This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json) Hash identifier: IFPP9bByQ/CzdmgjniSRU5x0dQevxGpBi59rCaAp23Q= Subject key identifier: 8C:6C:C6:A5:24:C1:AE:67:AB:32:00:1F:5C:CB:F7:3A:5F:38:F0:9E Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Certificate serial: 0B9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft Manifest number: 0B93 Signing time: Sat 06 Dec 2025 18:18:37 +0000 Manifest this update: Sat 06 Dec 2025 18:18:36 +0000 Manifest next update: Sat 13 Dec 2025 18:18:36 +0000 Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: TJZGBfBQlyXDzpJyXZY30nRvC+K2F7QR2Zr3x2thW3I=) 2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: Qsy4TKaFv40VH7rqRhiymRYP7EU8I6x9tTe3ND6Wurc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2971 (0xb9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Validity Not Before: Dec 6 18:18:36 2025 GMT Not After : Dec 13 18:18:36 2025 GMT Subject: CN=6934737d-d246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e4:4c:7c:bb:e6:18:58:5f:15:08:c3:3e:86: 32:06:b2:c3:27:4d:d8:97:4f:36:5a:18:e1:f6:14: c6:86:e5:5f:1a:0a:21:f9:36:d6:51:a4:b5:82:8f: 7e:44:d0:8a:31:dd:e6:2a:92:85:af:d8:7b:62:13: 8f:4a:09:13:cb:7f:34:4e:39:17:79:ff:f7:ad:8c: d7:61:cc:9e:36:4b:7e:d6:8c:4f:80:83:67:70:87: a7:23:ce:21:31:a4:f0:d4:7e:c0:97:33:86:f8:9f: 90:bd:23:d0:95:be:67:d2:67:9e:d8:e3:71:57:46: e8:85:71:c2:30:53:41:f0:a5:7c:2a:8f:ea:3f:38: f5:63:11:28:c5:0b:ed:49:bb:e4:0e:ec:95:a2:01: 66:fe:15:3c:a4:3d:9a:ca:ed:14:95:6e:9a:f9:b6: fa:f1:86:08:dd:92:f6:1d:4e:16:01:47:d5:40:62: ed:93:a9:83:66:ad:73:c2:aa:9b:e3:f4:a7:4b:29: 9b:b0:3d:3f:cd:4a:3f:41:c8:e5:fe:43:60:e3:21: 78:02:bd:91:f1:ed:bc:25:63:52:4e:a2:cf:4b:9d: 60:80:09:f5:61:23:84:60:56:87:e8:76:d2:0e:08: 97:48:6c:85:e9:37:7f:c0:4e:ba:e9:9f:d0:6c:02: 8c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6C:C6:A5:24:C1:AE:67:AB:32:00:1F:5C:CB:F7:3A:5F:38:F0:9E X509v3 Authority Key Identifier: keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:a0:4e:2c:12:e8:0a:29:1a:6c:a9:d8:c1:1e:c6:26:d7:1e: 99:ec:72:54:a8:77:9a:d6:ea:bb:e0:e6:2d:ab:44:72:48:e3: 5b:52:5f:c2:2a:dd:ed:4c:6b:7c:7b:a2:8c:37:e9:94:66:fa: aa:af:77:30:a7:e5:9b:8c:a9:cc:0f:29:12:ba:50:27:d4:ce: 42:59:7b:7a:6b:94:59:e4:89:cd:36:83:10:22:16:e5:15:b0: 3e:da:17:67:ef:eb:ff:d5:a6:3f:14:48:b6:6f:05:f2:10:c2: 7e:44:63:f2:aa:91:54:d2:79:35:3a:ff:17:7c:aa:4b:a1:46: b8:6b:44:19:19:90:24:f2:96:2b:14:d9:ff:ae:7f:5f:3f:37: ef:85:8e:ac:81:07:0c:5d:98:2d:ee:40:2d:c7:83:9f:03:25: 2a:46:22:89:af:34:50:d7:21:b2:f5:7d:19:c8:b7:ef:c2:a7: 97:45:8c:2a:dd:a2:c5:00:87:52:2d:d1:65:a8:56:04:ec:19: ab:54:25:93:27:f7:e5:3d:d7:4b:a4:cb:b9:ed:95:cc:90:8a: b9:1a:76:9e:42:9d:2c:dd:4f:69:1c:20:f0:fd:d9:c4:46:22: 12:44:e3:a4:24:1c:75:8d:bb:f9:1c:4e:91:c1:cf:1e:62:b4: 46:2b:2d:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzOEYxMTAvBgNVBAUTKDIyMjQwRkI3ODcyQUE2MThEM0UwRDQ5MzQ1REJGNDI0 NzNBRDA0QzcwHhcNMjUxMjA2MTgxODM2WhcNMjUxMjEzMTgxODM2WjAYMRYwFAYD VQQDEw02OTM0NzM3ZC1kMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnORMfLvmGFhfFQjDPoYyBrLDJ03Yl082Whjh9hTGhuVfGgoh+TbWUaS1go9+ RNCKMd3mKpKFr9h7YhOPSgkTy380TjkXef/3rYzXYcyeNkt+1oxPgINncIenI84h MaTw1H7AlzOG+J+QvSPQlb5n0mee2ONxV0bohXHCMFNB8KV8Ko/qPzj1YxEoxQvt SbvkDuyVogFm/hU8pD2ayu0UlW6a+bb68YYI3ZL2HU4WAUfVQGLtk6mDZq1zwqqb 4/SnSymbsD0/zUo/Qcjl/kNg4yF4Ar2R8e28JWNSTqLPS51ggAn1YSOEYFaH6HbS DgiXSGyF6Td/wE666Z/QbAKM9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxsxqUk wa5nqzIAH1zL9zpfOPCeMB8GA1UdIwQYMBaAFCIkD7eHKqYY0+DUk0Xb9CRzrQTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzM4Ri82OUU5OUI4RTNB QUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBoalQ0TlNUUmR2MEpIT3RC TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpUVB0NGNxcGhqVDROU1RSZHYwSkhPdEJNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzM4Ri82OUU5OUI4RTNBQUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBo alQ0TlNUUmR2MEpIT3RCTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDkoE4sEugKKRpsqdjBHsYm1x6Z7HJUqHea1uq74OYtq0RySONbUl/C Kt3tTGt8e6KMN+mUZvqqr3cwp+WbjKnMDykSulAn1M5CWXt6a5RZ5InNNoMQIhbl FbA+2hdn7+v/1aY/FEi2bwXyEMJ+RGPyqpFU0nk1Ov8XfKpLoUa4a0QZGZAk8pYr FNn/rn9fPzfvhY6sgQcMXZgt7kAtx4OfAyUqRiKJrzRQ1yGy9X0ZyLfvwqeXRYwq 3aLFAIdSLdFlqFYE7BmrVCWTJ/flPddLpMu57ZXMkIq5GnaeQp0s3U9pHCDw/dnE RiISROOkJBx1jbv5HE6Rwc8eYrRGKy1a -----END CERTIFICATE-----Generated at Sat Dec 6 22:08:13 2025 by rpki-client