This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft File: a1eqjwdnrM-oLNKqaesREse3fPw.mft (raw, json) Hash identifier: wtQM2cCl3ualASKBL3/j5J7HgPn8yku5zTxkxNHjEV8= Subject key identifier: 29:30:25:AF:B7:EF:8A:06:99:28:BA:33:FA:8E:04:26:52:DA:1C:BF Authority key identifier: 6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC Certificate issuer: /CN=A917EC30/serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft Manifest number: 5D Signing time: Tue 23 Dec 2025 06:00:58 +0000 Manifest this update: Tue 23 Dec 2025 06:00:58 +0000 Manifest next update: Tue 30 Dec 2025 06:00:58 +0000 Files and hashes: 1: a1eqjwdnrM-oLNKqaesREse3fPw.crl (hash: rtDNJtm+YNRxVKcDmWlpjFzIA/PkCBpXmSb9mqbEHVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC30, serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC Validity Not Before: Dec 23 06:00:58 2025 GMT Not After : Dec 30 06:00:58 2025 GMT Subject: CN=694a301a-ca1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:ee:d2:c3:f9:12:c8:94:fb:4f:d1:de:db: 81:19:18:91:7d:40:1d:52:0c:7c:e4:c2:f9:dd:c4: bb:1f:59:2f:1e:16:11:9b:64:df:f4:42:6b:31:19: 67:33:b5:43:63:82:7e:71:b1:ee:aa:f1:2e:cc:cf: 15:63:a5:f6:9c:ba:55:14:cc:f8:91:b1:f9:39:19: ec:06:fe:f7:71:ac:d6:cd:82:2e:00:a9:35:9a:2f: 32:27:51:47:57:b8:f7:1b:64:72:50:19:20:94:4b: 51:29:7e:ec:11:b8:45:a7:72:b8:16:cd:b7:2f:93: 25:71:be:a9:32:e7:77:9c:16:88:f2:1b:c1:01:16: 1e:ed:dd:cd:06:52:2f:12:64:61:37:5a:d0:68:0f: 3b:da:06:09:21:4d:36:27:78:3f:b8:43:37:98:de: 16:51:f5:cd:a8:b9:85:da:1b:e2:1b:56:b1:0b:79: 2b:86:26:0f:70:9d:db:9e:38:5a:60:c4:c7:eb:5e: b1:71:de:6b:53:cc:b8:7e:ab:d7:be:4b:01:d4:c6: 4f:ad:92:5b:cc:9f:aa:24:5b:c8:d3:2e:c4:2c:14: e4:ec:8f:54:aa:59:eb:c6:e1:73:e1:f7:7f:2a:65: af:3c:c7:dd:df:d2:52:8e:55:70:5c:71:9c:e9:3e: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:30:25:AF:B7:EF:8A:06:99:28:BA:33:FA:8E:04:26:52:DA:1C:BF X509v3 Authority Key Identifier: keyid:6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:74:88:95:69:0d:f7:75:3b:02:6a:dc:d5:20:95:08:ae:a2: 51:11:b0:90:fd:59:25:c8:2d:e2:ab:db:50:67:46:60:c7:da: 48:9f:a4:b4:24:11:23:f5:ba:d1:35:8f:0e:85:ca:45:9f:b4: 98:c8:cc:84:7f:a8:13:3c:9e:08:72:2e:fb:04:0a:20:77:af: dc:de:1c:86:0c:6d:99:68:e2:b9:2a:bd:cf:4b:fd:26:86:da: 69:97:55:e0:0a:ae:f5:47:71:cb:9f:3a:5f:ea:b7:54:59:e6: 9f:fd:3d:f3:ff:ac:49:71:44:cd:08:e3:4e:a2:02:0f:fa:34: 54:b3:40:a8:8b:21:15:da:b8:7b:4f:5b:b2:6d:bf:2c:93:a5: 92:08:ea:fb:9a:77:6b:af:29:91:ab:1a:1c:98:ad:19:f9:88: 4b:72:08:21:cf:38:05:2e:dd:9a:d8:d0:10:31:49:e2:70:5b: 6b:c4:53:f0:8b:c1:d9:d6:8e:1b:a0:4f:f4:35:48:be:f5:5d: 94:c6:65:ab:a3:9e:7e:66:54:67:da:e7:df:db:0f:c6:26:12: d2:79:e5:d5:b9:b9:ed:f2:4c:3b:8d:be:2a:8e:27:7c:40:1b: 37:f4:90:e6:de:09:de:37:54:41:13:4b:c7:6d:50:5a:26:6f: 8c:45:d1:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RUMzMDExMC8GA1UEBRMoNkI1N0FBOEYwNzY3QUNDRkE4MkNEMkFBNjlFQjExMTJD N0I3N0NGQzAeFw0yNTEyMjMwNjAwNThaFw0yNTEyMzAwNjAwNThaMBgxFjAUBgNV BAMMDTY5NGEzMDFhLWNhMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdge7Sw/kSyJT7T9He24EZGJF9QB1SDHzkwvndxLsfWS8eFhGbZN/0QmsxGWcz tUNjgn5xse6q8S7MzxVjpfaculUUzPiRsfk5GewG/vdxrNbNgi4AqTWaLzInUUdX uPcbZHJQGSCUS1EpfuwRuEWncrgWzbcvkyVxvqky53ecFojyG8EBFh7t3c0GUi8S ZGE3WtBoDzvaBgkhTTYneD+4QzeY3hZR9c2ouYXaG+IbVrELeSuGJg9wndueOFpg xMfrXrFx3mtTzLh+q9e+SwHUxk+tklvMn6okW8jTLsQsFOTsj1SqWevG4XPh938q Za88x93f0lKOVXBccZzpPnExAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKTAlr7fv igaZKLoz+o4EJlLaHL8wHwYDVR0jBBgwFoAUa1eqjwdnrM+oLNKqaesREse3fPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFQzMwLzYzQ0Q2RUM0NTcz RTExRjBCQjI3RkI4NEM0RjlBRTAyL2ExZXFqd2Ruck0tb0xOS3FhZXNSRXNlM2ZQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTFlcWp3ZG5yTS1vTE5LcWFlc1JFc2UzZlB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF QzMwLzYzQ0Q2RUM0NTczRTExRjBCQjI3RkI4NEM0RjlBRTAyL2ExZXFqd2Ruck0t b0xOS3FhZXNSRXNlM2ZQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACp0iJVpDfd1OwJq3NUglQiuolERsJD9WSXILeKr21BnRmDH2kifpLQk ESP1utE1jw6FykWftJjIzIR/qBM8nghyLvsECiB3r9zeHIYMbZlo4rkqvc9L/SaG 2mmXVeAKrvVHccufOl/qt1RZ5p/9PfP/rElxRM0I406iAg/6NFSzQKiLIRXauHtP W7JtvyyTpZII6vuad2uvKZGrGhyYrRn5iEtyCCHPOAUu3ZrY0BAxSeJwW2vEU/CL wdnWjhugT/Q1SL71XZTGZaujnn5mVGfa59/bD8YmEtJ55dW5ue3yTDuNviqOJ3xA Gzf0kObeCd43VEETS8dtUFomb4xF0a8= -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:42 2025 by rpki-client