This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json) Hash identifier: rhxtjcF93DA9mA6+sdbe+8HqU/bAfA4QDgKbdDDAcoM= Subject key identifier: 76:6E:11:0C:55:48:51:71:DA:BE:41:1B:FB:BF:78:CA:F4:A9:86:67 Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft Manifest number: 03F7 Signing time: Thu 18 Dec 2025 23:48:39 +0000 Manifest this update: Thu 18 Dec 2025 23:48:39 +0000 Manifest next update: Thu 25 Dec 2025 23:48:39 +0000 Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: VJ61xraoftiSAzr5K0lo+Yu+0hUVztHetNnK2CY/U8I=) 2: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: gNV6yCoYOHvCUxwy2Tl0FTscxDv6xhq7lZUCCqRtA/I=) 3: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: wCf4g6o5WScb6RGG49PPoBi+hb01eShp6RghG0g0MJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Validity Not Before: Dec 18 23:48:39 2025 GMT Not After : Dec 25 23:48:39 2025 GMT Subject: CN=694492d7-8c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:e4:72:8e:9a:cd:18:7d:dc:6a:d0:f2:78: 30:de:97:39:ca:29:f9:8b:8f:63:ba:58:6c:6f:b9: 4f:e1:0c:14:25:84:5a:9c:f9:37:56:95:48:5f:39: 15:55:ac:a4:9d:8e:dd:16:c5:eb:60:4e:f4:f4:a3: 62:36:ff:5d:da:0f:24:7a:e1:89:f6:33:f9:ef:a6: e3:53:96:62:cb:4e:91:e7:1b:d1:fe:3b:22:3a:aa: db:83:7f:ac:9e:5b:a0:88:71:95:1b:9a:1e:76:f3: 9e:19:05:f1:e7:78:2e:94:26:33:99:32:ae:49:2d: 3b:8f:98:60:cf:7a:fc:e2:d2:45:fb:60:a1:95:0a: 93:83:c7:04:c6:99:2b:17:29:78:b7:e4:6c:57:b4: f8:74:23:aa:bf:a8:2a:7e:cc:12:91:b6:eb:9d:a0: 11:3e:ee:90:24:1a:c5:2a:25:20:25:ef:bb:9e:7c: bf:90:b1:b1:60:e3:dc:71:3d:2d:42:b3:72:d8:2b: bd:64:45:7c:61:a9:ea:c5:f5:27:bb:5c:bd:cd:a1: 58:1e:d2:93:21:a9:62:d3:d7:57:ca:b7:75:83:bf: 05:e8:b0:75:b3:38:47:2f:c4:3e:77:2b:56:b6:0c: 25:d9:7b:10:67:50:02:e4:06:70:7a:59:0d:3a:c6: 3c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6E:11:0C:55:48:51:71:DA:BE:41:1B:FB:BF:78:CA:F4:A9:86:67 X509v3 Authority Key Identifier: keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e2:43:54:1a:f1:89:28:8f:48:df:ca:db:a3:35:e4:08:c4: 63:54:c4:bc:da:b4:7b:02:62:78:10:73:6a:a3:4f:da:bf:1f: b3:7b:c7:f8:3d:0c:59:f2:d3:35:2c:55:58:c3:46:f8:dc:56: 8f:9a:60:8c:c3:65:89:61:b3:b5:72:2e:30:0d:fb:ce:d6:f5: 14:17:50:10:2e:24:0c:1c:05:13:51:8c:7c:f5:48:0a:14:57: a5:9a:ec:f7:d4:f2:64:c3:80:18:f7:4a:bc:51:bd:02:90:21: 36:b7:7d:9f:2a:31:f2:75:90:4b:13:fa:6b:7b:f2:0f:ac:23: 07:f3:97:c1:d9:ee:19:65:a6:cf:fa:3a:fd:ba:eb:43:63:66: 5b:6a:7c:9b:2e:1c:cd:7b:bc:6c:d7:45:85:bf:fb:89:e4:b7: 96:69:2a:bd:e1:e8:30:6c:a7:bb:15:99:0f:b9:ad:76:36:52: 49:07:0f:4b:ea:18:ec:92:e4:09:e9:09:aa:a3:81:85:da:38: bc:5b:6d:5b:af:34:0e:ff:0a:e9:64:45:8e:01:c0:44:28:2f: 03:f4:40:7e:a7:64:6e:d2:f0:cd:46:53:9b:fc:9c:18:0b:d8: 6f:6d:1e:f1:c6:a5:04:cf:5b:88:6d:7a:52:cc:07:ba:86:49: a1:95:00:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJERkIxMTAvBgNVBAUTKDdCNTY2RTQ4NjdBQ0NCODFCNzRCQTlENjY2MjI0RTZD MDQ1RjBDMjcwHhcNMjUxMjE4MjM0ODM5WhcNMjUxMjI1MjM0ODM5WjAYMRYwFAYD VQQDDA02OTQ0OTJkNy04Yzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtD/kco6azRh93GrQ8ngw3pc5yin5i49julhsb7lP4QwUJYRanPk3VpVIXzkV VayknY7dFsXrYE709KNiNv9d2g8keuGJ9jP576bjU5Ziy06R5xvR/jsiOqrbg3+s nlugiHGVG5oedvOeGQXx53gulCYzmTKuSS07j5hgz3r84tJF+2ChlQqTg8cExpkr Fyl4t+RsV7T4dCOqv6gqfswSkbbrnaARPu6QJBrFKiUgJe+7nny/kLGxYOPccT0t QrNy2Cu9ZEV8YanqxfUnu1y9zaFYHtKTIali09dXyrd1g78F6LB1szhHL8Q+dytW tgwl2XsQZ1AC5AZwelkNOsY8bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZuEQxV SFFx2r5BG/u/eMr0qYZnMB8GA1UdIwQYMBaAFHtWbkhnrMuBt0up1mYiTmwEXwwn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRGQi85RkNBQURGRUEw NTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0RzNTNm5XWmlKT2JBUmZE Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxWnVTR2VzeTRHM1M2bldaaUpPYkFSZkRDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRGQi85RkNBQURGRUEwNTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0 RzNTNm5XWmlKT2JBUmZEQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC24kNUGvGJKI9I38rbozXkCMRjVMS82rR7AmJ4EHNqo0/avx+ze8f4 PQxZ8tM1LFVYw0b43FaPmmCMw2WJYbO1ci4wDfvO1vUUF1AQLiQMHAUTUYx89UgK FFelmuz31PJkw4AY90q8Ub0CkCE2t32fKjHydZBLE/pre/IPrCMH85fB2e4ZZabP +jr9uutDY2ZbanybLhzNe7xs10WFv/uJ5LeWaSq94egwbKe7FZkPua12NlJJBw9L 6hjskuQJ6Qmqo4GF2ji8W21brzQO/wrpZEWOAcBEKC8D9EB+p2Ru0vDNRlOb/JwY C9hvbR7xxqUEz1uIbXpSzAe6hkmhlQDT -----END CERTIFICATE-----Generated at Fri Dec 19 23:55:54 2025 by rpki-client