This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: 945X7LGppRT+zYTOuUHp2FT3aYIXTqHmxY11u6K8Xts= Subject key identifier: E2:E2:5D:C9:34:DA:6D:28:BF:DD:4A:C3:D0:28:B7:82:4D:7E:75:C7 Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 0241 Signing time: Tue 23 Dec 2025 00:52:05 +0000 Manifest this update: Tue 23 Dec 2025 00:52:05 +0000 Manifest next update: Tue 30 Dec 2025 00:52:05 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: rdtM78pGWUT4viNR1NAa2ppagSTg05r1pgaDFpEqIEo=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: j+WiIpQXx8bOOXda/N2C9r1k53EnBU4V+zrlR0ZwoY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: Dec 23 00:52:05 2025 GMT Not After : Dec 30 00:52:05 2025 GMT Subject: CN=6949e7b5-e96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:6b:f7:60:6b:91:84:bc:1d:00:6e:69:fe: 39:b4:b1:c4:a5:2b:5f:dd:8b:26:c3:3c:df:d3:30: 49:e5:36:d0:be:38:f8:da:55:14:64:8d:32:7c:22: 4c:4b:8c:6e:fe:7f:be:08:c8:96:36:06:99:bf:50: f5:d1:4d:df:a8:32:27:e3:c9:c9:92:39:41:10:91: a8:67:e4:78:b0:44:8f:ff:95:76:85:db:69:27:0d: 06:df:9f:68:d4:3a:fc:be:23:b7:a9:11:dc:22:e2: 6e:9f:22:2e:ab:24:c8:ab:7e:32:a4:e4:66:b5:7b: 02:10:d2:df:dd:66:fc:2e:22:fb:39:c8:ba:32:0a: 68:ba:ff:fc:80:36:fa:78:a2:6c:85:4b:61:74:dc: 3e:ab:f8:42:a6:00:37:8e:72:0f:c8:35:8a:a5:8d: b0:64:f9:7f:8e:e0:37:0d:68:a9:cf:f9:59:a3:b6: 6c:ad:de:87:df:7e:87:3d:78:4e:27:7c:49:69:97: 48:0d:c3:08:1a:f0:3f:82:c2:3d:04:8d:65:55:83: c8:d6:f3:a8:f0:db:cd:62:13:b2:df:8d:84:87:77: 1b:d3:b5:e2:64:6a:9b:18:a2:02:4a:5a:fa:06:a9: 63:b9:99:bb:01:ce:d0:ba:4f:fd:15:ac:f7:5b:6e: 83:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E2:5D:C9:34:DA:6D:28:BF:DD:4A:C3:D0:28:B7:82:4D:7E:75:C7 X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:1a:e6:3a:80:a0:57:ff:50:c9:94:35:c2:2a:74:83:c6:a8: a0:e4:fb:46:8f:70:5b:b4:8b:66:fa:e7:eb:26:86:80:61:aa: 87:96:dd:3d:59:96:55:a1:e3:34:02:1f:96:a4:dc:84:05:93: aa:dd:55:87:e1:c3:06:9a:cb:81:8e:9b:64:d9:4f:7e:89:fb: 59:51:36:d9:8c:f6:3d:a5:83:90:35:f1:e7:c9:a3:7b:aa:a1: fd:d1:87:03:08:bb:03:19:32:fc:79:dc:5b:b2:5f:8a:dc:5b: 3e:46:3e:8e:bc:d2:0e:95:04:72:8f:68:b0:42:ec:c8:5f:49: a4:4b:fc:49:3e:5e:a9:99:0b:68:93:de:4f:c8:e7:b3:d7:a6: 12:a8:48:cd:19:21:73:3e:92:bf:07:8d:fc:d9:5d:f4:8f:e6: 28:15:f8:e4:55:93:99:08:57:04:48:aa:32:84:43:05:0b:17: e3:b5:86:6b:92:64:7c:8f:58:59:1d:59:98:21:60:3c:02:f1: 7d:4a:af:dd:81:d5:83:aa:de:5f:8f:1d:18:c3:3e:ee:b8:c7: 33:fd:cc:5e:cf:12:d9:ad:ed:80:5a:bf:22:46:2f:1e:d2:15: c5:12:75:5c:fe:41:81:b9:f4:6a:3c:14:7e:3d:5a:e6:87:2f: 77:d3:08:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUxMjIzMDA1MjA1WhcNMjUxMjMwMDA1MjA1WjAYMRYwFAYD VQQDDA02OTQ5ZTdiNS1lOTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsURr92BrkYS8HQBuaf45tLHEpStf3Ysmwzzf0zBJ5TbQvjj42lUUZI0yfCJM S4xu/n++CMiWNgaZv1D10U3fqDIn48nJkjlBEJGoZ+R4sESP/5V2hdtpJw0G359o 1Dr8viO3qRHcIuJunyIuqyTIq34ypORmtXsCENLf3Wb8LiL7Oci6Mgpouv/8gDb6 eKJshUthdNw+q/hCpgA3jnIPyDWKpY2wZPl/juA3DWipz/lZo7Zsrd6H336HPXhO J3xJaZdIDcMIGvA/gsI9BI1lVYPI1vOo8NvNYhOy342Eh3cb07XiZGqbGKICSlr6 BqljuZm7Ac7Quk/9Faz3W26D2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLiXck0 2m0ov91Kw9Aot4JNfnXHMB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQGuY6gKBX/1DJlDXCKnSDxqig5PtGj3BbtItm+ufrJoaAYaqHlt09 WZZVoeM0Ah+WpNyEBZOq3VWH4cMGmsuBjptk2U9+iftZUTbZjPY9pYOQNfHnyaN7 qqH90YcDCLsDGTL8edxbsl+K3Fs+Rj6OvNIOlQRyj2iwQuzIX0mkS/xJPl6pmQto k95PyOez16YSqEjNGSFzPpK/B4382V30j+YoFfjkVZOZCFcESKoyhEMFCxfjtYZr kmR8j1hZHVmYIWA8AvF9Sq/dgdWDqt5fjx0Ywz7uuMcz/cxezxLZre2AWr8iRi8e 0hXFEnVc/kGBufRqPBR+PVrmhy930wjT -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:54 2025 by rpki-client