This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft File: EE3r2037i5__46TvfbFlevst9-I.mft (raw, json) Hash identifier: Y97tsPqwM2CfVozu7LprIJU9DkJN0AXElyDHJt3qRds= Subject key identifier: D2:71:EF:82:8E:35:C1:85:FC:2B:97:A1:9A:40:05:47:E9:EC:CA:45 Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2 Certificate issuer: /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft Manifest number: 0206 Signing time: Tue 23 Dec 2025 01:25:22 +0000 Manifest this update: Tue 23 Dec 2025 01:25:21 +0000 Manifest next update: Tue 30 Dec 2025 01:25:21 +0000 Files and hashes: 1: EE3r2037i5__46TvfbFlevst9-I.crl (hash: iQSzl4IbVyDemBT9RaJW/GAX8Lcani94TS/pbays16M=) 2: 01003962C9DC11ED8D68375EC4F9AE02.roa (hash: 5eg0fWT2Z7w8xMxBGOT9xX3MaffAbDyJVmsEbZpi+3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F10DC, serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2 Validity Not Before: Dec 23 01:25:21 2025 GMT Not After : Dec 30 01:25:21 2025 GMT Subject: CN=6949ef81-7431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:3d:ae:91:58:7b:d6:7f:66:80:77:a6:42: 0c:d7:cb:47:88:93:c2:4c:4b:9c:65:f9:73:06:ba: 94:4b:30:a9:84:be:b9:10:6e:fb:d9:9f:0b:9e:fa: 3e:fb:9b:31:68:5b:12:e1:38:fe:7a:5a:5d:a9:b5: 8e:7c:cf:04:40:27:75:54:52:f9:d8:85:6a:a8:c2: 2b:df:c0:4e:56:75:2b:9d:ba:91:aa:a0:c6:e0:7b: 2a:5f:db:ac:ad:41:21:c3:d7:e1:2f:75:35:22:dc: e0:bc:41:32:49:dd:ef:54:1f:ad:a0:c5:70:4a:9a: 76:3d:7e:5f:4b:28:d3:d9:f2:75:28:22:18:ac:e9: 4e:fc:7f:a4:7c:01:ef:9d:30:44:c9:ea:bc:c9:ef: e8:8a:46:6f:86:a1:03:f6:72:d0:1f:e5:07:15:a7: 1c:02:9b:b5:31:4d:d4:bd:a5:8d:ca:6c:ae:da:23: 15:eb:f5:b1:98:87:1e:e1:ad:c9:64:b9:a9:d4:9b: e4:f5:d1:ba:66:73:7a:6c:7f:bf:7d:cc:a4:f6:41: a0:c2:6e:08:ae:26:76:46:8f:ad:b7:7f:40:f9:b9: 8d:80:47:9f:8a:69:b8:2e:f1:3b:46:e8:5d:c6:a9: e7:38:98:bd:9c:3f:df:89:82:86:86:a4:50:eb:66: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:71:EF:82:8E:35:C1:85:FC:2B:97:A1:9A:40:05:47:E9:EC:CA:45 X509v3 Authority Key Identifier: keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:59:db:86:2d:ad:29:5c:7e:f0:88:9a:2e:b2:fc:fc:35:5a: b3:00:bc:57:e9:7e:9d:e0:db:b5:3c:5f:9b:b9:08:d8:b4:c7: 0a:a3:5e:16:4b:de:5f:14:bc:bb:bf:44:db:56:5e:6f:e1:73: b7:54:6e:3f:69:15:bd:fd:21:74:c6:fc:e9:a7:67:3a:6d:30: 5a:fc:ca:3d:2e:80:2f:16:5d:20:75:f1:e0:9f:52:30:b4:c5: 0f:55:85:02:ea:d9:d9:37:7e:e8:d8:57:6c:d4:94:ef:8f:c3: 64:9b:bc:16:9b:c8:b8:21:df:d9:1b:4d:ac:06:a9:96:11:eb: ee:d6:d8:2b:c8:df:26:a0:f1:7c:55:2f:6c:3e:17:1e:9b:b4: 47:16:a7:1d:93:61:6f:77:20:8d:69:39:f1:1b:d8:0c:65:7e: e5:2b:9e:ce:75:2e:99:f6:ee:ed:4c:2a:a6:07:ef:02:11:e4: bd:f6:06:35:12:9d:6f:02:b8:f0:3d:ef:10:88:cb:bc:e1:b2: 40:3c:c1:d3:d8:41:c6:b7:35:5f:90:50:0d:cc:b1:ac:14:79: 97:da:ba:1e:20:b5:11:d7:9b:8d:38:82:a7:d0:72:26:b2:01: dc:c3:84:c0:d3:82:64:05:c3:0e:28:2b:ab:f8:db:3d:f5:fd: 76:75:60:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEwREMxMTAvBgNVBAUTKDEwNERFQkRCNERGQjhCOUZGRkUzQTRFRjdEQjE2NTdB RkIyREY3RTIwHhcNMjUxMjIzMDEyNTIxWhcNMjUxMjMwMDEyNTIxWjAYMRYwFAYD VQQDDA02OTQ5ZWY4MS03NDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjZo9rpFYe9Z/ZoB3pkIM18tHiJPCTEucZflzBrqUSzCphL65EG772Z8Lnvo+ +5sxaFsS4Tj+elpdqbWOfM8EQCd1VFL52IVqqMIr38BOVnUrnbqRqqDG4HsqX9us rUEhw9fhL3U1ItzgvEEySd3vVB+toMVwSpp2PX5fSyjT2fJ1KCIYrOlO/H+kfAHv nTBEyeq8ye/oikZvhqED9nLQH+UHFaccApu1MU3UvaWNymyu2iMV6/WxmIce4a3J ZLmp1Jvk9dG6ZnN6bH+/fcyk9kGgwm4IriZ2Ro+tt39A+bmNgEefimm4LvE7Ruhd xqnnOJi9nD/fiYKGhqRQ62awkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJx74KO NcGF/CuXoZpABUfp7MpFMB8GA1UdIwQYMBaAFBBN69tN+4uf/+Ok732xZXr7Lffi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTBEQy84NUI4RTRBQUM5 RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1X180NlR2ZmJGbGV2c3Q5 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFM3IyMDM3aTVfXzQ2VHZmYkZsZXZzdDktSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTBEQy84NUI4RTRBQUM5RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1 X180NlR2ZmJGbGV2c3Q5LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAWduGLa0pXH7wiJousvz8NVqzALxX6X6d4Nu1PF+buQjYtMcKo14W S95fFLy7v0TbVl5v4XO3VG4/aRW9/SF0xvzpp2c6bTBa/Mo9LoAvFl0gdfHgn1Iw tMUPVYUC6tnZN37o2Fds1JTvj8Nkm7wWm8i4Id/ZG02sBqmWEevu1tgryN8moPF8 VS9sPhcem7RHFqcdk2FvdyCNaTnxG9gMZX7lK57OdS6Z9u7tTCqmB+8CEeS99gY1 Ep1vArjwPe8QiMu84bJAPMHT2EHGtzVfkFANzLGsFHmX2roeILUR15uNOIKn0HIm sgHcw4TA04JkBcMOKCur+Ns99f12dWC3 -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:54 2025 by rpki-client