This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json) Hash identifier: zSxMh4a57Pk6fEtd3vCeWypEl4XK1t2STHhwbznkMlM= Subject key identifier: F2:1B:E9:C5:B4:65:3E:2D:CD:47:C5:09:2F:3E:92:E4:43:AA:3B:58 Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft Manifest number: 01B2 Signing time: Fri 19 Dec 2025 02:23:08 +0000 Manifest this update: Fri 19 Dec 2025 02:23:07 +0000 Manifest next update: Fri 26 Dec 2025 02:23:07 +0000 Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: dwxgpVg0Oei9EUFxHm6yqmGN0Kjw3+Yf+eAhz14vIwE=) 2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: XSFRkZJmP/HXNKWByOtON4ixbfaAh9u2jDNWWqtCP4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Validity Not Before: Dec 19 02:23:07 2025 GMT Not After : Dec 26 02:23:07 2025 GMT Subject: CN=6944b70b-2296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d1:e0:b2:6c:6d:76:43:e0:2d:f8:86:56:5b: 4d:4c:3c:a2:d2:a8:08:4c:5f:da:50:88:78:02:26: 0f:a9:f7:02:88:80:a7:d4:0d:b0:e4:fd:6c:2e:ef: fe:60:52:0b:03:bc:97:d6:c5:c0:8f:23:d5:b5:de: 3a:79:16:5e:e5:5b:0d:11:9f:d7:3c:ca:02:4b:4a: 5f:40:ff:7d:cd:d4:31:12:97:b8:4f:3d:64:bd:e5: 1c:52:11:ab:9b:69:ce:91:2e:4e:c0:23:3e:bd:f4: 83:47:61:9b:8b:da:5f:03:15:36:b9:8f:a7:4e:94: 8d:9f:7e:f6:20:17:e5:78:4f:e9:47:8c:fd:c5:eb: 3d:45:87:ec:f7:07:36:c8:07:a2:6f:d2:e1:23:13: d7:e8:f5:b9:61:e0:32:21:19:92:79:41:ea:5d:f1: 4b:9f:1a:ff:bd:d1:21:85:d3:9c:b5:f1:84:ad:09: 35:e5:06:33:83:30:78:66:0b:bc:5e:78:a2:eb:77: 9a:11:e0:b1:2d:d0:bc:2f:54:be:54:66:2f:d1:fd: 6b:04:d6:e0:f6:e9:dd:bf:6a:63:ea:50:7d:ac:dd: 6a:53:c4:59:ed:60:68:42:92:aa:55:ee:f1:34:d5: 89:75:f4:f6:f6:0c:4a:f8:39:d7:05:22:25:86:d6: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1B:E9:C5:B4:65:3E:2D:CD:47:C5:09:2F:3E:92:E4:43:AA:3B:58 X509v3 Authority Key Identifier: keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:05:27:3e:dc:e1:04:1c:ec:35:a0:1d:cf:79:8b:35:8a:74: b9:69:75:05:39:ed:68:57:8d:fa:de:cd:a9:df:75:f2:c2:6d: d3:e5:e0:39:b8:fa:c3:81:df:bf:89:25:85:64:b7:f5:46:1c: 24:92:2a:b0:a6:7d:d1:7a:72:cc:8b:1d:6d:ee:22:80:b8:4a: 89:68:90:11:53:b9:34:b8:15:55:86:9d:d7:bc:23:6c:ad:26: 27:0f:6e:22:f0:fa:00:2b:4d:8b:9f:8c:71:98:b0:00:e9:c1: d8:58:04:d9:89:2f:93:fb:6a:80:04:17:da:b2:f2:41:a4:b2: 8c:a2:b8:20:fd:25:fe:e7:4a:37:ea:4f:e3:5f:a4:5c:52:98: a8:15:29:00:b8:ee:71:88:e7:17:15:69:cb:09:f1:5a:7f:32: 92:00:84:f9:1b:22:20:3b:9d:19:d8:89:97:79:97:ba:cb:96: b5:b9:e5:c6:0d:20:9a:89:f2:aa:b3:49:98:2b:29:a9:57:f5: d7:f3:73:33:40:41:7b:c3:24:c3:7f:ed:fe:86:7e:35:f9:36: 30:09:f8:dd:fb:3c:58:8c:e5:7a:f3:02:3b:fb:4f:11:94:f9: 75:e0:68:36:2f:46:00:85:9c:1c:3f:bb:5b:e4:78:3e:19:a7: 28:99:c2:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY2RTQxMTAvBgNVBAUTKDg4NEI2MTI5QThEQTk4Mjk2NzE0QzUzQTVBMTI4MEZE MTAxOUY4QTMwHhcNMjUxMjE5MDIyMzA3WhcNMjUxMjI2MDIyMzA3WjAYMRYwFAYD VQQDDA02OTQ0YjcwYi0yMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkNHgsmxtdkPgLfiGVltNTDyi0qgITF/aUIh4AiYPqfcCiICn1A2w5P1sLu/+ YFILA7yX1sXAjyPVtd46eRZe5VsNEZ/XPMoCS0pfQP99zdQxEpe4Tz1kveUcUhGr m2nOkS5OwCM+vfSDR2Gbi9pfAxU2uY+nTpSNn372IBfleE/pR4z9xes9RYfs9wc2 yAeib9LhIxPX6PW5YeAyIRmSeUHqXfFLnxr/vdEhhdOctfGErQk15QYzgzB4Zgu8 Xnii63eaEeCxLdC8L1S+VGYv0f1rBNbg9undv2pj6lB9rN1qU8RZ7WBoQpKqVe7x NNWJdfT29gxK+DnXBSIlhtZP6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIb6cW0 ZT4tzUfFCS8+kuRDqjtYMB8GA1UdIwQYMBaAFIhLYSmo2pgpZxTFOloSgP0QGfij MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjZFNC9DQTgxRDlGRTRF MTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1DbG5GTVU2V2hLQV9SQVot S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFdGhLYWphbUNsbkZNVTZXaEtBX1JBWi1LTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjZFNC9DQTgxRDlGRTRFMTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1D bG5GTVU2V2hLQV9SQVotS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhBSc+3OEEHOw1oB3PeYs1inS5aXUFOe1oV4363s2p33Xywm3T5eA5 uPrDgd+/iSWFZLf1Rhwkkiqwpn3RenLMix1t7iKAuEqJaJARU7k0uBVVhp3XvCNs rSYnD24i8PoAK02Ln4xxmLAA6cHYWATZiS+T+2qABBfasvJBpLKMorgg/SX+50o3 6k/jX6RcUpioFSkAuO5xiOcXFWnLCfFafzKSAIT5GyIgO50Z2ImXeZe6y5a1ueXG DSCaifKqs0mYKympV/XX83MzQEF7wyTDf+3+hn41+TYwCfjd+zxYjOV68wI7+08R lPl14Gg2L0YAhZwcP7tb5Hg+GacomcKU -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:03 2025 by rpki-client