This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft File: ej5CbJYle98kPDxjt4A4NAUlwqk.mft (raw, json) Hash identifier: yykVRR8U4/n79DfOq+VLiLyrVbdboj+DJH0lcIZBEyE= Subject key identifier: D2:41:D4:E4:1F:DB:30:6C:87:D9:4A:02:DB:28:D4:4F:71:FE:99:92 Authority key identifier: 7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 Certificate issuer: /CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft Manifest number: 040E Signing time: Tue 23 Dec 2025 00:32:27 +0000 Manifest this update: Tue 23 Dec 2025 00:32:26 +0000 Manifest next update: Tue 30 Dec 2025 00:32:26 +0000 Files and hashes: 1: ej5CbJYle98kPDxjt4A4NAUlwqk.crl (hash: zuucbh9LNUt9L+5TpNDzEqNtFOoikgN7pULudYBy4E4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Validity Not Before: Dec 23 00:32:26 2025 GMT Not After : Dec 30 00:32:26 2025 GMT Subject: CN=6949e31b-c037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7b:98:bf:3e:bb:a9:0e:7f:3d:9e:01:9d:f8: 67:85:07:2b:f3:a7:58:06:d6:a1:6a:0a:7a:58:89: e7:b0:e0:36:e0:4f:fd:9d:7d:51:64:6a:82:38:dc: 15:ae:57:e6:bc:be:e4:0a:c9:d0:24:2d:45:fe:18: 8a:dd:e1:02:43:d6:c9:89:e4:53:a7:38:95:0e:8b: 2d:fc:69:60:a7:79:5a:b0:4b:21:5d:75:6c:48:dc: b2:59:db:99:a5:4c:74:53:43:2c:77:f4:26:ce:df: 24:98:38:54:c6:6d:ce:e2:ce:81:18:f3:d1:43:82: 2e:ca:14:05:43:13:6e:39:fb:13:ef:07:40:2e:dc: 9b:40:43:a9:20:d7:85:97:a0:4a:e9:dc:c1:99:6d: 99:7a:2c:ae:54:5b:d1:f5:db:4a:e5:88:a3:4b:12: 61:ad:ed:02:40:9c:40:99:62:f6:21:f6:ce:d4:77: a1:01:6d:05:f6:ef:2c:35:c6:0c:02:4e:43:bd:7c: 73:45:af:b5:5b:8b:06:32:5d:32:ee:e6:7e:c7:4e: ba:25:84:ef:ce:28:c2:9e:8e:d3:be:e9:b3:27:7d: bf:3e:d9:12:79:e5:64:55:af:57:43:91:51:e3:0d: 2c:57:fc:b8:05:0b:82:94:78:f8:d5:52:77:0e:2f: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:41:D4:E4:1F:DB:30:6C:87:D9:4A:02:DB:28:D4:4F:71:FE:99:92 X509v3 Authority Key Identifier: keyid:7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:86:a2:2e:63:be:5a:06:67:87:e9:ec:03:7c:6c:c5:43:78: e5:b3:b8:3b:07:e5:cb:62:e9:02:3c:be:c3:03:b2:fe:54:20: 07:20:44:ff:80:d7:a9:4b:a0:a4:55:ba:04:b2:0a:f2:18:15: 90:16:5b:91:5f:c2:a5:53:79:10:c2:1f:87:fe:dd:fd:c7:24: a9:f0:d1:2b:dc:12:d1:e3:27:d6:6e:c7:bc:b1:ce:da:33:af: 0e:1d:93:d6:64:d4:09:ed:aa:e0:6b:50:00:d2:83:88:75:7d: 81:6d:b8:35:de:be:83:ec:fa:14:c7:eb:37:23:45:29:43:75: c6:6c:4c:9b:cd:ec:86:6a:aa:6e:95:90:27:ac:6f:3b:c8:34: 65:33:90:b3:de:90:4f:a7:5d:f5:f9:58:90:10:8c:52:0f:1c: 5b:c8:1e:ce:01:79:57:20:1e:00:1e:9f:8c:9a:a7:b7:78:ac: 10:81:e5:d7:89:0f:af:71:0b:8a:89:9d:48:24:dd:b6:13:9c: 6c:3f:fa:83:75:0a:ff:a1:80:be:73:0f:82:e9:41:a3:7d:58: 84:21:f4:0c:14:92:2e:7d:6b:dc:65:44:51:07:69:4e:91:41: c8:69:17:86:19:22:89:bc:3a:9a:2a:2d:d2:10:d4:a9:13:b3: db:4f:52:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKDdBM0U0MjZDOTYyNTdCREYyNDNDM0M2M0I3ODAzODM0 MDUyNUMyQTkwHhcNMjUxMjIzMDAzMjI2WhcNMjUxMjMwMDAzMjI2WjAYMRYwFAYD VQQDDA02OTQ5ZTMxYi1jMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmXuYvz67qQ5/PZ4BnfhnhQcr86dYBtahagp6WInnsOA24E/9nX1RZGqCONwV rlfmvL7kCsnQJC1F/hiK3eECQ9bJieRTpziVDost/Glgp3lasEshXXVsSNyyWduZ pUx0U0Msd/Qmzt8kmDhUxm3O4s6BGPPRQ4IuyhQFQxNuOfsT7wdALtybQEOpINeF l6BK6dzBmW2ZeiyuVFvR9dtK5YijSxJhre0CQJxAmWL2IfbO1HehAW0F9u8sNcYM Ak5DvXxzRa+1W4sGMl0y7uZ+x066JYTvzijCno7TvumzJ32/PtkSeeVkVa9XQ5FR 4w0sV/y4BQuClHj41VJ3Di/LxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJB1OQf 2zBsh9lKAtso1E9x/pmSMB8GA1UdIwQYMBaAFHo+QmyWJXvfJDw8Y7eAODQFJcKp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5OGtQRHhqdDRBNE5BVWx3 cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqNUNiSllsZTk4a1BEeGp0NEE0TkFVbHdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5 OGtQRHhqdDRBNE5BVWx3cWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3hqIuY75aBmeH6ewDfGzFQ3jls7g7B+XLYukCPL7DA7L+VCAHIET/ gNepS6CkVboEsgryGBWQFluRX8KlU3kQwh+H/t39xySp8NEr3BLR4yfWbse8sc7a M68OHZPWZNQJ7arga1AA0oOIdX2Bbbg13r6D7PoUx+s3I0UpQ3XGbEybzeyGaqpu lZAnrG87yDRlM5Cz3pBPp131+ViQEIxSDxxbyB7OAXlXIB4AHp+Mmqe3eKwQgeXX iQ+vcQuKiZ1IJN22E5xsP/qDdQr/oYC+cw+C6UGjfViEIfQMFJIufWvcZURRB2lO kUHIaReGGSKJvDqaKi3SENSpE7PbT1L2 -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:07 2025 by rpki-client