This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft File: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft (raw, json) Hash identifier: EPrjVxYBUnZ+Xnjzy6Igo9fdT9kwy9ZH/L8AaCOHy3s= Subject key identifier: CA:BB:7F:72:58:CA:56:70:D1:FD:E6:67:59:E1:B1:0E:88:BC:E5:30 Authority key identifier: 88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F Certificate issuer: /CN=A9175AA6/serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F Certificate serial: 0804 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft Manifest number: 07FE Signing time: Sat 06 Dec 2025 20:06:19 +0000 Manifest this update: Sat 06 Dec 2025 20:06:19 +0000 Manifest next update: Sat 13 Dec 2025 20:06:19 +0000 Files and hashes: 1: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl (hash: uXh2bpAn+k+eo0F491mgraa2p+5lPBU9on/eE62/c1E=) 2: 030CCD12069611EB81CF2329C4F9AE02.roa (hash: IGUI6ypPN1raHp9GKwNU8LZ6l1B0WS2Xv77ok6Yzg+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2052 (0x804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175AA6, serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F Validity Not Before: Dec 6 20:06:19 2025 GMT Not After : Dec 13 20:06:19 2025 GMT Subject: CN=69348cbb-e414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:c1:79:0a:c4:71:ff:e8:4b:2e:50:87:dc: ec:d2:bb:d3:10:d2:b3:79:77:88:7f:16:9b:3d:80: f9:42:a8:50:eb:02:78:38:e9:63:5a:59:d4:de:29: 27:26:78:b6:c4:b0:80:cd:4b:2f:69:d7:b8:75:ad: b9:04:e3:3c:6e:fa:c7:41:5b:c3:3b:cb:a5:9b:8b: ef:21:74:fb:65:d5:c9:0a:6c:0c:14:41:3f:4f:21: 6c:b1:26:93:21:64:b5:4c:3c:f9:ce:e7:30:e2:64: 59:6a:1e:96:d0:66:f8:4b:a9:85:dc:6f:d9:9c:1f: 75:19:b8:5e:ce:41:bb:9e:84:a0:66:71:b9:e9:37: 12:93:b9:3b:f8:cb:06:6f:cb:21:0a:8c:91:db:e3: 51:58:55:c2:b3:85:68:8f:94:dc:6f:67:90:1a:a6: cd:90:a8:59:8f:02:f5:50:6a:86:fd:6a:8a:89:0c: 75:fa:e9:26:e6:3f:63:ac:63:12:d1:cd:1d:bb:a4: a6:62:09:27:8b:0a:63:50:4d:b6:84:dd:0a:4d:73: 11:32:1d:f6:a8:fe:64:78:a5:d6:d6:a5:b3:19:df: 53:68:26:61:51:0a:51:80:b6:2a:8c:ad:3e:99:bd: 6f:7e:38:d8:ff:bd:72:c0:2b:35:cf:7e:23:0f:a4: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BB:7F:72:58:CA:56:70:D1:FD:E6:67:59:E1:B1:0E:88:BC:E5:30 X509v3 Authority Key Identifier: keyid:88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:15:17:c3:3d:ef:53:98:4d:ae:0c:fe:b4:9d:57:b2:9e:a5: d2:ce:fa:72:64:af:72:7b:c5:36:48:f6:81:62:67:b1:0b:b0: a1:83:d3:1d:9b:fa:ea:68:c2:56:9c:8a:00:0f:23:b0:eb:d0: df:49:49:90:6e:9b:84:6b:37:cb:2b:b9:49:38:3e:49:2b:ee: 6d:be:8c:d1:c1:b1:e3:16:0e:3f:a3:6c:cd:ba:ca:d0:c8:d5: cd:8b:8d:01:20:d6:6e:70:d0:70:f6:3e:1c:a9:42:cd:5a:7e: c8:e4:9f:7d:1d:96:0a:d2:a5:85:b5:fa:ef:c4:c6:62:d7:c8: fd:cf:c9:28:b5:d8:83:71:39:82:76:b8:cc:6b:da:c1:bc:c0: af:6c:80:28:7c:f9:ca:0a:1e:bd:16:88:5f:24:ed:81:4c:d6: 09:48:68:06:b0:1f:25:44:0e:92:f3:02:65:35:60:00:cf:8f: 8f:b9:63:ad:39:d8:98:a7:a4:cd:70:61:6a:25:ab:8f:2d:37: 10:b5:0b:0c:ee:cf:32:02:53:24:9c:0f:54:db:8c:57:46:e3: 4b:2c:db:48:4c:c6:e8:7a:ab:7c:d9:61:52:aa:8d:83:de:3a: 37:1a:bb:47:4a:2a:3e:6a:61:0e:a4:3c:3b:90:8f:18:cb:7e: 83:e3:de:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVBQTYxMTAvBgNVBAUTKDg4Q0Q2RDQ3MkRDQTE2QjBGNDFGMkVBRThFRDkyMTU4 MUMyNzhENkYwHhcNMjUxMjA2MjAwNjE5WhcNMjUxMjEzMjAwNjE5WjAYMRYwFAYD VQQDEw02OTM0OGNiYi1lNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/rBeQrEcf/oSy5Qh9zs0rvTENKzeXeIfxabPYD5QqhQ6wJ4OOljWlnU3ikn Jni2xLCAzUsvade4da25BOM8bvrHQVvDO8ulm4vvIXT7ZdXJCmwMFEE/TyFssSaT IWS1TDz5zucw4mRZah6W0Gb4S6mF3G/ZnB91GbhezkG7noSgZnG56TcSk7k7+MsG b8shCoyR2+NRWFXCs4Voj5Tcb2eQGqbNkKhZjwL1UGqG/WqKiQx1+ukm5j9jrGMS 0c0du6SmYgkniwpjUE22hN0KTXMRMh32qP5keKXW1qWzGd9TaCZhUQpRgLYqjK0+ mb1vfjjY/71ywCs1z34jD6RiVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMq7f3JY ylZw0f3mZ1nhsQ6IvOUwMB8GA1UdIwQYMBaAFIjNbUctyhaw9B8uro7ZIVgcJ41v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFBNi9BRDlFREYwNjA2 OTQxMUVCQjlEMUVCMjdDNEY5QUUwMi9pTTF0UnkzS0ZyRDBIeTZ1anRraFdCd25q VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lNMXRSeTNLRnJEMEh5NnVqdGtoV0J3bmpXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUFBNi9BRDlFREYwNjA2OTQxMUVCQjlEMUVCMjdDNEY5QUUwMi9pTTF0UnkzS0Zy RDBIeTZ1anRraFdCd25qVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzFRfDPe9TmE2uDP60nVeynqXSzvpyZK9ye8U2SPaBYmexC7Chg9Md m/rqaMJWnIoADyOw69DfSUmQbpuEazfLK7lJOD5JK+5tvozRwbHjFg4/o2zNusrQ yNXNi40BINZucNBw9j4cqULNWn7I5J99HZYK0qWFtfrvxMZi18j9z8kotdiDcTmC drjMa9rBvMCvbIAofPnKCh69FohfJO2BTNYJSGgGsB8lRA6S8wJlNWAAz4+PuWOt OdiYp6TNcGFqJauPLTcQtQsM7s8yAlMknA9U24xXRuNLLNtITMboeqt82WFSqo2D 3jo3GrtHSio+amEOpDw7kI8Yy36D496o -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:29 2025 by rpki-client