This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft File: Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json) Hash identifier: xl533Qz+obJEikpdZbd4VGWWJcB9cbDqXzh+i8kzwkI= Subject key identifier: AF:47:79:49:B3:AB:4E:24:F9:20:D2:E2:E0:43:25:54:50:E8:C5:6C Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Certificate serial: 0786 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft Manifest number: 077E Signing time: Mon 22 Dec 2025 20:52:37 +0000 Manifest this update: Mon 22 Dec 2025 20:52:37 +0000 Manifest next update: Mon 29 Dec 2025 20:52:37 +0000 Files and hashes: 1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: OE1ft9ZUDNFvrfoqCBTYZqeeZq1F3ZYputfRR5/enyE=) 2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: +6eYgOq04WhTg3h8FMeOxvxeZ5FD+RCHy2rKYTsWlYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1926 (0x786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Validity Not Before: Dec 22 20:52:37 2025 GMT Not After : Dec 29 20:52:37 2025 GMT Subject: CN=6949af95-b97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:8f:70:13:28:ac:58:15:e9:d4:71:65:ab: e6:64:b0:d5:02:e3:67:98:8f:89:43:4a:d7:e9:a4: 43:82:ea:7c:0e:61:8d:7e:c0:27:5a:f6:10:7e:98: b4:ce:bf:ae:ba:86:0e:72:01:b3:ba:79:fb:8e:56: 14:8e:93:c4:c6:54:38:17:67:2d:4a:cb:91:be:6c: 92:65:90:9c:31:03:37:a4:d6:85:8f:29:9e:61:e5: a9:df:cd:00:4f:7d:0d:8b:b7:6f:bd:6e:95:f2:c8: f3:7c:b0:3b:86:ab:0a:41:a2:7f:5b:3c:9b:53:9c: f8:55:33:b7:13:70:89:62:16:25:b8:4f:6d:84:ac: dd:c8:c0:83:dd:a2:b0:9e:b1:8c:fd:2e:4c:7a:70: 4a:ba:27:4e:9b:93:3b:c8:59:c4:47:eb:83:53:fa: 16:97:96:2d:e7:74:54:72:d2:f7:47:91:44:53:23: 02:14:9b:dc:af:10:19:ac:17:7c:b3:8f:16:e1:25: de:3f:e4:38:bf:55:cb:fb:6f:b6:be:14:c8:3c:a0: d3:f8:b3:a4:87:42:1f:54:7c:1f:07:e0:95:fd:6a: ea:6f:2c:04:f5:d2:d7:52:7f:39:7f:53:ce:7c:2b: 64:3f:1a:06:af:8e:e8:8d:88:16:35:dd:7e:b5:f3: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:47:79:49:B3:AB:4E:24:F9:20:D2:E2:E0:43:25:54:50:E8:C5:6C X509v3 Authority Key Identifier: keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:95:8a:33:ac:6d:9d:bb:e3:ab:15:89:29:91:bd:e6:c1:e2: 00:3b:a0:34:31:89:d7:c0:9e:73:10:4c:a5:07:67:d7:eb:b7: 2b:e7:2f:ac:eb:7d:81:f4:4c:f4:95:5a:67:82:2b:89:31:ae: 30:31:0a:e8:5d:3b:f7:c6:c0:c3:3e:ba:b5:45:d3:f1:03:d9: 92:56:bf:14:70:60:f7:a4:bc:9b:1a:8a:ec:37:e9:60:f3:31: 1d:fe:c6:50:64:f5:b3:5e:b3:cb:0f:91:4f:ff:fd:f1:81:bc: b0:72:c5:8a:32:ab:5f:b1:86:74:86:4f:29:3a:08:8a:39:b5: 2e:52:86:1a:28:d0:57:48:64:85:bc:7d:2f:6a:bf:11:ee:64: b4:51:79:02:fc:be:5b:9e:ee:90:29:eb:fd:00:12:b1:b7:ee: 98:f1:c5:5c:ce:fc:cb:eb:61:71:94:5b:25:cd:9e:db:97:c0: f0:d4:bf:5b:63:c8:0b:2f:f8:59:fd:07:9a:9c:4f:01:85:0c: 14:39:bc:bf:3b:3a:e1:4b:74:24:84:52:6b:55:fc:b1:86:89: 71:3e:2f:be:ab:ff:56:29:1b:bf:60:0b:ff:e3:ce:10:a5:a8: 5a:70:a7:c9:31:55:3c:d4:5c:de:e6:cd:80:bb:5e:ec:9c:04: 3a:a9:4f:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM4M0ExMTAvBgNVBAUTKDIxRTkzNTlERTk2MDdBNzhDQ0QzNTkwRTBCNDQ5Q0I1 MkIxN0I2QkIwHhcNMjUxMjIyMjA1MjM3WhcNMjUxMjI5MjA1MjM3WjAYMRYwFAYD VQQDDA02OTQ5YWY5NS1iOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyaPcBMorFgV6dRxZavmZLDVAuNnmI+JQ0rX6aRDgup8DmGNfsAnWvYQfpi0 zr+uuoYOcgGzunn7jlYUjpPExlQ4F2ctSsuRvmySZZCcMQM3pNaFjymeYeWp380A T30Ni7dvvW6V8sjzfLA7hqsKQaJ/WzybU5z4VTO3E3CJYhYluE9thKzdyMCD3aKw nrGM/S5MenBKuidOm5M7yFnER+uDU/oWl5Yt53RUctL3R5FEUyMCFJvcrxAZrBd8 s48W4SXeP+Q4v1XL+2+2vhTIPKDT+LOkh0IfVHwfB+CV/WrqbywE9dLXUn85f1PO fCtkPxoGr47ojYgWNd1+tfNmdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9HeUmz q04k+SDS4uBDJVRQ6MVsMB8GA1UdIwQYMBaAFCHpNZ3pYHp4zNNZDgtEnLUrF7a7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzgzQS80NzE3MENEODNE RUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vuak0wMWtPQzBTY3RTc1h0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0llazFuZWxnZW5qTTAxa09DMFNjdFNzWHRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzgzQS80NzE3MENEODNERUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vu ak0wMWtPQzBTY3RTc1h0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtlYozrG2du+OrFYkpkb3mweIAO6A0MYnXwJ5zEEylB2fX67cr5y+s 632B9Ez0lVpngiuJMa4wMQroXTv3xsDDPrq1RdPxA9mSVr8UcGD3pLybGorsN+lg 8zEd/sZQZPWzXrPLD5FP//3xgbywcsWKMqtfsYZ0hk8pOgiKObUuUoYaKNBXSGSF vH0var8R7mS0UXkC/L5bnu6QKev9ABKxt+6Y8cVczvzL62FxlFslzZ7bl8Dw1L9b Y8gLL/hZ/QeanE8BhQwUOby/OzrhS3QkhFJrVfyxholxPi++q/9WKRu/YAv/484Q pahacKfJMVU81Fze5s2Au17snAQ6qU+c -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:18 2025 by rpki-client