This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json) Hash identifier: QM8uW0Z1KSN/QoTCjDwU2wxG51D/x+x52F2gBfBXAnU= Subject key identifier: 43:FE:92:1F:78:65:BB:E9:F1:77:BE:06:55:4E:9B:4A:9E:64:5C:6A Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Certificate serial: 0D69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft Manifest number: 0D5C Signing time: Thu 04 Dec 2025 17:30:54 +0000 Manifest this update: Thu 04 Dec 2025 17:30:54 +0000 Manifest next update: Thu 11 Dec 2025 17:30:54 +0000 Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: UuKRr8O4uiJGa1rjjZ1j5/8Ruv61CsETI9L9kB7DRmk=) 2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: KmGf8Zvcyufmo51iUasTSRX2HWDW8cDhuB6ClqAH62g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3433 (0xd69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Validity Not Before: Dec 4 17:30:54 2025 GMT Not After : Dec 11 17:30:54 2025 GMT Subject: CN=6931c54e-9199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a9:d1:83:e6:a4:83:03:7d:9b:24:9f:16:b3: 79:4a:4b:eb:e5:a3:7a:10:98:c3:9f:38:b0:d0:ee: b0:34:99:d6:b5:77:1a:16:54:56:7e:58:5e:58:b7: d4:81:83:73:0e:09:49:5e:94:34:39:e2:d6:7b:b4: bf:cf:83:4f:ed:33:7f:30:c6:25:23:79:a2:55:75: 9b:21:28:64:5d:6c:92:ea:0f:b0:5b:d4:e7:a0:cb: 39:93:33:f6:82:e2:86:b2:b3:c0:26:93:6e:e8:26: c9:73:73:d6:14:66:89:54:60:ef:02:55:d1:75:80: 94:6a:1c:bf:0f:71:7b:cd:cf:99:51:30:1d:25:2e: fc:ba:a7:8c:7e:d2:63:ce:01:75:67:6c:20:e6:32: ef:e2:d3:f6:aa:e3:a4:96:ce:ce:75:84:dc:93:0a: db:d0:99:e0:42:25:7c:34:88:5b:8f:bc:30:7e:fc: cc:2c:94:3b:4d:cd:1b:e4:b7:07:90:fa:8b:38:30: 28:20:14:4a:41:b6:6e:82:aa:7c:c8:ff:54:cf:f4: 93:38:96:1f:22:d0:2c:b7:af:c7:2f:a1:72:8e:55: 35:57:7d:d3:28:62:b6:25:0b:1c:3f:41:7c:a8:81: b0:79:ff:3e:6e:bf:df:e4:d4:72:3a:68:5c:6e:53: bd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FE:92:1F:78:65:BB:E9:F1:77:BE:06:55:4E:9B:4A:9E:64:5C:6A X509v3 Authority Key Identifier: keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ce:b6:5b:3c:09:e1:92:20:5f:e2:81:2c:dc:1c:dd:5f:49: cf:a8:13:da:40:09:b7:3d:4d:9c:ec:27:ff:77:05:08:b0:fc: 63:e3:f5:9c:6c:33:79:4c:17:0d:ee:5d:3c:8d:c8:ab:ff:93: 88:ca:54:db:6b:29:b5:b6:6d:66:20:e1:94:88:cb:e0:cd:72: 81:6b:e5:68:8e:66:f6:03:fe:4f:db:2f:4b:c7:62:5b:ae:74: 41:c0:8a:2a:22:81:2c:34:b1:5c:bd:fe:5d:17:f0:15:b3:a1: 3f:2a:89:e4:03:20:24:8c:de:cb:56:d5:fe:f2:4b:ef:df:2c: f3:a2:c4:1c:70:b5:fa:25:14:89:b7:24:b2:20:1b:0d:38:15: b2:04:40:83:7b:9e:39:aa:2d:5a:4e:64:c2:c6:e3:72:01:fb: d4:96:e7:e6:3f:64:22:15:45:43:75:7d:2d:ad:f1:d8:96:5f: 6c:0c:04:7e:f1:9f:93:3e:85:76:36:1e:ae:3a:62:16:c6:8f: 9c:fd:b5:26:41:97:77:cb:95:7d:7f:f0:98:97:ca:87:1a:10: 8e:5c:18:00:c7:5d:16:d9:18:67:65:b3:b0:a1:61:f3:23:b7: 37:e8:9e:4a:c0:51:34:ca:f9:74:81:95:8e:6f:54:98:0d:ab: 86:83:bc:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF OTM1Nzc2QTYwHhcNMjUxMjA0MTczMDU0WhcNMjUxMjExMTczMDU0WjAYMRYwFAYD VQQDEw02OTMxYzU0ZS05MTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3anRg+akgwN9mySfFrN5Skvr5aN6EJjDnziw0O6wNJnWtXcaFlRWflheWLfU gYNzDglJXpQ0OeLWe7S/z4NP7TN/MMYlI3miVXWbIShkXWyS6g+wW9TnoMs5kzP2 guKGsrPAJpNu6CbJc3PWFGaJVGDvAlXRdYCUahy/D3F7zc+ZUTAdJS78uqeMftJj zgF1Z2wg5jLv4tP2quOkls7OdYTckwrb0JngQiV8NIhbj7wwfvzMLJQ7Tc0b5LcH kPqLODAoIBRKQbZugqp8yP9Uz/STOJYfItAst6/HL6FyjlU1V33TKGK2JQscP0F8 qIGwef8+br/f5NRyOmhcblO9lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEP+kh94 Zbvp8Xe+BlVOm0qeZFxqMB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTlCNy9BNEVDNTNGNkUyQjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNm aGpoSnEyUXlNOFBwTlhkcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgzrZbPAnhkiBf4oEs3BzdX0nPqBPaQAm3PU2c7Cf/dwUIsPxj4/Wc bDN5TBcN7l08jcir/5OIylTbaym1tm1mIOGUiMvgzXKBa+Vojmb2A/5P2y9Lx2Jb rnRBwIoqIoEsNLFcvf5dF/AVs6E/KonkAyAkjN7LVtX+8kvv3yzzosQccLX6JRSJ tySyIBsNOBWyBECDe545qi1aTmTCxuNyAfvUlufmP2QiFUVDdX0trfHYll9sDAR+ 8Z+TPoV2Nh6uOmIWxo+c/bUmQZd3y5V9f/CYl8qHGhCOXBgAx10W2RhnZbOwoWHz I7c36J5KwFE0yvl0gZWOb1SYDauGg7wZ -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:43 2025 by rpki-client