This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft File: E5zB22udJLk7FJKKdRjQTrOyajo.mft (raw, json) Hash identifier: Lr3N7v4+DpjCCD33ZL4YWDUy1LTNqTbKhCtnstBXAsc= Subject key identifier: DC:77:47:ED:1D:9A:A2:B5:E1:ED:06:C5:89:F0:FB:E9:09:B7:EA:1A Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A Certificate issuer: /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A Certificate serial: 2272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft Manifest number: 2236 Signing time: Sat 20 Dec 2025 15:43:30 +0000 Manifest this update: Sat 20 Dec 2025 15:43:30 +0000 Manifest next update: Sat 27 Dec 2025 15:43:30 +0000 Files and hashes: 1: E5zB22udJLk7FJKKdRjQTrOyajo.crl (hash: ojxBNPG9fEyLudRTi/UCyZt9rwEe8Oqv65KEBa5f+30=) 2: A20F01CCE1E511EEA0477018C4F9AE02.roa (hash: XEA5HBhsYH3LIGpBqjlOM3tEelRDYUoKK//5he1LRJg=) 3: 5AE16D9A386F11EFABF4E132C4F9AE02.roa (hash: 9Ncc5eO7lsxHhsxCWRYMxRGSAkh2VnH6ZKESuNAQzvA=) 4: C4F05AA6144911EF85E2DC26C4F9AE02.roa (hash: j3DVuY32luQDVa/vF1hOJNJXMyj5FRS3jyl06+nliBE=) 5: FF59EC70144911EFA2053B27C4F9AE02.roa (hash: 87Wd3ufHux4x6En79V3HJ0yy+yl6nx7Qh9e0Kc4SLtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8818 (0x2272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DAF2, serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A Validity Not Before: Dec 20 15:43:30 2025 GMT Not After : Dec 27 15:43:30 2025 GMT Subject: CN=6946c422-f39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6f:d9:ab:2b:71:7a:c8:87:0a:b4:ce:08:7d: 37:37:6e:15:db:8b:50:cd:a4:8c:d9:f9:1e:9c:6a: 1e:8a:ec:8d:e1:56:fa:e3:d3:b5:62:9f:04:41:31: fd:f1:f9:4d:b8:aa:9e:8c:7d:ce:3f:32:69:de:77: 8e:f4:1e:b5:fb:4d:15:a1:f0:e0:c5:d6:83:b5:6b: 84:c9:9a:a0:27:47:dd:3b:f7:06:61:70:09:30:64: 75:74:d5:b2:91:bb:98:b9:0c:17:1c:1a:35:0b:ca: a9:ab:6c:33:2b:b7:10:55:a1:6a:89:17:22:d7:f8: cb:8c:18:8c:a4:b5:0c:91:42:1a:55:fa:7b:45:76: be:24:c9:8c:15:ae:42:52:ff:46:3b:01:d1:f3:c8: 68:71:b4:5c:0b:a6:f7:9d:f2:d6:45:b5:7a:51:b6: c4:2e:47:f0:86:e0:fa:7a:ca:cd:7a:43:7b:d0:63: ac:2c:86:2a:14:b1:ac:40:a7:82:c7:07:26:4a:f0: 97:30:c3:22:8e:e9:c3:af:c5:9d:37:90:19:81:66: 5b:6a:75:ee:01:97:c4:df:87:e2:a5:b7:a0:13:f5: 6b:10:87:ff:cb:42:f6:0a:60:44:d9:4f:26:6f:ab: 99:9f:39:ea:13:f2:61:93:02:f6:b2:ec:cd:74:ff: b6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:77:47:ED:1D:9A:A2:B5:E1:ED:06:C5:89:F0:FB:E9:09:B7:EA:1A X509v3 Authority Key Identifier: keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:12:60:05:fd:d3:5b:6d:2b:47:3a:fb:9b:70:b8:08:88:05: 61:fc:9f:25:f8:79:f5:1c:83:e3:c9:97:14:62:ad:f2:9e:ca: 28:24:7f:05:55:36:3f:12:e9:6c:96:fa:0a:b5:88:56:49:c2: 99:6c:c5:89:23:37:43:b7:fe:a9:17:71:db:7b:5e:aa:07:33: 2b:dc:bb:a4:a0:35:5d:db:9a:4d:6b:86:27:ad:55:bb:a9:19: a3:d1:86:3e:3f:39:4e:4f:be:3e:47:05:2b:cd:ea:e3:f1:3a: 69:4f:62:a7:35:fc:99:fa:11:bf:d6:85:67:8d:02:10:06:2e: 10:08:51:b0:d4:99:a0:9d:90:37:0f:23:f9:2d:3f:13:96:b6: 2a:05:8a:2e:5c:f8:0c:a4:5c:9c:52:68:32:bd:d7:c1:e1:82: d0:02:3b:d4:f9:f5:8a:56:81:9e:dc:77:98:1e:53:a5:a8:c4: 44:fc:3f:34:41:b1:68:8f:0c:63:46:67:91:3f:99:fa:72:65: fb:18:6e:ad:fb:fb:19:43:1a:80:b2:bb:69:c9:f6:76:3b:de: 33:cc:d5:fc:02:2b:34:8b:e0:63:87:3f:7d:e1:2f:9d:e2:dc: e9:6b:22:34:da:c1:aa:12:43:b5:c3:d0:f0:80:2e:01:e1:84: d5:21:37:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICInIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBRjIxMTAvBgNVBAUTKDEzOUNDMURCNkI5RDI0QjkzQjE0OTI4QTc1MThEMDRF QjNCMjZBM0EwHhcNMjUxMjIwMTU0MzMwWhcNMjUxMjI3MTU0MzMwWjAYMRYwFAYD VQQDDA02OTQ2YzQyMi1mMzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5m/ZqytxesiHCrTOCH03N24V24tQzaSM2fkenGoeiuyN4Vb649O1Yp8EQTH9 8flNuKqejH3OPzJp3neO9B61+00VofDgxdaDtWuEyZqgJ0fdO/cGYXAJMGR1dNWy kbuYuQwXHBo1C8qpq2wzK7cQVaFqiRci1/jLjBiMpLUMkUIaVfp7RXa+JMmMFa5C Uv9GOwHR88hocbRcC6b3nfLWRbV6UbbELkfwhuD6esrNekN70GOsLIYqFLGsQKeC xwcmSvCXMMMijunDr8WdN5AZgWZbanXuAZfE34fipbegE/VrEIf/y0L2CmBE2U8m b6uZnznqE/JhkwL2suzNdP+23QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNx3R+0d mqK14e0GxYnw++kJt+oaMB8GA1UdIwQYMBaAFBOcwdtrnSS5OxSSinUY0E6zsmo6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REFGMi8yNkVDNkREQUQz REExMUU1OEM1Q0Q0MEZDNEY5QUUwMi9FNXpCMjJ1ZEpMazdGSktLZFJqUVRyT3lh am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U1ekIyMnVkSkxrN0ZKS0tkUmpRVHJPeWFqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REFGMi8yNkVDNkREQUQzREExMUU1OEM1Q0Q0MEZDNEY5QUUwMi9FNXpCMjJ1ZEpM azdGSktLZFJqUVRyT3lham8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNEmAF/dNbbStHOvubcLgIiAVh/J8l+Hn1HIPjyZcUYq3ynsooJH8F VTY/EulslvoKtYhWScKZbMWJIzdDt/6pF3Hbe16qBzMr3LukoDVd25pNa4YnrVW7 qRmj0YY+PzlOT74+RwUrzerj8TppT2KnNfyZ+hG/1oVnjQIQBi4QCFGw1JmgnZA3 DyP5LT8TlrYqBYouXPgMpFycUmgyvdfB4YLQAjvU+fWKVoGe3HeYHlOlqMRE/D80 QbFojwxjRmeRP5n6cmX7GG6t+/sZQxqAsrtpyfZ2O94zzNX8Ais0i+Bjhz994S+d 4tzpayI02sGqEkO1w9DwgC4B4YTVITfe -----END CERTIFICATE-----Generated at Sun Dec 21 08:18:25 2025 by rpki-client