This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft File: Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json) Hash identifier: n+MCKYHaJQ4yMh07Wod3jsKkuLDTPoscC9iZGIgyjHw= Subject key identifier: A5:0D:3C:AC:0A:B6:E7:01:99:A4:0B:E3:81:3A:4C:A2:7B:C9:0E:AD Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft Manifest number: 0781 Signing time: Sun 28 Dec 2025 20:53:40 +0000 Manifest this update: Sun 28 Dec 2025 20:53:39 +0000 Manifest next update: Sun 04 Jan 2026 20:53:39 +0000 Files and hashes: 1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: HZQvGpL8o39ckeQF+m0PmuOG9ulh2OePNDozFyVzJr4=) 2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: +6eYgOq04WhTg3h8FMeOxvxeZ5FD+RCHy2rKYTsWlYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 20:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Validity Not Before: Dec 28 20:53:39 2025 GMT Not After : Jan 4 20:53:39 2026 GMT Subject: CN=695198d4-15be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5c:bf:a0:2e:b9:9b:81:10:c3:e8:98:80:13: f1:04:20:0b:1c:7b:5f:ff:67:93:dc:63:3e:7a:1b: 49:62:42:44:b3:30:e7:ff:74:2b:ce:05:3d:3a:84: 65:f2:45:5b:1d:05:13:65:3d:0c:4a:76:5b:98:4d: 3c:f9:30:fc:d4:bc:af:f1:0f:cd:95:09:85:45:3c: dc:3b:c8:d3:2a:16:4e:84:7c:a4:4b:4f:43:23:67: a5:2a:bc:d4:8c:57:39:1a:61:2e:8e:c6:ac:20:f0: 22:a9:0f:33:06:6f:ce:52:55:e0:3d:29:04:25:5d: c0:53:17:58:1d:dc:c0:5b:db:46:5a:45:b2:9d:ee: bd:90:e6:28:f7:ae:ee:ee:09:77:86:aa:5a:ad:20: 03:22:78:e6:75:91:ce:63:30:ff:08:a5:80:e5:76: c5:59:6f:91:aa:89:f2:8e:d7:57:2c:3e:6f:33:51: 19:df:de:85:69:82:f7:ca:35:51:4b:41:3e:83:27: 9b:19:e8:48:06:0c:3d:81:0b:0c:07:5a:d7:3d:5c: 9a:68:e9:b2:86:e5:c3:ed:ec:39:94:57:48:f5:b0: 70:78:26:75:3d:ca:8e:77:ca:25:ee:77:36:d5:f5: 42:cb:87:a9:ad:5f:d8:41:eb:c3:85:ac:9b:e6:eb: 9f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0D:3C:AC:0A:B6:E7:01:99:A4:0B:E3:81:3A:4C:A2:7B:C9:0E:AD X509v3 Authority Key Identifier: keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ff:f7:b2:c5:72:13:29:eb:ee:df:6b:bc:0c:3d:c8:77:d5: 7b:ed:98:51:18:a9:1b:af:12:8b:bb:8d:f9:2d:1e:bc:48:c5: ae:c2:6a:7c:8b:e4:27:c0:fe:8d:0b:58:1d:cf:16:ec:16:c2: b3:05:10:21:40:7f:28:04:c0:7d:46:03:bf:7a:48:92:72:60: 54:de:3d:ff:ee:9a:5c:41:5c:7f:d3:80:44:17:a1:9f:c0:39: f3:3a:3e:11:f3:a7:2b:09:87:62:5a:79:92:ff:a8:20:d9:72: 76:f8:85:d3:42:79:3f:e4:ac:82:0c:10:86:93:99:09:fb:b3: ba:cc:33:6a:2d:f6:6f:bc:23:cf:9c:9d:8e:e5:bc:f2:35:c0: fd:20:79:56:dc:96:ae:a0:2e:eb:0d:d7:8f:83:df:3b:e2:52: a8:91:bd:18:bf:a6:47:5b:9d:31:13:02:a8:28:5d:b6:d9:48: 78:6e:04:d2:a7:66:b8:38:a1:b3:8e:35:f8:49:24:01:69:b0: c4:2c:3e:b8:19:ef:9e:82:c1:13:ae:e5:c0:9b:89:a9:9f:d9: 6a:f2:27:dd:d5:1c:53:58:72:6c:cc:db:9e:9f:6e:d1:94:9b: 51:2c:fd:cf:f6:98:39:87:bb:a9:81:b7:ea:f8:96:a1:5d:7c: 9b:6b:e4:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM4M0ExMTAvBgNVBAUTKDIxRTkzNTlERTk2MDdBNzhDQ0QzNTkwRTBCNDQ5Q0I1 MkIxN0I2QkIwHhcNMjUxMjI4MjA1MzM5WhcNMjYwMTA0MjA1MzM5WjAYMRYwFAYD VQQDDA02OTUxOThkNC0xNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21y/oC65m4EQw+iYgBPxBCALHHtf/2eT3GM+ehtJYkJEszDn/3QrzgU9OoRl 8kVbHQUTZT0MSnZbmE08+TD81Lyv8Q/NlQmFRTzcO8jTKhZOhHykS09DI2elKrzU jFc5GmEujsasIPAiqQ8zBm/OUlXgPSkEJV3AUxdYHdzAW9tGWkWyne69kOYo967u 7gl3hqparSADInjmdZHOYzD/CKWA5XbFWW+RqonyjtdXLD5vM1EZ396FaYL3yjVR S0E+gyebGehIBgw9gQsMB1rXPVyaaOmyhuXD7ew5lFdI9bBweCZ1PcqOd8ol7nc2 1fVCy4eprV/YQevDhayb5uufpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUNPKwK tucBmaQL44E6TKJ7yQ6tMB8GA1UdIwQYMBaAFCHpNZ3pYHp4zNNZDgtEnLUrF7a7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzgzQS80NzE3MENEODNE RUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vuak0wMWtPQzBTY3RTc1h0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0llazFuZWxnZW5qTTAxa09DMFNjdFNzWHRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzgzQS80NzE3MENEODNERUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vu ak0wMWtPQzBTY3RTc1h0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY//eyxXITKevu32u8DD3Id9V77ZhRGKkbrxKLu435LR68SMWuwmp8 i+QnwP6NC1gdzxbsFsKzBRAhQH8oBMB9RgO/ekiScmBU3j3/7ppcQVx/04BEF6Gf wDnzOj4R86crCYdiWnmS/6gg2XJ2+IXTQnk/5KyCDBCGk5kJ+7O6zDNqLfZvvCPP nJ2O5bzyNcD9IHlW3JauoC7rDdePg9874lKokb0Yv6ZHW50xEwKoKF222Uh4bgTS p2a4OKGzjjX4SSQBabDELD64Ge+egsETruXAm4mpn9lq8ifd1RxTWHJszNuen27R lJtRLP3P9pg5h7upgbfq+JahXXyba+Qw -----END CERTIFICATE-----Generated at Mon Dec 29 02:53:35 2025 by rpki-client