This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json) Hash identifier: SNdZSH3LqYCnOBLTWcDnQX5RKOog88SyhLCe5C2DG8I= Subject key identifier: ED:AD:70:84:DF:33:E5:42:D8:3C:DD:D9:16:92:9F:B4:C4:1E:6F:35 Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft Manifest number: 4D Signing time: Thu 04 Dec 2025 21:22:56 +0000 Manifest this update: Thu 04 Dec 2025 21:22:56 +0000 Manifest next update: Thu 11 Dec 2025 21:22:56 +0000 Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: 4Jlqvwdi8MX1qCu2osr6NiX5GcgKvaLKU0Zu1AkqBw0=) 2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: tRrklyhCDRycwJaKFRwEZyyD1E5up+J5TjkxJCAvISc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Validity Not Before: Dec 4 21:22:56 2025 GMT Not After : Dec 11 21:22:56 2025 GMT Subject: CN=6931fbb0-0aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:1b:aa:a8:22:05:7a:bf:42:92:f0:bf:2b: 4d:d3:3b:ab:99:30:7e:a3:06:4e:be:25:66:a1:ab: 94:08:ee:98:aa:e4:0e:a7:db:bb:55:35:7d:b4:44: 4d:83:ed:6c:8d:6c:4a:a1:3a:5f:61:4b:d1:8a:2d: dc:27:b7:24:c5:15:e7:07:55:d9:be:99:14:34:48: 70:7a:94:0b:74:76:b0:79:f9:4c:16:a7:ef:e3:e6: 7f:47:50:c8:a2:fd:ab:b4:b5:68:2f:4b:93:c3:e0: 52:dc:86:e9:77:31:a9:94:a5:78:cb:20:b4:be:19: c8:9e:e8:ce:a9:00:18:31:65:f9:33:dc:9c:05:27: 45:94:a9:36:8e:d4:cf:87:4c:8e:87:b7:72:e9:a7: 82:9c:b5:3e:08:44:ff:d9:d7:ca:1a:77:fb:f4:ca: 52:ba:d7:a2:a9:ca:3b:2d:49:61:d1:e6:e1:51:da: 7d:5c:3e:a1:45:0d:37:6b:c1:7c:cc:58:23:45:17: 14:a8:c7:4f:cc:a3:0e:fb:c4:87:ee:3c:6f:37:3c: 91:4d:3f:42:1a:1b:fd:67:51:f2:a9:4f:c3:4e:7b: f7:f6:4f:0f:e1:74:db:8e:f2:1b:0d:d5:ed:ff:5f: b1:a2:45:d0:b6:67:a1:d4:d8:7b:e6:3b:8c:c4:71: ee:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AD:70:84:DF:33:E5:42:D8:3C:DD:D9:16:92:9F:B4:C4:1E:6F:35 X509v3 Authority Key Identifier: keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:07:7f:f0:da:da:b1:95:45:95:ef:ca:c8:8a:af:78:1b:51: 70:57:71:08:03:4b:77:53:97:90:c0:e7:bb:34:8b:9b:0d:fc: 0b:f4:e6:bc:30:d5:79:e0:08:a2:e6:cc:b0:95:bc:36:ed:fe: 70:3f:74:4f:35:7d:5c:6a:70:0f:84:12:bd:47:38:1d:70:af: 29:0e:8f:51:e8:9f:28:64:66:21:a9:e2:ef:5a:03:1d:1f:56: 6d:43:6e:41:5d:9a:05:97:d4:7c:1b:25:26:4c:4b:fe:a9:d3: a2:ae:23:8d:f1:ee:1c:2b:c4:a1:2d:ab:25:74:8f:3a:0f:1f: 69:4f:e2:9c:5f:24:f1:8f:2b:cb:d1:5d:96:44:37:a4:a6:69: f7:8a:69:f8:13:42:75:2f:42:78:a6:8f:57:15:ad:39:a2:4f: ef:e0:46:b8:d0:a1:ef:e6:63:77:e1:10:e3:31:a4:15:15:12: 94:e9:3a:0a:90:76:d1:30:bc:ae:e1:1d:bb:32:cf:6d:8b:85: 35:1d:e4:72:c0:b9:14:35:c8:ba:be:f1:3e:a6:fc:0f:c6:41: 59:c7:95:64:ad:c7:de:3f:69:09:2a:69:3d:25:aa:65:1b:58: 7a:26:ec:87:35:5e:97:f7:07:9c:75:79:cf:36:08:0f:47:ad: 50:ef:da:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEQwMDExMC8GA1UEBRMoMjE0MjkzM0ZCRTZFN0M1RkI3NjdBODZBNUUyMURENjAx NzhFQTM5RDAeFw0yNTEyMDQyMTIyNTZaFw0yNTEyMTEyMTIyNTZaMBgxFjAUBgNV BAMTDTY5MzFmYmIwLTBhZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpIhuqqCIFer9CkvC/K03TO6uZMH6jBk6+JWahq5QI7piq5A6n27tVNX20RE2D 7WyNbEqhOl9hS9GKLdwntyTFFecHVdm+mRQ0SHB6lAt0drB5+UwWp+/j5n9HUMii /au0tWgvS5PD4FLchul3MamUpXjLILS+Gcie6M6pABgxZfkz3JwFJ0WUqTaO1M+H TI6Ht3Lpp4KctT4IRP/Z18oad/v0ylK616KpyjstSWHR5uFR2n1cPqFFDTdrwXzM WCNFFxSox0/Mow77xIfuPG83PJFNP0IaG/1nUfKpT8NOe/f2Tw/hdNuO8hsN1e3/ X7GiRdC2Z6HU2HvmO4zEce5BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7a1whN8z 5ULYPN3ZFpKftMQebzUwHwYDVR0jBBgwFoAUIUKTP75ufF+3Z6hqXiHdYBeOo50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RDAwL0YxQUYxMDUyNjFE RjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVVLVFA3NXVmRi0zWjZocVhpSGRZQmVPbzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 RDAwL0YxQUYxMDUyNjFERjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYt M1o2aHFYaUhkWUJlT281MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJkHf/Da2rGVRZXvysiKr3gbUXBXcQgDS3dTl5DA57s0i5sN/Av05rww 1XngCKLmzLCVvDbt/nA/dE81fVxqcA+EEr1HOB1wrykOj1HonyhkZiGp4u9aAx0f Vm1DbkFdmgWX1HwbJSZMS/6p06KuI43x7hwrxKEtqyV0jzoPH2lP4pxfJPGPK8vR XZZEN6SmafeKafgTQnUvQnimj1cVrTmiT+/gRrjQoe/mY3fhEOMxpBUVEpTpOgqQ dtEwvK7hHbsyz22LhTUd5HLAuRQ1yLq+8T6m/A/GQVnHlWStx94/aQkqaT0lqmUb WHom7Ic1Xpf3B5x1ec82CA9HrVDv2tQ= -----END CERTIFICATE-----Generated at Sat Dec 6 14:13:11 2025 by rpki-client