This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: tR54gkB/r1lQPUL+yd9vyEzA4AWstO0dLyO9PzjMew4= Subject key identifier: 84:B4:F1:3A:99:C1:EF:74:8D:D8:4E:B6:34:76:7B:1D:26:F4:87:C5 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 251F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 24F1 Signing time: Fri 26 Dec 2025 14:56:38 +0000 Manifest this update: Fri 26 Dec 2025 14:56:38 +0000 Manifest next update: Fri 02 Jan 2026 14:56:38 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: V4WqwY0beAgQYnLp7cPP/uGwNVdPfuBaxKhq5Z2Pze8=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: zd2Mp+JliwOB/WE8I35a0tiSuKliGO1s4BV4PHkpP1k=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: zj4FMoo2BFk+RmoPIRljJ9QowF2nkk9k+fxlmrrzCzE=) 4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: /t91K13z6WAVt7TlFvUwr5tZKY0UNdGRc/y4NhFwh6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 14:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9503 (0x251f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Dec 26 14:56:38 2025 GMT Not After : Jan 2 14:56:38 2026 GMT Subject: CN=694ea226-a86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:c6:87:f9:ce:2c:6a:27:d5:a2:5c:47:d8: 65:cd:93:7c:db:a6:5b:7e:1e:19:4f:6c:e1:61:4a: 51:4f:73:5e:d8:6a:31:bc:3f:b8:11:6d:3d:ab:5c: 9f:59:81:8e:1f:60:da:9e:fb:1c:af:d0:40:ac:d2: bd:f1:f8:30:fd:29:22:9a:c0:52:14:3d:cf:ab:e2: 20:1b:10:7e:c5:dc:be:a4:18:bb:b5:2a:05:8a:cf: e6:01:51:6d:0b:1d:31:13:a6:ba:45:28:a9:23:8b: 99:95:c7:a0:1f:b6:16:d2:d8:07:e3:51:af:64:e9: 4b:95:97:5b:4f:94:e7:cf:e4:f5:af:d8:a9:dd:ce: 18:3d:a8:f5:85:23:0c:12:af:05:0b:ba:d9:61:51: 19:19:0c:37:3e:a5:60:e8:f1:35:4c:f9:67:42:1c: e8:e5:70:94:6b:a8:63:df:94:8b:bb:05:67:e4:57: aa:bd:a4:4f:ea:8c:5c:6c:26:65:8e:89:36:af:b4: 4c:5a:43:01:60:6b:e9:60:e1:1d:bc:ca:35:e2:0f: 86:f0:fd:ef:be:d1:c2:01:8c:fb:f3:86:bc:ae:45: bf:84:6f:04:5a:21:84:9c:59:5a:5a:e3:2a:af:87: 47:ab:55:d9:0f:1e:33:5a:3f:4f:8d:55:4c:24:d4: 00:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B4:F1:3A:99:C1:EF:74:8D:D8:4E:B6:34:76:7B:1D:26:F4:87:C5 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:1d:6f:41:1b:c6:a2:5e:4c:6f:3d:9e:af:b9:ed:ca:fe:51: b9:d9:1e:94:9f:0d:86:a8:a1:d7:dd:4a:11:40:70:b1:39:00: 57:05:1d:c8:32:47:7a:e1:17:05:48:de:b7:c2:e6:ea:89:87: 9b:0f:20:d9:83:1f:18:20:6b:46:ca:78:91:b2:7d:c8:d0:d8: f7:d4:f2:92:3e:09:b6:63:d7:20:f1:47:c6:49:29:1c:0e:a7: 5a:da:84:31:ed:71:22:79:3b:2a:11:5d:ae:79:5d:ab:bd:79: 83:08:96:0a:83:71:4b:2d:c7:71:15:9f:74:b4:5e:79:29:df: d9:bd:ec:24:70:0f:06:00:c0:18:6d:9c:8f:32:0d:a7:5f:53: 07:c8:ce:cd:9f:9a:47:bc:fd:68:a8:82:4f:d7:98:5c:46:23: 8b:05:51:7d:6b:82:6a:b2:fe:24:1e:43:92:77:f0:36:20:17: 63:ad:22:45:16:7d:f3:8d:9d:fe:af:19:63:f8:99:28:ed:f3: 80:d1:37:62:2b:8b:6f:09:69:81:bd:dc:a8:69:86:16:51:f0: 7a:20:8f:f1:58:68:1f:6d:bf:61:a9:e0:97:0c:b9:49:87:83: 61:4b:da:8f:e6:3c:be:6c:f2:27:84:a6:ba:de:ce:3e:2f:8f: dd:0b:c4:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjUxMjI2MTQ1NjM4WhcNMjYwMTAyMTQ1NjM4WjAYMRYwFAYD VQQDDA02OTRlYTIyNi1hODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVXGh/nOLGon1aJcR9hlzZN826Zbfh4ZT2zhYUpRT3Ne2GoxvD+4EW09q1yf WYGOH2Danvscr9BArNK98fgw/SkimsBSFD3Pq+IgGxB+xdy+pBi7tSoFis/mAVFt Cx0xE6a6RSipI4uZlcegH7YW0tgH41GvZOlLlZdbT5Tnz+T1r9ip3c4YPaj1hSMM Eq8FC7rZYVEZGQw3PqVg6PE1TPlnQhzo5XCUa6hj35SLuwVn5FeqvaRP6oxcbCZl jok2r7RMWkMBYGvpYOEdvMo14g+G8P3vvtHCAYz784a8rkW/hG8EWiGEnFlaWuMq r4dHq1XZDx4zWj9PjVVMJNQAOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS08TqZ we90jdhOtjR2ex0m9IfFMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOHW9BG8aiXkxvPZ6vue3K/lG52R6Unw2GqKHX3UoRQHCxOQBXBR3I Mkd64RcFSN63wubqiYebDyDZgx8YIGtGyniRsn3I0Nj31PKSPgm2Y9cg8UfGSSkc Dqda2oQx7XEieTsqEV2ueV2rvXmDCJYKg3FLLcdxFZ90tF55Kd/ZvewkcA8GAMAY bZyPMg2nX1MHyM7Nn5pHvP1oqIJP15hcRiOLBVF9a4Jqsv4kHkOSd/A2IBdjrSJF Fn3zjZ3+rxlj+Jko7fOA0TdiK4tvCWmBvdyoaYYWUfB6II/xWGgfbb9hqeCXDLlJ h4NhS9qP5jy+bPInhKa63s4+L4/dC8Tc -----END CERTIFICATE-----Generated at Sun Dec 28 06:23:24 2025 by rpki-client