This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft File: EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json) Hash identifier: c+NLoYQyPRo1c1YwmLPlOSEBd/y/VZhiQsxjpMfmw2Y= Subject key identifier: EA:A3:7C:1F:47:7F:06:DD:92:E4:2A:A8:83:8E:7F:61:7B:3D:82:2A Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A Certificate issuer: /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A Certificate serial: 0722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft Manifest number: 070C Signing time: Mon 22 Dec 2025 21:09:12 +0000 Manifest this update: Mon 22 Dec 2025 21:09:12 +0000 Manifest next update: Mon 29 Dec 2025 21:09:12 +0000 Files and hashes: 1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: +sVrmzc/0Fqd9KMyWkpo19dMfC0ewiluERgm+UJYuQs=) 2: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: 20mFFdly0NwVg0sh0PTK76DHn25NUKvd/zLLbGt7l68=) 3: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: 6EZkAzkPk5SlMX3wqZPtJqCzo2SBsCkIIw69w24D0aY=) 4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: RyO7TsWz01C7RyL01NueecIAQ4G8XObxp2ft3XjCtCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A Validity Not Before: Dec 22 21:09:12 2025 GMT Not After : Dec 29 21:09:12 2025 GMT Subject: CN=6949b378-cd84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:03:4c:f9:12:a3:3a:f2:3d:48:29:30:c1: 8e:9b:a3:19:ae:92:3c:66:84:0f:03:f3:4a:3d:a3: 0d:ff:aa:2d:f3:e2:9b:b3:21:c6:26:73:53:ea:53: 02:fe:79:ed:e9:1c:ce:35:e6:22:55:35:ca:9a:c6: 17:46:b1:10:43:4e:81:46:77:f5:45:7c:34:8b:6a: 16:22:9b:33:06:6d:ad:60:58:0d:93:8b:91:ae:82: ac:b6:db:e5:38:3e:d6:a2:00:a7:ad:94:ba:cf:0e: 19:29:79:3b:68:ff:cc:9a:01:36:91:a4:52:53:97: 23:0e:1b:1e:4d:ab:50:df:3d:2d:97:73:2a:a5:63: b6:5a:be:20:7e:2c:f8:c2:8a:e0:11:1c:eb:14:fb: b6:7e:1d:cd:4a:21:c3:c2:2f:6f:f0:11:d9:ca:05: ff:fb:c9:2a:87:9f:52:fd:3c:32:56:30:67:f0:b4: 3b:31:a8:14:b8:94:b2:4e:32:b0:02:6f:5a:98:a3: 27:88:1e:1a:55:be:23:16:8d:ec:2a:4f:35:0b:29: 28:ab:5d:b7:02:01:7f:b5:27:2d:aa:50:4b:12:c8: e6:ed:55:85:14:2b:81:96:8d:e2:1b:ea:52:59:d2: 0d:8a:ee:59:7a:a0:19:a9:10:35:db:26:5e:0e:e9: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A3:7C:1F:47:7F:06:DD:92:E4:2A:A8:83:8E:7F:61:7B:3D:82:2A X509v3 Authority Key Identifier: keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:01:82:72:bb:5b:b0:c5:07:3c:c2:73:cf:78:73:ff:36:20: 5d:43:e7:f1:b7:15:a4:78:e1:9d:c7:b6:ca:0d:59:7a:0b:c8: 22:44:58:97:17:d5:50:a6:dc:85:11:eb:86:6c:91:d7:03:17: bb:49:50:b1:50:52:44:5a:25:52:1e:ac:14:1e:52:eb:87:6f: d4:07:03:79:f2:ef:c3:33:c1:3d:9d:14:3c:b9:4d:7a:b4:30: a1:a2:94:34:a3:a7:d8:46:dc:c9:70:21:ce:17:69:07:2f:5b: 8b:d1:34:f4:bf:67:cb:77:fb:f1:51:c0:a0:56:ff:92:48:1c: 9e:f0:7a:37:7a:cd:d9:bd:ee:88:ec:35:24:28:14:a9:12:b8: 52:b9:a4:87:83:c5:5a:f9:8c:90:81:d2:47:aa:37:d9:ad:af: 35:b9:74:f2:ae:d0:2a:09:7d:6e:0a:19:e2:78:63:6e:83:ed: 55:3c:2e:94:dd:a4:c8:e6:75:87:f0:66:53:da:cb:f9:1f:9b: 82:8c:a2:6b:32:dc:1b:59:38:15:64:4b:11:e1:e3:2f:22:3e: ad:5f:31:df:25:7e:8e:31:ed:6e:b2:e5:af:17:9d:0c:56:8d: 6e:2b:e4:fe:1d:f7:59:39:a2:66:bd:99:0b:7d:40:ec:d4:05: 55:d7:44:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1RkUxMTAvBgNVBAUTKDEyMTA5NTgzMDIzRTE4NURFNEEyQjI5NDIzMTU5OUQ2 MzY0MEJDOUEwHhcNMjUxMjIyMjEwOTEyWhcNMjUxMjI5MjEwOTEyWjAYMRYwFAYD VQQDDA02OTQ5YjM3OC1jZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTkDTPkSozryPUgpMMGOm6MZrpI8ZoQPA/NKPaMN/6ot8+KbsyHGJnNT6lMC /nnt6RzONeYiVTXKmsYXRrEQQ06BRnf1RXw0i2oWIpszBm2tYFgNk4uRroKsttvl OD7WogCnrZS6zw4ZKXk7aP/MmgE2kaRSU5cjDhseTatQ3z0tl3MqpWO2Wr4gfiz4 worgERzrFPu2fh3NSiHDwi9v8BHZygX/+8kqh59S/TwyVjBn8LQ7MagUuJSyTjKw Am9amKMniB4aVb4jFo3sKk81Cykoq123AgF/tSctqlBLEsjm7VWFFCuBlo3iG+pS WdINiu5ZeqAZqRA12yZeDumW5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqjfB9H fwbdkuQqqIOOf2F7PYIqMB8GA1UdIwQYMBaAFBIQlYMCPhhd5KKylCMVmdY2QLya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zQ0VFREY5MDZB OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdGM2tvcktVSXhXWjFqWkF2 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VoQ1Znd0ktR0Yza29yS1VJeFdaMWpaQXZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjVGRS8zQ0VFREY5MDZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdG M2tvcktVSXhXWjFqWkF2Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqAYJyu1uwxQc8wnPPeHP/NiBdQ+fxtxWkeOGdx7bKDVl6C8giRFiX F9VQptyFEeuGbJHXAxe7SVCxUFJEWiVSHqwUHlLrh2/UBwN58u/DM8E9nRQ8uU16 tDChopQ0o6fYRtzJcCHOF2kHL1uL0TT0v2fLd/vxUcCgVv+SSBye8Ho3es3Zve6I 7DUkKBSpErhSuaSHg8Va+YyQgdJHqjfZra81uXTyrtAqCX1uChnieGNug+1VPC6U 3aTI5nWH8GZT2sv5H5uCjKJrMtwbWTgVZEsR4eMvIj6tXzHfJX6OMe1usuWvF50M Vo1uK+T+HfdZOaJmvZkLfUDs1AVV10QS -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:06 2025 by rpki-client