This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft File: _Er4bnAJnaC6rC7dx30b70x1qJU.mft (raw, json) Hash identifier: oHLo9YfhQp9Otx1w7wttD5ENX0NXTfX+60iLBIDwlI8= Subject key identifier: 19:2A:8E:30:48:EA:7A:AA:0E:6A:51:C7:DA:AB:78:67:62:E6:10:D0 Authority key identifier: FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95 Certificate issuer: /CN=A917D31E/serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft Manifest number: 20 Signing time: Tue 23 Dec 2025 06:38:21 +0000 Manifest this update: Tue 23 Dec 2025 06:38:21 +0000 Manifest next update: Tue 30 Dec 2025 06:38:21 +0000 Files and hashes: 1: _Er4bnAJnaC6rC7dx30b70x1qJU.crl (hash: J44FW69HaGX+LhDjBCW1jyV6RSe7mfWJDwmR/eyjNPA=) 2: 3505DC88B6E411F090AAA224C4F9AE02.roa (hash: NC1EW44txePxXOncUvp1UoY7Puvst1exL43E60v3h6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D31E, serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895 Validity Not Before: Dec 23 06:38:21 2025 GMT Not After : Dec 30 06:38:21 2025 GMT Subject: CN=694a38dd-310f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:ec:76:09:62:84:b5:70:9e:64:48:88:45: 84:c6:55:85:a3:ef:c6:62:1f:2b:3d:74:b2:1b:ae: b3:e7:ff:df:ef:a9:52:5f:e8:2d:3b:15:74:4b:fa: 8c:8b:13:b0:2f:98:bb:c6:26:4a:6c:33:75:52:03: 71:37:60:bb:fb:92:9a:ce:d8:28:ff:3a:6a:8d:f0: f0:52:2c:b5:c3:e4:6a:10:ab:c0:89:47:8f:be:8a: 26:f6:96:e0:f6:a4:61:60:95:65:14:15:6d:b2:f5: 57:56:53:92:c2:09:50:7a:50:96:5e:61:d2:e2:2f: f0:7c:eb:df:39:e4:27:a8:e0:d3:3a:f0:bc:23:2d: 09:17:76:7b:56:fd:33:9d:78:67:a6:91:62:7a:d7: 3c:ab:d5:38:15:9b:f6:73:15:78:ee:c9:a7:35:be: 61:ac:59:94:f3:3e:00:d7:dd:8b:4e:3e:e8:2e:e1: 78:88:9c:eb:8f:54:99:05:62:97:74:6e:70:56:bc: 2d:93:b2:17:4c:92:64:56:73:98:3d:a7:fd:f9:62: d7:97:3a:2c:3b:b5:5f:15:bd:ea:54:d3:0d:ff:8b: 3f:38:eb:a6:b6:0e:87:e2:b2:3b:67:d5:77:fb:03: f4:75:ac:2a:be:cf:54:da:c3:d1:30:4c:9c:02:81: 53:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2A:8E:30:48:EA:7A:AA:0E:6A:51:C7:DA:AB:78:67:62:E6:10:D0 X509v3 Authority Key Identifier: keyid:FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8f:3f:26:10:b1:3e:7f:7a:76:44:e1:75:d2:d8:d6:71:d9: f1:ac:30:1d:92:95:ae:4c:3b:49:7b:ff:27:dd:b1:52:22:94: b7:b6:bf:e0:c8:42:77:30:cb:c8:1b:7e:e5:ca:02:50:28:92: 8d:c3:93:42:b2:de:5f:13:76:e5:b9:fe:12:01:40:49:aa:4e: 70:73:2f:20:19:77:06:02:ac:a6:11:6f:03:ea:c4:f4:1c:cb: ae:86:3e:88:42:e0:09:dc:05:1a:d6:a0:27:98:75:6b:1d:21: 02:52:e0:ac:76:66:5a:76:19:ec:5b:7b:8c:9d:58:88:f0:82: 55:e8:bf:14:e9:ee:0b:6b:3c:34:34:ab:8c:1f:48:ed:31:22: 4a:34:83:54:2c:a0:90:b0:a5:9e:91:41:dc:da:d0:45:d1:e1: dd:bf:35:07:46:64:97:4c:7e:ac:77:5d:5c:85:ea:a2:37:8c: fd:18:e6:d3:1a:23:38:49:df:ec:3e:ea:6d:bf:6a:93:17:d8: 69:d2:5b:8c:6f:27:58:92:78:cb:5e:94:d8:83:b2:5b:ad:79: 3a:04:96:84:0a:e4:df:7f:64:8c:d8:bf:95:ec:39:e2:d4:ab: a1:42:91:9f:77:f5:14:58:fe:7a:7c:71:bd:dd:83:80:3b:b6: 19:ac:a7:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDMxRTExMC8GA1UEBRMoRkM0QUY4NkU3MDA5OURBMEJBQUMyRUREQzc3RDFCRUY0 Qzc1QTg5NTAeFw0yNTEyMjMwNjM4MjFaFw0yNTEyMzAwNjM4MjFaMBgxFjAUBgNV BAMMDTY5NGEzOGRkLTMxMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqdOx2CWKEtXCeZEiIRYTGVYWj78ZiHys9dLIbrrPn/9/vqVJf6C07FXRL+oyL E7AvmLvGJkpsM3VSA3E3YLv7kprO2Cj/OmqN8PBSLLXD5GoQq8CJR4++iib2luD2 pGFglWUUFW2y9VdWU5LCCVB6UJZeYdLiL/B869855Ceo4NM68LwjLQkXdntW/TOd eGemkWJ61zyr1TgVm/ZzFXjuyac1vmGsWZTzPgDX3YtOPugu4XiInOuPVJkFYpd0 bnBWvC2TshdMkmRWc5g9p/35YteXOiw7tV8VvepU0w3/iz8466a2Dofisjtn1Xf7 A/R1rCq+z1Taw9EwTJwCgVOJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGSqOMEjq eqoOalHH2qt4Z2LmENAwHwYDVR0jBBgwFoAU/Er4bnAJnaC6rC7dx30b70x1qJUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMzFFLzUzNzg0NUEwQjRC QjExRjBBMTM1MzcyMkM0RjlBRTAyL19FcjRibkFKbmFDNnJDN2R4MzBiNzB4MXFK VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0VyNGJuQUpuYUM2ckM3ZHgzMGI3MHgxcUpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MzFFLzUzNzg0NUEwQjRCQjExRjBBMTM1MzcyMkM0RjlBRTAyL19FcjRibkFKbmFD NnJDN2R4MzBiNzB4MXFKVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIuPPyYQsT5/enZE4XXS2NZx2fGsMB2Sla5MO0l7/yfdsVIilLe2v+DI Qncwy8gbfuXKAlAoko3Dk0Ky3l8TduW5/hIBQEmqTnBzLyAZdwYCrKYRbwPqxPQc y66GPohC4AncBRrWoCeYdWsdIQJS4Kx2Zlp2Gexbe4ydWIjwglXovxTp7gtrPDQ0 q4wfSO0xIko0g1QsoJCwpZ6RQdza0EXR4d2/NQdGZJdMfqx3XVyF6qI3jP0Y5tMa IzhJ3+w+6m2/apMX2GnSW4xvJ1iSeMtelNiDsluteToEloQK5N9/ZIzYv5XsOeLU q6FCkZ939RRY/np8cb3dg4A7thmsp3w= -----END CERTIFICATE-----Generated at Wed Dec 24 16:01:02 2025 by rpki-client