This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft File: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft (raw, json) Hash identifier: SDzMVzLVdWxCcolgk4gTmZ0b2UWzKsl3b5rJxe4noxY= Subject key identifier: 0C:24:51:12:F2:3F:2F:AA:6B:6B:4F:15:65:39:3D:17:29:9D:41:0B Authority key identifier: 4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74 Certificate issuer: /CN=A918E269/serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft Manifest number: 79 Signing time: Sun 21 Dec 2025 05:52:52 +0000 Manifest this update: Sun 21 Dec 2025 05:52:51 +0000 Manifest next update: Sun 28 Dec 2025 05:52:51 +0000 Files and hashes: 1: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl (hash: kaemjTQrQD561i8px5h/VJ4jA19vFFFJstDvRJusKb0=) 2: 2B1A3764302A11F0B211AD0BC4F9AE02.roa (hash: NkhW5FW4JP+LMlscQaQBvoaph79aDkou+LpFxXsX7js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E269, serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274 Validity Not Before: Dec 21 05:52:51 2025 GMT Not After : Dec 28 05:52:51 2025 GMT Subject: CN=69478b34-ed96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6d:e7:b0:bb:87:5c:b6:93:93:e4:fe:c9:44: 7e:d8:15:de:80:45:88:09:f1:48:2a:e2:d5:38:dd: 6d:45:81:5f:0e:5d:58:b1:53:da:87:6b:53:2d:b2: 5e:85:f8:ed:87:a5:7e:b8:83:2d:49:f0:d4:19:61: 5d:da:fe:16:07:03:d3:bc:3c:4d:aa:99:4c:cb:d8: a6:ca:c2:f8:e1:ed:79:c0:84:54:92:1e:76:2b:27: 7c:6d:4c:fc:16:88:48:9c:11:13:74:7f:bb:da:28: c0:de:be:2d:d9:c8:83:b8:6c:5b:03:53:45:c4:ae: 52:64:3d:95:91:c5:5f:4e:7e:fb:57:80:82:44:15: af:7f:f1:84:74:e1:04:93:73:ed:03:c0:df:7e:4e: 04:34:cb:2d:20:67:8e:10:46:76:8f:cb:87:2d:78: 94:08:f4:17:87:99:a1:75:29:6c:08:84:09:87:6f: c6:64:2b:93:d2:f2:7e:d0:56:ac:6a:57:73:3b:05: 5e:a8:68:21:79:4f:f0:5c:75:4a:23:f3:1f:a2:22: d8:1f:5c:dc:8e:27:7b:bf:3e:c6:ae:1b:c1:24:a2: 96:17:b8:af:8f:77:d2:48:b7:c5:6b:bd:e4:e1:b2: 6d:d6:7f:49:3f:23:e4:29:ba:c8:9c:bd:9b:cd:5f: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:24:51:12:F2:3F:2F:AA:6B:6B:4F:15:65:39:3D:17:29:9D:41:0B X509v3 Authority Key Identifier: keyid:4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:4f:20:1e:47:a0:e0:a3:1e:b8:b7:34:5a:1d:7d:5c:f1:47: 04:fa:ed:fe:44:0f:fb:f4:8f:2e:e9:81:98:1f:c8:94:a7:6c: 05:0d:a3:2c:79:ad:2b:d2:b2:46:da:37:dc:9e:98:ff:48:ae: e8:cd:86:1c:52:12:11:1e:ef:6b:86:68:12:6d:11:18:25:ab: ac:20:21:f6:7f:36:85:aa:6c:99:13:a7:e7:26:13:23:a5:98: 20:c5:48:a8:de:53:38:67:89:00:bd:31:33:0e:39:ed:99:68: 90:a7:67:0b:e0:5c:a2:9c:f5:38:5c:45:a3:4b:ec:ea:40:5b: 73:cc:3f:b6:7d:6d:ed:0f:e1:1a:d1:62:e2:ee:a9:2d:bd:ef: 59:57:65:6f:47:6a:d6:8c:ae:ee:1c:19:ac:96:3c:37:bd:13: ce:e7:8d:85:fa:ea:55:3a:5f:78:df:1f:e0:93:e0:a8:61:e0: c5:b3:6b:99:16:29:68:b0:d3:88:4a:fa:87:fe:8b:3f:76:f6: e2:07:cf:0b:c4:3a:73:f0:85:94:93:da:a7:91:55:b5:44:ce: 5d:40:32:f9:4c:63:8f:d7:ea:ca:55:a9:cf:04:1e:9a:40:22: b5:b7:9a:fe:1c:d2:67:19:04:ff:5f:44:7d:0d:f5:55:17:f6: 59:86:09:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTI2OTExMC8GA1UEBRMoNEJFMTA3MzkzNjI1MkUzQ0YwNzJGOTg5RDdGREM0RTdF N0M2NjI3NDAeFw0yNTEyMjEwNTUyNTFaFw0yNTEyMjgwNTUyNTFaMBgxFjAUBgNV BAMMDTY5NDc4YjM0LWVkOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfbeewu4dctpOT5P7JRH7YFd6ARYgJ8Ugq4tU43W1FgV8OXVixU9qHa1Mtsl6F +O2HpX64gy1J8NQZYV3a/hYHA9O8PE2qmUzL2KbKwvjh7XnAhFSSHnYrJ3xtTPwW iEicERN0f7vaKMDevi3ZyIO4bFsDU0XErlJkPZWRxV9OfvtXgIJEFa9/8YR04QST c+0DwN9+TgQ0yy0gZ44QRnaPy4cteJQI9BeHmaF1KWwIhAmHb8ZkK5PS8n7QVqxq V3M7BV6oaCF5T/BcdUoj8x+iItgfXNyOJ3u/PsauG8EkopYXuK+Pd9JIt8VrveTh sm3Wf0k/I+QpusicvZvNX/+nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDCRREvI/ L6pra08VZTk9FymdQQswHwYDVR0jBBgwFoAUS+EHOTYlLjzwcvmJ1/3E5+fGYnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMjY5LzM5M0JBOENFMkI2 RjExRjA4NkFERTU0RUM0RjlBRTAyL1MtRUhPVFlsTGp6d2N2bUoxXzNFNS1mR1lu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUy1FSE9UWWxManp3Y3ZtSjFfM0U1LWZHWW5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MjY5LzM5M0JBOENFMkI2RjExRjA4NkFERTU0RUM0RjlBRTAyL1MtRUhPVFlsTGp6 d2N2bUoxXzNFNS1mR1luUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKpPIB5HoOCjHri3NFodfVzxRwT67f5ED/v0jy7pgZgfyJSnbAUNoyx5 rSvSskbaN9yemP9IrujNhhxSEhEe72uGaBJtERglq6wgIfZ/NoWqbJkTp+cmEyOl mCDFSKjeUzhniQC9MTMOOe2ZaJCnZwvgXKKc9ThcRaNL7OpAW3PMP7Z9be0P4RrR YuLuqS2971lXZW9HataMru4cGayWPDe9E87njYX66lU6X3jfH+CT4Khh4MWza5kW KWiw04hK+of+iz929uIHzwvEOnPwhZST2qeRVbVEzl1AMvlMY4/X6spVqc8EHppA IrW3mv4c0mcZBP9fRH0N9VUX9lmGCcY= -----END CERTIFICATE-----Generated at Mon Dec 22 21:08:14 2025 by rpki-client