This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json) Hash identifier: XdzSGMxxhbonqWjYecgOIrHCn2W1mA+/F/cWn8aFi5U= Subject key identifier: 20:21:6B:24:EF:85:54:A1:F7:F8:09:65:FE:A8:13:70:62:A5:DA:E5 Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft Manifest number: 0970 Signing time: Thu 04 Dec 2025 19:56:26 +0000 Manifest this update: Thu 04 Dec 2025 19:56:25 +0000 Manifest next update: Thu 11 Dec 2025 19:56:25 +0000 Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: 0M1oU/365hV9Oc15qsgPMcqBZvL7fcoTWWHK+Zihv4g=) 2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: hLWcPUyVJnyv7l6njaVAxEoaSy2MA1Ss+BiiJSefS0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Validity Not Before: Dec 4 19:56:25 2025 GMT Not After : Dec 11 19:56:25 2025 GMT Subject: CN=6931e76a-70d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:4e:e1:44:95:c7:ab:74:fa:22:89:a1:dd: 01:f7:48:a3:4f:2d:84:e6:e2:97:d1:4e:14:90:fe: 5d:06:4b:46:15:20:d6:38:08:eb:ef:b2:af:b5:f3: de:44:86:fe:e2:70:16:41:a9:81:10:5e:a9:43:83: 72:98:d5:88:16:c0:41:71:31:93:c3:f3:b9:d9:62: bc:c7:5f:17:da:c2:3a:5c:a4:f7:47:3a:64:49:b7: 46:26:64:3f:f1:b0:09:1a:55:8c:5d:93:0f:3c:2a: ae:8e:e4:0e:b2:a5:95:4d:90:c0:8a:8d:d2:a3:97: 04:5a:9e:b7:d5:85:4d:05:aa:6d:ba:66:ab:6a:b8: 6a:33:05:89:dd:fa:92:80:87:e4:a0:8b:f2:73:25: b4:59:31:9d:bc:0a:3f:09:88:24:fc:d7:25:25:63: ea:cc:17:c4:aa:eb:61:3d:c8:61:20:73:4a:34:0a: 11:4e:8d:26:a3:1a:73:90:5a:76:c9:9f:7f:cd:c6: 85:de:12:aa:b9:1a:ab:ba:a0:fb:00:38:33:00:ce: 0a:7e:73:50:ba:2b:17:3e:5f:24:48:99:42:6c:ff: 41:07:2d:37:6b:3e:ae:89:a1:61:89:ef:d1:77:16: 27:d8:f7:ea:3e:94:72:04:59:83:e7:a5:13:3f:68: 81:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:21:6B:24:EF:85:54:A1:F7:F8:09:65:FE:A8:13:70:62:A5:DA:E5 X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:29:c4:89:91:b5:19:74:de:4b:40:cf:0f:a6:e7:4a:95:74: 2e:b5:94:3c:63:a0:90:69:4f:ca:05:9c:ed:9c:5a:1e:bd:1b: 17:f4:ad:0c:fb:dd:a2:17:a6:ff:ec:d9:21:8d:a6:27:c5:60: b1:d8:92:cb:6a:43:79:51:01:08:54:f4:f5:d8:84:87:88:3c: 70:6a:57:e6:4f:c3:df:71:1c:c6:5c:f4:54:65:29:b3:e4:74: e1:d2:04:86:e9:cf:33:0a:52:e8:88:2f:81:5b:c2:48:be:0b: f7:30:17:eb:b3:7d:07:28:77:66:bf:2d:62:01:c3:2e:74:77: 66:8d:2a:07:f9:4c:29:90:40:0f:b0:af:05:50:70:73:1d:aa: 25:c6:28:eb:39:76:98:fe:f6:37:cf:fe:c5:98:9f:6d:69:23: bb:b7:02:29:e6:5c:38:c1:de:f7:3e:aa:83:da:62:31:06:23: 4d:e4:66:34:40:66:d1:21:37:81:27:36:87:2c:8f:04:d9:74: ae:74:40:50:8b:8e:1e:03:42:48:d0:da:3a:d2:c2:79:d1:d4: 61:b9:dd:6b:89:d1:16:e9:f1:39:e1:d2:52:ad:22:f3:cd:1c: 9a:7e:de:d8:1f:0e:8f:80:bb:f4:94:73:d1:e6:af:1c:17:16: 35:43:1f:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDIyQjRBOUFBQTk4MkFCQ0IzOUY5Nzg5ODZCQ0I2Nzcw QjYwMkMxQTQwHhcNMjUxMjA0MTk1NjI1WhcNMjUxMjExMTk1NjI1WjAYMRYwFAYD VQQDEw02OTMxZTc2YS03MGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9xO4USVx6t0+iKJod0B90ijTy2E5uKX0U4UkP5dBktGFSDWOAjr77KvtfPe RIb+4nAWQamBEF6pQ4NymNWIFsBBcTGTw/O52WK8x18X2sI6XKT3RzpkSbdGJmQ/ 8bAJGlWMXZMPPCqujuQOsqWVTZDAio3So5cEWp631YVNBaptumararhqMwWJ3fqS gIfkoIvycyW0WTGdvAo/CYgk/NclJWPqzBfEquthPchhIHNKNAoRTo0moxpzkFp2 yZ9/zcaF3hKquRqruqD7ADgzAM4KfnNQuisXPl8kSJlCbP9BBy03az6uiaFhie/R dxYn2PfqPpRyBFmD56UTP2iBCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAhayTv hVSh9/gJZf6oE3BipdrlMB8GA1UdIwQYMBaAFCK0qaqpgqvLOfl4mGvLZ3C2AsGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4czUtWGlZYTh0bmNMWUN3 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4 czUtWGlZYTh0bmNMWUN3YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQKcSJkbUZdN5LQM8PpudKlXQutZQ8Y6CQaU/KBZztnFoevRsX9K0M +92iF6b/7NkhjaYnxWCx2JLLakN5UQEIVPT12ISHiDxwalfmT8PfcRzGXPRUZSmz 5HTh0gSG6c8zClLoiC+BW8JIvgv3MBfrs30HKHdmvy1iAcMudHdmjSoH+UwpkEAP sK8FUHBzHaolxijrOXaY/vY3z/7FmJ9taSO7twIp5lw4wd73PqqD2mIxBiNN5GY0 QGbRITeBJzaHLI8E2XSudEBQi44eA0JI0No60sJ50dRhud1ridEW6fE54dJSrSLz zRyaft7YHw6PgLv0lHPR5q8cFxY1Qx/b -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:05 2025 by rpki-client