This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft File: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json) Hash identifier: HuPKir+IyU0H8lU+drpe/xbo5E1K/1AO5XW0v4iS3Mw= Subject key identifier: 41:7F:F8:2D:E3:95:8B:DD:F2:14:FD:7A:4E:62:3B:7F:9F:C3:C9:D3 Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Certificate serial: 3589 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft Manifest number: 353F Signing time: Sat 06 Dec 2025 14:40:11 +0000 Manifest this update: Sat 06 Dec 2025 14:40:10 +0000 Manifest next update: Sat 13 Dec 2025 14:40:10 +0000 Files and hashes: 1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: 00MPe0IbLfzeeCqFf6gSZirbBQJGfdAUxXOw3vcKmWM=) 2: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: fT98Wy1t5VScFWJuQupk2LhedSGkV+ojkzEZelCkDWM=) 3: 50FFD256C9C011F0A362FA0CC4F9AE02.roa (hash: FFJar29YXtEvA6a37PKSlFXmpJUHGNPwr576ju55AGI=) 4: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: dGU6CJvrS/pXM1BPExEcoLwBj3XVO3Qw6BjkQ3c5uZ8=) 5: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: d/7DMtiXfQBwX+8qOXb96W9MkSduRe+bpauiOZ+JfzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13705 (0x3589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Validity Not Before: Dec 6 14:40:10 2025 GMT Not After : Dec 13 14:40:10 2025 GMT Subject: CN=6934404b-1858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:ed:5a:89:23:b9:46:e4:1a:8c:bd:76:f7: 5e:1b:14:50:f6:52:54:2d:b3:8a:e9:1e:41:a9:22: c8:15:8b:ae:07:2d:e1:7d:5b:93:da:97:79:3a:1e: 63:47:c7:05:cb:d7:73:77:32:f2:ac:f2:73:2d:80: d9:b3:6a:06:81:ca:0f:fa:46:fb:03:99:aa:c4:28: 14:42:2b:46:2e:e2:dc:e1:23:1a:59:48:09:fc:89: 9a:ee:7b:ce:be:2f:be:01:d6:9f:e5:f1:9c:2f:64: 0a:06:43:e9:08:d3:13:4e:8d:65:41:ec:fe:be:c8: f6:ab:6b:c6:44:04:d5:c3:2f:e9:84:32:b7:c0:e8: b1:95:61:76:c1:2e:7d:62:7b:3a:f0:36:d0:31:df: 8d:82:2f:f0:a1:c9:65:34:35:99:cc:b3:c0:b7:44: de:25:84:67:a7:87:8c:c7:3f:62:c5:7c:78:54:d9: cd:8d:3d:fb:65:cb:3f:cb:13:8a:5b:22:63:3e:75: 27:1f:cf:09:ef:dc:b8:eb:7b:91:92:75:cb:ff:31: ee:9d:77:2e:f6:3d:62:05:f6:6d:04:a1:39:1c:00: cc:a3:b7:e9:3f:a6:aa:3c:65:18:09:6b:de:b0:6e: 4c:87:ae:92:8e:f6:d1:51:1f:d6:6c:48:e1:d2:14: 25:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7F:F8:2D:E3:95:8B:DD:F2:14:FD:7A:4E:62:3B:7F:9F:C3:C9:D3 X509v3 Authority Key Identifier: keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:3c:03:06:26:df:16:73:42:b0:39:c6:8b:6f:e4:0f:8a:7b: 53:36:8f:fa:59:a6:bd:a8:f8:b6:b1:12:a3:41:1a:df:8d:fa: f8:d8:5a:cc:cf:2e:71:5b:7b:2b:ea:9f:c9:26:c2:99:d6:92: 14:6d:c3:0d:a8:56:59:21:72:15:4e:89:78:2e:b1:7b:5d:c8: 7b:52:a6:34:08:aa:12:c4:37:6f:c8:6f:7e:e7:f7:37:c9:82: 28:b0:ee:c7:8a:b2:0e:12:3b:56:5f:78:00:0e:bd:17:09:62: c3:ef:c4:68:ef:c6:42:df:15:a4:cb:2c:98:a8:58:b1:17:62: 44:0e:f0:ff:26:3a:6d:c7:d0:8e:13:83:7a:4d:38:03:c4:0a: 0e:99:17:ee:4c:9b:46:11:41:f3:a3:19:f4:c9:a6:2e:2d:5d: ab:99:8e:a9:4b:cc:02:4a:1a:06:5b:56:82:ea:b5:94:67:24: 67:a3:82:c0:a2:62:57:41:73:be:9e:91:73:ac:e3:a3:08:2f: 5b:ec:51:68:a7:e9:41:bb:94:64:0f:10:bb:49:64:75:88:5c: 41:7c:11:7f:01:d1:c4:9f:07:ea:87:aa:ed:f5:02:d6:3f:6d: 46:13:0f:59:ea:ea:30:bd:dd:c2:c2:ad:f7:19:26:8c:f5:b8: 87:7f:ac:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQjAxMTAvBgNVBAUTKDEzMjQwNDMwMjFCQjQ1RDdGRjY2RjIwQUZDNjgzOTM0 MzEzMEMzRjIwHhcNMjUxMjA2MTQ0MDEwWhcNMjUxMjEzMTQ0MDEwWjAYMRYwFAYD VQQDEw02OTM0NDA0Yi0xODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3PtWokjuUbkGoy9dvdeGxRQ9lJULbOK6R5BqSLIFYuuBy3hfVuT2pd5Oh5j R8cFy9dzdzLyrPJzLYDZs2oGgcoP+kb7A5mqxCgUQitGLuLc4SMaWUgJ/Ima7nvO vi++Adaf5fGcL2QKBkPpCNMTTo1lQez+vsj2q2vGRATVwy/phDK3wOixlWF2wS59 Yns68DbQMd+Ngi/wocllNDWZzLPAt0TeJYRnp4eMxz9ixXx4VNnNjT37Zcs/yxOK WyJjPnUnH88J79y463uRknXL/zHunXcu9j1iBfZtBKE5HADMo7fpP6aqPGUYCWve sG5Mh66SjvbRUR/WbEjh0hQlEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF/+C3j lYvd8hT9ek5iO3+fw8nTMB8GA1UdIwQYMBaAFBMkBDAhu0XX/2byCvxoOTQxMMPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCMC9FNTU3QzAwMDFE OTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1JkZl9adklLX0dnNU5ERXd3 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V5UUVNQ0c3UmRmX1p2SUtfR2c1TkRFd3dfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCMC9FNTU3QzAwMDFEOTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1Jk Zl9adklLX0dnNU5ERXd3X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChPAMGJt8Wc0KwOcaLb+QPintTNo/6Waa9qPi2sRKjQRrfjfr42FrM zy5xW3sr6p/JJsKZ1pIUbcMNqFZZIXIVTol4LrF7Xch7UqY0CKoSxDdvyG9+5/c3 yYIosO7HirIOEjtWX3gADr0XCWLD78Ro78ZC3xWkyyyYqFixF2JEDvD/Jjptx9CO E4N6TTgDxAoOmRfuTJtGEUHzoxn0yaYuLV2rmY6pS8wCShoGW1aC6rWUZyRno4LA omJXQXO+npFzrOOjCC9b7FFop+lBu5RkDxC7SWR1iFxBfBF/AdHEnwfqh6rt9QLW P21GEw9Z6uowvd3Cwq33GSaM9biHf6zQ -----END CERTIFICATE-----Generated at Mon Dec 8 06:20:33 2025 by rpki-client