This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft File: I9szI90s15w3OFgdQvSrD0mINMI.mft (raw, json) Hash identifier: MNp9Bewpr7qKPqkn350Yk+SmpTZCBAFr7+FhRdYzwdE= Subject key identifier: 06:99:37:03:B3:70:90:82:98:AD:5D:A9:DE:A1:A6:0D:FE:1A:1F:2A Authority key identifier: 23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2 Certificate issuer: /CN=A911C28A/serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2 Certificate serial: 0628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft Manifest number: 0622 Signing time: Thu 04 Dec 2025 21:32:53 +0000 Manifest this update: Thu 04 Dec 2025 21:32:52 +0000 Manifest next update: Thu 11 Dec 2025 21:32:52 +0000 Files and hashes: 1: I9szI90s15w3OFgdQvSrD0mINMI.crl (hash: oOaXQZZOOHzpdSVZZJbzpKcUGfaFmmw8M22ECVjNHds=) 2: 2D5E84AAC2A911EBB2025B36C4F9AE02.roa (hash: dCkT6bEicYFMQep7850krPGfdcTTuO3WSPylF2CQFFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28A, serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2 Validity Not Before: Dec 4 21:32:52 2025 GMT Not After : Dec 11 21:32:52 2025 GMT Subject: CN=6931fe04-86c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:e1:f7:a0:56:56:fa:df:1a:01:67:27:28: c4:8a:73:11:89:ee:16:4f:61:ac:c1:10:20:d5:85: 8e:50:65:5a:c6:b4:d8:2c:06:25:0a:ae:30:16:98: 6f:99:1a:6d:ff:72:01:ae:6d:06:fe:84:a9:04:44: c9:f3:23:42:57:7a:ec:05:28:e9:0f:35:58:94:b1: a1:75:25:af:f1:ba:97:22:a1:f7:d9:c8:94:3b:ee: c1:03:f2:52:bd:31:b6:f7:17:44:e9:41:e4:a8:50: 5f:d1:93:2d:af:38:d8:5e:de:71:29:43:75:c0:68: 49:69:94:90:d2:79:7b:02:22:da:63:8a:b4:5c:e9: 55:71:fa:fc:15:4c:83:4f:15:17:ba:63:24:17:f4: 8d:bd:f7:43:a1:e6:c8:41:bd:1c:58:ea:bc:b4:46: bc:b3:18:cc:53:3e:ba:c6:91:de:73:69:ef:47:94: c5:a8:24:2d:09:e3:ef:ce:5a:0c:0e:31:3b:07:85: 71:21:80:8d:16:28:b0:db:a9:ce:c9:b9:6b:5e:25: b5:f2:e2:19:9b:85:35:7d:64:05:bf:6f:c7:39:b3: e0:b9:2e:2f:a3:65:2f:f4:08:93:f6:60:f4:36:ff: d5:30:2b:09:9b:7c:11:b7:89:f3:6e:0e:cf:bb:19: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:99:37:03:B3:70:90:82:98:AD:5D:A9:DE:A1:A6:0D:FE:1A:1F:2A X509v3 Authority Key Identifier: keyid:23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:4b:55:51:b7:34:84:28:a9:57:9d:2f:b7:7f:eb:35:5a:83: f9:21:e3:8c:05:b7:88:59:61:d9:62:6e:67:b9:24:64:e0:08: d0:d6:70:ab:65:50:f1:af:d4:ca:2d:0b:cf:bc:16:84:f6:58: 2a:8c:c4:a5:e6:84:88:2d:ff:d9:43:2f:2c:a3:f9:f3:7b:fc: a2:8d:f5:0d:7c:15:08:cb:dd:86:6a:27:5d:bd:1d:b3:12:84: b5:6c:2a:36:b4:86:69:e4:eb:79:44:b1:90:da:b2:07:9c:2d: ad:ae:25:d7:64:2a:90:5c:d8:9a:e1:30:63:74:1a:15:a6:8d: 42:90:8c:50:45:18:ae:24:c8:1c:2e:bf:c5:84:e2:3b:36:56: f5:e7:66:ee:6b:9b:f0:b5:b4:65:58:5a:f0:8b:dd:29:e0:a6: 3b:f1:e5:56:0e:a1:70:4c:90:43:49:1b:b4:0e:7f:e7:e5:ec: 48:6c:a7:eb:ea:67:25:14:26:46:60:91:e0:7e:da:db:6c:2a: e6:6d:db:93:28:db:36:5e:ac:f3:ff:1c:e8:d8:89:29:f5:39: 78:fb:11:1d:0b:f9:b9:fa:21:e9:fa:ab:df:39:e1:fc:b4:62: ce:f8:89:23:19:f2:e8:ff:78:11:cf:c4:76:99:eb:e9:40:92: e2:d7:58:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEExMTAvBgNVBAUTKDIzREIzMzIzREQyQ0Q3OUMzNzM4NTgxRDQyRjRBQjBG NDk4ODM0QzIwHhcNMjUxMjA0MjEzMjUyWhcNMjUxMjExMjEzMjUyWjAYMRYwFAYD VQQDEw02OTMxZmUwNC04NmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNTh96BWVvrfGgFnJyjEinMRie4WT2GswRAg1YWOUGVaxrTYLAYlCq4wFphv mRpt/3IBrm0G/oSpBETJ8yNCV3rsBSjpDzVYlLGhdSWv8bqXIqH32ciUO+7BA/JS vTG29xdE6UHkqFBf0ZMtrzjYXt5xKUN1wGhJaZSQ0nl7AiLaY4q0XOlVcfr8FUyD TxUXumMkF/SNvfdDoebIQb0cWOq8tEa8sxjMUz66xpHec2nvR5TFqCQtCePvzloM DjE7B4VxIYCNFiiw26nOyblrXiW18uIZm4U1fWQFv2/HObPguS4vo2Uv9AiT9mD0 Nv/VMCsJm3wRt4nzbg7PuxnkwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaZNwOz cJCCmK1dqd6hpg3+Gh8qMB8GA1UdIwQYMBaAFCPbMyPdLNecNzhYHUL0qw9JiDTC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4QS8yQTM1NjZBOEMy QTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1dzNPRmdkUXZTckQwbUlO TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5c3pJOTBzMTV3M09GZ2RRdlNyRDBtSU5NSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzI4QS8yQTM1NjZBOEMyQTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1 dzNPRmdkUXZTckQwbUlOTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtS1VRtzSEKKlXnS+3f+s1WoP5IeOMBbeIWWHZYm5nuSRk4AjQ1nCr ZVDxr9TKLQvPvBaE9lgqjMSl5oSILf/ZQy8so/nze/yijfUNfBUIy92GaiddvR2z EoS1bCo2tIZp5Ot5RLGQ2rIHnC2triXXZCqQXNia4TBjdBoVpo1CkIxQRRiuJMgc Lr/FhOI7Nlb152bua5vwtbRlWFrwi90p4KY78eVWDqFwTJBDSRu0Dn/n5exIbKfr 6mclFCZGYJHgftrbbCrmbduTKNs2Xqzz/xzo2Ikp9Tl4+xEdC/m5+iHp+qvfOeH8 tGLO+IkjGfLo/3gRz8R2mevpQJLi11jF -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:50 2025 by rpki-client