This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft File: iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json) Hash identifier: izS8D5saaWPCLtXQZU4VKOSAtnDbmWpTKwUEMHlT2lo= Subject key identifier: E0:B1:C9:7A:F1:65:EE:46:12:66:90:CC:D9:85:68:3C:93:5E:A5:91 Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Certificate serial: 0CDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft Manifest number: 0CCA Signing time: Sat 06 Dec 2025 17:35:26 +0000 Manifest this update: Sat 06 Dec 2025 17:35:25 +0000 Manifest next update: Sat 13 Dec 2025 17:35:25 +0000 Files and hashes: 1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: ACuVK2E8ommwQeEdeECCcBnJK5tDzVHItV/9Cr4Uh/k=) 2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: O6ZOPVwxFkNjeJWmRWdaGnVAImdC2WliszZw8u4xZjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3290 (0xcda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCF8, serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Validity Not Before: Dec 6 17:35:25 2025 GMT Not After : Dec 13 17:35:25 2025 GMT Subject: CN=6934695e-5c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:79:13:90:c8:90:9d:a3:98:36:d3:8b:07: 17:ee:73:db:e8:44:ec:43:30:f5:6c:19:53:91:86: 9e:f5:20:b8:22:7d:f9:f6:01:f6:04:8d:8b:df:14: d8:f9:b6:a0:b6:f3:cc:d7:f6:cf:24:68:14:71:9f: 1b:50:f9:4f:20:a4:f9:63:8f:2b:b5:05:a7:8e:b5: c6:8a:fb:db:97:53:ed:23:be:71:3e:ee:55:0d:12: 2a:71:5b:04:5c:4f:23:fd:8e:d5:a5:67:6f:ce:54: bd:cb:e8:36:63:27:3b:29:86:25:96:ea:46:40:cb: 43:31:3e:d9:5f:01:e6:36:af:76:ad:7a:22:af:77: ed:0e:e4:f8:24:45:8b:e7:81:c6:8f:bb:ac:f4:be: 62:29:4a:62:35:f5:b2:b1:86:84:23:cb:b6:f0:d2: 01:f4:ef:1b:b0:27:bf:a5:20:43:78:6f:4c:39:09: 3a:e4:ab:7a:78:33:06:cc:fc:0f:30:69:92:5f:90: 41:af:26:68:f0:59:85:88:ec:e6:d7:22:10:eb:4b: 70:11:4a:98:7f:2d:b6:df:d5:8b:48:44:d8:ea:a7: 0f:15:9b:63:f0:6b:68:27:6e:8f:72:aa:c6:e2:2c: cc:c6:2e:0a:49:97:a9:6a:0e:7b:55:60:c2:2d:eb: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B1:C9:7A:F1:65:EE:46:12:66:90:CC:D9:85:68:3C:93:5E:A5:91 X509v3 Authority Key Identifier: keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:7a:c9:cf:24:5f:e6:44:4e:63:ad:81:0c:05:db:93:1e:6d: a7:99:f0:1b:67:96:43:64:33:5e:c4:6d:b5:3f:ab:5b:8a:ca: d3:01:cd:88:32:3e:d2:25:9f:50:12:f7:bd:92:6f:79:3e:98: 7b:58:58:91:72:56:4f:b2:f6:ab:6f:e6:0f:89:be:c9:e4:df: 2c:c1:3d:aa:9f:6c:cd:49:fd:6f:b5:45:d4:f7:77:fd:35:b0: d5:46:f6:3f:f6:9a:6a:64:ec:1e:48:73:82:bf:37:25:f2:35: c6:75:e6:5b:fc:89:2e:4f:9f:2f:2f:77:2b:3a:a3:53:e3:89: 1f:90:79:f9:76:a5:8f:1a:33:da:51:20:dd:4a:f0:5a:4a:f2: 4f:f9:04:a7:53:b4:1b:64:a9:7e:ea:b2:67:a0:0d:6d:6c:83: b9:5b:0c:38:42:0f:b4:91:e6:b3:ed:5f:e4:28:a4:72:41:6d: 03:8b:f7:5c:a1:64:c9:49:2c:75:ae:ba:31:41:9f:d8:b9:88: d3:be:7d:99:18:cc:1b:05:28:04:37:69:48:02:57:ad:64:cd: 3b:24:be:f5:5b:45:fe:e6:96:ce:72:5c:e8:59:88:7a:c8:24: 23:65:8d:d6:22:f3:65:c3:7a:c5:55:a0:2f:8a:64:09:a2:e2: d5:df:a2:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDRjgxMTAvBgNVBAUTKDg4OTMzMkE0RTI1QzIxRTg5QkZBNDNGQTAwMkQyRDFG MEFEN0U3OTcwHhcNMjUxMjA2MTczNTI1WhcNMjUxMjEzMTczNTI1WjAYMRYwFAYD VQQDEw02OTM0Njk1ZS01YzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuJ5E5DIkJ2jmDbTiwcX7nPb6ETsQzD1bBlTkYae9SC4In359gH2BI2L3xTY +bagtvPM1/bPJGgUcZ8bUPlPIKT5Y48rtQWnjrXGivvbl1PtI75xPu5VDRIqcVsE XE8j/Y7VpWdvzlS9y+g2Yyc7KYYllupGQMtDMT7ZXwHmNq92rXoir3ftDuT4JEWL 54HGj7us9L5iKUpiNfWysYaEI8u28NIB9O8bsCe/pSBDeG9MOQk65Kt6eDMGzPwP MGmSX5BBryZo8FmFiOzm1yIQ60twEUqYfy2239WLSETY6qcPFZtj8GtoJ26PcqrG 4izMxi4KSZepag57VWDCLetuFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCxyXrx Ze5GEmaQzNmFaDyTXqWRMB8GA1UdIwQYMBaAFIiTMqTiXCHom/pD+gAtLR8K1+eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNGOC9CNzA3OEY4MDAw NTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0llaWIta1A2QUMwdEh3clg1 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKTXlwT0pjSWVpYi1rUDZBQzB0SHdyWDU1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNGOC9CNzA3OEY4MDAwNTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0ll aWIta1A2QUMwdEh3clg1NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgesnPJF/mRE5jrYEMBduTHm2nmfAbZ5ZDZDNexG21P6tbisrTAc2I Mj7SJZ9QEve9km95Pph7WFiRclZPsvarb+YPib7J5N8swT2qn2zNSf1vtUXU93f9 NbDVRvY/9ppqZOweSHOCvzcl8jXGdeZb/IkuT58vL3crOqNT44kfkHn5dqWPGjPa USDdSvBaSvJP+QSnU7QbZKl+6rJnoA1tbIO5Www4Qg+0keaz7V/kKKRyQW0Di/dc oWTJSSx1rroxQZ/YuYjTvn2ZGMwbBSgEN2lIAletZM07JL71W0X+5pbOclzoWYh6 yCQjZY3WIvNlw3rFVaAvimQJouLV36J7 -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:12 2025 by rpki-client