This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft File: IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft (raw, json) Hash identifier: 5BJdljS5T0awCR3TilJILMyNzZ/uJqr/3Nbcfhnxbco= Subject key identifier: 81:AE:BF:34:9F:93:6C:B4:EC:5D:2D:EF:A9:F1:F4:23:3F:5B:19:CC Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft Manifest number: 021E Signing time: Tue 23 Dec 2025 01:14:00 +0000 Manifest this update: Tue 23 Dec 2025 01:13:59 +0000 Manifest next update: Tue 30 Dec 2025 01:13:59 +0000 Files and hashes: 1: IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl (hash: mDLxe7kqKcwD7axgMXBSHF3eJ49GlH19kRqMN47Nq0I=) 2: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (hash: d/kODO73Q/KifMio6xDH+g4+aS9A4hPWbQYW6hwYowo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912905D, serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Validity Not Before: Dec 23 01:13:59 2025 GMT Not After : Dec 30 01:13:59 2025 GMT Subject: CN=6949ecd8-2fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:41:9b:08:9b:2f:91:67:18:2f:e0:da:73: 51:f3:a8:99:90:a4:e6:d2:4e:90:53:46:03:fa:6c: b1:a8:d0:01:01:9e:e3:c4:5a:50:c6:56:d5:45:c0: e6:9c:a1:c2:62:74:e6:57:6e:d6:66:0e:94:63:42: 3a:c0:b8:80:41:8d:16:4b:8f:22:54:7f:6a:ca:14: d8:d1:ac:90:c8:eb:03:a3:5a:3c:d1:a4:41:0c:f5: 4b:ae:86:88:fd:39:65:87:9e:a8:64:2a:c7:bf:5c: a4:57:ea:f2:5d:ce:e4:68:f4:51:26:87:c9:25:bc: ac:13:3b:86:04:4b:da:7f:67:ab:6f:05:f1:80:d4: 35:3a:18:9e:46:b5:9e:44:26:f1:76:58:db:de:9b: 3d:55:5f:9d:07:1f:92:87:41:e0:48:53:e0:43:4f: 2a:fe:29:db:38:2d:04:45:46:e0:61:a9:1c:da:a0: 95:1e:80:39:10:eb:72:b1:8b:91:eb:cb:de:de:fc: 4c:e9:98:23:f8:ee:f0:cd:c5:be:08:bc:6f:1a:96: 6a:9f:25:a5:78:c4:b4:e4:0b:cc:33:cb:b7:4b:5b: 04:f9:e5:51:d1:e2:c5:24:51:8c:f4:e2:5c:df:b6: 3a:77:95:fd:cd:e6:c9:c2:8b:0d:75:72:25:57:f6: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AE:BF:34:9F:93:6C:B4:EC:5D:2D:EF:A9:F1:F4:23:3F:5B:19:CC X509v3 Authority Key Identifier: keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:8e:71:6a:0c:9c:fe:52:62:90:64:a1:3a:0c:c1:2a:51:a6: 12:13:e2:cf:32:bd:3b:10:79:65:8b:c5:0c:bd:8a:38:8a:c6: 45:0d:e3:88:6a:b4:b1:3e:b1:48:65:ab:06:a1:0a:c3:2e:7a: 50:77:51:11:9a:da:e5:e7:9e:e4:e3:60:b0:ab:7e:1c:f2:f0: b1:84:1b:f7:93:82:ef:ef:86:85:e7:ae:6e:78:ea:87:c2:3a: ce:1e:21:27:eb:95:03:7d:73:34:7f:d4:47:ee:11:b0:b8:ba: 2f:54:fb:d1:51:e8:7f:3b:7c:61:48:67:e1:01:c1:69:05:61: 78:33:6c:a6:a8:58:3d:34:64:e7:cc:08:6f:5f:ba:30:ad:7d: 46:62:ee:cd:7e:a5:53:5a:ba:6b:34:5d:c7:c8:db:fa:7f:92: 60:ee:06:1d:27:a8:7f:7b:99:df:40:5e:1e:01:28:b1:6d:2c: 1e:67:b1:0e:cd:00:83:89:d3:9f:49:a3:b8:08:06:a9:18:f0: dd:29:23:f8:d2:87:ad:d0:5a:27:af:15:30:b7:28:11:85:57: 8e:a5:55:24:8c:ff:8e:3c:ea:8c:11:1e:7b:9e:f5:07:3f:15: d2:03:e3:63:4f:6c:69:cf:5b:87:7b:35:e2:a5:45:57:41:c5: cc:0a:be:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwNUQxMTAvBgNVBAUTKDIwNDFBNTQ4MjE2RkYwMTQ4OTRCNzlDQzlGRDc3MzEx QkM3Q0EzMTcwHhcNMjUxMjIzMDExMzU5WhcNMjUxMjMwMDExMzU5WjAYMRYwFAYD VQQDDA02OTQ5ZWNkOC0yZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprNBmwibL5FnGC/g2nNR86iZkKTm0k6QU0YD+myxqNABAZ7jxFpQxlbVRcDm nKHCYnTmV27WZg6UY0I6wLiAQY0WS48iVH9qyhTY0ayQyOsDo1o80aRBDPVLroaI /Tllh56oZCrHv1ykV+ryXc7kaPRRJofJJbysEzuGBEvaf2erbwXxgNQ1OhieRrWe RCbxdljb3ps9VV+dBx+Sh0HgSFPgQ08q/inbOC0ERUbgYakc2qCVHoA5EOtysYuR 68ve3vxM6Zgj+O7wzcW+CLxvGpZqnyWleMS05AvMM8u3S1sE+eVR0eLFJFGM9OJc 37Y6d5X9zebJwosNdXIlV/bTnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGuvzSf k2y07F0t76nx9CM/WxnMMB8GA1UdIwQYMBaAFCBBpUghb/AUiUt5zJ/XcxG8fKMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTA1RC8zNEJGOTkwOEFD M0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhCU0pTM25NbjlkekVieDhv eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFR2xTQ0Z2OEJTSlMzbk1uOWR6RWJ4OG94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTA1RC8zNEJGOTkwOEFDM0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhC U0pTM25NbjlkekVieDhveGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAljnFqDJz+UmKQZKE6DMEqUaYSE+LPMr07EHlli8UMvYo4isZFDeOI arSxPrFIZasGoQrDLnpQd1ERmtrl557k42Cwq34c8vCxhBv3k4Lv74aF565ueOqH wjrOHiEn65UDfXM0f9RH7hGwuLovVPvRUeh/O3xhSGfhAcFpBWF4M2ymqFg9NGTn zAhvX7owrX1GYu7NfqVTWrprNF3HyNv6f5Jg7gYdJ6h/e5nfQF4eASixbSweZ7EO zQCDidOfSaO4CAapGPDdKSP40oet0FonrxUwtygRhVeOpVUkjP+OPOqMER57nvUH PxXSA+NjT2xpz1uHezXipUVXQcXMCr5e -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:07 2025 by rpki-client