This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft File: IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json) Hash identifier: 8gaKdRRub8O4SJKAL6BEDuLoVjT85TSgUXRbVHHNMbU= Subject key identifier: 4D:ED:3D:B2:28:3F:41:16:1C:A9:DE:2D:25:07:9B:0C:AF:E7:B5:DD Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 Certificate issuer: /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft Manifest number: 010F Signing time: Fri 05 Dec 2025 03:00:52 +0000 Manifest this update: Fri 05 Dec 2025 03:00:51 +0000 Manifest next update: Fri 12 Dec 2025 03:00:51 +0000 Files and hashes: 1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: y/+5LqJTEiwkfNuxYJTs4Ttqe2GoSyGv0rGAJFu/qZY=) 2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: zzdFNHhV2hq5Z+7D9I2GDKqbTVdZBzqXlydZjeryJz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EA7, serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Validity Not Before: Dec 5 03:00:51 2025 GMT Not After : Dec 12 03:00:51 2025 GMT Subject: CN=69324ae4-a805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:99:46:6e:8b:38:cb:f7:c9:2c:8b:bf:ce:41: 61:80:71:64:4e:1a:6d:59:8b:62:79:16:32:50:31: 1f:cf:10:5e:f7:3c:f3:b5:83:70:68:d9:09:f7:ca: 92:1f:2b:11:a0:42:cb:cd:30:be:cb:ad:b2:55:c4: 47:87:05:97:2c:f6:0e:38:a8:de:7b:40:e2:58:e0: 12:38:75:64:5a:7c:7a:ce:19:25:cd:74:48:70:20: bf:ce:c8:05:7f:1b:5e:bf:c3:be:d6:06:61:f9:6c: eb:87:ad:47:51:83:e8:ff:f7:f7:44:46:29:7d:32: 8c:30:f3:55:e1:35:4b:13:be:4e:f9:50:78:5c:6e: c2:f0:97:24:cc:93:f8:ed:24:aa:44:4d:60:ef:97: 64:b5:a4:39:ae:5f:c9:c9:84:c8:0c:2b:01:36:81: c2:28:89:21:ba:fc:7d:a8:47:57:47:5f:7a:e7:a5: 02:a3:01:2d:f9:3f:75:67:e0:22:63:94:8f:fe:c9: 08:d8:91:e9:6d:71:67:67:39:fc:4b:a2:c2:6c:da: c9:ad:80:7f:f2:37:65:9b:36:b1:84:aa:fd:3e:4b: 74:b4:64:04:e5:9c:b9:1d:09:21:1c:c6:63:fd:ef: bf:6e:1a:d0:c0:39:1b:b0:1f:ab:52:4c:8a:78:ce: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:ED:3D:B2:28:3F:41:16:1C:A9:DE:2D:25:07:9B:0C:AF:E7:B5:DD X509v3 Authority Key Identifier: keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:22:00:b4:5c:9e:50:f2:f2:59:35:ba:49:36:0c:2b:5c:8d: 1f:cb:cd:d0:db:de:21:dd:40:3d:8c:3c:75:ff:e0:5b:02:37: 17:8d:10:94:d2:0e:3a:04:28:2d:fc:ea:f8:15:1b:af:eb:2c: f6:db:4a:43:37:ad:43:7d:6f:9e:47:91:b3:e5:e7:d1:10:36: 59:d6:e6:90:3a:cd:79:8a:55:84:14:2b:e0:18:b7:49:d8:b1: ee:d0:9d:90:19:35:31:6e:c9:dc:26:8e:05:36:2b:1e:db:31: 63:6f:0f:9a:57:bf:4c:d4:25:3c:21:54:25:86:0a:af:a9:d1: 85:37:0b:72:5b:76:1e:98:91:77:fd:64:23:57:cb:07:4a:a1: 17:ce:99:dc:60:d8:6b:2d:30:01:c5:bf:b5:51:ab:a2:cc:9d: 8b:04:0e:67:e1:d3:43:dc:bc:4f:a6:73:fc:7a:58:c3:24:65: c5:f7:45:3e:c1:36:b2:13:1e:7b:26:f5:a5:63:6c:4e:a5:f5: f5:3c:a8:3f:0f:4f:25:d3:6f:eb:4b:cb:a9:91:bf:3c:fb:a2: 32:bc:54:0c:95:86:1a:4d:0f:da:42:f0:e0:e3:6f:61:73:a5: 92:cb:f5:c9:46:50:1a:53:5c:6d:9f:98:a8:7b:fd:a5:25:bf: f3:7a:d8:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQTcxMTAvBgNVBAUTKDIyQTYyQzE0RDJCRDMyRTNFNTk2RDhBM0U2MkJCQzMy NzQ0NjhGOTkwHhcNMjUxMjA1MDMwMDUxWhcNMjUxMjEyMDMwMDUxWjAYMRYwFAYD VQQDEw02OTMyNGFlNC1hODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZlGbos4y/fJLIu/zkFhgHFkThptWYtieRYyUDEfzxBe9zzztYNwaNkJ98qS HysRoELLzTC+y62yVcRHhwWXLPYOOKjee0DiWOASOHVkWnx6zhklzXRIcCC/zsgF fxtev8O+1gZh+Wzrh61HUYPo//f3REYpfTKMMPNV4TVLE75O+VB4XG7C8JckzJP4 7SSqRE1g75dktaQ5rl/JyYTIDCsBNoHCKIkhuvx9qEdXR19656UCowEt+T91Z+Ai Y5SP/skI2JHpbXFnZzn8S6LCbNrJrYB/8jdlmzaxhKr9Pkt0tGQE5Zy5HQkhHMZj /e+/bhrQwDkbsB+rUkyKeM5CJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3tPbIo P0EWHKneLSUHmwyv57XdMB8GA1UdIwQYMBaAFCKmLBTSvTLj5ZbYo+YrvDJ0Ro+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVBNy9CMUIzRTJENjM4 NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11UGxsdGlqNWl1OE1uUkdq NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxWXNGTks5TXVQbGx0aWo1aXU4TW5SR2o1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVBNy9CMUIzRTJENjM4NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11 UGxsdGlqNWl1OE1uUkdqNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADIgC0XJ5Q8vJZNbpJNgwrXI0fy83Q294h3UA9jDx1/+BbAjcXjRCU 0g46BCgt/Or4FRuv6yz220pDN61DfW+eR5Gz5efREDZZ1uaQOs15ilWEFCvgGLdJ 2LHu0J2QGTUxbsncJo4FNise2zFjbw+aV79M1CU8IVQlhgqvqdGFNwtyW3YemJF3 /WQjV8sHSqEXzpncYNhrLTABxb+1UauizJ2LBA5n4dND3LxPpnP8eljDJGXF90U+ wTayEx57JvWlY2xOpfX1PKg/D08l02/rS8upkb88+6IyvFQMlYYaTQ/aQvDg429h c6WSy/XJRlAaU1xtn5ioe/2lJb/zetju -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:54 2025 by rpki-client