This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json) Hash identifier: ex6xH7HuvG9wHKjV/gHsrM/xh4xwgJsWk7gPpDRMFPI= Subject key identifier: 09:54:68:10:13:70:C3:0B:50:2F:D9:06:D1:D0:2A:4A:F3:52:6C:78 Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft Manifest number: 0156 Signing time: Fri 19 Dec 2025 03:20:07 +0000 Manifest this update: Fri 19 Dec 2025 03:20:07 +0000 Manifest next update: Fri 26 Dec 2025 03:20:07 +0000 Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: vjdev7PCvxX/7pKygfPK63lipOTz2gIoGJmzDgm6+8Y=) 2: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: ONnLvdYQIbTLtbVrwQpfNQIQVF7OagH6RPbHX1a91NY=) 3: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: dRNilESPTQz/Q5N/cLbpDlE/USFMgoC4F5PCG8xDhno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Validity Not Before: Dec 19 03:20:07 2025 GMT Not After : Dec 26 03:20:07 2025 GMT Subject: CN=6944c467-64d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:7d:9e:be:9c:35:52:89:b8:73:bf:23:16: db:d0:6a:bc:6c:31:91:d7:ac:cb:68:81:1a:eb:37: 50:df:bd:11:49:60:53:88:68:ee:6c:1c:57:e8:ec: 90:da:03:b1:3c:72:06:d8:b5:c2:50:ab:c2:f4:79: 01:ea:c3:2c:2a:8b:bd:83:a8:74:00:50:61:0b:8f: 20:32:a3:35:54:0c:63:ca:bf:fe:ab:4a:73:d9:45: f4:f5:98:df:53:01:5f:2b:f7:55:49:9e:59:29:93: 9d:2c:93:3a:15:c2:76:b4:bf:f1:6e:2d:35:d8:76: ee:26:60:f6:95:75:de:99:e1:af:a5:a5:38:37:81: 19:74:14:da:b7:89:31:e3:f5:a3:da:fa:15:98:46: 54:d4:0f:56:37:b3:29:1c:91:50:4d:f7:70:7e:86: 38:7f:1a:58:ae:e6:29:0c:0a:05:64:39:04:ba:4b: f5:c0:a2:68:34:f7:7c:44:07:f3:18:c2:fb:eb:c7: d8:b7:e3:ba:6d:15:35:d6:5b:3c:29:a5:2a:24:8e: 12:eb:3b:06:f6:32:07:0b:86:0f:67:7d:1d:ad:87: a1:9b:f9:ea:a8:21:44:ee:d1:77:67:90:db:a3:8e: 5a:c4:af:07:ce:c5:85:75:dc:cf:da:aa:70:22:9a: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:54:68:10:13:70:C3:0B:50:2F:D9:06:D1:D0:2A:4A:F3:52:6C:78 X509v3 Authority Key Identifier: keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:33:e4:22:31:f7:8a:cf:aa:3f:58:eb:51:a4:da:4f:68:9c: 5b:33:e3:4a:58:6a:60:14:07:9c:8f:7c:2d:0a:dc:b8:17:54: 39:e4:5a:7f:30:13:98:b1:58:82:04:5d:0a:82:68:f2:2e:9f: 57:59:93:db:fe:09:e2:20:4e:20:18:fe:c0:7f:d8:46:57:e6: 12:98:0f:a5:d8:7b:19:4d:8f:9b:87:85:5b:ae:cb:ff:cb:5e: 2f:19:da:c3:a3:32:68:82:52:8b:0d:b9:cc:7d:5b:1b:3f:f1: 0b:91:28:01:5a:29:a9:84:48:79:f6:31:64:41:ac:12:bb:75: e3:46:1a:c7:93:2c:03:13:9e:94:71:7a:b9:92:d2:cd:89:f1: c6:cb:bc:56:71:5e:e3:e3:0b:e3:e3:4a:35:5d:1a:20:28:b9: 7e:26:e4:6f:22:fb:89:0d:6a:99:77:b8:97:61:49:ff:94:8d: 5c:8b:94:ac:c3:7f:a7:b1:be:b0:5e:dd:3b:5d:59:4c:de:ec: 75:d1:1c:88:51:8d:b4:a3:01:cc:ac:ae:02:ed:78:22:a7:a6: 9e:2b:28:4d:3f:63:9e:30:53:dd:81:43:52:a2:2e:3f:22:e5: 37:1c:39:28:60:bb:6a:7e:35:2b:9e:49:6c:06:28:55:e6:b2: df:7b:3e:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0OTAxMTAvBgNVBAUTKDEzNzM1M0QwRThDMTQ1QTU4MENCMDBCQzMyMjIwODlD NDA0OEFFNTEwHhcNMjUxMjE5MDMyMDA3WhcNMjUxMjI2MDMyMDA3WjAYMRYwFAYD VQQDDA02OTQ0YzQ2Ny02NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcZ9nr6cNVKJuHO/Ixbb0Gq8bDGR16zLaIEa6zdQ370RSWBTiGjubBxX6OyQ 2gOxPHIG2LXCUKvC9HkB6sMsKou9g6h0AFBhC48gMqM1VAxjyr/+q0pz2UX09Zjf UwFfK/dVSZ5ZKZOdLJM6FcJ2tL/xbi012HbuJmD2lXXemeGvpaU4N4EZdBTat4kx 4/Wj2voVmEZU1A9WN7MpHJFQTfdwfoY4fxpYruYpDAoFZDkEukv1wKJoNPd8RAfz GML768fYt+O6bRU11ls8KaUqJI4S6zsG9jIHC4YPZ30drYehm/nqqCFE7tF3Z5Db o45axK8HzsWFddzP2qpwIppeBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlUaBAT cMMLUC/ZBtHQKkrzUmx4MB8GA1UdIwQYMBaAFBNzU9DowUWlgMsAvDIiCJxASK5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC85OTE5OEYxMkQw NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJhV0F5d0M4TWlJSW5FQkly bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC85OTE5OEYxMkQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJh V0F5d0M4TWlJSW5FQklybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOM+QiMfeKz6o/WOtRpNpPaJxbM+NKWGpgFAecj3wtCty4F1Q55Fp/ MBOYsViCBF0KgmjyLp9XWZPb/gniIE4gGP7Af9hGV+YSmA+l2HsZTY+bh4Vbrsv/ y14vGdrDozJoglKLDbnMfVsbP/ELkSgBWimphEh59jFkQawSu3XjRhrHkywDE56U cXq5ktLNifHGy7xWcV7j4wvj40o1XRogKLl+JuRvIvuJDWqZd7iXYUn/lI1ci5Ss w3+nsb6wXt07XVlM3ux10RyIUY20owHMrK4C7Xgip6aeKyhNP2OeMFPdgUNSoi4/ IuU3HDkoYLtqfjUrnklsBihV5rLfez4X -----END CERTIFICATE-----Generated at Sun Dec 21 00:31:04 2025 by rpki-client