This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: o8eIVTGBK4Mbjy133dYaouMmZ62rCwAN+ynBhK4t4aU= Subject key identifier: 2A:19:27:DD:67:DC:DA:AE:3A:EC:6B:B9:C1:4A:59:68:FF:7E:26:C3 Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 2573 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 2573 Signing time: Wed 31 Dec 2025 14:45:00 +0000 Manifest this update: Wed 31 Dec 2025 14:45:00 +0000 Manifest next update: Wed 07 Jan 2026 14:45:00 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: YKgrFZjqEcvm0YdRBuoIsFKetjWh8+ToRFyvVOoCrUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 14:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9587 (0x2573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: Dec 31 14:45:00 2025 GMT Not After : Jan 7 14:45:00 2026 GMT Subject: CN=695536ec-927c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:7d:07:c4:47:b9:9e:be:9a:e6:47:28:fa: 86:03:5b:17:fd:eb:5a:ac:02:63:6b:03:fd:5e:d1: 2a:9c:77:b2:90:f3:51:45:58:83:7b:91:8c:0c:aa: a5:f3:d9:5e:a7:56:5e:17:fe:5e:b7:a7:72:9a:96: fa:0f:90:fc:60:61:8a:aa:4b:c8:13:96:ab:4a:b4: 14:67:93:73:37:81:82:b1:47:c6:a4:c1:97:bd:b3: 81:06:44:45:cd:15:6b:26:fb:47:7a:0d:0c:fc:69: 4b:b2:51:79:38:36:9e:38:a4:8e:23:76:92:c1:2d: 8b:a9:d3:0b:a2:0e:57:15:6b:1b:e7:f7:81:27:7c: db:7b:37:64:74:da:de:6d:ac:12:fd:1a:81:04:8b: 9c:0b:a6:83:79:53:84:89:9e:df:b3:69:53:f5:6d: 15:d7:84:1a:8d:2a:99:3c:08:01:04:93:33:38:b4: 82:7e:ce:19:6d:41:fb:c7:27:43:8c:8e:e6:e2:f9: 45:24:c7:c3:b9:a2:7a:53:88:47:c4:0b:ee:17:6c: 29:1f:d1:2e:c8:3a:2a:2b:63:75:0a:e7:f0:4a:47: 15:cc:8b:de:1e:45:03:21:aa:4e:34:e1:70:e7:fc: 0c:9c:e0:11:87:5f:42:f6:39:fa:36:89:30:1d:d0: be:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:19:27:DD:67:DC:DA:AE:3A:EC:6B:B9:C1:4A:59:68:FF:7E:26:C3 X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:52:dc:b5:02:1f:f9:a9:ed:6d:87:57:ad:94:0c:19:da:5c: 49:cb:72:41:57:b7:ce:65:c0:73:19:00:a0:b1:6f:ba:a4:52: f0:8f:8e:4f:3c:31:93:be:3d:4a:ba:61:29:bf:17:e3:4f:ca: 92:56:69:e7:54:8f:b1:44:6d:d9:08:90:f6:35:56:cc:8b:a6: 42:29:24:80:87:bb:2c:34:c9:67:5a:60:3e:c1:88:43:38:1c: ac:3f:c7:04:92:a8:ee:fa:fd:40:44:86:e5:b9:2a:a0:7e:25: e9:b8:cc:3c:13:5c:64:79:91:eb:65:3a:c6:a3:96:da:f5:70: 3b:37:72:7a:91:fd:65:29:c2:13:60:b6:a0:dc:0a:3a:77:c1: 22:16:05:3b:1c:43:13:0d:5e:7d:32:9e:bd:a3:4f:19:4b:1e: 99:d6:29:38:16:36:e9:c1:31:0a:8f:12:7a:ed:34:1d:52:97: e1:2d:c0:2f:63:68:87:74:b9:68:60:14:f1:fc:34:de:f2:50: 2c:7d:e4:78:11:40:e7:6f:79:bb:f9:26:f4:dc:9e:97:18:89: 34:18:ad:92:0e:fa:56:92:59:c0:c2:3e:14:e4:73:42:df:28: 6b:95:c1:f6:b6:61:df:23:76:21:d2:31:1a:2d:8b:de:4e:27: b7:83:ee:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjUxMjMxMTQ0NTAwWhcNMjYwMTA3MTQ0NTAwWjAYMRYwFAYD VQQDDA02OTU1MzZlYy05MjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqk99B8RHuZ6+muZHKPqGA1sX/etarAJjawP9XtEqnHeykPNRRViDe5GMDKql 89lep1ZeF/5et6dympb6D5D8YGGKqkvIE5arSrQUZ5NzN4GCsUfGpMGXvbOBBkRF zRVrJvtHeg0M/GlLslF5ODaeOKSOI3aSwS2LqdMLog5XFWsb5/eBJ3zbezdkdNre bawS/RqBBIucC6aDeVOEiZ7fs2lT9W0V14QajSqZPAgBBJMzOLSCfs4ZbUH7xydD jI7m4vlFJMfDuaJ6U4hHxAvuF2wpH9EuyDoqK2N1CufwSkcVzIveHkUDIapONOFw 5/wMnOARh19C9jn6NokwHdC+FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoZJ91n 3NquOuxrucFKWWj/fibDMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsUty1Ah/5qe1th1etlAwZ2lxJy3JBV7fOZcBzGQCgsW+6pFLwj45P PDGTvj1KumEpvxfjT8qSVmnnVI+xRG3ZCJD2NVbMi6ZCKSSAh7ssNMlnWmA+wYhD OBysP8cEkqju+v1ARIbluSqgfiXpuMw8E1xkeZHrZTrGo5ba9XA7N3J6kf1lKcIT YLag3Ao6d8EiFgU7HEMTDV59Mp69o08ZSx6Z1ik4FjbpwTEKjxJ67TQdUpfhLcAv Y2iHdLloYBTx/DTe8lAsfeR4EUDnb3m7+Sb03J6XGIk0GK2SDvpWklnAwj4U5HNC 3yhrlcH2tmHfI3Yh0jEaLYveTie3g+7B -----END CERTIFICATE-----Generated at Wed Dec 31 19:34:18 2025 by rpki-client