This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json) Hash identifier: EUJqg0GP760tUtL8IoyrPJPWJHFsbLwuNNloftL+l9Y= Subject key identifier: 2C:01:AB:5D:61:B5:0B:8A:3C:55:57:64:F6:01:B3:FF:2C:25:65:A1 Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Certificate serial: 0546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft Manifest number: 053E Signing time: Thu 04 Dec 2025 22:04:24 +0000 Manifest this update: Thu 04 Dec 2025 22:04:23 +0000 Manifest next update: Thu 11 Dec 2025 22:04:23 +0000 Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: EWs1jGg+gsRQFAsaWIwU6ldH/l4hfzSHgEQ7cbHFxlU=) 2: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: rjtMstoekwsHa6BZ54dV6mwwRoqiKzp6w3p85Pa6dX4=) 3: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: YGJLT2fYDhmz5xGHsZzCsBINR5owfOYXZwH2Xtyir7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Validity Not Before: Dec 4 22:04:23 2025 GMT Not After : Dec 11 22:04:23 2025 GMT Subject: CN=69320568-5220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:32:09:6a:a0:7e:d8:fb:fd:ad:85:2a:df: 02:5d:ac:ad:4a:0a:c5:07:4c:dd:00:33:19:b2:ce: 7a:8c:66:97:df:ec:34:f8:05:ba:1c:74:f3:ec:4a: 01:ff:74:e2:be:d4:bc:20:45:a8:5c:b8:d7:40:54: 0f:9d:63:7b:c8:1f:3a:63:29:8f:e5:6c:8f:1b:c7: 15:ff:5b:f9:4d:18:db:2a:b3:8f:e7:b2:15:ad:da: c7:3b:19:b8:0d:17:21:5e:a9:c8:05:0a:3b:6e:d2: 1e:8f:05:15:f6:09:98:09:c4:75:2c:e1:af:49:b9: f6:98:d2:81:41:bc:27:9e:97:ed:4f:23:83:d6:ea: de:2b:36:ba:01:11:27:6d:b9:52:33:d4:73:5f:75: 13:4b:bf:dc:f0:54:6d:d0:1c:93:c4:98:15:2b:1a: 15:f6:fc:7d:44:b2:3f:ed:3f:3c:d1:06:af:6a:b3: ea:b7:a4:8e:02:d8:ef:9f:08:e4:a0:32:4a:cb:69: 3c:78:63:52:39:69:5f:ec:bb:99:8f:80:dc:25:5e: 8d:c6:c9:b9:39:63:b3:02:9e:19:54:cf:a4:35:38: 76:2f:c9:62:33:d8:cc:94:68:50:ba:ce:00:49:ed: d6:52:d1:cf:6c:65:55:66:ac:82:37:3a:0d:3e:ab: fb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:01:AB:5D:61:B5:0B:8A:3C:55:57:64:F6:01:B3:FF:2C:25:65:A1 X509v3 Authority Key Identifier: keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:49:53:ec:f9:38:b0:10:cf:7b:d4:8c:92:0a:5c:c7:eb:b2: 37:94:71:00:4e:61:b2:41:03:99:1c:c8:4f:ea:23:90:ee:97: dd:e6:85:bc:f6:78:a9:f9:da:cf:d4:f0:fa:21:11:98:fd:fc: 54:e4:9d:b4:2f:08:da:b6:d3:fb:60:da:00:98:28:9e:b6:c6: 74:41:ac:21:da:18:7a:d9:8b:a9:90:49:d7:d7:c0:81:9a:ff: c8:70:8e:92:25:af:cd:d8:18:60:fa:4c:c7:4b:dd:9d:0c:df: 72:56:5e:2e:4a:c7:89:86:3b:ba:48:8a:76:15:c6:a4:04:ce: d2:5a:8c:18:24:89:8a:ce:56:a6:05:17:ff:30:f9:ab:9f:6f: 80:42:4a:2e:a5:a9:86:31:ab:5d:94:6c:d3:2e:86:d9:da:5d: 28:ee:de:c7:2b:20:c3:fd:bc:96:61:8f:ec:3c:d0:b3:b5:ca: d1:29:e5:45:8b:c2:60:56:39:10:8d:3b:e2:f2:ff:d4:18:10: b0:6c:88:b4:74:e4:ea:67:dd:e8:2a:29:4d:46:a6:e3:fa:7f: ff:d2:20:f6:e3:93:c9:d0:de:91:fb:66:a1:26:89:22:c4:25: f8:29:49:72:a5:2e:d2:dd:85:c6:ba:a3:01:01:25:b9:d0:32: 9b:c9:2b:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzODIxMTAvBgNVBAUTKDIxMTcwMjJERjYxREE0MjFCOUU0RTFCQjg0ODNEODVF NDk4MkJGOTEwHhcNMjUxMjA0MjIwNDIzWhcNMjUxMjExMjIwNDIzWjAYMRYwFAYD VQQDEw02OTMyMDU2OC01MjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pwyCWqgftj7/a2FKt8CXaytSgrFB0zdADMZss56jGaX3+w0+AW6HHTz7EoB /3TivtS8IEWoXLjXQFQPnWN7yB86YymP5WyPG8cV/1v5TRjbKrOP57IVrdrHOxm4 DRchXqnIBQo7btIejwUV9gmYCcR1LOGvSbn2mNKBQbwnnpftTyOD1ureKza6AREn bblSM9RzX3UTS7/c8FRt0ByTxJgVKxoV9vx9RLI/7T880QavarPqt6SOAtjvnwjk oDJKy2k8eGNSOWlf7LuZj4DcJV6Nxsm5OWOzAp4ZVM+kNTh2L8liM9jMlGhQus4A Se3WUtHPbGVVZqyCNzoNPqv7owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwBq11h tQuKPFVXZPYBs/8sJWWhMB8GA1UdIwQYMBaAFCEXAi32HaQhueThu4SD2F5Jgr+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM4Mi9BNUZCODE1ODFD RDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBDRzU1T0c3aElQWVhrbUN2 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSY0NMZllkcENHNTVPRzdoSVBZWGttQ3Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM4Mi9BNUZCODE1ODFDRDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBD RzU1T0c3aElQWVhrbUN2NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkSVPs+TiwEM971IySClzH67I3lHEATmGyQQOZHMhP6iOQ7pfd5oW8 9nip+drP1PD6IRGY/fxU5J20LwjattP7YNoAmCietsZ0Qawh2hh62YupkEnX18CB mv/IcI6SJa/N2Bhg+kzHS92dDN9yVl4uSseJhju6SIp2FcakBM7SWowYJImKzlam BRf/MPmrn2+AQkoupamGMatdlGzTLobZ2l0o7t7HKyDD/byWYY/sPNCztcrRKeVF i8JgVjkQjTvi8v/UGBCwbIi0dOTqZ93oKilNRqbj+n//0iD245PJ0N6R+2ahJoki xCX4KUlypS7S3YXGuqMBASW50DKbySvb -----END CERTIFICATE-----Generated at Sat Dec 6 19:07:18 2025 by rpki-client