This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: 64PzjeXQPNjXNAuh3rUymayUsU+hV3AF+06yu5OyXB8= Subject key identifier: 49:70:C3:9E:0E:C7:BF:75:27:86:85:4B:EE:78:6B:9D:05:2E:29:F2 Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 07F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 07EE Signing time: Sat 06 Dec 2025 20:10:35 +0000 Manifest this update: Sat 06 Dec 2025 20:10:34 +0000 Manifest next update: Sat 13 Dec 2025 20:10:34 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: gNrwwu31WEcGVmDNhRim7JK8tJnOKxIMZpez8nsXw94=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: XOu+NGz3wCBtpV1QSlFKSlK/61FIlkWvOgRrc8L4ZLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2037 (0x7f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: Dec 6 20:10:34 2025 GMT Not After : Dec 13 20:10:34 2025 GMT Subject: CN=69348dba-2d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:a9:ea:c2:fe:82:ef:cc:43:01:95:9d:a9: 17:10:86:8c:c1:d9:1b:5e:c2:86:8e:6c:cb:59:9f: 7d:f9:77:64:65:56:7d:ff:ba:44:b7:fb:c9:df:90: ad:26:33:f3:ba:c1:24:21:39:22:51:76:99:fa:e7: 26:9d:5d:a1:c1:9e:b6:74:74:f9:0e:d4:07:d1:e1: d5:cf:6f:8f:b4:5c:f6:4b:a3:ba:b6:f6:66:82:4d: 3f:1d:98:6e:0e:f2:8f:6c:f0:c7:5f:8d:ad:be:c3: 48:a1:4a:9e:e4:5f:33:cf:e2:81:65:0c:b3:41:d5: da:ed:fc:a7:c6:2e:79:7f:a1:9b:46:b6:5c:66:fe: eb:20:86:31:04:6c:67:6f:38:ea:87:6d:f9:5e:cd: 83:03:20:2a:cd:07:79:72:4e:f4:f2:97:2a:4e:e5: 45:7c:58:32:09:8d:d2:c3:d0:62:aa:10:8c:b9:80: 2a:bb:29:63:ab:0a:e9:b4:70:4e:51:af:ce:69:78: e4:b8:8a:06:c7:36:45:2c:a4:1d:99:33:2d:b8:36: 1f:48:97:04:50:3a:65:14:a0:4c:14:12:80:aa:a2: 6c:83:eb:4a:4e:2a:7e:1f:a7:ba:64:d6:4b:de:e6: 88:be:48:ed:4a:34:6d:3c:e8:15:40:8d:92:b4:14: 00:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:70:C3:9E:0E:C7:BF:75:27:86:85:4B:EE:78:6B:9D:05:2E:29:F2 X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:9b:95:09:d8:b2:e2:a1:8b:7c:df:19:97:7b:f1:3d:2d:a4: 35:4f:07:1c:a3:49:13:23:98:70:a3:b3:42:79:01:d7:7a:c0: ad:ce:33:fa:96:03:f7:f9:56:3c:7f:ef:78:ee:d7:11:2c:a4: 12:77:25:51:ff:53:74:2a:12:25:e7:7f:bb:61:ec:36:67:68: 51:d4:36:fc:f4:f9:65:40:4f:a7:1e:27:3f:5d:57:d1:dc:d5: 0d:ea:7c:19:9b:ad:f7:0a:2f:3f:f5:0c:b6:3a:41:83:6a:e1: fb:19:a1:00:a9:68:35:1e:af:d2:5c:9b:bb:33:0d:54:be:e1: 49:4b:d8:95:e3:52:f7:e5:e5:0f:d6:ee:61:7d:66:d4:5d:7c: 06:59:e7:53:ba:56:44:72:cd:a1:f1:9e:f4:93:ca:54:6e:f5: 97:2f:64:80:6f:01:79:7d:44:11:c5:9a:b9:c7:f3:30:be:26: 5b:81:11:c5:96:de:ff:45:d0:e9:62:5d:82:58:77:87:e0:f7: 8d:91:81:fb:03:06:95:10:91:63:e0:f1:9e:db:84:f8:48:3a: 15:1a:16:56:bb:bb:30:f6:9a:d0:fe:2d:bb:42:f3:21:74:c3: 48:92:3d:db:1a:05:7c:ba:69:e5:98:1c:f1:8a:74:cb:4a:87: b8:56:9e:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjUxMjA2MjAxMDM0WhcNMjUxMjEzMjAxMDM0WjAYMRYwFAYD VQQDEw02OTM0OGRiYS0yZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGOp6sL+gu/MQwGVnakXEIaMwdkbXsKGjmzLWZ99+XdkZVZ9/7pEt/vJ35Ct JjPzusEkITkiUXaZ+ucmnV2hwZ62dHT5DtQH0eHVz2+PtFz2S6O6tvZmgk0/HZhu DvKPbPDHX42tvsNIoUqe5F8zz+KBZQyzQdXa7fynxi55f6GbRrZcZv7rIIYxBGxn bzjqh235Xs2DAyAqzQd5ck708pcqTuVFfFgyCY3Sw9BiqhCMuYAquyljqwrptHBO Ua/OaXjkuIoGxzZFLKQdmTMtuDYfSJcEUDplFKBMFBKAqqJsg+tKTip+H6e6ZNZL 3uaIvkjtSjRtPOgVQI2StBQAGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElww54O x791J4aFS+54a50FLinyMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYm5UJ2LLioYt83xmXe/E9LaQ1Twcco0kTI5hwo7NCeQHXesCtzjP6 lgP3+VY8f+947tcRLKQSdyVR/1N0KhIl53+7Yew2Z2hR1Db89PllQE+nHic/XVfR 3NUN6nwZm633Ci8/9Qy2OkGDauH7GaEAqWg1Hq/SXJu7Mw1UvuFJS9iV41L35eUP 1u5hfWbUXXwGWedTulZEcs2h8Z70k8pUbvWXL2SAbwF5fUQRxZq5x/MwviZbgRHF lt7/RdDpYl2CWHeH4PeNkYH7AwaVEJFj4PGe24T4SDoVGhZWu7sw9prQ/i27QvMh dMNIkj3bGgV8umnlmBzxinTLSoe4Vp5M -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:44 2025 by rpki-client