This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft File: enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json) Hash identifier: rKYCnekvv3LCoCNBOMmgagq/RnpRx7eg5lgcb7oyk9U= Subject key identifier: 84:8F:92:33:28:5F:E7:7A:DD:C1:7B:4C:EE:48:50:56:65:5C:28:91 Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 Certificate issuer: /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft Manifest number: 0A7B Signing time: Mon 22 Dec 2025 21:48:39 +0000 Manifest this update: Mon 22 Dec 2025 21:48:39 +0000 Manifest next update: Mon 29 Dec 2025 21:48:39 +0000 Files and hashes: 1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: 6u4krKrQrJFmpoUr4wTxPzxNymC+kiJpHamxQ5Pqafk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Validity Not Before: Dec 22 21:48:39 2025 GMT Not After : Dec 29 21:48:39 2025 GMT Subject: CN=6949bcb7-0baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:36:1d:bc:e4:ed:9b:70:58:86:12:be:86: a5:60:b8:38:ae:12:82:71:d5:81:fd:fd:80:e3:89: b5:c9:0b:a6:d6:db:8d:5c:a4:da:70:e6:61:4c:0f: 1b:53:5c:7d:b6:5d:e0:22:f5:f0:b6:b1:8d:26:4a: a0:cc:87:fb:16:cb:79:9e:df:b3:96:65:6a:26:a6: 80:a1:6f:2a:b4:c2:c3:6b:d0:16:39:b6:fd:c7:12: 9a:21:62:93:07:50:e6:96:87:81:b7:8c:bd:de:32: f6:8a:07:c9:c6:af:29:c8:9e:45:33:4c:16:32:f4: 63:0f:d4:34:0b:b9:08:5d:f0:25:e4:82:be:67:2b: d8:f2:bc:12:62:22:97:fe:c4:0c:14:e7:4d:a0:55: 39:0d:62:09:28:20:38:a7:1b:a5:f2:c5:fe:b0:1a: e6:d3:96:9a:3c:7f:fd:cf:23:77:a8:7b:bc:af:f3: 99:ee:2b:c5:48:a6:72:c7:8c:1a:3b:d8:b8:af:a8: 94:1c:62:2c:45:3a:89:0a:7f:a1:dc:17:d7:31:05: ab:e7:f4:50:dc:dc:0b:79:6e:d7:6a:6b:64:c7:6b: 88:63:cd:71:49:9f:4e:24:ef:c8:72:72:06:fa:61: b9:a9:49:f4:3d:ec:4b:12:e2:a8:40:62:d3:a0:3e: 0b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8F:92:33:28:5F:E7:7A:DD:C1:7B:4C:EE:48:50:56:65:5C:28:91 X509v3 Authority Key Identifier: keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:90:fa:bd:3d:63:63:58:bd:98:3c:2d:93:07:8a:2d:fd:c2: d4:d6:33:d2:de:7c:93:ff:69:af:b4:d3:99:7e:18:b8:0d:07: c6:5e:12:86:9e:42:c4:44:1a:30:7e:ec:44:c4:7e:42:74:c5: 86:a7:37:fb:a4:13:0d:76:5d:69:5d:e2:a4:ef:df:05:20:73: 44:f4:b9:b5:e2:a5:ec:54:d3:35:93:45:78:21:a0:15:16:fb: 94:0b:1a:0f:1f:eb:36:35:a0:22:8a:75:63:29:52:28:8b:c2: 59:4b:e8:ec:d2:35:98:1c:6c:cd:13:97:28:02:d5:48:a7:6e: 74:a6:a5:82:70:9a:fa:a9:a6:78:0c:b4:39:79:2a:b8:0f:d5: 63:a3:67:8d:60:9d:02:84:a8:6b:8f:10:da:fb:a1:56:18:83: 82:56:fd:f6:e2:0c:2f:54:5b:65:9e:01:50:68:82:3d:b3:38: f2:b6:18:3f:dc:bc:7a:ec:92:f6:ef:bf:58:dd:18:5c:10:c3: 9d:e8:15:e5:cc:c8:4b:21:f2:b3:88:ed:91:b0:64:e7:9a:50: e5:a3:27:6e:c3:a7:cf:82:bc:40:b6:e7:fe:07:33:e2:11:73: 53:7b:40:b9:37:1e:3a:10:f9:db:0e:85:a7:74:64:aa:de:61: cb:8d:04:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDdBNzg1NTVFMDg0NDQ1NzU3RkJDRDAwREREMUQ3NEMz NjlDQkEwQjAwHhcNMjUxMjIyMjE0ODM5WhcNMjUxMjI5MjE0ODM5WjAYMRYwFAYD VQQDDA02OTQ5YmNiNy0wYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1I2Hbzk7ZtwWIYSvoalYLg4rhKCcdWB/f2A44m1yQum1tuNXKTacOZhTA8b U1x9tl3gIvXwtrGNJkqgzIf7Fst5nt+zlmVqJqaAoW8qtMLDa9AWObb9xxKaIWKT B1DmloeBt4y93jL2igfJxq8pyJ5FM0wWMvRjD9Q0C7kIXfAl5IK+ZyvY8rwSYiKX /sQMFOdNoFU5DWIJKCA4pxul8sX+sBrm05aaPH/9zyN3qHu8r/OZ7ivFSKZyx4wa O9i4r6iUHGIsRTqJCn+h3BfXMQWr5/RQ3NwLeW7Xamtkx2uIY81xSZ9OJO/IcnIG +mG5qUn0PexLEuKoQGLToD4LpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISPkjMo X+d63cF7TO5IUFZlXCiRMB8GA1UdIwQYMBaAFHp4VV4IREV1f7zQDd0ddMNpy6Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJYVl92TkFOM1IxMHcybkxv TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VuaFZYZ2hFUlhWX3ZOQU4zUjEwdzJuTG9MQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJY Vl92TkFOM1IxMHcybkxvTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpkPq9PWNjWL2YPC2TB4ot/cLU1jPS3nyT/2mvtNOZfhi4DQfGXhKG nkLERBowfuxExH5CdMWGpzf7pBMNdl1pXeKk798FIHNE9Lm14qXsVNM1k0V4IaAV FvuUCxoPH+s2NaAiinVjKVIoi8JZS+js0jWYHGzNE5coAtVIp250pqWCcJr6qaZ4 DLQ5eSq4D9Vjo2eNYJ0ChKhrjxDa+6FWGIOCVv324gwvVFtlngFQaII9szjythg/ 3Lx67JL2779Y3RhcEMOd6BXlzMhLIfKziO2RsGTnmlDloyduw6fPgrxAtuf+BzPi EXNTe0C5Nx46EPnbDoWndGSq3mHLjQS3 -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:36 2025 by rpki-client