This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft File: IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json) Hash identifier: w1P+k9bcsr2zh7dR8EGYFGuCizrXOH27QB38dkLZre8= Subject key identifier: 49:0B:83:DE:C6:54:AB:15:78:2C:FD:10:02:4A:48:46:35:6F:F6:4F Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 Certificate issuer: /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Certificate serial: 06F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft Manifest number: 06E7 Signing time: Thu 04 Dec 2025 20:52:28 +0000 Manifest this update: Thu 04 Dec 2025 20:52:28 +0000 Manifest next update: Thu 11 Dec 2025 20:52:28 +0000 Files and hashes: 1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: lle+UwUKbgBo/wuxQHReiPGGdau6qeoQ3dRud55AYzs=) 2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: 4G6we2Th1FMc0knctpDnaHzpZ2DpvqNSVPvecBD6QV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914022F, serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Validity Not Before: Dec 4 20:52:28 2025 GMT Not After : Dec 11 20:52:28 2025 GMT Subject: CN=6931f48c-ba2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:92:0c:73:96:9c:c6:dc:aa:48:fd:1b:96: 5f:8b:bb:4f:39:55:b4:45:92:73:dd:d2:29:35:c9: 73:55:30:87:2b:0c:e9:73:6a:5a:e0:54:75:ce:23: 0d:4f:c9:cd:c3:4d:6a:9f:2b:9d:a9:b6:66:16:9b: 18:97:ea:03:d6:9c:d5:c6:fd:56:70:30:f5:7e:3c: 2d:f8:dc:18:89:12:c0:1c:a2:da:54:7b:6c:60:bb: 1d:cf:15:97:88:9e:ae:53:8e:df:56:83:66:8f:a1: 2d:50:60:88:09:0c:dd:9d:3c:67:a5:e8:70:2d:c8: 94:c2:28:88:ec:2f:0f:ac:11:0e:c5:82:21:d2:59: 0d:1f:9d:64:b1:ed:44:4b:90:2c:8f:82:7f:a5:f3: 9b:7e:13:37:ab:b9:12:86:9b:ab:3d:09:19:7e:9c: 91:ed:0f:84:57:57:eb:ab:92:d9:1f:82:29:0b:71: b8:e7:79:5e:a9:ee:44:7c:4e:6b:b2:02:7c:cc:3b: 04:50:25:a4:4b:2c:75:0f:4e:0b:9e:ec:24:e7:21: 41:0c:74:e6:9a:b2:21:dc:71:df:88:d0:e8:4c:9b: a2:59:b6:e9:6f:6b:5a:c9:ce:1a:26:78:77:70:88: be:b2:12:cb:cd:ee:50:ad:e1:66:c1:ff:f4:f5:5d: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0B:83:DE:C6:54:AB:15:78:2C:FD:10:02:4A:48:46:35:6F:F6:4F X509v3 Authority Key Identifier: keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:44:ce:e4:e1:6c:f4:1b:3c:81:8f:5f:b4:cc:4e:9f:7e:c2: 33:07:cc:c5:fc:5f:a7:ca:4a:49:df:bd:92:be:76:0f:1e:b5: 72:28:ac:3f:79:cf:5a:df:fa:ac:23:cf:33:c1:b3:da:a6:09: 5c:8c:69:d1:47:2e:db:92:77:60:a7:74:22:8c:52:11:fc:7c: a4:5e:ad:04:1d:ee:53:0c:07:7b:20:88:c9:33:fd:97:1e:c7: 88:ff:5b:5e:c3:a1:c0:f1:c1:87:f6:3e:42:2e:6c:92:49:0d: 1e:69:33:a2:60:5d:eb:d7:da:b9:d3:92:e5:55:1b:80:9c:6e: 5a:6a:7f:a5:f1:76:89:36:93:55:e4:73:4a:49:75:8d:bc:be: ac:5c:b1:55:f3:13:60:b8:21:63:6f:a0:c8:f2:35:00:53:78: d1:75:cf:47:99:46:7e:4c:a9:fe:cf:b3:35:a7:94:5f:68:f8: ea:bf:52:a8:56:b1:57:17:09:c9:05:9e:c5:e3:62:59:3c:eb: 8a:7c:33:6a:19:01:38:52:41:4b:77:fa:c7:ed:39:cc:c7:63: 2d:5f:af:de:17:51:df:f7:e1:24:2a:4d:03:0b:ad:73:6f:8c: 0d:0c:4c:de:a9:7e:7d:ba:f4:e8:8d:a8:d3:64:c9:87:04:35: e9:87:f9:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyMkYxMTAvBgNVBAUTKDIxNEIyRkNGNDJCQjJCOTg5MDU4NDVENzMzRDk0NUQ5 NUMyRENBMTIwHhcNMjUxMjA0MjA1MjI4WhcNMjUxMjExMjA1MjI4WjAYMRYwFAYD VQQDEw02OTMxZjQ4Yy1iYTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrWSDHOWnMbcqkj9G5Zfi7tPOVW0RZJz3dIpNclzVTCHKwzpc2pa4FR1ziMN T8nNw01qnyudqbZmFpsYl+oD1pzVxv1WcDD1fjwt+NwYiRLAHKLaVHtsYLsdzxWX iJ6uU47fVoNmj6EtUGCICQzdnTxnpehwLciUwiiI7C8PrBEOxYIh0lkNH51kse1E S5Asj4J/pfObfhM3q7kShpurPQkZfpyR7Q+EV1frq5LZH4IpC3G453leqe5EfE5r sgJ8zDsEUCWkSyx1D04Lnuwk5yFBDHTmmrIh3HHfiNDoTJuiWbbpb2tayc4aJnh3 cIi+shLLze5QreFmwf/09V3L9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkLg97G VKsVeCz9EAJKSEY1b/ZPMB8GA1UdIwQYMBaAFCFLL89CuyuYkFhF1zPZRdlcLcoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDIyRi83QzY0NDQyNjc3 NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1aVFXRVhYTTlsRjJWd3R5 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVc3Z6MEs3SzVpUVdFWFhNOWxGMlZ3dHloSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDIyRi83QzY0NDQyNjc3NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1 aVFXRVhYTTlsRjJWd3R5aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnRM7k4Wz0GzyBj1+0zE6ffsIzB8zF/F+nykpJ372SvnYPHrVyKKw/ ec9a3/qsI88zwbPapglcjGnRRy7bkndgp3QijFIR/HykXq0EHe5TDAd7IIjJM/2X HseI/1tew6HA8cGH9j5CLmySSQ0eaTOiYF3r19q505LlVRuAnG5aan+l8XaJNpNV 5HNKSXWNvL6sXLFV8xNguCFjb6DI8jUAU3jRdc9HmUZ+TKn+z7M1p5RfaPjqv1Ko VrFXFwnJBZ7F42JZPOuKfDNqGQE4UkFLd/rH7TnMx2MtX6/eF1Hf9+EkKk0DC61z b4wNDEzeqX59uvTojajTZMmHBDXph/nm -----END CERTIFICATE-----Generated at Sat Dec 6 18:55:35 2025 by rpki-client