This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.mft File: IPxzgnJ0AC605K7oniD9DRc_soU.mft (raw, json) Hash identifier: kReko3PsReeWGfiDr9+/VrOyEyHXpmEmHj20q7+eqPk= Subject key identifier: 44:99:1F:F1:74:A6:14:5F:AC:DA:6A:44:23:0F:27:E6:05:89:D2:3E Authority key identifier: 20:FC:73:82:72:74:00:2E:B4:E4:AE:E8:9E:20:FD:0D:17:3F:B2:85 Certificate issuer: /CN=A91578DF/serialNumber=20FC73827274002EB4E4AEE89E20FD0D173FB285 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPxzgnJ0AC605K7oniD9DRc_soU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.mft Manifest number: 2D Signing time: Fri 05 Dec 2025 05:30:48 +0000 Manifest this update: Fri 05 Dec 2025 05:30:47 +0000 Manifest next update: Fri 12 Dec 2025 05:30:47 +0000 Files and hashes: 1: IPxzgnJ0AC605K7oniD9DRc_soU.crl (hash: h+JYp/1LYCaqg9l/3cDcO7C8lYXdz7Q49oKDILZMCVU=) 2: 067CE6C895C811F09500A713C4F9AE02.roa (hash: DaXXWX4PSZTEEnKA/Wr/hB6+tz0WGbj29+yIsXyWSwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.crl rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPxzgnJ0AC605K7oniD9DRc_soU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91578DF, serialNumber=20FC73827274002EB4E4AEE89E20FD0D173FB285 Validity Not Before: Dec 5 05:30:47 2025 GMT Not After : Dec 12 05:30:47 2025 GMT Subject: CN=69326e08-0741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:27:5a:da:5f:e3:ac:64:2c:1d:a2:f3:da: a7:5b:8b:e9:a5:3e:ea:9e:da:e5:88:65:eb:27:ef: 8c:c6:4f:03:84:be:52:96:2d:e9:18:5f:2e:a3:e1: b3:a1:fc:55:fc:68:8c:4e:f3:36:49:4f:21:c1:c7: 54:45:ef:fe:8e:5e:19:dd:57:cf:ea:10:92:85:dc: cf:99:00:ff:e8:0a:ac:de:ee:90:a2:cd:91:6a:1d: a3:d4:15:37:3c:6c:81:34:d3:e8:20:4b:f5:dc:3a: 10:62:ac:67:b1:c9:9b:dd:5d:70:64:d0:d9:17:f1: 21:50:a1:f5:17:92:48:0a:64:6a:4e:f4:ee:7a:79: e8:c9:e8:91:59:90:f1:10:df:50:e8:13:34:7f:e3: 85:d1:ce:96:ab:90:4a:35:25:f2:56:68:eb:98:7a: 9c:0c:5b:79:2f:ad:f2:bc:4f:2d:a8:e2:0e:c2:42: 87:3e:aa:41:ba:e3:9f:cb:65:75:ab:c4:c8:d6:fc: 95:58:c7:20:9e:e2:b1:f2:74:a0:62:67:4c:b5:79: 32:56:80:03:34:e8:10:43:2c:87:f0:4e:d2:65:98: 39:a9:7d:f9:a7:44:c4:ed:a6:b3:67:0e:2d:fe:15: a5:26:97:d4:0e:5d:82:61:2e:cc:a4:f9:e8:b5:6b: e5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:99:1F:F1:74:A6:14:5F:AC:DA:6A:44:23:0F:27:E6:05:89:D2:3E X509v3 Authority Key Identifier: keyid:20:FC:73:82:72:74:00:2E:B4:E4:AE:E8:9E:20:FD:0D:17:3F:B2:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPxzgnJ0AC605K7oniD9DRc_soU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:4e:47:4f:74:5e:f4:90:20:df:44:82:38:da:28:2e:54:fd: 30:f3:4c:d6:f0:0b:bc:27:e5:fe:c8:47:f0:93:73:07:1b:c0: 5b:42:2d:38:e3:16:c1:08:0c:e9:70:26:12:d0:3c:3a:98:ab: d7:56:2d:7a:76:b3:92:d6:08:7a:ba:91:70:ae:6e:80:0f:27: 30:d4:27:76:d5:6f:26:8f:e0:b8:d5:32:65:e4:d2:cb:f9:2c: 82:55:a1:d5:91:51:77:42:57:0c:ff:80:2b:ac:0c:1d:b4:3d: dd:e5:c7:8c:85:73:2a:fa:e7:5e:a1:f1:58:d0:4f:a2:7d:79: 59:54:5d:de:d0:26:e1:82:f4:7c:c5:e1:b9:28:17:f4:6d:8f: 39:ee:07:d3:a5:95:29:fa:1f:30:9b:c3:17:01:22:5f:db:6a: 6c:cb:17:d6:53:20:8e:76:d7:5f:b4:63:8f:de:2d:18:85:ed: 9f:86:c4:97:f2:8f:5d:22:36:49:53:a1:25:2f:d3:9c:b7:9f: ca:65:b3:38:b2:f3:dc:77:e3:f1:74:f1:79:83:78:1f:7d:5d: 06:d0:70:4b:eb:9f:9f:ca:33:4e:7e:3e:c2:b4:50:3b:a9:4b: 11:ed:b6:4d:aa:d4:65:b9:22:85:33:4c:22:8f:8f:f3:ae:25: e6:0c:62:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzhERjExMC8GA1UEBRMoMjBGQzczODI3Mjc0MDAyRUI0RTRBRUU4OUUyMEZEMEQx NzNGQjI4NTAeFw0yNTEyMDUwNTMwNDdaFw0yNTEyMTIwNTMwNDdaMBgxFjAUBgNV BAMTDTY5MzI2ZTA4LTA3NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfDSda2l/jrGQsHaLz2qdbi+mlPuqe2uWIZesn74zGTwOEvlKWLekYXy6j4bOh /FX8aIxO8zZJTyHBx1RF7/6OXhndV8/qEJKF3M+ZAP/oCqze7pCizZFqHaPUFTc8 bIE00+ggS/XcOhBirGexyZvdXXBk0NkX8SFQofUXkkgKZGpO9O56eejJ6JFZkPEQ 31DoEzR/44XRzparkEo1JfJWaOuYepwMW3kvrfK8Ty2o4g7CQoc+qkG645/LZXWr xMjW/JVYxyCe4rHydKBiZ0y1eTJWgAM06BBDLIfwTtJlmDmpffmnRMTtprNnDi3+ FaUml9QOXYJhLsyk+ei1a+UXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURJkf8XSm FF+s2mpEIw8n5gWJ0j4wHwYDVR0jBBgwFoAUIPxzgnJ0AC605K7oniD9DRc/soUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3OERGLzA1MUNGMUQ0OTVD NzExRjBBQkUyRkQ1RkM0RjlBRTAyL0lQeHpnbkowQUM2MDVLN29uaUQ5RFJjX3Nv VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVB4emduSjBBQzYwNUs3b25pRDlEUmNfc29VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 OERGLzA1MUNGMUQ0OTVDNzExRjBBQkUyRkQ1RkM0RjlBRTAyL0lQeHpnbkowQUM2 MDVLN29uaUQ5RFJjX3NvVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGhOR090XvSQIN9EgjjaKC5U/TDzTNbwC7wn5f7IR/CTcwcbwFtCLTjj FsEIDOlwJhLQPDqYq9dWLXp2s5LWCHq6kXCuboAPJzDUJ3bVbyaP4LjVMmXk0sv5 LIJVodWRUXdCVwz/gCusDB20Pd3lx4yFcyr6516h8VjQT6J9eVlUXd7QJuGC9HzF 4bkoF/RtjznuB9OllSn6HzCbwxcBIl/bamzLF9ZTII5211+0Y4/eLRiF7Z+GxJfy j10iNklToSUv05y3n8plsziy89x34/F08XmDeB99XQbQcEvrn5/KM05+PsK0UDup SxHttk2q1GW5IoUzTCKPj/OuJeYMYp8= -----END CERTIFICATE-----Generated at Sat Dec 6 14:20:14 2025 by rpki-client