This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft File: e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json) Hash identifier: 6IEPXDmTuZVb53jqgdvtRNB6n5qo0KhOhNRhxiREacg= Subject key identifier: AF:24:E3:47:A1:3F:DA:B0:A6:A2:0E:4C:AC:86:3E:0A:59:B4:A0:2F Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 0912 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft Manifest number: 0907 Signing time: Thu 18 Dec 2025 19:51:34 +0000 Manifest this update: Thu 18 Dec 2025 19:51:33 +0000 Manifest next update: Thu 25 Dec 2025 19:51:33 +0000 Files and hashes: 1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: WCVlRB+7ySvnZKqvf+LQFRdJaU0fzyPy1dmHNQ1mx8Y=) 2: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (hash: Kmb540TuRA2tDqqWRgz9hrAljHHHHmzFl7Y1Ysy+4gE=) 3: 7E854EB2BEEF11F084D11C58C4F9AE02.roa (hash: TswTJHvENAD1Dt3sWcM8Wd5gmJihOCWr1zQhNFNqIck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2322 (0x912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Dec 18 19:51:33 2025 GMT Not After : Dec 25 19:51:33 2025 GMT Subject: CN=69445b46-1200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fc:c2:80:b6:e2:bc:a4:3f:27:c2:fb:84:35: 3f:7c:e6:9d:f6:2e:49:85:fe:33:f3:d3:4f:d0:50: 21:db:81:7e:07:db:b5:e6:3e:15:98:7d:7b:17:b2: dc:9b:94:80:7f:2b:43:08:3f:f8:36:9e:27:b0:c8: 67:7c:70:6d:23:d9:a0:a8:58:dc:bd:4c:e4:b7:10: 20:4b:4a:45:6f:93:e1:08:a9:2d:f3:dd:b0:4b:73: 98:1d:ca:7c:bf:6e:33:79:8a:f4:af:6d:d4:8a:87: 7b:29:36:4c:94:33:93:47:97:d4:15:ef:be:00:33: 5e:00:dd:27:8f:11:21:09:79:0e:ca:c2:62:53:b9: 9b:3e:21:de:16:07:7b:18:be:01:c6:b0:18:fb:bf: 1c:39:c0:fa:10:b2:13:f2:19:56:d1:6c:ae:5f:a7: 46:fe:24:d1:9a:1e:3b:0e:10:9f:b6:dc:aa:90:aa: 97:1a:bc:f2:88:78:24:f6:53:83:c7:29:1e:07:63: a2:da:65:f9:c3:95:10:29:bd:cd:19:37:01:5e:ce: 30:9d:32:f7:7a:9c:77:08:2d:58:42:39:75:2c:f2: 93:4f:15:42:b0:cf:bc:87:d6:e6:0f:de:e5:b5:9f: 17:71:39:75:46:6b:57:22:6b:b6:ef:ca:eb:a2:b9: a4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:24:E3:47:A1:3F:DA:B0:A6:A2:0E:4C:AC:86:3E:0A:59:B4:A0:2F X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b1:32:b0:42:e8:36:dc:31:ac:c7:0f:88:73:41:4c:87:f2: 97:10:c3:5f:27:61:0f:16:9c:f6:97:5a:79:67:51:80:0f:c9: 50:f8:fb:55:10:4a:ab:e9:a3:d9:6f:45:21:e3:27:66:1e:0d: b4:2c:69:d0:93:dc:75:9f:84:02:45:92:d0:81:fd:49:af:ba: 5a:be:15:3d:69:50:17:07:41:1b:b7:47:10:f6:5c:91:b0:87: 85:39:0f:8e:88:05:2a:22:a4:98:85:86:38:89:19:69:7e:ac: 66:48:e5:00:61:07:72:a0:51:6a:3f:b4:b4:2c:a3:58:c6:6c: 5a:f0:ee:00:d3:0c:1e:86:a1:b7:96:8c:09:a2:eb:e6:fb:67: ff:fd:be:4f:e1:5c:93:55:25:a4:dd:b6:dc:c5:d3:97:6a:7a: 76:2f:a7:f6:4c:f5:c1:98:1b:e2:a7:3c:aa:8c:cc:c6:8d:70: e8:d8:9b:ad:fc:37:7c:64:0d:a8:df:02:a1:4e:8c:c3:80:af: a5:f6:43:ee:c6:81:d2:ef:55:ef:62:d8:9c:fb:6c:a0:63:94: 16:99:d1:97:9c:27:5c:30:cb:7a:db:14:9d:ed:05:45:f9:d4: 1c:6c:15:66:0d:07:33:33:cc:e2:6e:5f:7b:71:27:ea:4b:6a: 3e:66:b0:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjUxMjE4MTk1MTMzWhcNMjUxMjI1MTk1MTMzWjAYMRYwFAYD VQQDDA02OTQ0NWI0Ni0xMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PzCgLbivKQ/J8L7hDU/fOad9i5Jhf4z89NP0FAh24F+B9u15j4VmH17F7Lc m5SAfytDCD/4Np4nsMhnfHBtI9mgqFjcvUzktxAgS0pFb5PhCKkt892wS3OYHcp8 v24zeYr0r23Uiod7KTZMlDOTR5fUFe++ADNeAN0njxEhCXkOysJiU7mbPiHeFgd7 GL4BxrAY+78cOcD6ELIT8hlW0WyuX6dG/iTRmh47DhCfttyqkKqXGrzyiHgk9lOD xykeB2Oi2mX5w5UQKb3NGTcBXs4wnTL3epx3CC1YQjl1LPKTTxVCsM+8h9bmD97l tZ8XcTl1RmtXImu278rrormkBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8k40eh P9qwpqIOTKyGPgpZtKAvMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZsTKwQug23DGsxw+Ic0FMh/KXEMNfJ2EPFpz2l1p5Z1GAD8lQ+PtV EEqr6aPZb0Uh4ydmHg20LGnQk9x1n4QCRZLQgf1Jr7pavhU9aVAXB0Ebt0cQ9lyR sIeFOQ+OiAUqIqSYhYY4iRlpfqxmSOUAYQdyoFFqP7S0LKNYxmxa8O4A0wwehqG3 lowJouvm+2f//b5P4VyTVSWk3bbcxdOXanp2L6f2TPXBmBvipzyqjMzGjXDo2Jut /Dd8ZA2o3wKhTozDgK+l9kPuxoHS71XvYtic+2ygY5QWmdGXnCdcMMt62xSd7QVF +dQcbBVmDQczM8zibl97cSfqS2o+ZrAZ -----END CERTIFICATE-----Generated at Fri Dec 19 21:11:33 2025 by rpki-client