This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: qXe46T9s+VtBmGDEUghG9RZnhzRoNrpOGGFPqkBSRNI= Subject key identifier: 85:B9:10:65:23:21:10:C4:9C:2A:FB:05:43:CB:6F:09:42:EC:51:1D Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0CCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0CBB Signing time: Mon 22 Dec 2025 17:51:15 +0000 Manifest this update: Mon 22 Dec 2025 17:51:14 +0000 Manifest next update: Mon 29 Dec 2025 17:51:14 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: K+XRwYJV0/UGQn7RlFamPhFwqfJcNVq/pQTX/SKWZUo=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: Wk7XsElJ9QejMrm05qJ4YVcTMAAYD+d8lLLUdBQZCXY=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: vTFXyGHYGe6s3SqvcZNP+dIhUxLeP7oO2VI4PVLGlrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Dec 22 17:51:14 2025 GMT Not After : Dec 29 17:51:14 2025 GMT Subject: CN=69498513-cb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8c:e9:4b:f6:25:5b:ca:b4:33:5d:fa:84:49: 75:a0:ad:0b:d0:c3:0e:e9:58:c8:59:6a:1c:68:65: e0:06:3d:c2:94:76:d2:86:74:b5:e8:9e:09:b7:07: 53:30:0c:ff:2c:d7:ff:5c:64:43:93:15:f2:8b:4d: 82:a5:4d:ff:d9:de:a5:2c:08:b1:c5:ba:9a:81:2a: 05:aa:4e:4e:3b:58:da:fc:5d:b5:52:41:5c:e3:82: 9a:7e:07:80:0a:a9:9c:e3:bb:c4:d8:48:52:ba:86: cf:20:59:b3:95:53:84:5c:1e:23:15:cb:31:e4:b0: 22:58:37:cb:fd:f7:d8:1c:65:97:7a:32:7b:84:11: 43:19:a7:6d:d6:c1:51:d8:be:76:e4:fe:b6:29:ff: db:1c:3d:6a:61:4e:40:57:df:6a:24:3e:71:26:24: 43:f5:05:a3:e5:f4:a1:43:f5:72:66:77:53:7b:db: f9:0c:d3:dd:d8:27:f7:46:d7:9c:a7:f7:94:5c:f8: f7:ee:94:a5:33:78:4a:81:bf:9d:cb:bd:06:f0:a7: 66:0e:61:1e:41:7a:61:eb:d2:df:7f:54:72:aa:8c: b0:71:d3:cb:34:42:8f:de:92:09:e4:b1:60:0e:59: d3:05:92:fc:4c:d4:af:bc:2a:32:1f:7c:08:eb:82: 81:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B9:10:65:23:21:10:C4:9C:2A:FB:05:43:CB:6F:09:42:EC:51:1D X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:09:31:23:9f:3c:8a:5a:22:49:47:d3:c1:07:27:d5:91:3c: e5:de:75:17:c4:4b:11:1e:26:3a:6b:f0:48:44:f6:4d:bf:c9: 1b:8d:4b:86:aa:da:ba:6f:6e:b3:40:88:20:2b:59:34:27:28: 64:49:af:fd:31:9c:5a:bc:1e:b6:9b:bd:19:74:8f:b5:1d:41: d7:c2:9c:a3:a2:04:9c:09:2d:e5:26:40:d1:f9:4b:51:ef:fc: 46:28:ca:13:52:a9:85:68:7b:fd:e3:b5:7f:ff:7e:cd:3a:a9: de:cb:ad:47:28:34:16:4b:07:c8:c5:dd:a0:c6:58:30:0c:ea: 5b:06:7a:59:4e:0d:80:82:3e:7a:f9:8f:26:ca:e6:2d:1f:0f: 7c:f7:ab:33:ec:a6:a5:51:7b:15:4c:d4:ba:42:3d:2a:cb:ce: dd:da:b5:6b:ad:af:84:51:10:46:e9:ae:7e:e1:f0:02:fc:30: 54:0d:4a:22:6d:73:46:d2:30:57:a4:d0:4d:fb:b3:70:24:55: fb:c6:15:6f:93:87:bb:44:e7:94:9c:45:70:9c:3f:03:d7:3e: 1e:26:f7:fa:b0:ad:72:39:a4:34:98:ba:36:78:26:e2:dd:0a: 0e:c7:26:0a:7a:5b:16:72:5d:37:f8:d8:e6:93:1a:d3:1e:63: 83:6c:5e:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjUxMjIyMTc1MTE0WhcNMjUxMjI5MTc1MTE0WjAYMRYwFAYD VQQDDA02OTQ5ODUxMy1jYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkIzpS/YlW8q0M136hEl1oK0L0MMO6VjIWWocaGXgBj3ClHbShnS16J4JtwdT MAz/LNf/XGRDkxXyi02CpU3/2d6lLAixxbqagSoFqk5OO1ja/F21UkFc44KafgeA Cqmc47vE2EhSuobPIFmzlVOEXB4jFcsx5LAiWDfL/ffYHGWXejJ7hBFDGadt1sFR 2L525P62Kf/bHD1qYU5AV99qJD5xJiRD9QWj5fShQ/VyZndTe9v5DNPd2Cf3Rtec p/eUXPj37pSlM3hKgb+dy70G8KdmDmEeQXph69Lff1RyqoywcdPLNEKP3pIJ5LFg DlnTBZL8TNSvvCoyH3wI64KBZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIW5EGUj IRDEnCr7BUPLbwlC7FEdMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACCTEjnzyKWiJJR9PBByfVkTzl3nUXxEsRHiY6a/BIRPZNv8kbjUuG qtq6b26zQIggK1k0JyhkSa/9MZxavB62m70ZdI+1HUHXwpyjogScCS3lJkDR+UtR 7/xGKMoTUqmFaHv947V//37NOqney61HKDQWSwfIxd2gxlgwDOpbBnpZTg2Agj56 +Y8myuYtHw9896sz7KalUXsVTNS6Qj0qy87d2rVrra+EURBG6a5+4fAC/DBUDUoi bXNG0jBXpNBN+7NwJFX7xhVvk4e7ROeUnEVwnD8D1z4eJvf6sK1yOaQ0mLo2eCbi 3QoOxyYKelsWcl03+NjmkxrTHmODbF4V -----END CERTIFICATE-----Generated at Tue Dec 23 05:01:49 2025 by rpki-client