This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft File: Ilh8wstvNRBjeD-xz9pm5E4uysE.mft (raw, json) Hash identifier: AXd0Of6yVENFi3I29USX3J4zN+ibrtWQ5qFqToSPj/M= Subject key identifier: DB:19:F2:D9:3D:4A:75:40:3F:87:B0:55:18:E2:C0:19:31:89:9B:BF Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1 Certificate issuer: /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft Manifest number: 74 Signing time: Fri 05 Dec 2025 04:44:50 +0000 Manifest this update: Fri 05 Dec 2025 04:44:49 +0000 Manifest next update: Fri 12 Dec 2025 04:44:49 +0000 Files and hashes: 1: Ilh8wstvNRBjeD-xz9pm5E4uysE.crl (hash: 8pCO4Cmc2Zkqi1Sp411EVYixvdKsItb3938ltdr75h0=) 2: BDA4863C1E6111F09E161078C4F9AE02.roa (hash: 3wClZfyrRuvHiw5+gXU2O2uGIydycpdkHEs8+vS/Fqc=) 3: 874D690486F911F0AEE9D81BC4F9AE02.roa (hash: d/YokLZlSeyNxo7/k+XKoCvVYm4Hgi7kRhirRzPKQaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1 Validity Not Before: Dec 5 04:44:49 2025 GMT Not After : Dec 12 04:44:49 2025 GMT Subject: CN=69326341-104b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:8c:d2:68:98:1b:f0:66:cd:6f:97:b5:94: f3:a0:50:e4:57:d4:4f:5e:27:fe:3b:56:31:2e:49: c0:5b:09:b4:70:b4:eb:e7:a6:8f:26:95:6c:85:85: 78:91:9c:d9:c4:1d:99:c3:e5:25:67:f3:a4:4c:32: b9:42:2f:32:81:94:85:bf:31:5e:c6:20:30:f4:22: 86:61:a1:a6:ed:59:ed:dc:1d:22:05:30:c8:04:ab: d6:9a:7f:ad:8d:16:a7:66:a2:56:81:40:bd:a1:d5: d6:ac:67:8a:53:c0:6a:53:20:d1:f8:4b:1b:27:36: a7:33:8d:29:42:7f:06:a3:3f:d2:53:fb:d1:84:94: 30:90:df:69:23:03:7d:0c:8e:b7:05:de:74:04:ad: a2:b7:83:79:f6:47:fc:e7:be:4f:4a:70:4b:4c:3e: 68:41:42:f0:ab:8b:5d:64:b2:76:4f:a2:e5:39:3b: a9:22:cb:16:20:02:c9:97:d1:f3:b7:0c:f9:c7:16: fc:05:71:70:1a:b8:10:e5:e9:05:6d:73:9e:ba:12: af:b0:b5:b6:72:be:6d:cd:a3:1c:43:92:bb:70:95: a0:0e:29:39:b3:0b:6a:74:f4:53:e3:ff:ff:95:b0: b6:5f:cb:bd:8d:2a:2c:2a:14:d3:43:ab:24:e3:93: d2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:19:F2:D9:3D:4A:75:40:3F:87:B0:55:18:E2:C0:19:31:89:9B:BF X509v3 Authority Key Identifier: keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a1:af:d6:a0:b5:0b:31:4e:8e:83:26:89:bc:6e:70:ea:97: 7a:cb:4a:57:29:5e:92:ca:24:b9:f6:54:9a:fc:5c:d6:e2:84: 2a:56:00:88:ef:cf:94:f0:11:76:a9:a9:8e:c7:ff:5d:6d:6f: 4b:56:a0:ef:43:33:26:42:35:f7:bd:8b:36:db:74:47:f7:b5: fe:7a:21:94:6e:98:d2:69:f7:fa:f5:fd:5a:e7:10:54:e5:1f: 34:2f:6d:c8:94:d7:f0:02:66:25:c3:82:d1:87:f8:e8:b6:c8: da:a3:3f:0d:52:9e:9c:6b:51:3f:06:23:81:ac:fc:d3:cd:3f: 03:40:ed:9e:ed:4c:a9:ea:ff:37:ff:a2:2c:4f:59:d8:e5:d7: 2f:f5:85:51:fb:89:71:4b:42:cb:9c:a7:ce:26:45:43:63:c1: 1e:cd:39:d1:0c:60:74:cf:b0:23:e3:91:bc:37:57:ee:16:68: 06:68:e7:59:d9:87:5d:39:70:47:9e:4c:7a:57:e0:1d:c9:f5: 38:f3:b9:cb:70:ca:0c:f2:49:fe:e7:67:48:2f:11:e6:78:20: cb:a5:9c:ee:7b:38:5b:fc:26:58:f3:97:26:d1:ab:4c:d3:00: 68:1d:a0:0d:9d:9d:c0:a1:bd:8e:4a:99:79:79:ef:d7:cf:b2: 00:6a:b5:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OUI5RDExMC8GA1UEBRMoMjI1ODdDQzJDQjZGMzUxMDYzNzgzRkIxQ0ZEQTY2RTQ0 RTJFQ0FDMTAeFw0yNTEyMDUwNDQ0NDlaFw0yNTEyMTIwNDQ0NDlaMBgxFjAUBgNV BAMTDTY5MzI2MzQxLTEwNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw1IzSaJgb8GbNb5e1lPOgUORX1E9eJ/47VjEuScBbCbRwtOvnpo8mlWyFhXiR nNnEHZnD5SVn86RMMrlCLzKBlIW/MV7GIDD0IoZhoabtWe3cHSIFMMgEq9aaf62N FqdmolaBQL2h1dasZ4pTwGpTINH4SxsnNqczjSlCfwajP9JT+9GElDCQ32kjA30M jrcF3nQEraK3g3n2R/znvk9KcEtMPmhBQvCri11ksnZPouU5O6kiyxYgAsmX0fO3 DPnHFvwFcXAauBDl6QVtc566Eq+wtbZyvm3NoxxDkrtwlaAOKTmzC2p09FPj//+V sLZfy72NKiwqFNNDqyTjk9JZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2xny2T1K dUA/h7BVGOLAGTGJm78wHwYDVR0jBBgwFoAUIlh8wstvNRBjeD+xz9pm5E4uysEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5QjlELzI0MDJGQjA4MUU2 MTExRjBBREQzRDE3M0M0RjlBRTAyL0lsaDh3c3R2TlJCamVELXh6OXBtNUU0dXlz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWxoOHdzdHZOUkJqZUQteHo5cG01RTR1eXNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 QjlELzI0MDJGQjA4MUU2MTExRjBBREQzRDE3M0M0RjlBRTAyL0lsaDh3c3R2TlJC amVELXh6OXBtNUU0dXlzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHuhr9agtQsxTo6DJom8bnDql3rLSlcpXpLKJLn2VJr8XNbihCpWAIjv z5TwEXapqY7H/11tb0tWoO9DMyZCNfe9izbbdEf3tf56IZRumNJp9/r1/VrnEFTl HzQvbciU1/ACZiXDgtGH+Oi2yNqjPw1SnpxrUT8GI4Gs/NPNPwNA7Z7tTKnq/zf/ oixPWdjl1y/1hVH7iXFLQsucp84mRUNjwR7NOdEMYHTPsCPjkbw3V+4WaAZo51nZ h105cEeeTHpX4B3J9TjzuctwygzySf7nZ0gvEeZ4IMulnO57OFv8JljzlybRq0zT AGgdoA2dncChvY5KmXl579fPsgBqtTg= -----END CERTIFICATE-----Generated at Sun Dec 7 01:11:11 2025 by rpki-client