:09: a7:be:b9:65:45:36:45:91:26:71:01:c0:f8:ef:c9:c8:59:a4: ee:64:06:db:d3:72:d2:13:ae:40:8f:dd:4a:71:b3:43:06:bb: 51:b5:de:04:04:a8:f3:47:16:10:c0:9c:fd:b3:ac:18:75:ff: 48:d7:80:67:f1:82:48:16:81:66:66:3e:f1:8d:22:55:8b:e0: 90:16:d4:ee:49:bd:0e:9d:db:11:9c:f6:72:a6:1b:80:06:be: f2:95:e2:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDEyMDRGRTMxNUMwMDkwQjE1RDkxMjVCNDI5ODU1QTA2 RjRENDIxMUQwHhcNMjUxMjAyMjIwMTMzWhcNMjUxMjA5MjIwMTMzWjAYMRYwFAYD VQQDEw02OTJmNjFiZC1lMzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaGwl7FppWkSliSl3I1ejfKyL3uT5Yy3o9BeE4ryot2RQX/t+zc5LucBtcCt W6YzOpzd1i7Mcb9ZFPXyUvr1titvrmlSsG9mVGpH59QtSWly3EHdu42CKHH+J4tn n9oALnkRvhZCWnCy81djM1ahBZTSE5sJIqFSeQ+PD6NAaQmU/O1VdaX3+7HsBqyc ysVII4LCIc1oZqESEo5O9HZvt6j/pj/csVFaJaxrjn3mOgdjPLlRK/b9muRCXrhj uQ/D/PkGLOcKTp6ZpJwGF2Z2kZq/3eIbm8L6UF+3rPl4oQ6fbs2jqjqllI4uhmCH K/OYukEi5sf8gareY3RvG9tRnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdMWj15 9ybTgX/ue8XhK9fD3XGkMB8GA1UdIwQYMBaAFBIE/jFcAJCxXZEltCmFWgb01CEd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS8wMEE0RDVGMEUw OTkxMUVCOTI3NjBCNERDNEY5QUUwMi9FZ1QtTVZ3QWtMRmRrU1cwS1lWYUJ2VFVJ UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VnVC1NVndBa0xGZGtTVzBLWVZhQnZUVUlSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS8wMEE0RDVGMEUwOTkxMUVCOTI3NjBCNERDNEY5QUUwMi9FZ1QtTVZ3QWtM RmRrU1cwS1lWYUJ2VFVJUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/RppIuUSv7Ol/9ibPdOxqQKJrOdvzRzqxruHk3KKxSNk0w0PJKvWl jGij9Qj1I2v1jfVyKUW7y/a+H+BZ2VnsuuAgxyQpTfEfzJNYlSZEs79Haimlb9VU QpWsC23QRKQPlNyJFO8NScfsasDFc8Y7AOrDSeWoor9rqQQdOmrWMUpdl3RkN3V6 T2XBTs/CbmKVF8/krSIiBovIm2+JPCVJsAmnvrllRTZFkSZxAcD478nIWaTuZAbb 03LSE65Aj91KcbNDBrtRtd4EBKjzRxYQwJz9s6wYdf9I14Bn8YJIFoFmZj7xjSJV i+CQFtTuSb0OndsRnPZyphuABr7yleKx -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:22 2025 by rpki-client