This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: xV/bWyKJ2A0R6nzUsgLLVXTfOBDDMF5TQR4I7eZyjx0= Subject key identifier: E5:3D:3E:CD:77:39:B3:9A:E3:67:F3:EB:6F:FD:12:37:41:2E:51:7B Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 34E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 34E4 Signing time: Sat 06 Dec 2025 14:45:48 +0000 Manifest this update: Sat 06 Dec 2025 14:45:48 +0000 Manifest next update: Sat 13 Dec 2025 14:45:48 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: Lz5PbDzyn9d02u7CHN0ekI/42xWRN6JjJubxSdTPE+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: Dec 6 14:45:48 2025 GMT Not After : Dec 13 14:45:48 2025 GMT Subject: CN=6934419c-a109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:13:45:d1:12:2b:f7:80:36:d1:f2:15:33:66: 86:44:a8:16:03:39:a0:77:3b:79:8b:5d:f0:11:e7: d4:f0:68:d8:54:0b:69:53:32:ae:68:9e:ec:e0:53: a1:69:3e:be:a8:c5:50:12:18:90:15:eb:94:81:8f: 2b:1b:ad:81:d8:70:0c:3f:c9:1f:5f:cd:c8:bc:4a: cc:63:2a:50:67:01:c5:3c:83:aa:4b:82:54:0b:4c: a7:71:9c:a7:b2:48:f3:35:0b:da:0e:e9:e4:77:31: 20:d5:5c:be:9f:97:85:44:96:ec:72:f2:55:35:02: 6b:15:26:0f:18:7e:57:28:1e:87:5b:b3:40:47:90: 58:f3:5c:8c:14:1f:e8:36:67:56:15:a5:1a:f8:bf: 25:2b:d1:1b:0e:e7:53:f9:44:77:3a:e5:b9:a8:32: 26:22:6a:88:49:f1:c6:07:6e:89:d0:2d:28:12:62: 4f:70:e7:3a:e6:bd:d0:60:be:a1:91:07:e2:fd:ff: 32:4c:b9:a6:75:12:7c:16:e6:f4:68:00:b4:ff:19: 81:b8:55:d9:c1:0c:d2:d5:6b:79:63:92:87:ab:08: e2:d7:1b:d9:b3:31:28:6d:f6:46:94:c1:40:b3:37: c5:07:82:f0:aa:36:e5:88:b2:5d:89:3b:50:32:e4: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3D:3E:CD:77:39:B3:9A:E3:67:F3:EB:6F:FD:12:37:41:2E:51:7B X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:85:e3:21:cb:c0:31:26:49:ad:e1:c2:21:b1:73:52:62:7d: ff:36:43:24:33:aa:d9:ca:39:0a:38:dd:b3:74:ba:8d:d8:84: d9:54:b6:a4:bb:80:f2:7a:78:73:f4:b5:07:d8:74:b5:ed:a2: 16:f3:92:30:c1:ef:b0:88:5e:6f:01:b5:bf:0f:62:a2:b9:61: d6:dd:d5:94:24:c7:82:c4:2e:cb:cb:c2:77:41:3a:e8:2e:ce: cd:8a:fb:39:56:66:15:8e:72:78:4e:d4:ab:2c:18:11:75:30: 40:1c:90:c2:b1:44:0a:81:3c:79:50:f5:87:ad:be:7a:5d:17: b8:04:6d:de:e0:93:12:94:2a:a5:59:2e:6c:b5:29:b2:b9:1a: a4:70:8a:e8:70:14:ed:0a:a5:3a:ee:77:83:a4:c2:c5:80:f3: 8f:be:f2:ab:65:f5:e6:db:22:30:bc:dc:87:00:11:67:c4:4d: da:d4:01:77:fb:87:26:b6:74:b9:02:a4:17:42:cf:56:af:90: 3d:3a:af:9d:4e:c2:b5:5d:21:2d:e5:f6:82:79:3f:79:d5:e8: 9d:a8:fc:5b:ce:d7:18:be:d7:56:44:84:fc:c9:9b:4f:f0:d1: ad:bb:69:4d:6b:bd:43:62:39:97:7e:b7:e3:61:e4:fd:08:e0: 58:d5:7d:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUxMjA2MTQ0NTQ4WhcNMjUxMjEzMTQ0NTQ4WjAYMRYwFAYD VQQDEw02OTM0NDE5Yy1hMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RNF0RIr94A20fIVM2aGRKgWAzmgdzt5i13wEefU8GjYVAtpUzKuaJ7s4FOh aT6+qMVQEhiQFeuUgY8rG62B2HAMP8kfX83IvErMYypQZwHFPIOqS4JUC0yncZyn skjzNQvaDunkdzEg1Vy+n5eFRJbscvJVNQJrFSYPGH5XKB6HW7NAR5BY81yMFB/o NmdWFaUa+L8lK9EbDudT+UR3OuW5qDImImqISfHGB26J0C0oEmJPcOc65r3QYL6h kQfi/f8yTLmmdRJ8Fub0aAC0/xmBuFXZwQzS1Wt5Y5KHqwji1xvZszEobfZGlMFA szfFB4LwqjbliLJdiTtQMuTcgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU9Ps13 ObOa42fz62/9EjdBLlF7MB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeheMhy8AxJkmt4cIhsXNSYn3/NkMkM6rZyjkKON2zdLqN2ITZVLak u4Dyenhz9LUH2HS17aIW85Iwwe+wiF5vAbW/D2KiuWHW3dWUJMeCxC7Ly8J3QTro Ls7Nivs5VmYVjnJ4TtSrLBgRdTBAHJDCsUQKgTx5UPWHrb56XRe4BG3e4JMSlCql WS5stSmyuRqkcIrocBTtCqU67neDpMLFgPOPvvKrZfXm2yIwvNyHABFnxE3a1AF3 +4cmtnS5AqQXQs9Wr5A9Oq+dTsK1XSEt5faCeT951eidqPxbztcYvtdWRIT8yZtP 8NGtu2lNa71DYjmXfrfjYeT9COBY1X25 -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:38 2025 by rpki-client