This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json) Hash identifier: mx8HQy2/Agp4seEIrRz/IsiU0/8EL5iTok4c+7j5zE8= Subject key identifier: A1:C3:F6:67:5D:25:F1:36:78:75:CC:89:D9:1E:47:00:33:8B:D7:5F Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Certificate serial: 0403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft Manifest number: 03FC Signing time: Sun 28 Dec 2025 23:37:06 +0000 Manifest this update: Sun 28 Dec 2025 23:37:06 +0000 Manifest next update: Sun 04 Jan 2026 23:37:06 +0000 Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: UzfJDHET4hrxzHDtHvlk9kxcKzjZDxIqhL66bYwDgTQ=) 2: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: gNV6yCoYOHvCUxwy2Tl0FTscxDv6xhq7lZUCCqRtA/I=) 3: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: wCf4g6o5WScb6RGG49PPoBi+hb01eShp6RghG0g0MJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 23:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1027 (0x403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Validity Not Before: Dec 28 23:37:06 2025 GMT Not After : Jan 4 23:37:06 2026 GMT Subject: CN=6951bf22-dcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:e7:82:b1:f6:e9:11:5b:7a:42:4a:66:72: 14:e6:ef:18:ce:46:0a:08:89:8c:f2:80:0f:60:00: 7e:83:54:b6:55:f0:83:c9:86:6e:60:7b:2d:b4:76: 71:fc:72:4f:f3:b2:91:28:cf:0e:1d:dc:88:b1:79: 14:df:bd:48:35:11:63:33:58:b9:71:d9:70:41:07: c0:10:9a:39:f0:14:4f:3c:39:b0:a5:1f:58:c4:23: f6:3e:41:2c:61:ad:b4:f8:d8:7b:9f:7d:0d:3f:1e: 42:87:52:3e:52:15:d4:29:3a:06:6f:96:ad:98:aa: 73:28:6d:dd:7c:6a:a8:50:57:38:42:c9:f5:0b:04: ca:fe:ed:57:2e:df:b8:87:96:c8:84:2b:2d:f5:0c: 4c:f3:ec:20:6e:64:92:15:cf:ea:a3:9f:83:a7:46: 5b:f8:f6:d5:f2:7e:9c:0c:59:ec:ac:75:6a:48:52: c0:f6:d8:09:af:81:94:15:91:65:4e:3d:8d:59:8c: 86:c9:07:bc:5b:7e:ae:33:f7:b7:79:25:5c:37:5d: d9:1e:9e:d0:2d:8e:2d:06:c0:76:d2:a8:4c:02:1a: 51:dd:c6:6d:94:90:4e:60:83:6c:39:b2:c8:d6:a2: d1:e6:ac:4e:69:aa:cf:e5:a6:ad:e6:6f:bf:3d:d8: 70:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C3:F6:67:5D:25:F1:36:78:75:CC:89:D9:1E:47:00:33:8B:D7:5F X509v3 Authority Key Identifier: keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:68:c1:69:ce:88:29:8a:05:bb:0a:84:ac:c0:39:e7:2d:5e: 2a:50:a9:fa:3a:40:3b:1e:7e:22:34:f1:5f:f2:a2:82:2e:56: e3:e1:6a:e5:e2:2a:88:cf:c0:bf:22:b3:c5:73:fc:32:22:b5: dd:3a:6a:2f:1d:f9:6d:11:3d:d7:29:83:ef:ae:22:ea:ad:07: 24:a9:e1:92:b5:fe:1d:b7:4c:81:d9:e2:e5:e3:7c:5f:18:9b: ef:c1:49:7e:a8:f0:23:85:a3:53:e3:e1:79:47:44:92:ef:47: b0:d2:8a:6d:14:cb:e9:ab:bf:94:bf:68:5d:d1:b3:d6:e3:7f: ab:2b:ee:ab:f4:94:b3:36:80:79:46:40:fa:6e:ef:6d:ca:19: e3:7c:c5:0c:82:44:97:ae:99:cb:30:82:2e:f3:94:19:ee:a2: da:4e:3f:a0:92:b1:26:66:e0:40:45:3c:c4:c4:65:31:7b:6f: 5b:68:5c:63:26:a3:60:c7:f9:cc:14:62:14:ba:78:29:84:f7: c9:63:05:3e:6e:51:d8:35:82:c7:1d:74:cf:c3:b0:c6:38:00: 2f:33:05:f9:c1:d1:d4:29:de:a0:2a:9a:fd:63:6f:5c:f3:f6: 09:a3:b8:48:a1:75:3f:94:46:e8:86:c1:85:68:d4:05:6b:85: e4:73:40:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJERkIxMTAvBgNVBAUTKDdCNTY2RTQ4NjdBQ0NCODFCNzRCQTlENjY2MjI0RTZD MDQ1RjBDMjcwHhcNMjUxMjI4MjMzNzA2WhcNMjYwMTA0MjMzNzA2WjAYMRYwFAYD VQQDDA02OTUxYmYyMi1kY2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLXngrH26RFbekJKZnIU5u8YzkYKCImM8oAPYAB+g1S2VfCDyYZuYHsttHZx /HJP87KRKM8OHdyIsXkU371INRFjM1i5cdlwQQfAEJo58BRPPDmwpR9YxCP2PkEs Ya20+Nh7n30NPx5Ch1I+UhXUKToGb5atmKpzKG3dfGqoUFc4Qsn1CwTK/u1XLt+4 h5bIhCst9QxM8+wgbmSSFc/qo5+Dp0Zb+PbV8n6cDFnsrHVqSFLA9tgJr4GUFZFl Tj2NWYyGyQe8W36uM/e3eSVcN13ZHp7QLY4tBsB20qhMAhpR3cZtlJBOYINsObLI 1qLR5qxOaarP5aat5m+/Pdhw/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHD9mdd JfE2eHXMidkeRwAzi9dfMB8GA1UdIwQYMBaAFHtWbkhnrMuBt0up1mYiTmwEXwwn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRGQi85RkNBQURGRUEw NTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0RzNTNm5XWmlKT2JBUmZE Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxWnVTR2VzeTRHM1M2bldaaUpPYkFSZkRDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRGQi85RkNBQURGRUEwNTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0 RzNTNm5XWmlKT2JBUmZEQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuaMFpzogpigW7CoSswDnnLV4qUKn6OkA7Hn4iNPFf8qKCLlbj4Wrl 4iqIz8C/IrPFc/wyIrXdOmovHfltET3XKYPvriLqrQckqeGStf4dt0yB2eLl43xf GJvvwUl+qPAjhaNT4+F5R0SS70ew0optFMvpq7+Uv2hd0bPW43+rK+6r9JSzNoB5 RkD6bu9tyhnjfMUMgkSXrpnLMIIu85QZ7qLaTj+gkrEmZuBARTzExGUxe29baFxj JqNgx/nMFGIUungphPfJYwU+blHYNYLHHXTPw7DGOAAvMwX5wdHUKd6gKpr9Y29c 8/YJo7hIoXU/lEbohsGFaNQFa4Xkc0Aa -----END CERTIFICATE-----Generated at Mon Dec 29 08:25:42 2025 by rpki-client