This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: J3HxDplCtHlQMQ/XsV1vqZvLg2weisjiMh/7h4v4RyM= Subject key identifier: 15:83:A6:7D:A7:C4:0F:9B:4C:9E:D7:34:C0:EC:E2:09:61:10:DB:3C Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0CC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0CB2 Signing time: Thu 04 Dec 2025 17:44:10 +0000 Manifest this update: Thu 04 Dec 2025 17:44:10 +0000 Manifest next update: Thu 11 Dec 2025 17:44:09 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: NK5iqTLVR8vF8GHyB6D/vTLfw32A3chIYrW1BcOLC8I=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: Wk7XsElJ9QejMrm05qJ4YVcTMAAYD+d8lLLUdBQZCXY=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: vTFXyGHYGe6s3SqvcZNP+dIhUxLeP7oO2VI4PVLGlrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3266 (0xcc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Dec 4 17:44:10 2025 GMT Not After : Dec 11 17:44:09 2025 GMT Subject: CN=6931c86a-82d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:24:e3:a0:ae:8c:97:d6:14:6b:88:e3:f4: fd:56:46:3a:8b:9d:d0:ae:46:f9:43:d7:6c:2c:2c: 80:0a:f4:e3:e4:02:af:c8:76:50:31:b8:46:87:d1: c3:e3:8c:42:55:44:33:e1:80:d3:26:80:4c:6a:17: 52:00:0c:74:28:eb:e0:9f:f5:dc:be:f5:53:52:f8: dc:87:17:d4:56:48:a0:ea:9d:e0:f3:98:a6:b9:ee: 3c:df:b3:ae:98:41:df:c3:32:30:82:07:d1:14:7b: ab:2b:05:34:ae:41:18:52:f9:6e:da:f0:9e:e9:f6: fe:95:42:2f:a4:98:99:2f:98:cf:89:0a:6b:a6:a9: f2:f9:ae:8c:d6:0b:8a:7c:ba:8d:6e:5a:42:2f:3a: 19:08:ad:a4:3b:da:b3:37:47:f0:e9:ff:8b:f9:bb: e5:5e:35:81:50:c0:be:db:28:fc:22:c9:d1:e5:79: 27:b1:ed:21:56:29:ab:11:d7:52:fc:c6:7e:ef:0f: 3f:5a:d9:a2:bd:54:c2:f5:b5:4d:c9:53:f0:ba:ba: db:d8:17:9f:10:8b:51:80:7d:9b:60:0d:c5:52:2d: 4f:75:93:4f:7b:dd:91:5f:05:dc:22:34:3b:d4:72: 90:2c:43:b0:e5:c3:c9:d4:d7:93:84:1e:97:98:aa: 96:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:83:A6:7D:A7:C4:0F:9B:4C:9E:D7:34:C0:EC:E2:09:61:10:DB:3C X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:8b:0c:39:62:51:e9:1c:96:2c:4d:47:c1:bb:3c:cb:7c:58: ca:f2:5b:8a:33:4c:74:c7:04:eb:59:9d:19:43:10:9c:b1:e1: b6:14:73:86:0c:32:60:5d:68:56:b1:94:79:3d:3b:5b:fd:63: 7d:9f:1d:9f:dd:a8:4d:a9:59:3b:23:f3:da:a3:d3:d7:05:1c: 26:92:de:c2:9d:8d:29:f6:73:e2:ed:e2:cd:3c:f3:be:2d:77: e3:2b:17:c1:2f:ae:2d:bf:5e:a6:c0:0e:4a:9a:b6:02:1b:57: b1:0e:04:fa:c3:05:d2:66:65:15:d7:68:dc:f2:0a:04:64:7f: bb:64:22:76:b2:18:ff:eb:68:cd:9a:6d:c3:ad:17:b7:8a:3c: f4:de:80:3a:a5:57:24:a7:fc:8b:41:8e:09:c9:cd:ae:8b:5e: 88:4e:0a:e2:53:3c:19:93:bf:e8:2f:f3:45:45:e9:0c:82:35: 42:b5:3e:af:ef:7f:cd:34:18:d7:b8:d1:de:84:2f:8d:62:76: b2:27:d5:fb:ad:1e:58:9c:a3:8b:68:51:8c:7b:96:c7:85:78: 65:af:38:fe:8b:06:fc:c6:4d:89:9a:b0:50:05:5a:59:b2:1e: 82:47:60:96:3a:0c:af:46:2c:0f:55:15:1e:08:b5:ed:b1:b4: 6a:5c:7f:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjUxMjA0MTc0NDEwWhcNMjUxMjExMTc0NDA5WjAYMRYwFAYD VQQDEw02OTMxYzg2YS04MmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxck46CujJfWFGuI4/T9VkY6i53Qrkb5Q9dsLCyACvTj5AKvyHZQMbhGh9HD 44xCVUQz4YDTJoBMahdSAAx0KOvgn/XcvvVTUvjchxfUVkig6p3g85imue4837Ou mEHfwzIwggfRFHurKwU0rkEYUvlu2vCe6fb+lUIvpJiZL5jPiQprpqny+a6M1guK fLqNblpCLzoZCK2kO9qzN0fw6f+L+bvlXjWBUMC+2yj8IsnR5Xknse0hVimrEddS /MZ+7w8/WtmivVTC9bVNyVPwurrb2BefEItRgH2bYA3FUi1PdZNPe92RXwXcIjQ7 1HKQLEOw5cPJ1NeThB6XmKqWpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWDpn2n xA+bTJ7XNMDs4glhENs8MB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkiww5YlHpHJYsTUfBuzzLfFjK8luKM0x0xwTrWZ0ZQxCcseG2FHOG DDJgXWhWsZR5PTtb/WN9nx2f3ahNqVk7I/Pao9PXBRwmkt7CnY0p9nPi7eLNPPO+ LXfjKxfBL64tv16mwA5KmrYCG1exDgT6wwXSZmUV12jc8goEZH+7ZCJ2shj/62jN mm3DrRe3ijz03oA6pVckp/yLQY4Jyc2ui16ITgriUzwZk7/oL/NFRekMgjVCtT6v 73/NNBjXuNHehC+NYnayJ9X7rR5YnKOLaFGMe5bHhXhlrzj+iwb8xk2JmrBQBVpZ sh6CR2CWOgyvRiwPVRUeCLXtsbRqXH/c -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:56 2025 by rpki-client