This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json) Hash identifier: mVQcqaCTufoWkZyVcqR0YVicEnLyNnwVzdyPGdgyyX4= Subject key identifier: 97:E8:04:FD:D7:29:99:35:A3:E8:A9:71:0F:E0:00:99:D6:C6:ED:4C Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 266B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft Manifest number: 25DC Signing time: Thu 04 Dec 2025 15:32:35 +0000 Manifest this update: Thu 04 Dec 2025 15:32:35 +0000 Manifest next update: Thu 11 Dec 2025 15:32:35 +0000 Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: vDMxPYt/asLFXqAJYFzR/z4UpCaiCwkIfdrq5ZiiDiA=) 2: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (hash: /CgW1RCBBKg0G9J60cVrkPNi3RQ9sxBskKzs6426hF8=) 3: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: wmE3dy22cCh7DDeNE31Jx/DmkbwsEQ9KR2+uUk3Z/H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9835 (0x266b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Dec 4 15:32:35 2025 GMT Not After : Dec 11 15:32:35 2025 GMT Subject: CN=6931a993-1bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:25:c2:70:e3:37:5e:ff:ed:26:0a:29:b1: b1:98:49:6e:07:0f:07:60:17:3b:b5:b5:89:69:c5: 4a:44:0f:69:87:0c:1e:cd:08:8d:95:56:b7:be:8c: 25:b5:2f:25:d4:63:99:cb:09:05:3b:29:23:4c:b2: 5b:45:82:f4:32:7e:2b:dc:06:4f:84:b9:ea:29:df: 56:51:7a:f8:1f:09:4e:79:d7:5e:9e:0f:cb:8c:05: 62:5c:bf:3f:e0:b8:16:be:6e:ce:08:c9:36:78:1f: e9:40:a4:18:a0:61:d9:75:88:14:74:47:19:79:57: 66:1a:52:d9:45:6b:80:5f:69:f0:97:65:d3:45:09: 1e:0a:27:25:5d:82:e6:86:c3:43:13:1d:84:a5:be: e9:0e:59:bf:a9:fe:3a:be:21:d6:d4:05:8e:49:51: 9e:50:83:be:95:0a:8c:d9:c3:87:a1:79:c0:05:22: 6a:21:1c:6d:7c:bc:5b:4c:7c:e2:c5:f1:11:59:9a: 95:08:39:a5:a2:74:a1:4a:fe:d4:68:44:72:09:db: df:c8:60:94:38:e0:e1:87:e6:4a:0d:e8:77:cc:38: f0:e7:9e:49:63:a3:22:1d:a4:a3:76:94:f4:71:5b: 8f:f8:49:24:2f:28:04:cc:33:86:e4:a2:05:11:8d: 1b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E8:04:FD:D7:29:99:35:A3:E8:A9:71:0F:E0:00:99:D6:C6:ED:4C X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:90:e2:76:16:86:33:ac:37:6f:83:3d:2a:c1:9f:e1:bf:77: 48:7e:78:73:a4:bd:89:7b:39:2d:e1:03:35:ad:38:73:c2:f1: 31:bd:9e:c1:05:ea:53:d4:50:73:bc:e8:3f:5e:a0:35:26:1b: 8b:8d:88:23:64:b1:39:04:a6:0f:b9:4b:0e:4a:e9:7e:64:1a: 49:b7:48:4f:a4:78:fb:09:08:1c:20:00:32:77:4a:19:0a:95: 89:20:eb:71:ba:f3:ec:54:a2:73:8b:19:90:6f:10:3a:de:5e: 24:73:e7:48:31:dd:7a:db:53:2d:80:45:5f:01:af:e4:5c:f8: 79:45:b0:85:47:25:0d:8b:17:16:0c:5c:7c:b4:63:5f:6b:f9: 3b:ca:a2:2d:38:90:76:2f:97:e3:f7:5d:5e:08:9e:4f:7a:bb: ce:46:81:73:7f:f9:1d:8d:50:5e:2e:f9:a6:ee:15:9b:27:a6: 80:83:53:5e:16:fb:b0:d7:64:2e:4f:19:37:85:2f:f4:c4:bd: 3a:87:5e:d9:da:ab:e2:7a:3f:f7:bb:51:ab:8e:0f:ab:9d:6b: 90:43:53:48:e8:1d:08:33:de:a2:f1:16:63:c8:54:52:24:f4: 8c:f9:4b:9f:50:2f:fd:28:46:3e:6b:e0:51:29:7b:05:f0:28: 34:e4:41:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjUxMjA0MTUzMjM1WhcNMjUxMjExMTUzMjM1WjAYMRYwFAYD VQQDEw02OTMxYTk5My0xYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXYlwnDjN17/7SYKKbGxmEluBw8HYBc7tbWJacVKRA9phwwezQiNlVa3vowl tS8l1GOZywkFOykjTLJbRYL0Mn4r3AZPhLnqKd9WUXr4HwlOeddeng/LjAViXL8/ 4LgWvm7OCMk2eB/pQKQYoGHZdYgUdEcZeVdmGlLZRWuAX2nwl2XTRQkeCiclXYLm hsNDEx2Epb7pDlm/qf46viHW1AWOSVGeUIO+lQqM2cOHoXnABSJqIRxtfLxbTHzi xfERWZqVCDmlonShSv7UaERyCdvfyGCUOODhh+ZKDeh3zDjw555JY6MiHaSjdpT0 cVuP+EkkLygEzDOG5KIFEY0bbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfoBP3X KZk1o+ipcQ/gAJnWxu1MMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU0Ri8yQUQxNkYzMDFBNEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpP ZGh2RGs3X0xqV2RtaGZiQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+kOJ2FoYzrDdvgz0qwZ/hv3dIfnhzpL2Jezkt4QM1rThzwvExvZ7B BepT1FBzvOg/XqA1JhuLjYgjZLE5BKYPuUsOSul+ZBpJt0hPpHj7CQgcIAAyd0oZ CpWJIOtxuvPsVKJzixmQbxA63l4kc+dIMd1621MtgEVfAa/kXPh5RbCFRyUNixcW DFx8tGNfa/k7yqItOJB2L5fj911eCJ5PervORoFzf/kdjVBeLvmm7hWbJ6aAg1Ne Fvuw12QuTxk3hS/0xL06h17Z2qviej/3u1Grjg+rnWuQQ1NI6B0IM96i8RZjyFRS JPSM+UufUC/9KEY+a+BRKXsF8Cg05EGY -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:27 2025 by rpki-client