This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft File: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft (raw, json) Hash identifier: XCVkvJz6KL3boOgcrGZSZxVCj7ZD8RV0G0hKRSbAdas= Subject key identifier: BE:BF:09:A5:2D:F2:A0:29:DB:05:29:22:60:A2:AA:10:FB:C8:E6:25 Authority key identifier: 78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4 Certificate issuer: /CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4 Certificate serial: 2670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft Manifest number: 2DD8 Signing time: Wed 24 Dec 2025 15:33:30 +0000 Manifest this update: Wed 24 Dec 2025 15:33:29 +0000 Manifest next update: Wed 31 Dec 2025 15:33:29 +0000 Files and hashes: 1: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl (hash: jcMSd2Ie1W37bysNNZXiGBY6VJRIMRycuQVXYcbbRco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9840 (0x2670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824, serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4 Validity Not Before: Dec 24 15:33:29 2025 GMT Not After : Dec 31 15:33:29 2025 GMT Subject: CN=694c07c9-2dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:19:b1:8d:0c:65:84:94:5f:89:e6:87:44: 3a:66:73:ad:21:f1:ba:a6:55:e8:5d:ee:c0:0f:62: 09:55:52:bb:f8:4c:5d:87:e0:dd:e7:89:9f:45:82: f4:36:90:b3:a4:78:2f:e3:b0:5e:4c:cd:4d:ae:b7: 2c:f8:37:03:1b:c1:b3:26:cf:b9:00:d3:31:c6:a7: 5a:ac:b2:11:e1:01:7a:1e:e2:d9:ad:d6:ae:ff:a7: c9:10:6b:4f:f5:bf:5b:9c:79:1a:d0:5d:b8:d0:83: dc:61:02:55:b6:66:b1:ab:6c:de:1b:99:17:36:09: a5:ce:83:86:37:64:d6:5a:ac:41:e7:24:d7:86:fc: 81:9e:46:dd:c0:9a:09:8d:9b:cb:f7:13:bc:a8:31: ed:7d:38:da:67:19:6a:88:a7:7e:4a:b2:d5:ab:08: b0:51:81:f9:91:3e:21:e5:95:ec:1f:df:67:ee:9b: 57:f9:ce:6d:60:84:c7:84:0a:23:92:db:a5:0e:55: ff:d9:81:37:62:9c:05:e4:fe:e2:6f:5a:4d:d4:fe: b9:57:2b:8a:8d:3c:67:98:2b:c6:d8:98:de:50:5c: f1:62:f7:f6:58:9f:4a:6e:e2:ca:b6:ad:bc:b5:0d: c8:6b:d6:07:80:fe:c2:f9:e7:51:88:d8:6d:e9:9c: 62:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BF:09:A5:2D:F2:A0:29:DB:05:29:22:60:A2:AA:10:FB:C8:E6:25 X509v3 Authority Key Identifier: keyid:78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4b:7b:d3:f8:26:df:fd:f9:aa:27:4a:46:80:2d:7f:77:1c: b2:e3:c7:af:50:8a:ea:2f:7e:32:26:1b:4c:39:60:ab:41:a0: 6a:30:e7:72:a0:26:87:2c:22:69:ea:4b:cf:18:97:9c:36:ff: 13:ce:f5:75:34:90:6a:71:4a:89:bd:7e:29:2f:6b:e8:e0:8a: c3:4c:b6:3d:2b:bb:08:cf:79:5e:d6:14:65:e3:28:6c:44:47: 1c:35:64:27:df:6e:8a:2d:66:27:f1:c5:00:c8:cb:2c:d0:91: 01:89:fa:ec:16:f6:8e:4b:2f:b1:3a:51:27:86:f0:56:96:41: 7f:93:b4:b0:7d:19:58:5b:39:ba:a1:cf:7c:9f:1a:fb:09:dd: 7b:41:6f:aa:c5:d3:c6:4a:dc:65:f3:3d:0f:00:22:3b:bc:69: 30:be:1d:06:95:bf:c6:e8:fb:14:6e:57:ba:0b:cc:2a:f2:db: 12:d2:ae:1f:90:18:80:ef:bc:bc:32:86:b2:a8:c6:db:25:b8: 18:65:30:0b:11:c1:78:d1:c9:81:02:53:f1:63:b6:bd:c5:5b: 50:cb:bd:3f:a6:ea:1c:33:e2:bc:25:28:72:79:66:19:cf:77: bb:49:9c:5e:6a:d9:e3:50:5e:79:ea:5a:7b:97:50:12:80:fb: aa:10:03:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDc4QTk5MjY3RDdFRUYxMjdGNUZCNDUyNEY3OUM1OUFG MEFCQkMxRjQwHhcNMjUxMjI0MTUzMzI5WhcNMjUxMjMxMTUzMzI5WjAYMRYwFAYD VQQDDA02OTRjMDdjOS0yZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlkZsY0MZYSUX4nmh0Q6ZnOtIfG6plXoXe7AD2IJVVK7+Exdh+Dd54mfRYL0 NpCzpHgv47BeTM1Nrrcs+DcDG8GzJs+5ANMxxqdarLIR4QF6HuLZrdau/6fJEGtP 9b9bnHka0F240IPcYQJVtmaxq2zeG5kXNgmlzoOGN2TWWqxB5yTXhvyBnkbdwJoJ jZvL9xO8qDHtfTjaZxlqiKd+SrLVqwiwUYH5kT4h5ZXsH99n7ptX+c5tYITHhAoj ktulDlX/2YE3YpwF5P7ib1pN1P65VyuKjTxnmCvG2JjeUFzxYvf2WJ9KbuLKtq28 tQ3Ia9YHgP7C+edRiNht6ZxidwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6/CaUt 8qAp2wUpImCiqhD7yOYlMB8GA1UdIwQYMBaAFHipkmfX7vEn9ftFJPecWa8Ku8H0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9lS21TWjlmdThTZjEtMFVrOTV4WnJ3cTd3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVNaOWZ1OFNmMS0wVWs5NXhacndxN3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzgyNC9CQTBFRkU1MkZEMjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9lS21TWjlmdThT ZjEtMFVrOTV4WnJ3cTd3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfS3vT+Cbf/fmqJ0pGgC1/dxyy48evUIrqL34yJhtMOWCrQaBqMOdy oCaHLCJp6kvPGJecNv8TzvV1NJBqcUqJvX4pL2vo4IrDTLY9K7sIz3le1hRl4yhs REccNWQn326KLWYn8cUAyMss0JEBifrsFvaOSy+xOlEnhvBWlkF/k7SwfRlYWzm6 oc98nxr7Cd17QW+qxdPGStxl8z0PACI7vGkwvh0Glb/G6PsUble6C8wq8tsS0q4f kBiA77y8MoayqMbbJbgYZTALEcF40cmBAlPxY7a9xVtQy70/puocM+K8JShyeWYZ z3e7SZxeatnjUF556lp7l1ASgPuqEAPV -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:12 2025 by rpki-client