This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json) Hash identifier: slMunSr69W5L+5022mkECN/C4x7tU0jacT2WwsjwnWo= Subject key identifier: 0E:90:3F:6A:86:03:26:20:3C:51:44:29:72:0F:49:24:FC:3C:E4:F1 Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Certificate serial: 04FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft Manifest number: 04F4 Signing time: Thu 04 Dec 2025 22:17:18 +0000 Manifest this update: Thu 04 Dec 2025 22:17:17 +0000 Manifest next update: Thu 11 Dec 2025 22:17:17 +0000 Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: tVEPlE8TmD6flMSpJ044ARIzNoNBViVzNd7k5HeVOTQ=) 2: D19C3D9CCB9F11F090C50D0BC4F9AE02.roa (hash: qRx7TQ6UV8tNdrKdv3Zo/CrjupoAaJ536/Jh6JtiZmA=) 3: A18054D6CB9F11F088CB660AC4F9AE02.roa (hash: FvO8DlZzQVmPTZqjUi7Dxx3ih+VGjpPESsv0+jY8ciU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Validity Not Before: Dec 4 22:17:17 2025 GMT Not After : Dec 11 22:17:17 2025 GMT Subject: CN=6932086d-662f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:90:cb:b9:1d:8b:b9:c4:6b:86:af:1c:32:be: c3:da:00:1a:fa:f2:0b:d8:c2:f0:ab:1c:4d:fb:87: a3:02:b6:d4:c0:c4:64:52:a9:f6:f6:7b:45:61:a7: 2f:d5:45:3b:6e:77:6d:71:90:1a:23:39:dd:b1:85: 98:99:25:10:ee:fe:4f:62:c5:f0:19:3d:52:c3:13: b6:dc:1e:f4:c1:7d:38:36:42:62:c7:3f:04:2d:71: b4:db:8c:a4:00:2c:5e:36:13:74:b6:96:48:5a:5f: f0:d6:60:d1:54:7e:69:20:4a:5f:e9:72:2c:57:74: 43:e2:5c:18:54:9d:0f:66:2e:75:08:52:92:19:b3: b0:8a:f9:3a:87:69:7f:9f:f9:9e:89:7a:09:93:39: f5:4d:db:b7:c8:a1:c2:eb:d3:32:2f:b6:6a:1c:23: 6b:5c:21:92:25:53:a7:6f:f2:05:f0:33:d1:c6:22: 70:58:8e:c1:0c:e8:30:7d:35:04:1b:da:fe:c8:3f: 31:0e:dc:23:c2:cd:0b:e6:88:7f:7d:d8:64:46:77: 7b:01:59:04:2b:7d:ae:0a:a8:46:5b:8c:a3:c9:b5: 15:51:f6:e1:35:56:8f:02:bd:b8:81:0b:3c:38:33: a2:2f:6a:b9:9f:df:dd:f9:2d:9f:6c:09:36:5a:bf: c1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:90:3F:6A:86:03:26:20:3C:51:44:29:72:0F:49:24:FC:3C:E4:F1 X509v3 Authority Key Identifier: keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:68:34:79:f7:02:88:d7:3e:7e:09:a1:44:7b:ff:34:64:86: 42:ea:36:58:f1:52:91:8f:cd:61:cb:25:0f:ab:9d:6c:d4:13: 29:ca:59:71:19:e5:5a:4f:7c:a9:b1:f6:88:4b:46:c8:fd:57: a0:a2:8d:ee:25:ce:97:f5:f5:02:88:89:62:56:fd:42:39:e1: ac:c0:d2:af:b5:69:15:49:3f:45:2e:a1:d9:15:b5:ce:c9:6f: ac:e1:d8:78:58:8d:92:f8:4a:8b:16:f6:3b:87:96:ee:e9:9d: 8e:c5:e8:bd:58:0c:35:d9:28:43:7e:9b:fe:e4:65:30:44:2d: 4e:72:73:50:57:13:bc:7a:8a:ad:e6:e1:be:ae:6b:e7:25:06: b0:6f:6e:0c:19:76:c0:f5:f0:99:97:b4:0d:48:6c:b3:30:38: 0a:fd:ef:ad:84:62:d7:7a:8c:5a:44:08:49:01:81:fb:d6:00: 29:67:0c:cc:29:97:3c:f0:53:d4:21:b6:91:d7:2f:f4:98:8d: f5:66:ae:e7:e1:39:1c:06:be:92:a3:9c:8a:91:25:87:30:d0: 0b:a3:41:f1:94:5d:19:9d:88:36:bf:c1:33:b8:a8:e7:72:63: d4:2b:e4:05:27:eb:ba:e2:58:57:45:28:8d:81:d6:c4:b7:78: a4:6b:b9:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5N0ExMTAvBgNVBAUTKDg5NDM2NjNEQ0Y4MzA5RkEyNzRBNDY1MkZBODNBQkQy NkQ4NDI2NEYwHhcNMjUxMjA0MjIxNzE3WhcNMjUxMjExMjIxNzE3WjAYMRYwFAYD VQQDEw02OTMyMDg2ZC02NjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZDLuR2LucRrhq8cMr7D2gAa+vIL2MLwqxxN+4ejArbUwMRkUqn29ntFYacv 1UU7bndtcZAaIzndsYWYmSUQ7v5PYsXwGT1SwxO23B70wX04NkJixz8ELXG024yk ACxeNhN0tpZIWl/w1mDRVH5pIEpf6XIsV3RD4lwYVJ0PZi51CFKSGbOwivk6h2l/ n/meiXoJkzn1Tdu3yKHC69MyL7ZqHCNrXCGSJVOnb/IF8DPRxiJwWI7BDOgwfTUE G9r+yD8xDtwjws0L5oh/fdhkRnd7AVkEK32uCqhGW4yjybUVUfbhNVaPAr24gQs8 ODOiL2q5n9/d+S2fbAk2Wr/BJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6QP2qG AyYgPFFEKXIPSST8POTxMB8GA1UdIwQYMBaAFIlDZj3Pgwn6J0pGUvqDq9JthCZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDk3QS82MTY3QTZEMjNC MDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENmb25Ta1pTLW9PcjBtMkVK azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVTm1QYy1EQ2ZvblNrWlMtb09yMG0yRUprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDk3QS82MTY3QTZEMjNCMDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENm b25Ta1pTLW9PcjBtMkVKazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhaDR59wKI1z5+CaFEe/80ZIZC6jZY8VKRj81hyyUPq51s1BMpyllx GeVaT3ypsfaIS0bI/Vegoo3uJc6X9fUCiIliVv1COeGswNKvtWkVST9FLqHZFbXO yW+s4dh4WI2S+EqLFvY7h5bu6Z2Oxei9WAw12ShDfpv+5GUwRC1OcnNQVxO8eoqt 5uG+rmvnJQawb24MGXbA9fCZl7QNSGyzMDgK/e+thGLXeoxaRAhJAYH71gApZwzM KZc88FPUIbaR1y/0mI31Zq7n4TkcBr6So5yKkSWHMNALo0HxlF0ZnYg2v8EzuKjn cmPUK+QFJ+u64lhXRSiNgdbEt3ika7kz -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:16 2025 by rpki-client