This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json) Hash identifier: 6GlDvi/Wx1jNZk3dfgfEmTs5hPqz35KtydSFnDf/NGY= Subject key identifier: 74:9D:B1:D1:33:88:9F:20:10:A9:CE:CF:78:9C:59:7F:D7:EA:FE:79 Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Certificate serial: 0D71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft Manifest number: 0D64 Signing time: Sat 20 Dec 2025 17:39:40 +0000 Manifest this update: Sat 20 Dec 2025 17:39:39 +0000 Manifest next update: Sat 27 Dec 2025 17:39:39 +0000 Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: KJmxvhStIeL7cCv4jii6SrSPHUg3R0tP7RXgsmKvo1s=) 2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: KmGf8Zvcyufmo51iUasTSRX2HWDW8cDhuB6ClqAH62g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3441 (0xd71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Validity Not Before: Dec 20 17:39:39 2025 GMT Not After : Dec 27 17:39:39 2025 GMT Subject: CN=6946df5b-4de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:c9:80:0a:46:c8:92:86:fe:98:a3:66:6c: 3b:77:1f:b7:ec:3b:a8:65:fd:6d:8a:ef:64:8b:44: 2a:91:b4:33:89:44:58:4a:85:7f:07:6d:b6:ea:b6: a3:ec:11:6d:5a:2a:f8:db:ff:2e:cc:a2:1d:84:8c: 33:1b:a3:a5:c5:02:d0:82:a2:90:0a:f1:5c:cc:e0: 80:07:cf:4b:c3:f9:2e:87:00:97:7b:44:e7:10:e3: ee:96:63:50:b5:87:c5:14:23:10:03:e9:bc:15:be: bb:c4:2c:a0:87:b8:93:be:30:7b:cb:39:0f:6b:dc: 79:b3:b4:49:07:1f:98:51:8d:c6:c3:db:97:03:24: df:d4:5c:bb:c3:f8:76:9e:8a:bc:62:43:b8:da:53: b3:86:80:1a:d2:db:f9:28:b2:14:ac:a4:1f:ba:ed: c7:6c:88:1f:e8:12:1a:86:16:ab:d5:a7:a7:bc:84: 37:a9:01:ee:f8:70:e9:19:c9:60:b6:25:cf:3d:58: 66:1e:31:5d:6c:b3:d6:b9:5a:7a:7c:61:b4:3e:07: 7e:90:0f:ea:ba:5a:2c:b9:b8:73:60:f7:12:ed:d8: 32:89:86:51:23:bb:2d:1a:1c:31:48:18:43:99:ae: ec:98:a8:e3:44:6a:c3:b0:5e:0e:35:1a:30:08:32: d8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9D:B1:D1:33:88:9F:20:10:A9:CE:CF:78:9C:59:7F:D7:EA:FE:79 X509v3 Authority Key Identifier: keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:93:f5:66:3a:bc:09:35:86:c0:87:e0:fa:05:6c:35:63:35: e2:e5:72:76:d0:97:fc:cd:0d:c8:37:fa:db:6d:30:55:ba:e1: d6:2d:8b:4b:e3:3a:76:6f:9f:5e:21:95:34:31:aa:bb:63:de: f4:a8:f2:c9:2b:e5:be:66:ed:2b:57:0a:7d:03:68:53:dd:76: d2:e2:7a:45:dc:0c:6d:96:78:4d:d5:fb:dd:ac:24:39:c6:e6: 7d:99:a6:c1:5c:04:50:b2:95:44:d5:54:f5:85:3c:26:c2:27: 87:dc:5e:31:b4:f8:d2:05:4c:77:40:00:0a:f8:16:bd:e5:d3: ef:d5:1f:08:40:58:d3:1c:65:9b:58:88:e6:cf:b7:69:bc:e4: 1c:2d:e6:49:3a:cf:41:d8:8e:ce:13:c6:78:84:ab:43:5c:13: 74:16:fd:2f:8b:08:86:c1:ca:fe:81:c3:ed:9a:17:f3:bf:68: d7:7d:8f:a2:88:44:9a:0e:f0:2f:10:2e:aa:17:01:b4:f1:52: 71:06:54:01:ae:41:b0:fb:a8:b9:43:a9:7a:d8:01:14:40:8b: 06:7c:85:c9:29:52:ed:3b:50:b4:7f:61:21:ab:1b:c2:57:b4: 0c:f2:d4:de:86:cd:ea:b3:ac:18:ed:4f:9e:f9:0f:f3:e4:2b: 7a:96:a0:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF OTM1Nzc2QTYwHhcNMjUxMjIwMTczOTM5WhcNMjUxMjI3MTczOTM5WjAYMRYwFAYD VQQDDA02OTQ2ZGY1Yi00ZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAss3JgApGyJKG/pijZmw7dx+37DuoZf1tiu9ki0QqkbQziURYSoV/B2226raj 7BFtWir42/8uzKIdhIwzG6OlxQLQgqKQCvFczOCAB89Lw/kuhwCXe0TnEOPulmNQ tYfFFCMQA+m8Fb67xCygh7iTvjB7yzkPa9x5s7RJBx+YUY3Gw9uXAyTf1Fy7w/h2 noq8YkO42lOzhoAa0tv5KLIUrKQfuu3HbIgf6BIahhar1aenvIQ3qQHu+HDpGclg tiXPPVhmHjFdbLPWuVp6fGG0Pgd+kA/qulosubhzYPcS7dgyiYZRI7stGhwxSBhD ma7smKjjRGrDsF4ONRowCDLYmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSdsdEz iJ8gEKnOz3icWX/X6v55MB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTlCNy9BNEVDNTNGNkUyQjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNm aGpoSnEyUXlNOFBwTlhkcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8k/VmOrwJNYbAh+D6BWw1YzXi5XJ20Jf8zQ3IN/rbbTBVuuHWLYtL 4zp2b59eIZU0Maq7Y970qPLJK+W+Zu0rVwp9A2hT3XbS4npF3AxtlnhN1fvdrCQ5 xuZ9mabBXARQspVE1VT1hTwmwieH3F4xtPjSBUx3QAAK+Ba95dPv1R8IQFjTHGWb WIjmz7dpvOQcLeZJOs9B2I7OE8Z4hKtDXBN0Fv0viwiGwcr+gcPtmhfzv2jXfY+i iESaDvAvEC6qFwG08VJxBlQBrkGw+6i5Q6l62AEUQIsGfIXJKVLtO1C0f2EhqxvC V7QM8tTehs3qs6wY7U+e+Q/z5Ct6lqDk -----END CERTIFICATE-----Generated at Sun Dec 21 23:37:42 2025 by rpki-client