This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json) Hash identifier: 0JK593akyrQC1uc2UafIJosfpPzyk8jNW0WVF3Lz+hE= Subject key identifier: 5A:CD:47:23:F9:AA:43:BD:B2:93:6F:8C:D0:D3:B6:51:3C:7A:E1:FE Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 138C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft Manifest number: 132E Signing time: Thu 04 Dec 2025 16:41:57 +0000 Manifest this update: Thu 04 Dec 2025 16:41:57 +0000 Manifest next update: Thu 11 Dec 2025 16:41:57 +0000 Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: LsQ60P+IO3okQ7l7SLIMxvy+4ZJAFQZC//eyc8zBBWA=) 2: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: 7cgMEZO8tN+1Cmn/CZonBr3at8tPmq+bBhIi3Hlmo8w=) 3: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: Wnr6Nu+wn4KpT3jxG77VWtuMf2NiqHg0vBMGp2AER8s=) 4: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: nCv8KSq1x9Ijvp8OSX/9bUAYQko+S3mPDE0oXqFbbRA=) 5: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: Yr7221/AjrFVZuk28SsMWsCKf7jgwJUz8UL6k6tO024=) 6: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: 5H1pM+kreN4Oi8C8HZm8e4S8ShHr8LgmiJJ+cKgYRHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5004 (0x138c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Dec 4 16:41:57 2025 GMT Not After : Dec 11 16:41:57 2025 GMT Subject: CN=6931b9d5-640f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:42:f8:da:78:3c:bb:bc:06:89:92:93:4c: 17:87:a2:20:03:4e:0e:47:df:ff:c6:da:21:a2:fc: 17:52:88:0f:ec:2a:b6:83:a8:5b:48:51:2d:63:61: 00:d6:00:c2:09:60:6a:8a:ec:02:d7:fa:a8:57:da: dc:99:97:47:4d:26:82:17:79:36:6f:a0:e0:d2:9f: 56:ea:3b:10:77:23:19:ed:cf:88:a2:5a:26:cb:f1: 5d:e3:78:15:43:dd:e9:f5:7b:e3:bd:79:7d:69:b9: 3b:85:37:6a:70:20:ca:0d:10:e0:32:95:8e:cd:60: 11:d9:e8:b3:a5:9d:93:d1:56:7b:a5:6e:77:43:63: 71:81:67:b5:72:af:f7:a2:5a:2e:6c:cb:7a:bd:8c: 3f:e5:21:9d:8b:80:db:cc:87:7d:40:e6:34:8f:22: ba:fc:d5:4a:61:c1:a0:08:aa:6b:43:37:7d:f5:d5: a9:79:56:85:a5:b7:1d:83:4b:8a:f6:bf:d4:8d:5f: e9:58:19:c3:67:9f:b0:cb:bb:23:10:bd:99:9c:ff: dd:1d:8f:d1:95:35:0b:c1:44:1f:ec:a3:5f:8b:7a: d1:04:43:e5:02:d5:3a:15:c0:6f:9e:be:f3:ec:30: 41:ee:22:aa:a2:a8:10:43:6c:df:7b:d4:ee:67:2c: d9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CD:47:23:F9:AA:43:BD:B2:93:6F:8C:D0:D3:B6:51:3C:7A:E1:FE X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:1d:b0:f2:ec:6a:ba:d1:37:45:56:d9:79:18:31:75:3a:f4: ce:b4:42:f2:c5:6b:9d:fb:38:29:12:82:04:a7:0b:98:af:47: 3d:14:39:7a:0a:3f:35:09:8f:88:73:7f:5f:91:c9:f1:67:be: c5:ae:ac:b7:d6:29:c3:9d:51:14:60:b2:04:91:b9:25:86:8a: a8:82:cd:9a:4b:45:eb:5e:94:9f:f5:d8:e5:6f:8b:09:22:a2: f8:8a:01:1f:a1:a2:df:3c:ee:4b:c3:f5:52:79:b8:97:94:a9: 0a:19:78:27:4f:9d:56:3b:ba:a8:fd:a4:23:29:7f:c1:e3:97: a7:fd:18:bf:47:f4:91:61:4f:cd:ef:94:0f:37:a5:4a:93:c0: 44:73:75:f8:36:a8:9d:94:37:a3:f9:8e:73:96:bf:c1:34:c4: fe:8e:97:4e:82:63:64:3a:76:9d:8a:16:96:e1:d7:d9:d8:77: b1:92:07:a9:95:39:dc:c0:84:b1:aa:c2:0b:3c:e8:9e:19:f0: ee:df:22:df:88:0f:2e:e5:a0:bb:8b:ac:61:37:54:ce:65:ba: 86:29:8c:2f:cc:d7:86:dc:4a:8c:51:c4:9e:8c:fc:a4:86:66: f9:4b:9f:00:7b:58:9f:48:17:51:cb:4c:56:1f:73:b1:97:f4: ea:ac:4b:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjUxMjA0MTY0MTU3WhcNMjUxMjExMTY0MTU3WjAYMRYwFAYD VQQDEw02OTMxYjlkNS02NDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KtC+Np4PLu8BomSk0wXh6IgA04OR9//xtohovwXUogP7Cq2g6hbSFEtY2EA 1gDCCWBqiuwC1/qoV9rcmZdHTSaCF3k2b6Dg0p9W6jsQdyMZ7c+Iolomy/Fd43gV Q93p9XvjvXl9abk7hTdqcCDKDRDgMpWOzWAR2eizpZ2T0VZ7pW53Q2NxgWe1cq/3 oloubMt6vYw/5SGdi4DbzId9QOY0jyK6/NVKYcGgCKprQzd99dWpeVaFpbcdg0uK 9r/UjV/pWBnDZ5+wy7sjEL2ZnP/dHY/RlTULwUQf7KNfi3rRBEPlAtU6FcBvnr7z 7DBB7iKqoqgQQ2zfe9TuZyzZJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrNRyP5 qkO9spNvjNDTtlE8euH+MB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8wRTA4MkU3MkNEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0oz SERad1pPSUVtMmlwQThjYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4HbDy7Gq60TdFVtl5GDF1OvTOtELyxWud+zgpEoIEpwuYr0c9FDl6 Cj81CY+Ic39fkcnxZ77Frqy31inDnVEUYLIEkbklhoqogs2aS0XrXpSf9djlb4sJ IqL4igEfoaLfPO5Lw/VSebiXlKkKGXgnT51WO7qo/aQjKX/B45en/Ri/R/SRYU/N 75QPN6VKk8BEc3X4NqidlDej+Y5zlr/BNMT+jpdOgmNkOnadihaW4dfZ2Hexkgep lTncwISxqsILPOieGfDu3yLfiA8u5aC7i6xhN1TOZbqGKYwvzNeG3EqMUcSejPyk hmb5S58Ae1ifSBdRy0xWH3Oxl/TqrEuj -----END CERTIFICATE-----Generated at Sat Dec 6 18:28:21 2025 by rpki-client