This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json) Hash identifier: NI0i/3Lj9aMmtH5oS8LKk9voAhKj6RVcIc0h6SE5DZ8= Subject key identifier: 87:9E:7E:1C:B1:37:40:4A:D3:1E:FD:FF:99:83:99:04:37:F6:E1:7A Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0EDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft Manifest number: 0ED4 Signing time: Mon 22 Dec 2025 17:17:39 +0000 Manifest this update: Mon 22 Dec 2025 17:17:38 +0000 Manifest next update: Mon 29 Dec 2025 17:17:38 +0000 Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: KMjfUxNq2XQkYXsiA5S7g/8YeZ0rsh80vdB4B8cIEBs=) 2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: U9KBsxBRcXn+lvll9K6vuuTm2toDlFCHVWsbee/fhwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3802 (0xeda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: Dec 22 17:17:38 2025 GMT Not After : Dec 29 17:17:38 2025 GMT Subject: CN=69497d32-2274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:45:a5:4a:61:cb:b8:4d:93:93:7d:e9:5b: c9:8e:21:c2:61:45:0e:b4:2a:7a:1c:19:a9:42:53: 94:5e:0f:31:4f:9e:f2:d7:a8:d3:8b:13:cf:f3:90: 57:da:45:5e:5a:66:64:cf:35:1e:d6:b4:4f:89:d4: 11:a1:bd:92:6a:9c:45:31:94:17:d1:de:d8:01:d3: b9:6c:b8:86:74:f3:6c:9b:d4:62:d6:d6:bf:be:aa: 9e:6b:04:ab:f2:0a:9f:30:23:0c:36:f8:d3:fc:c4: bd:7e:d4:9e:ef:a4:63:fd:1c:6b:c6:c1:60:02:4c: 1b:79:01:c7:c5:e8:84:85:ed:07:55:c8:2b:4e:af: ce:7c:3d:8b:54:91:df:2b:f7:d5:73:2e:54:be:5d: fa:83:b5:fa:11:9e:3e:10:1d:ac:80:32:8f:04:c4: ee:5a:f4:aa:e5:9c:cf:82:09:30:eb:22:2f:c3:4e: 58:8a:54:30:fb:7f:0b:2b:60:5b:17:cd:c3:e2:88: 7c:ec:6d:89:5a:41:03:bb:e9:5b:31:77:72:6e:5f: ff:78:0f:a7:b7:50:03:20:ea:f9:64:bd:cd:c7:0c: ac:16:6b:30:39:32:9a:dd:61:14:fe:6f:6f:66:37: 28:67:85:72:47:40:0b:3c:6f:69:ba:1a:b3:8d:91: 84:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9E:7E:1C:B1:37:40:4A:D3:1E:FD:FF:99:83:99:04:37:F6:E1:7A X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:17:67:b0:0e:eb:b6:c9:f9:ab:71:53:07:e3:43:9e:46:02: 97:1a:cf:be:4b:7d:a6:44:07:72:b8:4e:e1:96:72:e4:1d:da: 54:bc:79:84:ca:72:1c:40:66:57:71:1b:1d:21:89:3b:fc:c9: be:c7:28:5d:7c:b7:a8:e5:fb:fa:5b:28:8b:98:d5:28:cc:19: 15:87:02:c2:83:27:6d:6c:8f:34:8e:e0:6e:d9:2f:df:75:40: 8d:65:8d:73:20:02:69:83:67:89:7a:50:09:b3:e2:82:e9:a3: 3d:a5:bd:f6:5f:aa:0d:ff:26:48:b8:65:ef:9c:f3:cc:cd:26: 50:5f:23:bd:d0:a4:17:d9:54:9b:9a:32:6d:34:26:2b:ac:4e: fd:0f:b5:94:f8:55:5f:63:9f:b5:33:c6:fa:9a:12:8a:51:ce: db:36:a5:3e:72:b2:98:fb:5e:79:e9:d3:24:d7:56:48:98:13: bb:fd:12:a6:44:0a:c2:83:64:4a:63:9e:0c:01:6c:4a:9f:16: 2e:09:3e:65:8d:fe:ec:16:6e:08:f2:92:98:1e:19:24:d6:08: a8:bc:f0:83:80:65:b3:da:06:f4:ac:88:f7:66:aa:80:51:57: e0:a5:28:3f:c1:6b:be:88:a7:dc:09:e0:3c:7d:b3:c1:8b:e6: a4:a0:14:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjUxMjIyMTcxNzM4WhcNMjUxMjI5MTcxNzM4WjAYMRYwFAYD VQQDDA02OTQ5N2QzMi0yMjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/RFpUphy7hNk5N96VvJjiHCYUUOtCp6HBmpQlOUXg8xT57y16jTixPP85BX 2kVeWmZkzzUe1rRPidQRob2SapxFMZQX0d7YAdO5bLiGdPNsm9Ri1ta/vqqeawSr 8gqfMCMMNvjT/MS9ftSe76Rj/RxrxsFgAkwbeQHHxeiEhe0HVcgrTq/OfD2LVJHf K/fVcy5Uvl36g7X6EZ4+EB2sgDKPBMTuWvSq5ZzPggkw6yIvw05YilQw+38LK2Bb F83D4oh87G2JWkEDu+lbMXdybl//eA+nt1ADIOr5ZL3NxwysFmswOTKa3WEU/m9v ZjcoZ4VyR0ALPG9puhqzjZGEhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeefhyx N0BK0x79/5mDmQQ39uF6MB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTYzNy85QkFFQTEzQTk3NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8y alBkaElGRmV5c1l1X2FQa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIF2ewDuu2yfmrcVMH40OeRgKXGs++S32mRAdyuE7hlnLkHdpUvHmE ynIcQGZXcRsdIYk7/Mm+xyhdfLeo5fv6WyiLmNUozBkVhwLCgydtbI80juBu2S/f dUCNZY1zIAJpg2eJelAJs+KC6aM9pb32X6oN/yZIuGXvnPPMzSZQXyO90KQX2VSb mjJtNCYrrE79D7WU+FVfY5+1M8b6mhKKUc7bNqU+crKY+1556dMk11ZImBO7/RKm RArCg2RKY54MAWxKnxYuCT5ljf7sFm4I8pKYHhkk1giovPCDgGWz2gb0rIj3ZqqA UVfgpSg/wWu+iKfcCeA8fbPBi+akoBS2 -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:33 2025 by rpki-client