This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json) Hash identifier: mjXtsMtRK2EeWy15RL5w4qRZiJKDSbLjdIfSt1KbHbo= Subject key identifier: 7F:03:D8:18:0D:20:29:8E:0C:19:85:52:DF:5A:67:46:96:42:4D:1C Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft Manifest number: 4E Signing time: Tue 23 Dec 2025 06:10:59 +0000 Manifest this update: Tue 23 Dec 2025 06:10:58 +0000 Manifest next update: Tue 30 Dec 2025 06:10:58 +0000 Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: inkowygMSrFczARV/E3UhYSIOIKI4hGB12y4nYTqmts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Validity Not Before: Dec 23 06:10:58 2025 GMT Not After : Dec 30 06:10:58 2025 GMT Subject: CN=694a3273-45f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:8d:11:94:fa:6b:6b:e6:a6:d7:7f:77:3b: c5:3e:c8:74:01:06:9c:c8:dd:13:9f:15:a1:bf:86: 44:63:ae:17:ec:35:ac:00:b4:ec:5f:b8:31:c7:13: 58:f3:f2:1a:bb:66:55:7a:2c:62:a8:ba:65:43:ce: 79:c6:dc:d6:37:34:63:fb:93:46:21:e6:8d:10:fd: 5a:9a:54:be:8f:ae:86:e0:0c:5e:e0:e8:58:44:c0: 9a:7e:5a:16:ce:b1:3a:17:3d:7d:7f:f7:a8:be:d7: 94:be:fa:5b:e3:68:92:52:7f:ee:81:68:f3:9c:88: 9d:3d:58:16:0f:07:ca:18:11:86:47:e2:bf:84:8a: 1d:5e:d9:85:a4:47:f0:eb:a0:6c:46:de:3e:a0:48: 5f:e6:d9:c3:71:2b:77:0d:60:e6:ee:3d:5e:e1:14: 03:d7:a5:0f:22:f0:fc:2e:fc:d4:cb:30:99:3e:4c: a8:ca:4c:d4:9a:ba:e9:cf:6f:6b:65:ae:25:4d:79: 46:f6:d7:a9:25:3a:6d:70:ed:d4:4f:b0:01:1b:c0: 3c:57:ed:49:ef:fa:4a:93:45:fa:20:3f:24:d1:3c: 3d:f0:65:7d:06:c8:b4:f0:ea:17:1a:bc:80:4e:b7: 5f:06:5a:d5:61:14:72:2b:57:b0:fc:ae:a0:09:ba: 59:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:03:D8:18:0D:20:29:8E:0C:19:85:52:DF:5A:67:46:96:42:4D:1C X509v3 Authority Key Identifier: keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3a:5a:c5:00:f1:a1:b9:34:e0:f3:17:e8:15:46:ff:61:e9: 08:24:73:29:13:2d:ae:76:30:1d:7a:35:cc:e1:0c:87:15:45: 00:66:5b:e2:c4:37:e5:40:26:7c:23:ae:f2:75:9c:8f:46:f7: 2e:5f:8c:6f:34:9a:10:20:90:88:e1:a0:c0:cb:2e:fc:8f:e0: ec:a2:d0:e1:dd:99:e1:32:09:01:9a:12:ca:2d:11:31:53:94: 7e:25:cf:87:0c:0e:40:c8:3e:e5:e8:48:96:d9:7e:90:bc:98: e6:8b:f7:00:da:c3:1f:7b:cf:48:26:13:a6:b5:9e:3a:8e:69: 0b:57:39:3d:63:22:47:bb:86:06:30:2d:a6:84:79:8d:a5:b4: 91:7b:78:48:68:49:1d:65:fd:9d:64:8e:9b:1b:9c:3d:ba:49: 86:b3:96:e2:1e:97:03:9f:fe:15:80:78:cd:b9:9e:14:6f:e0: 77:23:98:a1:a6:35:35:27:19:ba:0e:bc:ce:06:77:e3:ef:16: 8d:96:b3:ec:90:f9:cb:8a:06:e2:4f:bd:8f:fd:9e:3d:b7:f7: 62:aa:4d:f2:87:28:17:7f:1e:b1:ad:1d:06:4d:23:76:c9:e9: 75:c3:00:6b:9e:02:33:97:68:94:8e:43:92:02:0b:2b:1e:ba: 22:0b:e1:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkRDMDExMC8GA1UEBRMoMTE3QzBENkQxOUJGQkE0OEI1RkE5RTUxN0QwRTY5MjY1 NUM5OEM0NDAeFw0yNTEyMjMwNjEwNThaFw0yNTEyMzAwNjEwNThaMBgxFjAUBgNV BAMMDTY5NGEzMjczLTQ1ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnA40RlPpra+am1393O8U+yHQBBpzI3ROfFaG/hkRjrhfsNawAtOxfuDHHE1jz 8hq7ZlV6LGKoumVDznnG3NY3NGP7k0Yh5o0Q/VqaVL6ProbgDF7g6FhEwJp+WhbO sToXPX1/96i+15S++lvjaJJSf+6BaPOciJ09WBYPB8oYEYZH4r+Eih1e2YWkR/Dr oGxG3j6gSF/m2cNxK3cNYObuPV7hFAPXpQ8i8Pwu/NTLMJk+TKjKTNSauunPb2tl riVNeUb216klOm1w7dRPsAEbwDxX7Unv+kqTRfogPyTRPD3wZX0GyLTw6hcavIBO t18GWtVhFHIrV7D8rqAJulmDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfwPYGA0g KY4MGYVS31pnRpZCTRwwHwYDVR0jBBgwFoAUEXwNbRm/uki1+p5RfQ5pJlXJjEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGREMwLzMzMTFGMEVFNjlF OTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVh3TmJSbV91a2kxLXA1UmZRNXBKbFhKakVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG REMwLzMzMTFGMEVFNjlFOTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtp MS1wNVJmUTVwSmxYSmpFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE86WsUA8aG5NODzF+gVRv9h6QgkcykTLa52MB16NczhDIcVRQBmW+LE N+VAJnwjrvJ1nI9G9y5fjG80mhAgkIjhoMDLLvyP4Oyi0OHdmeEyCQGaEsotETFT lH4lz4cMDkDIPuXoSJbZfpC8mOaL9wDawx97z0gmE6a1njqOaQtXOT1jIke7hgYw LaaEeY2ltJF7eEhoSR1l/Z1kjpsbnD26SYazluIelwOf/hWAeM25nhRv4HcjmKGm NTUnGboOvM4Gd+PvFo2Ws+yQ+cuKBuJPvY/9nj2392KqTfKHKBd/HrGtHQZNI3bJ 6XXDAGueAjOXaJSOQ5ICCyseuiIL4fE= -----END CERTIFICATE-----Generated at Wed Dec 24 15:59:11 2025 by rpki-client