This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json) Hash identifier: cFGGR3MYEZR5JBXS+HEi9FuA4sPju3LOVrwsSitTr9s= Subject key identifier: 70:7D:34:F2:40:C7:54:CF:1D:7E:D4:2D:FF:DA:7D:22:0D:A9:58:DD Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Certificate serial: 0599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft Manifest number: 0590 Signing time: Mon 22 Dec 2025 22:22:39 +0000 Manifest this update: Mon 22 Dec 2025 22:22:38 +0000 Manifest next update: Mon 29 Dec 2025 22:22:38 +0000 Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: QCLoXkahUc5HKSEuLy3zhEwG4mHEHYgopPo71R3LQJI=) 2: BBECA326B2FC11F0AB9D691CC4F9AE02.roa (hash: zqgS+zlgehzRdHe7d+oyK8Qe/7J3aamdJc6La9J4rtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8B5, serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Validity Not Before: Dec 22 22:22:38 2025 GMT Not After : Dec 29 22:22:38 2025 GMT Subject: CN=6949c4ae-79b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:50:d4:08:11:7c:eb:84:68:08:48:f7:6a: 84:fe:c9:c3:35:7e:38:a4:7f:d8:cb:a4:7c:3e:32: eb:85:c6:d8:61:44:18:72:e8:c1:53:be:da:5b:fc: a8:6d:7b:ad:14:24:b8:53:30:52:d1:59:d4:ee:78: f7:ae:68:0b:2a:9b:a4:05:28:77:ec:4a:dc:16:77: 66:ae:91:48:50:e5:44:ed:c6:cd:cd:9a:eb:43:df: 92:f4:a4:ad:c9:2b:4d:88:02:44:30:bb:31:f9:57: cd:54:c5:a0:9a:8e:02:46:da:7c:50:fa:c2:3b:ea: a8:74:fb:77:c0:8d:c6:48:f6:0f:4a:62:95:db:bb: b3:9b:54:6d:17:a9:b8:cd:bd:ad:f2:47:06:96:e9: 95:70:b7:f6:31:3e:14:3c:64:c6:4d:ac:5e:8e:71: 2f:00:62:2c:c3:e0:3a:15:dd:6b:6e:48:93:73:4d: e7:ee:1f:8e:36:e0:ca:bf:f0:3c:7a:62:24:c8:58: 7f:4b:1a:38:22:49:a8:8a:a4:c0:0f:f2:d5:0e:2c: 78:97:02:2f:49:3d:f3:a4:6a:d4:fa:53:68:77:f8: 5f:3e:52:a2:0e:0a:1c:ba:e2:0c:6c:89:b1:3e:c6: 99:45:e0:59:4e:be:03:d5:35:74:ba:07:95:d2:ed: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7D:34:F2:40:C7:54:CF:1D:7E:D4:2D:FF:DA:7D:22:0D:A9:58:DD X509v3 Authority Key Identifier: keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:75:a9:71:79:04:41:3e:30:2b:7e:bf:60:76:48:26:54:1e: b0:09:24:5a:a0:c8:05:73:d4:02:14:fc:d3:c6:0b:1d:dc:76: 21:bc:ed:36:c6:25:13:dc:06:7f:b2:c7:96:d0:ea:d3:b0:b2: 7f:e6:61:0f:c1:7f:3c:5b:07:04:0b:c9:1c:75:6f:79:04:a7: 2e:a4:08:4d:69:0a:c8:9a:9d:30:6e:15:55:7d:7d:b5:71:73: 61:90:66:ed:85:45:61:b2:0c:7b:4e:11:ac:88:c0:d8:e5:86: a8:82:a8:5f:c0:e9:0f:78:22:df:e4:3a:a3:8d:25:b6:91:0b: 4c:31:15:d7:4f:13:2b:19:d0:75:83:e7:8c:7b:68:9a:85:90: c0:6a:20:e4:a4:b2:01:8a:bc:65:c4:86:ec:5c:a2:10:34:9d: 68:e4:b1:2a:43:ab:1a:d4:46:a9:63:bc:be:ac:57:a8:48:a3: 61:39:2c:a7:c1:d8:47:96:85:c4:31:4f:7e:3d:f3:fe:d6:09: bd:d7:b5:31:04:98:3c:11:29:e6:9c:11:97:e0:b4:05:fc:36: 7e:de:0a:08:4d:d5:9e:29:c5:ab:50:b4:40:7d:2f:18:e8:c3: 46:7d:9a:90:a1:7c:3d:e1:ab:db:c6:73:00:ce:c5:79:ff:dd: 48:70:b1:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QjUxMTAvBgNVBAUTKDEzOEY5QThDRjIwN0RBMDA4QjQwMUM2REU4RDkxMzEw RkUyNUVBNEMwHhcNMjUxMjIyMjIyMjM4WhcNMjUxMjI5MjIyMjM4WjAYMRYwFAYD VQQDDA02OTQ5YzRhZS03OWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxF9Q1AgRfOuEaAhI92qE/snDNX44pH/Yy6R8PjLrhcbYYUQYcujBU77aW/yo bXutFCS4UzBS0VnU7nj3rmgLKpukBSh37ErcFndmrpFIUOVE7cbNzZrrQ9+S9KSt yStNiAJEMLsx+VfNVMWgmo4CRtp8UPrCO+qodPt3wI3GSPYPSmKV27uzm1RtF6m4 zb2t8kcGlumVcLf2MT4UPGTGTaxejnEvAGIsw+A6Fd1rbkiTc03n7h+ONuDKv/A8 emIkyFh/Sxo4IkmoiqTAD/LVDix4lwIvST3zpGrU+lNod/hfPlKiDgocuuIMbImx PsaZReBZTr4D1TV0ugeV0u2yxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB9NPJA x1TPHX7ULf/afSINqVjdMB8GA1UdIwQYMBaAFBOPmozyB9oAi0AcbejZExD+JepM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCNS8yMzlEMkE0MkZG RjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJnQ0xRQnh0Nk5rVEVQNGw2 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0LWFqUElIMmdDTFFCeHQ2TmtURVA0bDZrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCNS8yMzlEMkE0MkZGRjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJn Q0xRQnh0Nk5rVEVQNGw2a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChdalxeQRBPjArfr9gdkgmVB6wCSRaoMgFc9QCFPzTxgsd3HYhvO02 xiUT3AZ/sseW0OrTsLJ/5mEPwX88WwcEC8kcdW95BKcupAhNaQrImp0wbhVVfX21 cXNhkGbthUVhsgx7ThGsiMDY5YaogqhfwOkPeCLf5DqjjSW2kQtMMRXXTxMrGdB1 g+eMe2iahZDAaiDkpLIBirxlxIbsXKIQNJ1o5LEqQ6sa1EapY7y+rFeoSKNhOSyn wdhHloXEMU9+PfP+1gm917UxBJg8ESnmnBGX4LQF/DZ+3goITdWeKcWrULRAfS8Y 6MNGfZqQoXw94avbxnMAzsV5/91IcLHW -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:23 2025 by rpki-client