This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: 3l3+39tZDUaRyaZEKKPjfFGVtbAR21y9I3UaeE33a1Y= Subject key identifier: B0:54:C2:28:1F:72:63:A1:F3:59:17:04:B7:4A:90:8C:11:BE:C2:CB Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: 011E Signing time: Sun 07 Dec 2025 03:06:15 +0000 Manifest this update: Sun 07 Dec 2025 03:06:14 +0000 Manifest next update: Sun 14 Dec 2025 03:06:14 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: 1tqapPjpE+xp/LrVWjcAdtXrYtlV1infNLibSg48zrg=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: 2Ea6pfyMHuu7UJGQSJfsHF3FX8pvDKiDVHdhUSz8QqA=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: fSTt/OP/CCIEWdda0wFEWb+9ChFos6G9oFISz4g6itU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Dec 7 03:06:14 2025 GMT Not After : Dec 14 03:06:14 2025 GMT Subject: CN=6934ef27-feac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:37:52:db:3b:c2:41:4b:f2:f5:fd:9e:d0: 34:56:3b:8d:07:ce:63:50:42:54:2d:a5:bb:00:7c: e8:0a:bc:ec:28:58:55:67:65:5f:68:bf:f2:2d:76: 13:ef:71:63:22:cb:17:09:22:67:a9:aa:62:b1:af: f9:cb:fa:2d:9f:8d:0a:6c:9f:03:ad:70:2e:37:7a: d9:e2:b8:5f:9e:09:f8:c7:c2:59:92:6a:59:94:70: d4:2e:b6:2f:88:92:b5:1e:61:bb:57:d1:6c:9c:d5: e7:92:9e:11:76:40:b2:5f:3b:02:f4:53:57:48:ed: 49:29:f5:7a:15:fe:1d:e2:94:89:e8:98:2a:d1:09: ec:60:81:8c:4c:28:79:13:e3:53:25:c6:f7:4d:67: 50:8f:4f:35:e8:ab:ab:b1:af:0e:75:b5:d4:94:35: 57:c8:b2:b7:82:1e:45:e9:a3:ac:3d:e0:95:9c:13: 67:52:dd:c0:87:2b:aa:a0:f1:29:10:03:27:c5:c8: 14:9e:6e:ab:ee:74:de:09:b0:01:c2:f0:d5:df:1d: c6:a5:fa:e9:0c:2d:be:0a:90:1d:63:25:da:aa:0d: a2:f3:e2:2d:97:48:0b:f4:80:cc:2c:b0:6b:5d:6b: 72:76:9c:c5:5c:03:b6:36:65:db:20:d1:1f:d5:f0: 2e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:54:C2:28:1F:72:63:A1:F3:59:17:04:B7:4A:90:8C:11:BE:C2:CB X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c0:82:16:2c:ac:63:72:ff:6b:b7:a6:8c:cd:c3:57:d0:6c: 7c:01:84:e2:80:68:0b:a1:f9:5a:21:c6:2d:de:0a:a7:72:84: 59:54:05:38:17:2a:4c:a2:b7:f4:d2:58:ad:f9:87:23:57:ff: 81:11:a7:38:7b:82:56:77:24:ea:6b:7b:cb:2a:9d:58:ff:76: 2b:0f:b0:d3:f0:cf:ac:94:84:be:1c:24:e6:1d:45:c8:04:e2: cb:f1:5d:bd:4a:1f:fa:64:b8:61:2e:09:1d:4a:c5:d5:89:df: fb:4a:64:e3:a9:5f:f7:76:c6:91:1f:16:21:c4:3d:82:3e:52: 88:0a:b5:65:e4:9c:bb:b5:44:d1:59:c9:a3:55:73:86:89:b1: 8d:7c:30:e1:cb:a1:91:5f:bc:f0:58:b3:24:3e:4a:62:79:ea: e1:a1:aa:25:27:1e:92:77:8a:26:ad:a1:6f:b1:af:bb:df:25: f4:ba:37:81:c7:06:81:4f:f2:13:0b:95:fd:f9:b3:eb:e3:6a: 17:94:a1:9c:6a:6c:5f:cf:04:73:97:95:d5:43:af:02:e7:12: 42:04:cd:d2:9c:2d:cf:3c:1b:2f:4d:77:d4:7c:01:7a:f7:c6: 23:df:2a:80:10:4e:e8:b4:44:fa:ad:18:8c:56:e6:71:46:70: a1:c6:eb:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjUxMjA3MDMwNjE0WhcNMjUxMjE0MDMwNjE0WjAYMRYwFAYD VQQDEw02OTM0ZWYyNy1mZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCY3Uts7wkFL8vX9ntA0VjuNB85jUEJULaW7AHzoCrzsKFhVZ2VfaL/yLXYT 73FjIssXCSJnqapisa/5y/otn40KbJ8DrXAuN3rZ4rhfngn4x8JZkmpZlHDULrYv iJK1HmG7V9FsnNXnkp4RdkCyXzsC9FNXSO1JKfV6Ff4d4pSJ6Jgq0QnsYIGMTCh5 E+NTJcb3TWdQj0816Kursa8OdbXUlDVXyLK3gh5F6aOsPeCVnBNnUt3AhyuqoPEp EAMnxcgUnm6r7nTeCbABwvDV3x3GpfrpDC2+CpAdYyXaqg2i8+Itl0gL9IDMLLBr XWtydpzFXAO2NmXbINEf1fAu2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBUwigf cmOh81kXBLdKkIwRvsLLMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4wIIWLKxjcv9rt6aMzcNX0Gx8AYTigGgLoflaIcYt3gqncoRZVAU4 FypMorf00lit+YcjV/+BEac4e4JWdyTqa3vLKp1Y/3YrD7DT8M+slIS+HCTmHUXI BOLL8V29Sh/6ZLhhLgkdSsXVid/7SmTjqV/3dsaRHxYhxD2CPlKICrVl5Jy7tUTR WcmjVXOGibGNfDDhy6GRX7zwWLMkPkpieerhoaolJx6Sd4omraFvsa+73yX0ujeB xwaBT/ITC5X9+bPr42oXlKGcamxfzwRzl5XVQ68C5xJCBM3SnC3PPBsvTXfUfAF6 98Yj3yqAEE7otET6rRiMVuZxRnChxuvB -----END CERTIFICATE-----Generated at Sun Dec 7 05:40:27 2025 by rpki-client