This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: OP6fWESUBeqlziJE/JzdtRb/G4ilVuBFzyHTtzrWggE= Subject key identifier: B9:8C:16:A2:13:23:A4:29:2F:4E:DB:AE:2D:7F:65:07:D7:8A:FA:20 Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 021B Signing time: Sun 21 Dec 2025 01:25:41 +0000 Manifest this update: Sun 21 Dec 2025 01:25:40 +0000 Manifest next update: Sun 28 Dec 2025 01:25:40 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: yeVrXmIVTNo6QqABdWF1OM6+WeWTLL9/dXyWvHjeksA=) 2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 3fAULkE6ttb330SWu8NuIByl/YALdaeco2VwvKvVPGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: Dec 21 01:25:40 2025 GMT Not After : Dec 28 01:25:40 2025 GMT Subject: CN=69474c95-61ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:50:b6:68:70:0b:6d:9d:ca:5b:4b:4e:3f: 3b:3c:8f:97:c5:7d:06:4c:53:30:35:99:74:ab:4f: a0:b0:d3:a4:c7:4b:19:41:16:25:53:ba:07:3d:4e: 75:28:4a:f9:02:10:03:d1:ad:47:fa:e4:55:71:ff: 98:78:a2:95:e1:e2:9e:76:46:d4:8f:d6:55:85:12: ed:da:0e:a6:09:72:d7:77:b6:20:2f:6e:e8:39:83: 78:2b:72:29:47:23:72:32:91:88:27:50:16:b1:3a: 36:2b:dd:73:14:f4:a3:5f:da:07:bf:97:c4:a9:71: 8b:59:79:5a:0e:c5:d0:9e:a4:d4:11:63:a2:44:d3: 9b:6b:4f:18:a8:c8:a0:cc:1b:34:18:dd:0a:04:aa: 23:33:8f:e5:c0:13:34:a6:48:41:8b:b8:89:2d:51: a6:f7:f2:84:7d:b5:81:85:bd:5f:18:ad:26:44:70: 9f:9c:6e:30:eb:f7:e9:2d:97:b7:37:c9:d8:bb:c7: 8b:1b:b3:a4:44:cb:2f:0b:24:43:fe:03:f1:01:e8: 69:57:79:d4:f0:ee:1c:ba:1c:f6:76:b4:c4:8e:90: 12:17:bf:2b:e6:3b:3d:c7:3a:54:8d:09:b8:ac:bd: 06:32:21:6e:41:df:18:58:14:0a:b6:29:34:33:14: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8C:16:A2:13:23:A4:29:2F:4E:DB:AE:2D:7F:65:07:D7:8A:FA:20 X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:aa:18:bc:79:eb:4c:51:77:75:75:c4:7c:e5:95:50:da:2b: 21:6f:d6:2e:bf:42:09:df:a1:ca:79:64:02:46:9e:bc:24:4a: ed:72:f8:85:8f:86:cc:c3:e0:c0:62:60:85:02:f9:6c:63:fe: da:39:d5:94:0a:d4:e8:f4:8c:d6:90:13:e4:92:b0:30:d0:93: 6b:26:4a:10:ae:33:50:27:63:35:8d:9e:b0:82:14:d9:ca:80: 8b:79:0c:91:50:0e:9c:26:59:5c:2e:55:5e:d9:20:fe:38:b0: 3b:6b:92:71:2f:bc:35:07:04:73:f2:56:9d:39:e2:44:30:e8: 4d:fb:e7:54:3a:26:b0:31:ed:fd:31:08:ea:76:a1:24:cd:09: 28:ab:69:5e:c3:31:de:92:b8:8c:fd:28:08:82:3e:20:85:a7: c5:f8:24:91:03:27:ca:1f:d2:fc:aa:13:82:44:6f:5c:66:60: f8:a7:d4:13:80:c8:bf:62:29:f4:c4:fc:7d:50:0f:05:fb:5c: 30:ba:e5:27:d4:0b:80:9c:bd:35:1c:5b:d5:9c:95:f2:1e:e6: 0b:c4:ec:fa:8b:5c:02:91:86:c3:42:3f:5e:0b:15:9c:df:21: 95:43:c3:ba:7a:ed:f2:5e:0c:23:ac:1f:3f:d5:aa:13:e6:d9: ca:94:56:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjUxMjIxMDEyNTQwWhcNMjUxMjI4MDEyNTQwWjAYMRYwFAYD VQQDDA02OTQ3NGM5NS02MWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvtQtmhwC22dyltLTj87PI+XxX0GTFMwNZl0q0+gsNOkx0sZQRYlU7oHPU51 KEr5AhAD0a1H+uRVcf+YeKKV4eKedkbUj9ZVhRLt2g6mCXLXd7YgL27oOYN4K3Ip RyNyMpGIJ1AWsTo2K91zFPSjX9oHv5fEqXGLWXlaDsXQnqTUEWOiRNOba08YqMig zBs0GN0KBKojM4/lwBM0pkhBi7iJLVGm9/KEfbWBhb1fGK0mRHCfnG4w6/fpLZe3 N8nYu8eLG7OkRMsvCyRD/gPxAehpV3nU8O4cuhz2drTEjpASF78r5js9xzpUjQm4 rL0GMiFuQd8YWBQKtik0MxTDRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmMFqIT I6QpL07bri1/ZQfXivogMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+qhi8eetMUXd1dcR85ZVQ2ishb9Yuv0IJ36HKeWQCRp68JErtcviF j4bMw+DAYmCFAvlsY/7aOdWUCtTo9IzWkBPkkrAw0JNrJkoQrjNQJ2M1jZ6wghTZ yoCLeQyRUA6cJllcLlVe2SD+OLA7a5JxL7w1BwRz8ladOeJEMOhN++dUOiawMe39 MQjqdqEkzQkoq2lewzHekriM/SgIgj4ghafF+CSRAyfKH9L8qhOCRG9cZmD4p9QT gMi/Yin0xPx9UA8F+1wwuuUn1AuAnL01HFvVnJXyHuYLxOz6i1wCkYbDQj9eCxWc 3yGVQ8O6eu3yXgwjrB8/1aoT5tnKlFbs -----END CERTIFICATE-----Generated at Sun Dec 21 07:57:58 2025 by rpki-client