This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: Ph0KfO/QMKbnRYVnBDgWl024tCtx6++8vbHVu5+ssPw= Subject key identifier: 59:84:10:35:E5:7F:04:F1:F3:9E:16:5F:F1:24:BC:DD:99:A0:5D:EC Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 0578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 0571 Signing time: Thu 18 Dec 2025 22:41:17 +0000 Manifest this update: Thu 18 Dec 2025 22:41:16 +0000 Manifest next update: Thu 25 Dec 2025 22:41:16 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: vAfnQwjFq1uNc1Ir3gbttTBQz0WZP13lbmq5QdWb2tw=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: ETtdvHyJ0kruEI7+UpCgdiqzKfFtMYbM3eVB3bdG2Ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552, serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: Dec 18 22:41:16 2025 GMT Not After : Dec 25 22:41:16 2025 GMT Subject: CN=6944830d-d162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:55:a4:16:9d:20:67:7b:86:2a:d1:34:c8:c7: 8d:7e:45:26:06:1f:96:d6:a5:eb:46:20:1f:ca:b0: 07:42:34:ff:d5:17:f7:56:9b:de:12:98:18:1b:5b: a5:68:7a:fc:1f:6d:87:3a:99:41:6a:0c:db:68:5d: d4:92:96:d7:06:b9:88:82:5f:55:40:e6:ac:90:68: d1:36:b5:40:7a:34:93:0f:e2:ab:b2:80:44:78:5a: f7:79:6c:b1:cd:c3:1d:c1:1f:8e:96:aa:af:af:cd: 54:c1:75:d8:9c:36:7c:18:29:7d:eb:ad:a6:7c:e9: 77:01:a3:33:4e:25:54:32:66:1f:88:f5:4f:68:42: 3b:a1:6e:bd:70:6e:15:bf:e3:3a:47:b4:e8:8a:54: 10:c4:11:df:e7:c8:62:49:8b:f9:1d:a6:28:0a:ee: 3e:58:fd:4b:4f:a8:42:16:97:ad:f4:76:3f:2d:05: 9c:a2:ee:69:a2:07:2b:fa:a2:68:9b:51:d4:7f:0b: 5b:36:d3:eb:10:32:44:94:cb:f8:a2:3c:bc:1a:d9: dc:a1:ea:84:3d:68:26:b4:de:e6:40:2c:40:df:5e: 19:78:ab:4e:86:fd:4b:aa:13:8d:3a:07:d5:41:e1: 83:75:e9:93:93:cf:4f:14:d6:f6:22:9f:bc:9e:92: 82:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:84:10:35:E5:7F:04:F1:F3:9E:16:5F:F1:24:BC:DD:99:A0:5D:EC X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:de:25:b1:b1:6a:1f:10:9c:67:ae:ce:d7:60:18:77:33:7d: aa:f5:be:dd:3e:1d:89:16:fd:37:6e:10:4f:28:73:7b:82:66: 7b:11:34:08:cd:a6:5e:23:1a:f7:41:e0:68:81:05:97:e9:b8: a8:b7:e0:d5:9f:93:c0:af:03:8c:30:9f:7f:28:9b:8f:3d:ff: 90:65:84:db:62:47:55:c8:a1:18:db:b7:87:b8:fe:03:d8:0c: 5c:ea:e5:24:4d:ff:04:4e:57:3a:55:c1:34:35:68:51:ad:5e: 59:84:b2:a6:61:db:9e:ea:e5:05:7a:3e:70:50:28:f5:cb:6c: 36:7e:73:1d:56:62:db:b5:c0:3d:ed:b9:16:eb:70:81:2c:b2: 7a:7f:4d:02:1f:90:51:26:9c:24:46:5f:bd:6e:86:a9:ab:2a: 08:5d:4d:bb:98:24:34:33:2e:56:5e:1b:2d:02:c3:83:ac:c4: 26:94:2a:b2:2d:bd:a5:56:39:9e:8b:7f:e5:1e:12:6c:2e:02: f6:2d:42:a7:a3:b9:30:f5:92:d8:c5:30:5c:05:f4:98:30:03: 71:06:59:77:69:0e:73:a6:c5:e5:f5:82:a2:ef:31:3f:47:d3: b5:e1:c4:e0:39:d1:a4:b0:0d:b2:d6:d3:cb:84:96:90:a1:cd: 20:35:e9:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjUxMjE4MjI0MTE2WhcNMjUxMjI1MjI0MTE2WjAYMRYwFAYD VQQDDA02OTQ0ODMwZC1kMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFWkFp0gZ3uGKtE0yMeNfkUmBh+W1qXrRiAfyrAHQjT/1Rf3VpveEpgYG1ul aHr8H22HOplBagzbaF3UkpbXBrmIgl9VQOaskGjRNrVAejSTD+KrsoBEeFr3eWyx zcMdwR+Olqqvr81UwXXYnDZ8GCl9662mfOl3AaMzTiVUMmYfiPVPaEI7oW69cG4V v+M6R7ToilQQxBHf58hiSYv5HaYoCu4+WP1LT6hCFpet9HY/LQWcou5pogcr+qJo m1HUfwtbNtPrEDJElMv4ojy8GtncoeqEPWgmtN7mQCxA314ZeKtOhv1LqhONOgfV QeGDdemTk89PFNb2Ip+8npKC9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmEEDXl fwTx854WX/EkvN2ZoF3sMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl3iWxsWofEJxnrs7XYBh3M32q9b7dPh2JFv03bhBPKHN7gmZ7ETQI zaZeIxr3QeBogQWX6biot+DVn5PArwOMMJ9/KJuPPf+QZYTbYkdVyKEY27eHuP4D 2Axc6uUkTf8ETlc6VcE0NWhRrV5ZhLKmYdue6uUFej5wUCj1y2w2fnMdVmLbtcA9 7bkW63CBLLJ6f00CH5BRJpwkRl+9boapqyoIXU27mCQ0My5WXhstAsODrMQmlCqy Lb2lVjmei3/lHhJsLgL2LUKno7kw9ZLYxTBcBfSYMANxBll3aQ5zpsXl9YKi7zE/ R9O14cTgOdGksA2y1tPLhJaQoc0gNelL -----END CERTIFICATE-----Generated at Sat Dec 20 14:10:44 2025 by rpki-client