This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C7E1/439170E6DB3811F0A74194838DD3641D/5CljsoJaEksoEaVP3nfMc3g2n34.mft File: 5CljsoJaEksoEaVP3nfMc3g2n34.mft (raw, json) Hash identifier: iKPLB++2pkMjxLb3FPGDQCnPs3rioA3nkb7Qt+gIhp0= Subject key identifier: EE:C1:C8:24:5F:1F:93:03:F9:4A:E3:17:B0:15:2E:92:FD:18:94:BC Authority key identifier: E4:29:63:B2:82:5A:12:4B:28:11:A5:4F:DE:77:CC:73:78:36:9F:7E Certificate issuer: /CN=A915C7E1/serialNumber=E42963B2825A124B2811A54FDE77CC7378369F7E Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CljsoJaEksoEaVP3nfMc3g2n34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C7E1/439170E6DB3811F0A74194838DD3641D/5CljsoJaEksoEaVP3nfMc3g2n34.mft Manifest number: 03 Signing time: Fri 19 Dec 2025 07:03:26 +0000 Manifest this update: Fri 19 Dec 2025 07:03:26 +0000 Manifest next update: Fri 26 Dec 2025 07:03:26 +0000 Files and hashes: 1: 5CljsoJaEksoEaVP3nfMc3g2n34.crl (hash: L1qProG9iIjouBjzRFr4kf0Adm8GpuCqIJq9ABiE58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C7E1/439170E6DB3811F0A74194838DD3641D/5CljsoJaEksoEaVP3nfMc3g2n34.crl rsync://rpki.apnic.net/member_repository/A915C7E1/439170E6DB3811F0A74194838DD3641D/5CljsoJaEksoEaVP3nfMc3g2n34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CljsoJaEksoEaVP3nfMc3g2n34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C7E1, serialNumber=E42963B2825A124B2811A54FDE77CC7378369F7E Validity Not Before: Dec 19 07:03:26 2025 GMT Not After : Dec 26 07:03:26 2025 GMT Subject: CN=6944f8be-43fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:33:48:a3:46:47:ae:31:d9:30:f3:2a:81: 05:eb:88:41:36:e7:d5:e6:4c:1b:29:e5:32:59:d7: f8:ac:6e:21:4e:16:10:bc:d4:48:17:d4:5c:5c:2e: c1:71:6d:2c:36:c5:07:1a:b3:fb:41:22:81:5a:9d: e8:06:b2:6e:65:1d:88:c6:09:86:45:e5:19:c7:ad: 47:39:eb:c0:93:0e:c2:5f:b6:9b:ae:0f:bc:c5:c9: c1:e2:09:66:21:53:6e:72:be:2b:4f:d4:fb:0c:df: f8:92:48:69:ec:6e:4d:b8:3e:96:8b:17:72:ee:36: 78:0e:5b:f2:1b:50:17:3a:75:1a:7a:69:4a:1e:3b: 3c:ff:c2:df:71:f1:c8:57:ec:c8:80:65:88:8b:71: e8:32:9e:4e:f2:e4:a5:d8:20:be:2b:57:f3:f2:b7: 50:cd:f2:e8:14:f8:f7:4a:02:0b:d1:f5:9a:2e:ec: 39:48:09:84:39:b4:c2:66:15:b0:c3:46:aa:01:55: b4:e3:16:dd:6b:22:8c:19:05:ef:c9:4c:9f:f4:08: 9a:ac:38:38:32:82:38:bf:4e:eb:a1:f9:76:51:08: b9:54:c8:bf:2e:36:c5:ad:bf:d7:2d:f9:47:c7:86: c1:38:a7:d9:b1:9a:59:07:dd:96:f0:83:a0:c8:86: ba:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C1:C8:24:5F:1F:93:03:F9:4A:E3:17:B0:15:2E:92:FD:18:94:BC X509v3 Authority Key Identifier: keyid:E4:29:63:B2:82:5A:12:4B:28:11:A5:4F:DE:77:CC:73:78:36:9F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C7E1/439170E6DB3811F0A74194838DD3641D/5CljsoJaEksoEaVP3nfMc3g2n34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CljsoJaEksoEaVP3nfMc3g2n34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C7E1/439170E6DB3811F0A74194838DD3641D/5CljsoJaEksoEaVP3nfMc3g2n34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:98:b9:cb:fe:a8:af:b4:1d:c9:c8:55:a6:ec:f5:9f:17:2a: 19:e6:88:a2:7a:55:18:79:88:0b:80:e8:26:56:a5:b8:a8:b5: ab:a8:d7:03:ab:58:c4:1d:9b:26:52:7f:db:41:fe:17:e7:64: e6:7d:fd:56:aa:5c:87:d4:9b:ab:88:61:0a:ff:0f:cf:69:36: b2:9a:d3:04:02:85:d4:45:2a:a8:24:06:6f:e6:5e:d4:6d:b0: 8e:79:d0:ac:37:20:45:38:5c:9e:83:51:8c:d6:fc:1c:cb:33: ff:d4:03:e5:04:79:52:d9:bb:b6:51:ef:8f:9e:bc:cf:1f:40: 57:3d:70:d7:67:34:13:ac:93:44:28:39:3f:7b:21:f5:2c:36: 08:0d:79:af:97:f4:72:14:3c:4b:bd:48:96:ba:99:ca:b1:00: 98:ec:06:a7:47:67:f8:c9:50:d6:e2:3a:8c:c8:52:5f:19:80: 0d:69:e0:96:77:8f:2e:60:6c:cd:e1:15:87:a6:15:97:c8:d6: 8d:bc:49:b4:2b:ea:04:b5:7b:24:7f:d0:30:b3:8f:9b:55:94: 95:43:49:25:77:ab:45:2f:75:04:a7:df:c7:e2:b1:13:44:39: 24:02:75:13:7c:28:d7:ad:43:c1:be:db:55:98:7a:40:8f:b5: c6:30:90:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QzdFMTExMC8GA1UEBRMoRTQyOTYzQjI4MjVBMTI0QjI4MTFBNTRGREU3N0NDNzM3 ODM2OUY3RTAeFw0yNTEyMTkwNzAzMjZaFw0yNTEyMjYwNzAzMjZaMBgxFjAUBgNV BAMMDTY5NDRmOGJlLTQzZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqfjNIo0ZHrjHZMPMqgQXriEE259XmTBsp5TJZ1/isbiFOFhC81EgX1FxcLsFx bSw2xQcas/tBIoFanegGsm5lHYjGCYZF5RnHrUc568CTDsJftpuuD7zFycHiCWYh U25yvitP1PsM3/iSSGnsbk24PpaLF3LuNngOW/IbUBc6dRp6aUoeOzz/wt9x8chX 7MiAZYiLcegynk7y5KXYIL4rV/Pyt1DN8ugU+PdKAgvR9Zou7DlICYQ5tMJmFbDD RqoBVbTjFt1rIowZBe/JTJ/0CJqsODgygji/Tuuh+XZRCLlUyL8uNsWtv9ct+UfH hsE4p9mxmlkH3Zbwg6DIhrpzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7sHIJF8f kwP5SuMXsBUukv0YlLwwHwYDVR0jBBgwFoAU5CljsoJaEksoEaVP3nfMc3g2n34w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDN0UxLzQzOTE3MEU2REIz ODExRjBBNzQxOTQ4MzhERDM2NDFELzVDbGpzb0phRWtzb0VhVlAzbmZNYzNnMm4z NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUNsanNvSmFFa3NvRWFWUDNuZk1jM2cybjM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD N0UxLzQzOTE3MEU2REIzODExRjBBNzQxOTQ4MzhERDM2NDFELzVDbGpzb0phRWtz b0VhVlAzbmZNYzNnMm4zNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ2Yucv+qK+0HcnIVabs9Z8XKhnmiKJ6VRh5iAuA6CZWpbiotauo1wOr WMQdmyZSf9tB/hfnZOZ9/VaqXIfUm6uIYQr/D89pNrKa0wQChdRFKqgkBm/mXtRt sI550Kw3IEU4XJ6DUYzW/BzLM//UA+UEeVLZu7ZR74+evM8fQFc9cNdnNBOsk0Qo OT97IfUsNggNea+X9HIUPEu9SJa6mcqxAJjsBqdHZ/jJUNbiOozIUl8ZgA1p4JZ3 jy5gbM3hFYemFZfI1o28SbQr6gS1eyR/0DCzj5tVlJVDSSV3q0UvdQSn38fisRNE OSQCdRN8KNetQ8G+21WYekCPtcYwkCg= -----END CERTIFICATE-----Generated at Fri Dec 19 18:45:46 2025 by rpki-client