This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft File: ej19N0jHiYbCxeULUBO-tgq0etw.mft (raw, json) Hash identifier: tgUEVWK6aN4XfZZeefBBp8UWPyCjiQ58XJCIcjh/H6k= Subject key identifier: 7B:A6:68:70:75:E8:7C:BE:28:00:3A:4D:B7:F0:ED:18:AF:54:6C:E4 Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC Certificate issuer: /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft Manifest number: 02A6 Signing time: Sun 21 Dec 2025 00:44:08 +0000 Manifest this update: Sun 21 Dec 2025 00:44:07 +0000 Manifest next update: Sun 28 Dec 2025 00:44:07 +0000 Files and hashes: 1: ej19N0jHiYbCxeULUBO-tgq0etw.crl (hash: EnwZv4TGWEXYM7s166r7eRbMaJdfgDrRBge4mgJOrTA=) 2: 3303481C820B11EFA5FD6818C4F9AE02.roa (hash: 2H0Eld64nbCRlxYzVx5jvhl/a/kjGOkQyNiInr2D6fU=) 3: E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (hash: oPhIXC+OF1ykzvnTk4LHIrBmTOI6SazQOAcqVDzTk04=) 4: 28144924820B11EF8B053D18C4F9AE02.roa (hash: L95ijgoOHfXB5kg1UlOb7GIC1yp0yWNX0oJUBtsn6Nw=) 5: EA61BF885BA011F0B7D9FB0DC4F9AE02.roa (hash: yBvWFxkJxlD3BcWZvBUya2FQ/w1n1QnKpsiNpS3l1kM=) 6: 66751A7C729211F0B01C9076C4F9AE02.roa (hash: Co9xDCgNDS9o8SEzHolP1f58DGoWkILAQoEBynF1Tc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D79, serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Validity Not Before: Dec 21 00:44:07 2025 GMT Not After : Dec 28 00:44:07 2025 GMT Subject: CN=694742d7-1c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:2d:df:b5:e4:f2:02:1e:34:f5:a6:c0:13: 13:60:6a:e0:01:04:c5:59:a1:e0:08:63:86:7b:81: dd:73:71:38:a0:f4:7f:b5:4e:ba:24:05:88:a2:5a: 38:b2:ed:bb:76:d4:f6:01:67:dc:8a:4f:98:17:fb: e1:cd:6e:4e:85:81:83:b2:bb:83:e8:2b:37:d6:fa: df:a0:ea:14:97:9b:57:3a:15:66:40:8f:bc:67:13: 85:b7:43:d9:9b:8b:cf:53:0e:c4:a8:52:60:9d:44: e5:24:95:4f:3b:4d:3b:58:e2:c5:6e:15:13:08:e6: bd:da:94:e2:1c:cc:79:8f:61:e5:04:4a:92:a9:de: 72:ec:94:a6:18:f9:96:10:ce:e5:a7:5e:86:4d:eb: 5f:8a:72:57:bc:9f:30:2b:3d:48:3d:f0:36:8a:f6: 5a:4e:11:e2:ed:39:7e:79:52:d9:ec:29:b3:63:b6: 2a:ab:ca:22:f3:0a:4b:d4:fc:a5:c1:c9:d7:c2:0e: e2:da:00:a9:a1:df:81:de:d8:ea:d3:33:ac:a4:b3: 72:15:79:fa:f2:45:25:f3:4c:22:8a:27:5d:71:b1: 2a:a5:0b:32:24:94:1a:bb:af:27:b7:80:08:5f:c6: 1a:fc:b4:3a:75:1b:e3:75:80:c5:bb:39:e5:62:c9: a2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A6:68:70:75:E8:7C:BE:28:00:3A:4D:B7:F0:ED:18:AF:54:6C:E4 X509v3 Authority Key Identifier: keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bf:85:d5:c5:a3:0d:19:6b:69:6e:e4:29:fb:d3:a5:b8:e2: 4a:df:e1:f5:f0:75:d4:57:54:44:d9:b4:8b:25:da:13:39:4e: 1a:1a:17:d8:24:cf:54:5b:d6:19:f8:68:48:f9:c7:f6:3e:35: 83:cc:dc:ba:4f:b5:f5:b0:c6:b9:aa:04:bb:13:d7:b2:a0:60: 4b:78:32:53:cd:ad:05:db:be:76:75:8d:26:44:0c:ea:0e:33: 26:60:0c:10:3d:6a:fd:a5:09:c4:62:a7:b9:74:08:85:eb:05: 57:c5:4a:2e:fd:1c:34:bc:e1:fd:0f:97:68:f8:6b:31:0b:ab: 86:80:a8:ff:e1:d3:1e:ba:b1:bb:24:73:18:da:c0:45:7b:f0: d8:8e:d2:97:31:4a:53:1e:f4:83:4d:6d:ef:78:ae:38:e6:33: 97:1c:cc:33:c8:32:64:fb:99:c7:bd:9c:c9:32:66:f8:28:88: ab:d1:eb:d4:ce:4c:18:25:5f:a3:38:8e:79:6c:17:56:90:7b: cc:6e:16:c0:36:eb:de:d8:49:2c:75:7a:cd:9d:1f:10:0e:45: 8d:13:1f:fe:a3:fd:e0:44:f0:4e:a2:33:20:66:13:2a:88:09: a2:af:b1:cf:80:95:ed:5a:2b:42:e8:55:9d:73:c7:f2:85:84: cf:f7:e0:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENzkxMTAvBgNVBAUTKDdBM0Q3RDM3NDhDNzg5ODZDMkM1RTUwQjUwMTNCRUI2 MEFCNDdBREMwHhcNMjUxMjIxMDA0NDA3WhcNMjUxMjI4MDA0NDA3WjAYMRYwFAYD VQQDDA02OTQ3NDJkNy0xYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstst37Xk8gIeNPWmwBMTYGrgAQTFWaHgCGOGe4Hdc3E4oPR/tU66JAWIolo4 su27dtT2AWfcik+YF/vhzW5OhYGDsruD6Cs31vrfoOoUl5tXOhVmQI+8ZxOFt0PZ m4vPUw7EqFJgnUTlJJVPO007WOLFbhUTCOa92pTiHMx5j2HlBEqSqd5y7JSmGPmW EM7lp16GTetfinJXvJ8wKz1IPfA2ivZaThHi7Tl+eVLZ7CmzY7Yqq8oi8wpL1Pyl wcnXwg7i2gCpod+B3tjq0zOspLNyFXn68kUl80wiiiddcbEqpQsyJJQau68nt4AI X8Ya/LQ6dRvjdYDFuznlYsmiEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHumaHB1 6Hy+KAA6Tbfw7RivVGzkMB8GA1UdIwQYMBaAFHo9fTdIx4mGwsXlC1ATvrYKtHrc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ3OS9CRjE5NEQ4MDI4 M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZYkN4ZVVMVUJPLXRncTBl dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqMTlOMGpIaVliQ3hlVUxVQk8tdGdxMGV0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ3OS9CRjE5NEQ4MDI4M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZ YkN4ZVVMVUJPLXRncTBldHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANv4XVxaMNGWtpbuQp+9OluOJK3+H18HXUV1RE2bSLJdoTOU4aGhfY JM9UW9YZ+GhI+cf2PjWDzNy6T7X1sMa5qgS7E9eyoGBLeDJTza0F2752dY0mRAzq DjMmYAwQPWr9pQnEYqe5dAiF6wVXxUou/Rw0vOH9D5do+GsxC6uGgKj/4dMeurG7 JHMY2sBFe/DYjtKXMUpTHvSDTW3veK445jOXHMwzyDJk+5nHvZzJMmb4KIir0evU zkwYJV+jOI55bBdWkHvMbhbANuve2EksdXrNnR8QDkWNEx/+o/3gRPBOojMgZhMq iAmir7HPgJXtWitC6FWdc8fyhYTP9+AX -----END CERTIFICATE-----Generated at Sun Dec 21 20:37:54 2025 by rpki-client