This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft File: eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json) Hash identifier: qmjyk+8QV0qkwli5UsOvGGA3Swzcw4uV9XqA3A6RBYY= Subject key identifier: D8:46:48:E1:9F:2D:56:1E:5E:5E:E2:F3:CA:F1:2F:BA:18:94:28:17 Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Certificate serial: 354F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft Manifest number: 3520 Signing time: Mon 22 Dec 2025 14:30:11 +0000 Manifest this update: Mon 22 Dec 2025 14:30:11 +0000 Manifest next update: Mon 29 Dec 2025 14:30:11 +0000 Files and hashes: 1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: RykrNAlKmeG/hi/cu23jGjQX3wiQJTt2kXXdrrHthv8=) 2: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: pLIkppbdFI2Dvba2mWRCPANXKzDe4Q3IfvnPWtwGOsc=) 3: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: gkYrWkhbDnSZnPzaW3pf3edvz0FUTHjNjGt5hZNgUcM=) 4: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: sRvMLmzA3faCvCgnj9Kc1Nyq/athaxPg1qdQG6qTSjA=) 5: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: CUUb/coZVwybMNB3Q6DnZxhNxSXx7mieErXaIHIRyww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13647 (0x354f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Validity Not Before: Dec 22 14:30:11 2025 GMT Not After : Dec 29 14:30:11 2025 GMT Subject: CN=694955f3-71cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c4:f0:ab:8a:d6:df:7d:7d:05:d6:65:1b:f1: be:5e:90:2f:d2:eb:6b:0d:a7:b7:4b:58:3d:8d:ab: 3a:df:38:53:b1:5c:dc:15:d5:9a:7c:ad:3f:14:a6: b9:bc:1d:06:3b:2b:28:88:35:3e:ed:b4:b0:f5:84: ef:a9:57:30:7d:10:b6:3f:33:5a:7b:b2:b0:52:56: 49:f0:f2:0b:1e:c9:dd:ba:d3:74:c5:a0:ec:1f:94: bd:f1:f3:04:a9:f5:9a:28:c0:57:72:8e:66:af:53: d7:e8:bd:1d:17:b0:10:64:1a:88:91:72:62:21:bd: d6:92:8d:06:df:71:30:3a:bc:c2:2e:44:fe:e2:56: 94:53:51:30:e1:15:5a:e7:38:e4:c0:8e:df:5e:20: b3:ce:29:b9:15:0f:5c:96:10:ae:f2:d0:56:77:28: 82:60:f2:b5:f1:fa:54:e1:e5:39:c9:9d:03:a9:15: ba:f1:8f:93:c2:64:bb:69:1d:9b:23:16:d3:bb:c5: d8:23:33:44:99:51:dc:5c:19:a4:f3:ca:c9:97:26: 7b:65:a0:be:87:02:4f:0e:45:97:ce:20:a8:e2:33: 0e:f5:f4:76:3c:0c:3e:3c:89:35:50:45:4e:f3:e1: 60:c5:19:49:56:e2:76:e0:0e:36:59:1d:4e:d2:4e: 4c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:46:48:E1:9F:2D:56:1E:5E:5E:E2:F3:CA:F1:2F:BA:18:94:28:17 X509v3 Authority Key Identifier: keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:33:06:cb:5d:d3:05:8b:27:56:aa:77:98:44:86:8d:62:79: ac:6b:4c:5f:b0:fa:5a:78:cb:15:b2:34:6f:15:08:41:a9:bc: a7:53:81:c2:d2:3b:84:6a:84:82:9f:2d:c9:31:b4:9e:63:d0: 5f:cf:0b:3f:30:2c:3e:ae:5e:af:33:f5:7b:de:97:96:bf:34: 40:80:05:3e:bf:fd:6a:b2:2a:4a:16:76:43:d4:dc:97:50:66: f2:30:b9:a2:ba:4e:ae:83:02:53:c7:91:2c:5f:a7:64:6f:00: 09:0f:fb:14:34:dd:49:b5:4b:f8:fa:50:be:03:5c:85:43:e0: c6:5b:bb:af:a0:f2:98:dc:96:e5:bb:15:9c:4d:8b:d4:56:13: b5:8a:9c:e0:03:6e:a6:a9:0a:8e:d5:84:84:bb:01:cf:7b:dd: 60:c8:3e:bf:0a:ca:3d:10:d2:8b:e8:91:be:2c:da:36:5e:ff: 86:72:e1:39:ab:69:6e:e5:c0:e3:fa:d0:54:24:c2:2f:a0:3f: 28:2f:44:18:51:7c:5b:3d:98:93:77:bd:80:94:81:5c:56:cb: 3f:ce:a3:e6:8f:a0:87:7a:3c:71:14:50:3f:18:d1:4f:9b:d4: 12:89:6f:f8:6b:c0:d0:cd:3e:93:83:c9:44:40:b1:9e:b7:94: 4e:79:2a:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU5QTUxMTAvBgNVBAUTKDdBQUM2N0RCQzFFQjkyOEUyOTUxMzYyRTBCQzZBQzc2 NzdFMkRDN0IwHhcNMjUxMjIyMTQzMDExWhcNMjUxMjI5MTQzMDExWjAYMRYwFAYD VQQDDA02OTQ5NTVmMy03MWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MTwq4rW3319BdZlG/G+XpAv0utrDae3S1g9jas63zhTsVzcFdWafK0/FKa5 vB0GOysoiDU+7bSw9YTvqVcwfRC2PzNae7KwUlZJ8PILHsndutN0xaDsH5S98fME qfWaKMBXco5mr1PX6L0dF7AQZBqIkXJiIb3Wko0G33EwOrzCLkT+4laUU1Ew4RVa 5zjkwI7fXiCzzim5FQ9clhCu8tBWdyiCYPK18fpU4eU5yZ0DqRW68Y+TwmS7aR2b IxbTu8XYIzNEmVHcXBmk88rJlyZ7ZaC+hwJPDkWXziCo4jMO9fR2PAw+PIk1UEVO 8+FgxRlJVuJ24A42WR1O0k5MlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhGSOGf LVYeXl7i88rxL7oYlCgXMB8GA1UdIwQYMBaAFHqsZ9vB65KOKVE2LgvGrHZ34tx7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTlBNS9BMzJFRkVCODFE ODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtvNHBVVFl1Qzhhc2RuZmkz SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VxeG4yOEhya280cFVUWXVDOGFzZG5maTNIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTlBNS9BMzJFRkVCODFEODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtv NHBVVFl1Qzhhc2RuZmkzSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACMwbLXdMFiydWqneYRIaNYnmsa0xfsPpaeMsVsjRvFQhBqbynU4HC 0juEaoSCny3JMbSeY9Bfzws/MCw+rl6vM/V73peWvzRAgAU+v/1qsipKFnZD1NyX UGbyMLmiuk6ugwJTx5EsX6dkbwAJD/sUNN1JtUv4+lC+A1yFQ+DGW7uvoPKY3Jbl uxWcTYvUVhO1ipzgA26mqQqO1YSEuwHPe91gyD6/Cso9ENKL6JG+LNo2Xv+GcuE5 q2lu5cDj+tBUJMIvoD8oL0QYUXxbPZiTd72AlIFcVss/zqPmj6CHejxxFFA/GNFP m9QSiW/4a8DQzT6Tg8lEQLGet5ROeSoG -----END CERTIFICATE-----Generated at Tue Dec 23 14:32:45 2025 by rpki-client