This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json)
Hash identifier: itVAchxQceDhop76m9ehn6OHS9RDS9BTQkJ7Kd99SeY=
Subject key identifier: 07:5F:16:CB:A0:DF:44:40:44:0C:76:83:53:87:14:A5:A5:7F:9D:48
Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E
Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E
Certificate serial: 251C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
Manifest number: 24EE
Signing time: Sat 20 Dec 2025 14:57:25 +0000
Manifest this update: Sat 20 Dec 2025 14:57:25 +0000
Manifest next update: Sat 27 Dec 2025 14:57:25 +0000
Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: d2BtB2k66giNdvgqToMxJUTKQV5s10Oin6MLL68Wjmw=)
2: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: /t91K13z6WAVt7TlFvUwr5tZKY0UNdGRc/y4NhFwh6I=)
3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: zj4FMoo2BFk+RmoPIRljJ9QowF2nkk9k+fxlmrrzCzE=)
4: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: zd2Mp+JliwOB/WE8I35a0tiSuKliGO1s4BV4PHkpP1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl
rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 14:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9500 (0x251c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E
Validity
Not Before: Dec 20 14:57:25 2025 GMT
Not After : Dec 27 14:57:25 2025 GMT
Subject: CN=6946b955-8e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:bd:eb:26:b6:0e:bf:83:e7:52:9b:bc:82:
2d:12:ff:71:d2:f9:6d:2f:4b:da:7d:a2:b7:99:63:
8e:c2:aa:5d:7b:c7:2a:e8:d6:dd:88:9e:e6:e4:45:
f8:5e:13:cc:ac:2f:d6:a3:9d:d4:c4:de:a4:b3:31:
e7:66:5f:9c:8d:64:8d:b7:b7:2a:a9:dc:72:a4:bd:
55:ca:97:84:a5:65:13:2d:d0:b0:f5:aa:65:18:29:
39:96:ff:e4:c7:d9:c6:a3:e6:c1:65:8e:fc:e1:0e:
44:29:49:8d:dd:38:53:b6:ed:45:a4:bb:c3:9b:e0:
cc:03:ae:09:f7:78:44:f0:94:1e:1e:ca:f3:d9:b8:
c1:00:4a:a1:b2:a6:51:6b:c1:d6:a1:ac:bb:21:8e:
f3:83:42:bb:84:55:2c:16:90:74:51:3d:56:36:9b:
c9:76:eb:35:c0:42:62:b5:40:59:5f:f0:a6:06:46:
2f:ee:0e:53:11:cd:92:86:4c:78:50:0f:2a:bc:90:
a3:86:14:f8:76:14:f4:21:84:2d:20:27:5e:e4:52:
95:cb:65:92:7b:3a:7a:b4:0a:b5:a7:1b:3f:0f:d3:
51:9d:ce:0c:7b:7f:3e:67:da:b2:69:7b:cd:ea:86:
95:5f:f1:c3:be:d7:1b:62:a9:58:0f:4c:92:bb:f5:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5F:16:CB:A0:DF:44:40:44:0C:76:83:53:87:14:A5:A5:7F:9D:48
X509v3 Authority Key Identifier:
keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:c6:8b:87:9b:f4:b9:2f:6d:14:c3:b4:24:e9:ae:ee:e2:64:
c5:46:c8:2f:7c:e0:e0:06:13:94:42:4e:c8:e6:c9:fb:21:87:
06:98:68:28:2f:2c:4e:86:f8:c6:3f:41:40:4a:e3:bf:93:a9:
bc:6f:e8:1f:63:02:1d:a1:9d:bc:7b:3e:f5:69:33:5e:3f:1f:
73:bf:a6:19:c7:1a:3f:70:f4:a2:99:e1:7d:57:c9:21:18:9e:
1d:b3:20:11:d7:a6:3f:68:f7:f8:2b:32:ea:58:09:7d:88:24:
a4:1d:80:d0:fb:8b:4d:7f:66:c5:99:41:15:e1:6d:2b:38:cc:
27:b8:1c:31:ae:22:d3:3c:fe:ef:98:27:f8:f4:43:70:a3:88:
67:0c:51:5a:90:ca:e9:c7:bf:f2:81:a7:a1:79:8a:58:78:fe:
26:3e:24:69:c5:b1:d9:56:5e:b9:0c:48:68:20:7b:69:c5:09:
5a:b9:85:39:04:b4:35:13:96:27:d0:ce:87:4e:9e:13:f8:47:
4f:82:f9:2d:7a:43:d1:99:e3:89:78:ea:8a:04:01:6f:b2:10:
bc:c2:fc:97:9d:7e:39:06:37:7c:1f:2b:e6:0f:1a:c0:a3:93:
80:32:7e:af:19:ef:a0:ae:81:75:ee:a0:fd:76:f8:31:f7:37:
13:c8:a2:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx
RDg4ODhFOUUwHhcNMjUxMjIwMTQ1NzI1WhcNMjUxMjI3MTQ1NzI1WjAYMRYwFAYD
VQQDDA02OTQ2Yjk1NS04ZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmfm96ya2Dr+D51KbvIItEv9x0vltL0vafaK3mWOOwqpde8cq6NbdiJ7m5EX4
XhPMrC/Wo53UxN6kszHnZl+cjWSNt7cqqdxypL1VypeEpWUTLdCw9aplGCk5lv/k
x9nGo+bBZY784Q5EKUmN3ThTtu1FpLvDm+DMA64J93hE8JQeHsrz2bjBAEqhsqZR
a8HWoay7IY7zg0K7hFUsFpB0UT1WNpvJdus1wEJitUBZX/CmBkYv7g5TEc2Shkx4
UA8qvJCjhhT4dhT0IYQtICde5FKVy2WSezp6tAq1pxs/D9NRnc4Me38+Z9qyaXvN
6oaVX/HDvtcbYqlYD0ySu/U+FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdfFsug
30RARAx2g1OHFKWlf51IMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC
RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu
Y0QyRWRfcy00bDhkaUlqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQxouHm/S5L20Uw7Qk6a7u4mTFRsgvfODgBhOUQk7I5sn7IYcGmGgo
LyxOhvjGP0FASuO/k6m8b+gfYwIdoZ28ez71aTNePx9zv6YZxxo/cPSimeF9V8kh
GJ4dsyAR16Y/aPf4KzLqWAl9iCSkHYDQ+4tNf2bFmUEV4W0rOMwnuBwxriLTPP7v
mCf49ENwo4hnDFFakMrpx7/ygaeheYpYeP4mPiRpxbHZVl65DEhoIHtpxQlauYU5
BLQ1E5Yn0M6HTp4T+EdPgvktekPRmeOJeOqKBAFvshC8wvyXnX45Bjd8HyvmDxrA
o5OAMn6vGe+groF17qD9dvgx9zcTyKK3
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:59:23 2025 by rpki-client