This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft File: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft (raw, json) Hash identifier: hHrYSP/Ne34iJI8RXXMn6SDSQTJR//Ypj3BQVzxixZw= Subject key identifier: AC:77:D5:EE:18:38:C8:8D:BE:E6:10:AE:89:9D:AA:5F:B5:14:BE:29 Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 Certificate issuer: /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0 Certificate serial: 06D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft Manifest number: 06BD Signing time: Sat 06 Dec 2025 21:07:49 +0000 Manifest this update: Sat 06 Dec 2025 21:07:47 +0000 Manifest next update: Sat 13 Dec 2025 21:07:47 +0000 Files and hashes: 1: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl (hash: TJVLGM01V+vkVJDAJx+9Ag7t1fC1fKf+FutKyw19ryU=) 2: 399EDDAA823F11F0895C5843C4F9AE02.roa (hash: /r//PhS93LHdDuYeU1cRwdY/pqIxC89dGfVtSVhWFU8=) 3: 3EACF95EEBB511ECA410BF6DC4F9AE02.roa (hash: qKX/GBn2ViWf+TjqAq1x5OKYSX2OLWnCMDMtErmOaQ4=) 4: 57D28CCA853E11EB9D9E2D39C4F9AE02.roa (hash: iKn5TfguO8Mhc7Q+khdM2Gs5+kk+EBJN5sb5yyLHen0=) 5: 5892BB44853E11EB9D9E2D39C4F9AE02.roa (hash: bj4EEU6BonBdP8tBLldcSa0qw8eOD5SAjacKu9I9ahU=) 6: 1D526B2E5DB311EEA8990E1BC4F9AE02.roa (hash: BtMaJjmeZit8Z2gpUmuCkFZr4tfHVh6jPnHOcOKntEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91854B7, serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0 Validity Not Before: Dec 6 21:07:47 2025 GMT Not After : Dec 13 21:07:47 2025 GMT Subject: CN=69349b24-911c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:24:df:15:2d:cf:bb:7e:ea:49:09:f1:53: 2f:f2:2d:d1:92:5c:54:85:76:b6:28:d6:88:cb:1b: 5a:84:4a:19:42:d7:e0:b9:c6:a9:e2:70:6d:8d:91: 90:8f:92:e6:d6:bb:84:f9:ee:f4:8d:8e:2d:09:6a: 64:e8:98:ea:f6:b7:d4:59:b9:2d:46:6b:8d:bc:ea: 6f:64:48:e7:1e:4b:c7:13:6c:2a:cb:64:c6:bd:19: 5e:d3:f8:68:51:a6:1d:55:ef:62:50:74:49:74:f1: 10:37:4f:01:80:96:32:8e:83:f0:7a:7a:0a:0d:0c: 99:a5:e1:eb:37:4d:9f:5f:05:dc:49:0a:cc:02:7a: e7:42:76:2d:b8:74:b7:50:9a:c0:35:c2:53:6a:4b: a7:bd:07:05:3f:81:66:e9:5b:52:6d:69:c1:7f:1a: d0:c3:1c:16:5f:13:06:c8:ee:a5:ed:10:00:ac:ea: 19:8c:70:3f:21:8c:a6:0b:b9:21:78:57:a0:5f:46: 11:80:e9:b9:ab:2c:d4:d8:89:4b:9f:b6:8d:30:37: c8:12:74:ad:06:84:ad:02:14:93:5a:5e:7e:49:ac: e6:8b:5a:43:a2:fa:08:43:a2:f9:c9:c9:51:ef:9d: 07:7f:49:65:42:58:00:c3:f3:70:0b:24:5f:9f:f5: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:77:D5:EE:18:38:C8:8D:BE:E6:10:AE:89:9D:AA:5F:B5:14:BE:29 X509v3 Authority Key Identifier: keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3a:47:ee:09:3d:c0:dd:65:a0:e1:99:44:fb:b5:9b:46:90: cc:a3:eb:f8:13:c4:23:4d:27:c5:ca:17:49:8a:1c:94:56:b7: 6d:e3:5c:d7:27:71:e9:73:3e:ff:7f:30:ab:94:92:53:fc:76: 6d:6e:ba:f3:3a:72:5f:b6:a7:d0:d2:ee:ed:72:fe:86:ee:93: 5f:da:49:be:03:50:d4:91:34:77:c6:4b:bf:d6:25:63:5c:d0: 9d:33:19:49:72:64:c8:21:75:38:86:36:3d:9a:2d:74:c4:6b: f6:33:03:9d:24:c7:b9:00:9e:f2:0b:e7:b1:ad:ce:dc:7c:32: c2:fd:b1:e8:0e:d8:2d:62:4c:69:3e:ff:0d:20:55:da:3f:79: 68:f2:55:86:cd:e2:d0:ce:60:a7:56:58:97:9d:91:66:f6:19: cd:d3:2b:ab:f1:b1:f6:4d:8d:a6:d6:24:3f:53:8e:17:38:0d: d3:a7:ee:94:e8:53:3f:e9:95:de:50:5f:c9:4c:05:38:cc:4f: 68:89:32:9b:f4:8d:15:6a:67:76:46:8b:53:31:cb:60:ae:4d: f7:41:8b:64:05:e2:2f:e1:7c:49:73:18:21:ac:54:b2:4e:60: 27:57:97:de:35:02:5f:45:e8:46:91:b0:6d:b3:43:58:cf:07: bb:4e:42:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0QjcxMTAvBgNVBAUTKEY4OEI5NzQwNEY5REMxMEY1QUFCMDJGNzRFQzQ5MEY5 OEFEMEQzQjAwHhcNMjUxMjA2MjEwNzQ3WhcNMjUxMjEzMjEwNzQ3WjAYMRYwFAYD VQQDEw02OTM0OWIyNC05MTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEIk3xUtz7t+6kkJ8VMv8i3RklxUhXa2KNaIyxtahEoZQtfgucap4nBtjZGQ j5Lm1ruE+e70jY4tCWpk6Jjq9rfUWbktRmuNvOpvZEjnHkvHE2wqy2TGvRle0/ho UaYdVe9iUHRJdPEQN08BgJYyjoPwenoKDQyZpeHrN02fXwXcSQrMAnrnQnYtuHS3 UJrANcJTakunvQcFP4Fm6VtSbWnBfxrQwxwWXxMGyO6l7RAArOoZjHA/IYymC7kh eFegX0YRgOm5qyzU2IlLn7aNMDfIEnStBoStAhSTWl5+Sazmi1pDovoIQ6L5yclR 750Hf0llQlgAw/NwCyRfn/VbUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKx31e4Y OMiNvuYQromdql+1FL4pMB8GA1UdIwQYMBaAFPiLl0BPncEPWqsC907EkPmK0NOw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTRCNy9FMTgwQ0U3QTg1 MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdROWFxd0wzVHNTUS1ZclEw N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JdVhRRS1kd1E5YXF3TDNUc1NRLVlyUTA3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTRCNy9FMTgwQ0U3QTg1MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdR OWFxd0wzVHNTUS1ZclEwN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKOkfuCT3A3WWg4ZlE+7WbRpDMo+v4E8QjTSfFyhdJihyUVrdt41zX J3Hpcz7/fzCrlJJT/HZtbrrzOnJftqfQ0u7tcv6G7pNf2km+A1DUkTR3xku/1iVj XNCdMxlJcmTIIXU4hjY9mi10xGv2MwOdJMe5AJ7yC+exrc7cfDLC/bHoDtgtYkxp Pv8NIFXaP3lo8lWGzeLQzmCnVliXnZFm9hnN0yur8bH2TY2m1iQ/U44XOA3Tp+6U 6FM/6ZXeUF/JTAU4zE9oiTKb9I0Vamd2RotTMctgrk33QYtkBeIv4XxJcxghrFSy TmAnV5feNQJfRehGkbBts0NYzwe7TkIi -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:50 2025 by rpki-client