This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft File: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft (raw, json) Hash identifier: bpzUWIzXko9mjYSi2YC6k8eNlfJ/LLVdm1m+miO5cr0= Subject key identifier: 1A:85:AE:BD:7D:21:AA:E2:09:15:A2:D2:C4:55:EA:43:5B:90:AC:25 Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD Certificate issuer: /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft Manifest number: 10 Signing time: Fri 05 Dec 2025 05:45:26 +0000 Manifest this update: Fri 05 Dec 2025 05:45:25 +0000 Manifest next update: Fri 12 Dec 2025 05:45:25 +0000 Files and hashes: 1: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl (hash: 5sI5xrjoAQjjj9BWq522ICIHhj1mNw1wjMCTX2v7EUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD Validity Not Before: Dec 5 05:45:25 2025 GMT Not After : Dec 12 05:45:25 2025 GMT Subject: CN=69327175-627d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:35:96:27:93:3e:cd:71:58:c4:cb:18:a2: 34:8a:b6:cc:88:64:d3:db:f0:1b:6b:61:e8:02:53: 93:2f:7a:1a:76:59:ef:6d:00:ba:39:a3:ca:f9:56: 7e:7e:3e:7f:9c:b8:51:fc:ef:3b:86:60:af:77:c5: 42:4a:22:99:6f:70:43:74:2f:a5:0d:01:f2:16:0f: 12:d0:6a:69:d1:a3:9b:47:ee:77:46:a5:d8:3c:1d: 1e:0f:27:0c:6f:fb:c2:b7:88:53:fc:a7:8f:09:11: ee:a7:77:a8:21:83:fa:0f:13:63:b2:3c:21:14:3d: e1:d8:41:e7:a0:58:10:fb:64:91:87:b7:51:12:cf: 1d:20:39:5f:8c:54:ee:83:85:89:0e:9d:15:ae:63: b3:22:46:03:c8:c3:f0:b9:5a:b1:7d:9a:e0:51:9a: 53:ee:1d:bb:6d:6b:74:70:f3:16:3f:b6:ee:42:ca: a7:67:3e:79:63:af:24:e3:b6:ec:13:d9:3f:14:44: 07:4c:3d:62:b4:5a:84:a9:ff:83:27:a7:c6:1b:ae: 8c:86:20:9a:2b:67:f6:a5:e8:26:54:3a:b6:13:91: c2:b2:15:07:cd:d8:8b:5e:76:07:29:5d:9a:5d:89: 67:de:0c:81:27:3f:61:3e:28:d5:92:74:ab:3a:a4: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:85:AE:BD:7D:21:AA:E2:09:15:A2:D2:C4:55:EA:43:5B:90:AC:25 X509v3 Authority Key Identifier: keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:10:49:b3:be:b7:af:58:0a:9f:f5:2c:d6:c4:9b:70:99:b1: 16:a3:e8:6c:33:aa:19:74:6a:b1:78:2b:9b:bf:99:13:aa:89: f1:fb:33:63:55:a8:a9:e4:bb:e5:00:df:1b:5d:81:74:0f:46: 7a:9c:96:c7:6b:65:09:5d:e8:3f:79:1f:55:ad:bf:24:69:a0: 76:d5:96:0c:1a:2e:df:74:af:3b:5d:02:0c:d4:9a:fa:64:35: c7:6b:6b:60:e5:dc:5b:69:bc:d3:3d:16:c9:1b:01:21:9a:e9: e5:07:be:1e:0c:e8:d4:30:42:af:c5:35:cf:ff:b1:38:b4:c1: ab:89:15:6a:96:19:65:71:fd:8f:b2:4e:09:5a:67:90:66:11: ae:7f:6d:ac:b0:48:94:ba:af:cc:2e:cd:d4:82:64:f7:37:75: 88:f4:8b:f5:9a:61:f5:45:b9:ea:03:ab:b3:bf:bf:7f:4b:11: b4:eb:b2:61:b8:14:61:2e:e1:83:70:20:1d:d2:ba:92:8a:a7: 13:79:68:a6:7d:7b:e2:a4:d4:50:a0:65:fd:f4:25:08:52:20: c9:97:8f:b9:fc:ec:26:0c:25:de:71:7a:0b:7b:a5:9e:df:64: 22:52:83:fc:9c:ce:e2:88:8e:84:94:57:9c:0f:d1:5d:f2:ad: 7c:5d:c4:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDk2MDExMC8GA1UEBRMoOEEwMzE3NjJFMDk0MzlDMUY1Nzc2NjdFNDJGRTBDMTM3 OUFCMURGRDAeFw0yNTEyMDUwNTQ1MjVaFw0yNTEyMTIwNTQ1MjVaMBgxFjAUBgNV BAMTDTY5MzI3MTc1LTYyN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9PzWWJ5M+zXFYxMsYojSKtsyIZNPb8BtrYegCU5Mvehp2We9tALo5o8r5Vn5+ Pn+cuFH87zuGYK93xUJKIplvcEN0L6UNAfIWDxLQamnRo5tH7ndGpdg8HR4PJwxv +8K3iFP8p48JEe6nd6ghg/oPE2OyPCEUPeHYQeegWBD7ZJGHt1ESzx0gOV+MVO6D hYkOnRWuY7MiRgPIw/C5WrF9muBRmlPuHbtta3Rw8xY/tu5CyqdnPnljryTjtuwT 2T8URAdMPWK0WoSp/4Mnp8YbroyGIJorZ/al6CZUOrYTkcKyFQfN2ItedgcpXZpd iWfeDIEnP2E+KNWSdKs6pKHvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGoWuvX0h quIJFaLSxFXqQ1uQrCUwHwYDVR0jBBgwFoAUigMXYuCUOcH1d2Z+Qv4ME3mrHf0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwOTYwL0NCMzAyQTlDQkI5 RTExRjA4NTU4RDExOUM0RjlBRTAyL2lnTVhZdUNVT2NIMWQyWi1RdjRNRTNtckhm MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWdNWFl1Q1VPY0gxZDJaLVF2NE1FM21ySGYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw OTYwL0NCMzAyQTlDQkI5RTExRjA4NTU4RDExOUM0RjlBRTAyL2lnTVhZdUNVT2NI MWQyWi1RdjRNRTNtckhmMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH0QSbO+t69YCp/1LNbEm3CZsRaj6Gwzqhl0arF4K5u/mROqifH7M2NV qKnku+UA3xtdgXQPRnqclsdrZQld6D95H1WtvyRpoHbVlgwaLt90rztdAgzUmvpk Ncdra2Dl3FtpvNM9FskbASGa6eUHvh4M6NQwQq/FNc//sTi0wauJFWqWGWVx/Y+y TglaZ5BmEa5/baywSJS6r8wuzdSCZPc3dYj0i/WaYfVFueoDq7O/v39LEbTrsmG4 FGEu4YNwIB3SupKKpxN5aKZ9e+Kk1FCgZf30JQhSIMmXj7n87CYMJd5xegt7pZ7f ZCJSg/yczuKIjoSUV5wP0V3yrXxdxFU= -----END CERTIFICATE-----Generated at Sat Dec 6 16:51:43 2025 by rpki-client