This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json) Hash identifier: IPtkP31qbfFqTDtUyyAZjLY5sb3cIf3TOpB3LRF5NtA= Subject key identifier: 52:8C:09:07:ED:FD:F7:99:0D:5C:99:B5:DA:A8:AC:92:8B:05:05:BA Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Certificate serial: 0597 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft Manifest number: 058E Signing time: Thu 18 Dec 2025 22:35:21 +0000 Manifest this update: Thu 18 Dec 2025 22:35:21 +0000 Manifest next update: Thu 25 Dec 2025 22:35:21 +0000 Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: 8oxMurjhnksFX5gcXETA5ylrQAI16g0be6y/31+2pys=) 2: BBECA326B2FC11F0AB9D691CC4F9AE02.roa (hash: zqgS+zlgehzRdHe7d+oyK8Qe/7J3aamdJc6La9J4rtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1431 (0x597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8B5, serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Validity Not Before: Dec 18 22:35:21 2025 GMT Not After : Dec 25 22:35:21 2025 GMT Subject: CN=694481a9-5ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:df:b2:06:67:d2:3a:ba:b5:72:b1:32:ce: 96:b3:3b:85:f8:45:4e:22:a8:ed:7c:89:89:c3:f7: 34:ac:44:a7:ad:40:3a:ae:eb:f6:9e:43:c4:68:25: d6:e5:83:65:28:02:d8:23:0e:b6:e1:e8:6c:79:94: 7b:e6:f5:fe:62:87:43:e4:f1:34:64:11:3e:94:2a: ab:6c:5f:03:79:59:ad:33:72:e8:3f:71:b0:30:b2: 15:b2:68:f0:80:4b:1c:f2:f3:62:02:8f:48:a5:8c: 43:bc:13:66:1c:71:2f:55:aa:37:0a:0a:19:38:79: e6:e2:d6:04:14:90:89:c6:3a:a6:37:6e:e6:47:68: 89:b6:d3:6d:73:16:d1:d5:e2:94:36:0d:7e:e3:c5: 7b:25:59:c9:4f:e7:35:a4:16:41:c7:d5:e6:00:d6: 7a:77:9b:4f:dd:97:69:ff:88:ac:31:c8:de:45:02: fb:3f:80:82:9a:92:f7:e8:10:ce:ee:92:cd:ae:43: 97:e8:5a:db:e1:c3:87:78:f5:84:97:be:30:5d:92: eb:f0:d1:91:fe:35:38:4d:72:76:a6:aa:9d:cf:a1: 71:04:00:f7:c3:d8:8b:e2:57:e5:ab:76:97:a9:ae: 44:f7:60:ad:fd:05:d2:59:00:0e:6e:8a:cd:d3:fb: a3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8C:09:07:ED:FD:F7:99:0D:5C:99:B5:DA:A8:AC:92:8B:05:05:BA X509v3 Authority Key Identifier: keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1a:e6:2f:5d:31:45:8c:75:a1:38:0a:5e:08:ad:98:94:32: ba:49:22:57:ed:0d:b9:64:ba:3c:10:8b:b9:da:20:e3:45:2b: 7d:f7:41:39:b8:7a:7c:a8:ba:e3:af:76:f0:d2:d1:ee:c8:ae: 9a:e2:42:21:15:8d:38:52:9b:90:2b:e6:1e:9a:5e:a0:12:5d: db:08:ce:ee:13:85:bc:05:d5:e9:64:bf:72:0b:c7:65:6c:ec: aa:62:26:8e:d9:81:9a:e5:60:90:6f:f5:fb:4f:5f:df:1c:5f: 73:47:76:3a:a4:d0:37:64:de:dd:ac:fe:35:8d:80:77:5a:51: 12:1a:99:ea:9b:1f:bf:d1:38:f6:65:11:bc:07:09:43:4c:d7: 91:d2:24:6d:bd:07:ff:ab:a7:5e:66:a0:5e:e5:30:95:e1:e0: 17:4c:25:75:76:49:36:31:fc:4d:57:91:4f:45:c5:90:72:3d: 6e:1a:7f:a7:57:27:81:86:09:4d:3f:8a:c2:e7:2b:79:e5:af: ee:28:ac:34:c3:b6:ec:71:2c:f1:f1:8e:64:60:4e:2a:f9:73: 68:25:09:82:a6:0c:a3:36:dd:e8:24:fa:64:ea:70:20:6c:ab: 07:7b:7f:18:02:b7:80:c2:b5:18:cc:03:18:11:5d:3d:f1:99: a1:0e:a0:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QjUxMTAvBgNVBAUTKDEzOEY5QThDRjIwN0RBMDA4QjQwMUM2REU4RDkxMzEw RkUyNUVBNEMwHhcNMjUxMjE4MjIzNTIxWhcNMjUxMjI1MjIzNTIxWjAYMRYwFAYD VQQDDA02OTQ0ODFhOS01ZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWHfsgZn0jq6tXKxMs6WszuF+EVOIqjtfImJw/c0rESnrUA6ruv2nkPEaCXW 5YNlKALYIw624ehseZR75vX+YodD5PE0ZBE+lCqrbF8DeVmtM3LoP3GwMLIVsmjw gEsc8vNiAo9IpYxDvBNmHHEvVao3CgoZOHnm4tYEFJCJxjqmN27mR2iJttNtcxbR 1eKUNg1+48V7JVnJT+c1pBZBx9XmANZ6d5tP3Zdp/4isMcjeRQL7P4CCmpL36BDO 7pLNrkOX6Frb4cOHePWEl74wXZLr8NGR/jU4TXJ2pqqdz6FxBAD3w9iL4lflq3aX qa5E92Ct/QXSWQAOborN0/ujzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKMCQft /feZDVyZtdqorJKLBQW6MB8GA1UdIwQYMBaAFBOPmozyB9oAi0AcbejZExD+JepM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCNS8yMzlEMkE0MkZG RjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJnQ0xRQnh0Nk5rVEVQNGw2 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0LWFqUElIMmdDTFFCeHQ2TmtURVA0bDZrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCNS8yMzlEMkE0MkZGRjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJn Q0xRQnh0Nk5rVEVQNGw2a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMGuYvXTFFjHWhOApeCK2YlDK6SSJX7Q25ZLo8EIu52iDjRSt990E5 uHp8qLrjr3bw0tHuyK6a4kIhFY04UpuQK+Yeml6gEl3bCM7uE4W8BdXpZL9yC8dl bOyqYiaO2YGa5WCQb/X7T1/fHF9zR3Y6pNA3ZN7drP41jYB3WlESGpnqmx+/0Tj2 ZRG8BwlDTNeR0iRtvQf/q6deZqBe5TCV4eAXTCV1dkk2MfxNV5FPRcWQcj1uGn+n VyeBhglNP4rC5yt55a/uKKw0w7bscSzx8Y5kYE4q+XNoJQmCpgyjNt3oJPpk6nAg bKsHe38YAreAwrUYzAMYEV098ZmhDqBJ -----END CERTIFICATE-----Generated at Fri Dec 19 20:25:33 2025 by rpki-client