This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json) Hash identifier: U2C1MumPt3lZYxkGDrmZzTogpNSfWTHGTGbkJYyi+I4= Subject key identifier: FD:8F:FB:97:7A:F9:42:50:CA:65:1B:95:82:70:C1:06:3A:F9:1C:E1 Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft Manifest number: 6D Signing time: Sun 21 Dec 2025 05:58:48 +0000 Manifest this update: Sun 21 Dec 2025 05:58:48 +0000 Manifest next update: Sun 28 Dec 2025 05:58:48 +0000 Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: Z/7RSQrqyupTysmBeZgp8c4KRJ1NIrRT8R3+7jN8sxE=) 2: 28BB8F3E7CFD11F0A33DEA21C4F9AE02.roa (hash: r4KaPqqtCXW7b+8GzlZoQ18nPDvw2xoi898WdJXVWq0=) 3: 27D35A2A7CFD11F0A33DEA21C4F9AE02.roa (hash: WMBMTYm4zJmJb6l3lGaR3MIPCoKpE7rld4fHZdKyhLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Validity Not Before: Dec 21 05:58:48 2025 GMT Not After : Dec 28 05:58:48 2025 GMT Subject: CN=69478c98-18b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:17:87:fe:26:68:ce:e7:4e:54:0d:f6:2b:50: ba:d9:67:43:a0:60:2e:3b:29:32:5f:97:2a:b8:c1: df:b5:dc:9b:30:06:74:cd:e5:6d:79:a7:cc:04:89: e0:30:9e:4e:46:13:80:21:72:36:4d:85:42:d6:e9: 3c:96:53:19:67:97:29:24:e3:55:ce:c3:5f:1f:03: 92:ba:0b:97:9e:8d:e0:e1:e5:95:0e:49:67:12:6d: c2:9d:d0:9e:c1:b9:86:3f:c2:92:fd:14:7e:3a:7f: d6:c0:15:1b:a6:90:fe:d8:10:07:d9:35:46:41:84: 90:4c:65:46:fe:68:4d:a6:17:c5:a3:9e:a8:16:77: d3:f7:96:bc:9d:d5:0b:48:bb:b0:a0:76:3b:5f:0b: a3:5b:6f:a3:ba:78:9d:72:11:8e:7a:48:ff:c8:74: 2d:a4:2a:6c:8d:72:91:1d:83:2e:66:ca:fd:12:67: b8:2b:cd:cd:b2:56:f0:0d:80:e4:4e:74:8c:f7:93: 82:cf:9c:5b:e0:fe:3e:95:a5:c7:3f:9c:b9:86:e9: 8e:18:f2:03:7e:c1:c6:9a:0b:ee:11:9d:71:d5:e6: fe:c0:b5:a9:18:fc:e4:74:80:d4:6e:1e:9c:c3:68: 72:37:77:4f:7a:f7:d5:79:ac:41:fb:4e:0e:c9:f3: 03:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8F:FB:97:7A:F9:42:50:CA:65:1B:95:82:70:C1:06:3A:F9:1C:E1 X509v3 Authority Key Identifier: keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:68:ec:9f:2c:fa:c9:30:76:13:f6:41:b1:a6:4f:f2:c0:88: 63:79:4f:c6:8d:a3:e2:cd:f0:b8:a9:21:69:f8:62:12:d7:71: 8a:68:08:6c:2e:11:73:28:2b:6b:02:c4:a2:43:17:a2:19:53: a1:2b:99:10:8e:a1:02:9e:83:e3:02:bf:53:21:27:ba:68:6e: 92:35:03:d4:6d:5c:03:27:e2:eb:2b:0a:cf:64:da:0e:19:22: 36:0e:e5:91:0c:db:15:31:9f:2a:3b:d1:ec:dd:cf:0e:47:fc: e5:60:3f:13:e9:f3:3c:97:0f:d0:8f:16:77:7c:68:54:0f:33: 2a:2f:45:8f:4c:90:52:9f:c1:80:60:76:e8:cf:74:19:f5:b2: af:d1:bc:cd:d1:08:af:2e:7a:86:02:04:6b:a9:53:26:46:d8: 72:3c:75:e4:5e:51:a4:5d:ba:b5:f4:4c:58:96:93:c4:91:99: 6d:dd:bb:f6:be:31:40:66:5e:c1:f6:23:4f:26:38:08:e9:3d: 06:a1:69:b9:e7:a1:ad:1b:7e:b8:d3:bc:f1:d0:fd:61:fe:f9: c4:b8:5e:dd:d7:3f:6d:f8:df:4d:87:cd:03:10:50:5e:fc:96: a9:b0:74:d5:6c:f1:76:d4:3f:f7:a9:ec:94:4e:fd:01:92:50: e9:04:3c:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTlDMDExMC8GA1UEBRMoN0E3MzAwMjExMTNEMjQ1MTFENkU4Qjg1NjJFNzI0RUM5 RTk4MjUxQjAeFw0yNTEyMjEwNTU4NDhaFw0yNTEyMjgwNTU4NDhaMBgxFjAUBgNV BAMMDTY5NDc4Yzk4LTE4YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaF4f+JmjO505UDfYrULrZZ0OgYC47KTJflyq4wd+13JswBnTN5W15p8wEieAw nk5GE4AhcjZNhULW6TyWUxlnlykk41XOw18fA5K6C5eejeDh5ZUOSWcSbcKd0J7B uYY/wpL9FH46f9bAFRumkP7YEAfZNUZBhJBMZUb+aE2mF8WjnqgWd9P3lryd1QtI u7CgdjtfC6Nbb6O6eJ1yEY56SP/IdC2kKmyNcpEdgy5myv0SZ7grzc2yVvANgORO dIz3k4LPnFvg/j6Vpcc/nLmG6Y4Y8gN+wcaaC+4RnXHV5v7AtakY/OR0gNRuHpzD aHI3d09699V5rEH7Tg7J8wOpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/Y/7l3r5 QlDKZRuVgnDBBjr5HOEwHwYDVR0jBBgwFoAUenMAIRE9JFEdbouFYuck7J6YJRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBOUMwLzUyOUJDMkZDMzg4 MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZW5NQUlSRTlKRkVkYm91Rll1Y2s3SjZZSlJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB OUMwLzUyOUJDMkZDMzg4MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZF ZGJvdUZZdWNrN0o2WUpScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD9o7J8s+skwdhP2QbGmT/LAiGN5T8aNo+LN8LipIWn4YhLXcYpoCGwu EXMoK2sCxKJDF6IZU6ErmRCOoQKeg+MCv1MhJ7pobpI1A9RtXAMn4usrCs9k2g4Z IjYO5ZEM2xUxnyo70ezdzw5H/OVgPxPp8zyXD9CPFnd8aFQPMyovRY9MkFKfwYBg dujPdBn1sq/RvM3RCK8ueoYCBGupUyZG2HI8deReUaRdurX0TFiWk8SRmW3du/a+ MUBmXsH2I08mOAjpPQahabnnoa0bfrjTvPHQ/WH++cS4Xt3XP234302HzQMQUF78 lqmwdNVs8XbUP/ep7JRO/QGSUOkEPFw= -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:50 2025 by rpki-client