This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft File: elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json) Hash identifier: 33sUjwGLH3zZ4qQuzrZfVg80QjvwgObmrsJnlza1yoI= Subject key identifier: E5:52:3C:45:5D:B8:8A:DE:9C:42:2B:3E:A0:8C:06:1E:89:38:11:64 Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 Certificate issuer: /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Certificate serial: 07E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft Manifest number: 07D3 Signing time: Mon 22 Dec 2025 20:40:18 +0000 Manifest this update: Mon 22 Dec 2025 20:40:17 +0000 Manifest next update: Mon 29 Dec 2025 20:40:17 +0000 Files and hashes: 1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: m+PlwLcDo0vRsPNvH5aSeFav+XOdGIhv2qI+WZiXgcY=) 2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: dk2P7YS4UEzdhYSweMgpjO1Pw3svDbIzP68IGqk5fxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2023 (0x7e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Validity Not Before: Dec 22 20:40:17 2025 GMT Not After : Dec 29 20:40:17 2025 GMT Subject: CN=6949acb2-1f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:69:0e:40:8d:99:a0:a4:f9:2d:74:b8:7a: 3a:6c:48:c9:25:6d:7a:75:9d:06:39:33:39:d7:80: 6d:f6:82:9d:d8:05:c8:5f:48:fd:c6:20:32:94:91: 2a:a5:8a:38:53:1c:26:b8:ab:dd:c5:2d:e4:ea:b2: 33:04:7f:c2:e5:ae:19:91:c6:f5:8f:c2:9b:7e:7f: c8:d5:74:79:2c:b9:c2:b7:61:5d:38:9d:04:93:48: 77:ef:92:93:80:e4:13:79:0a:b4:2e:24:fd:35:f9: 77:af:d2:f8:5e:62:b6:8c:36:19:b3:30:15:00:31: 48:8a:bb:0b:4e:41:d2:a8:29:4a:c4:f6:90:92:c7: 81:b3:e6:9a:ea:75:8b:bf:6b:9b:85:cd:be:b8:bb: 7f:df:6d:2b:07:0a:e3:f5:bf:8a:75:12:f1:5c:c5: 9f:60:f0:54:a8:db:71:a7:b0:a5:bc:28:64:27:e3: 4d:31:99:f1:ba:ae:e6:de:e1:61:e4:0b:bd:ab:65: d9:e6:de:80:a6:06:05:28:bb:22:d3:d3:41:a3:6a: ce:61:f4:2f:29:b3:09:ba:c2:f3:bc:24:f3:60:7f: 7d:34:b4:12:e2:92:6d:55:eb:6f:9a:09:a7:fc:d2: 55:14:61:16:d7:9a:8b:90:d9:f3:5c:b8:eb:c8:e7: 6c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:52:3C:45:5D:B8:8A:DE:9C:42:2B:3E:A0:8C:06:1E:89:38:11:64 X509v3 Authority Key Identifier: keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c9:a8:2c:f1:06:f8:49:79:92:0d:20:ad:71:e2:70:93:48: 27:5d:63:7b:74:2a:a9:26:cb:a1:fb:6d:53:df:8c:4d:39:1b: 3b:8c:69:e2:56:7b:dd:a2:dc:38:4f:69:c6:da:07:11:f2:dd: 6c:9f:98:a0:e7:f9:88:65:8e:dd:2c:e8:1d:5e:4a:18:67:30: dd:71:e3:21:f1:bc:cd:19:1e:b1:2b:28:f0:c2:8b:60:97:6d: e6:72:c3:81:1f:7c:52:27:75:fd:82:94:d6:88:a5:6e:ba:67: 6c:d0:3c:b3:9e:23:b3:eb:4b:c3:9f:89:c5:71:f8:8f:c8:92: ca:16:00:72:44:b0:f1:0e:12:d2:ae:89:1f:19:14:f5:69:18: 45:28:bc:a0:0c:2a:36:79:ae:a6:a7:81:d3:91:51:82:19:bb: 1c:13:d2:e3:e9:3c:4d:ac:ef:b4:24:8d:aa:db:0a:94:a1:c7: df:17:10:e0:ea:32:8f:2f:6d:ee:2a:c6:3b:b2:56:d7:7d:c6: 4d:a7:b9:ff:01:55:6d:4b:99:9e:c1:97:ea:11:87:90:64:b6: 51:b6:06:bd:62:74:97:02:b1:e5:6e:f0:02:85:c7:a5:a5:b3: 3b:bb:3d:07:7b:c8:a1:74:05:64:d8:18:4f:65:80:0c:c9:91: a1:ab:60:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGODcxMTAvBgNVBAUTKDdBNTQ3NDEyM0M1NDg4MTdFMjVGMzQ4NENDMjZCNjBC MDY0MUJENjkwHhcNMjUxMjIyMjA0MDE3WhcNMjUxMjI5MjA0MDE3WjAYMRYwFAYD VQQDDA02OTQ5YWNiMi0xZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOVpDkCNmaCk+S10uHo6bEjJJW16dZ0GOTM514Bt9oKd2AXIX0j9xiAylJEq pYo4UxwmuKvdxS3k6rIzBH/C5a4Zkcb1j8Kbfn/I1XR5LLnCt2FdOJ0Ek0h375KT gOQTeQq0LiT9Nfl3r9L4XmK2jDYZszAVADFIirsLTkHSqClKxPaQkseBs+aa6nWL v2ubhc2+uLt/320rBwrj9b+KdRLxXMWfYPBUqNtxp7ClvChkJ+NNMZnxuq7m3uFh 5Au9q2XZ5t6ApgYFKLsi09NBo2rOYfQvKbMJusLzvCTzYH99NLQS4pJtVetvmgmn /NJVFGEW15qLkNnzXLjryOdsDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVSPEVd uIrenEIrPqCMBh6JOBFkMB8GA1UdIwQYMBaAFHpUdBI8VIgX4l80hMwmtgsGQb1p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9CMUNENzFGMDI2 ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlCZmlYelNFekNhMkN3WkJ2 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsUjBFanhVaUJmaVh6U0V6Q2EyQ3daQnZXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY4Ny9CMUNENzFGMDI2ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlC ZmlYelNFekNhMkN3WkJ2V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCayags8Qb4SXmSDSCtceJwk0gnXWN7dCqpJsuh+21T34xNORs7jGni Vnvdotw4T2nG2gcR8t1sn5ig5/mIZY7dLOgdXkoYZzDdceMh8bzNGR6xKyjwwotg l23mcsOBH3xSJ3X9gpTWiKVuumds0DyzniOz60vDn4nFcfiPyJLKFgByRLDxDhLS rokfGRT1aRhFKLygDCo2ea6mp4HTkVGCGbscE9Lj6TxNrO+0JI2q2wqUocffFxDg 6jKPL23uKsY7slbXfcZNp7n/AVVtS5mewZfqEYeQZLZRtga9YnSXArHlbvAChcel pbM7uz0He8ihdAVk2BhPZYAMyZGhq2Ct -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:51 2025 by rpki-client