This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json)
Hash identifier: eiaAKWYO5rYLatFFsdWXeceEFGQY+AE9stcD9TUYV+c=
Subject key identifier: 71:59:E5:AF:3A:B0:DB:ED:66:A0:B4:07:3C:F3:20:42:A8:62:15:AB
Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Certificate serial: 1CA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
Manifest number: 1C89
Signing time: Thu 18 Dec 2025 16:04:57 +0000
Manifest this update: Thu 18 Dec 2025 16:04:56 +0000
Manifest next update: Thu 25 Dec 2025 16:04:56 +0000
Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: FwXV246pIroT4hleHaftvmLLqhH6uSgrBTugsAr51EA=)
2: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: nzh03mGpFuWBuJjX4zOpsk0cBliW2iPs211HjGanKnk=)
3: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: 4+gvlbrCKPYHxXa5P1wV2CMHV3TVWTeug3ZLXYBNytU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7330 (0x1ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Validity
Not Before: Dec 18 16:04:56 2025 GMT
Not After : Dec 25 16:04:56 2025 GMT
Subject: CN=69442629-f62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:b6:d4:31:12:60:9f:26:73:69:fb:82:05:
22:36:fe:4e:bf:3c:66:51:82:b3:fc:e7:8f:91:3f:
33:d3:01:96:04:fc:f1:c0:fa:ed:22:5c:55:ea:31:
23:70:2e:f9:b8:b1:e1:b1:5f:48:94:b9:16:98:23:
aa:2d:50:fb:f6:da:96:f3:9a:51:2a:54:92:50:e1:
90:7e:d9:f8:3f:3f:39:5a:b6:b8:66:a1:fe:6a:2c:
86:bd:ec:c2:48:4f:c3:aa:7d:2f:c9:4e:d5:9a:6c:
34:09:97:89:b3:73:57:15:84:f3:78:7d:b1:ab:10:
38:a7:bb:3f:1d:c1:45:34:21:71:14:7f:2a:20:7b:
e4:85:06:e1:cd:be:50:85:7d:82:d3:9b:3a:e3:ed:
bf:a6:ad:da:62:a8:a2:bf:8d:2a:f4:f4:90:44:ed:
33:57:da:fa:88:68:2e:58:84:11:d0:0d:02:21:bd:
f2:2d:23:db:d1:37:7b:d4:7f:4d:46:c7:eb:46:86:
61:04:2e:0e:53:15:27:f8:37:bd:6f:af:eb:87:e6:
b3:1d:cf:51:a0:f2:06:26:0d:8c:f7:d7:b4:5f:92:
c4:8e:6c:68:f3:17:21:06:00:78:e0:ac:8f:7d:63:
75:99:40:87:25:0c:9a:65:bd:c3:d7:a8:fb:23:26:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:59:E5:AF:3A:B0:DB:ED:66:A0:B4:07:3C:F3:20:42:A8:62:15:AB
X509v3 Authority Key Identifier:
keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:37:0e:1c:cd:93:2c:37:cd:c5:ed:8a:fb:c3:7c:1b:38:6e:
eb:42:91:70:6e:6f:b1:70:4e:bf:e2:5d:3b:8b:8d:33:c9:04:
51:19:c5:db:e8:71:ff:51:9a:c5:75:cd:8b:28:9a:9e:58:54:
5d:79:93:bd:20:41:ad:a6:73:95:99:f6:50:57:47:e1:e2:5d:
ad:b1:02:b4:0e:46:02:db:69:54:61:db:cd:58:18:8b:45:63:
29:eb:4a:07:cc:46:82:37:3d:ee:a0:74:04:2d:69:09:42:03:
9d:28:20:f3:d7:73:12:0a:ff:39:ef:28:1a:38:31:20:e4:54:
ac:cc:30:6f:fd:64:db:84:ad:d0:d0:cd:59:c1:d9:9b:76:c9:
9f:b5:c8:10:04:97:27:58:40:09:9b:c1:96:3d:a6:4f:06:8b:
b2:bd:e2:f7:20:18:7d:46:1b:07:2e:12:62:23:9c:a8:c5:e7:
2c:a9:9d:fc:6d:0e:5e:a0:3c:4f:6d:c5:a1:c4:1a:33:9b:52:
92:fe:b8:a5:30:5e:a9:91:95:62:1a:41:32:f7:4d:bd:58:86:
b0:56:53:e3:4d:e2:69:3f:64:f9:12:6f:f6:48:ac:8e:c7:57:
c7:8f:8a:77:67:87:7a:ab:94:c9:5b:28:38:3d:bb:c2:f5:8f:
02:63:1b:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0
ODIyNjBFRDgwHhcNMjUxMjE4MTYwNDU2WhcNMjUxMjI1MTYwNDU2WjAYMRYwFAYD
VQQDDA02OTQ0MjYyOS1mNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp8e21DESYJ8mc2n7ggUiNv5OvzxmUYKz/OePkT8z0wGWBPzxwPrtIlxV6jEj
cC75uLHhsV9IlLkWmCOqLVD79tqW85pRKlSSUOGQftn4Pz85Wra4ZqH+aiyGvezC
SE/Dqn0vyU7Vmmw0CZeJs3NXFYTzeH2xqxA4p7s/HcFFNCFxFH8qIHvkhQbhzb5Q
hX2C05s64+2/pq3aYqiiv40q9PSQRO0zV9r6iGguWIQR0A0CIb3yLSPb0Td71H9N
RsfrRoZhBC4OUxUn+De9b6/rh+azHc9RoPIGJg2M99e0X5LEjmxo8xchBgB44KyP
fWN1mUCHJQyaZb3D16j7IyYSoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFZ5a86
sNvtZqC0BzzzIEKoYhWrMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4
MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEZFMi8yRkY5QkIyMkU4MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dE
RDN3ZVdRekJxb3RJSW1EdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTNw4czZMsN83F7Yr7w3wbOG7rQpFwbm+xcE6/4l07i40zyQRRGcXb
6HH/UZrFdc2LKJqeWFRdeZO9IEGtpnOVmfZQV0fh4l2tsQK0DkYC22lUYdvNWBiL
RWMp60oHzEaCNz3uoHQELWkJQgOdKCDz13MSCv857ygaODEg5FSszDBv/WTbhK3Q
0M1ZwdmbdsmftcgQBJcnWEAJm8GWPaZPBouyveL3IBh9RhsHLhJiI5yoxecsqZ38
bQ5eoDxPbcWhxBozm1KS/rilMF6pkZViGkEy9029WIawVlPjTeJpP2T5Em/2SKyO
x1fHj4p3Z4d6q5TJWyg4PbvC9Y8CYxuc
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:03:06 2025 by rpki-client