This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json) Hash identifier: FAcDepQrBMr66o5xvZ+ZhRl/d/41qyHAgCALZuF418Y= Subject key identifier: 63:B5:5F:C3:C2:BC:3E:32:40:3A:A3:B1:74:FB:F8:F6:89:B0:EC:B5 Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Certificate serial: 0879 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft Manifest number: 0852 Signing time: Thu 18 Dec 2025 15:51:44 +0000 Manifest this update: Thu 18 Dec 2025 15:51:44 +0000 Manifest next update: Thu 25 Dec 2025 15:51:44 +0000 Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: KW6sjXMoNg0ysAI/xK3VYGN6nYFropG93AuqUcN68pg=) 2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: tG1HGaU5DUimsEMDFRA50jlq68FCzHx0C3arFNqcuaY=) 3: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: MfRtvCwn59famvfu05RMk6NPUwzQW1gti+aq8XhNzyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Validity Not Before: Dec 18 15:51:44 2025 GMT Not After : Dec 25 15:51:44 2025 GMT Subject: CN=69442310-783f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:e0:4d:e8:77:b0:ff:77:a6:6a:ce:4e:13: 90:63:75:ed:b8:a2:c6:ef:bb:c3:98:d8:c0:77:c1: d9:39:76:c4:05:80:a1:85:9f:c6:74:2d:0f:c7:b5: a3:1d:e7:58:7f:ae:fa:94:6c:e6:d2:82:70:03:5e: 66:73:6b:95:68:74:6b:55:5f:e9:f4:6d:83:0d:ef: 0c:45:dc:63:2a:9e:85:40:08:2f:33:d3:2b:e5:8d: 40:d2:f6:29:82:71:65:47:07:b2:cd:98:fa:70:db: a9:21:c1:5f:fb:98:1a:f2:5c:aa:a8:83:34:ae:03: c7:98:6e:55:1f:a0:01:f0:c8:cc:14:23:17:d8:42: 03:c6:ec:1c:9d:2e:8a:01:d4:45:a6:bd:46:9b:7f: 07:28:3e:4c:f8:ab:56:da:e6:e1:c7:04:17:f5:af: 89:b0:54:c9:3e:b0:cf:98:83:53:09:fc:b0:8c:94: be:36:b6:7e:d8:8a:93:65:59:2b:4b:bc:00:7d:c5: 15:e9:5a:c4:ae:e5:8a:b7:5d:47:9b:6a:ad:6d:57: e3:6e:6a:f9:2c:53:cc:c0:d7:b8:61:4f:a8:ac:1b: 13:55:78:e8:6a:ba:99:29:e0:7c:2e:85:c6:35:82: 2d:02:07:3e:44:29:25:73:de:01:fa:06:d6:3a:ab: 2e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B5:5F:C3:C2:BC:3E:32:40:3A:A3:B1:74:FB:F8:F6:89:B0:EC:B5 X509v3 Authority Key Identifier: keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:da:53:57:b9:d2:10:43:e4:fb:d4:b3:7f:a2:db:98:a5:96: d7:21:74:95:39:c0:62:0f:a0:1d:ec:30:fc:2b:99:c6:1a:b1: 99:09:ad:23:16:1d:dd:7b:20:8f:8f:e7:01:ee:7a:75:3d:bc: 2b:e4:bc:d4:43:4d:bf:a1:98:92:e6:fa:cf:98:e9:ca:eb:36: 70:ee:41:8f:ff:23:8d:f1:26:a5:cf:1f:c3:b1:cb:44:69:1f: ac:ab:c3:23:84:08:f6:fd:8d:74:c8:f4:7e:7a:7d:f1:60:9c: 5c:1a:f5:a1:f3:9f:73:7c:77:7f:a2:ad:7a:d9:be:89:09:be: ad:61:5b:32:bc:c2:b4:78:70:54:43:30:9c:7e:9b:60:f0:bb: 63:ce:68:58:66:45:7a:73:d4:f5:bb:1b:ea:07:26:a8:06:96: 51:95:16:c6:2b:c3:51:1e:1e:03:e1:dc:c0:83:fa:c7:b4:32: 24:33:57:66:56:09:ad:48:29:50:05:4f:28:46:f7:b9:ce:50: 94:d5:d1:f6:ef:2d:9b:7c:aa:44:1b:4e:e4:a1:72:f8:fb:23: d2:f0:5e:22:0d:f2:14:61:78:f9:e6:da:1d:16:9f:69:70:ca: 96:1f:d6:85:e8:9f:95:00:7e:f9:89:75:3a:28:38:4e:19:0b: e1:b3:6b:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDg5N0UwMkNDRDhFQjQwMzlBNzgzRDAyMzc5QzU1RkVF OUYwQ0VFNTkwHhcNMjUxMjE4MTU1MTQ0WhcNMjUxMjI1MTU1MTQ0WjAYMRYwFAYD VQQDDA02OTQ0MjMxMC03ODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurLgTeh3sP93pmrOThOQY3XtuKLG77vDmNjAd8HZOXbEBYChhZ/GdC0Px7Wj HedYf676lGzm0oJwA15mc2uVaHRrVV/p9G2DDe8MRdxjKp6FQAgvM9Mr5Y1A0vYp gnFlRweyzZj6cNupIcFf+5ga8lyqqIM0rgPHmG5VH6AB8MjMFCMX2EIDxuwcnS6K AdRFpr1Gm38HKD5M+KtW2ubhxwQX9a+JsFTJPrDPmINTCfywjJS+NrZ+2IqTZVkr S7wAfcUV6VrEruWKt11Hm2qtbVfjbmr5LFPMwNe4YU+orBsTVXjoarqZKeB8LoXG NYItAgc+RCklc94B+gbWOqsuOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGO1X8PC vD4yQDqjsXT7+PaJsOy1MB8GA1UdIwQYMBaAFIl+AszY60A5p4PQI3nFX+6fDO5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy84QzY4QjlBMjA5 ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFEbW5nOUFqZWNWZjdwOE03 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lYNEN6TmpyUURtbmc5QWplY1ZmN3A4TTdsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy84QzY4QjlBMjA5ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFE bW5nOUFqZWNWZjdwOE03bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC62lNXudIQQ+T71LN/otuYpZbXIXSVOcBiD6Ad7DD8K5nGGrGZCa0j Fh3deyCPj+cB7np1Pbwr5LzUQ02/oZiS5vrPmOnK6zZw7kGP/yON8Salzx/DsctE aR+sq8MjhAj2/Y10yPR+en3xYJxcGvWh859zfHd/oq162b6JCb6tYVsyvMK0eHBU QzCcfptg8LtjzmhYZkV6c9T1uxvqByaoBpZRlRbGK8NRHh4D4dzAg/rHtDIkM1dm VgmtSClQBU8oRve5zlCU1dH27y2bfKpEG07koXL4+yPS8F4iDfIUYXj55todFp9p cMqWH9aF6J+VAH75iXU6KDhOGQvhs2uc -----END CERTIFICATE-----Generated at Thu Dec 18 23:43:46 2025 by rpki-client