This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json) Hash identifier: NVfpcXYqGjFyWg6ItNc3vYX33iqNjl2tw1OxCklmPKY= Subject key identifier: 3C:1B:17:C2:37:E4:17:F4:28:6E:3A:D5:77:05:9A:83:DD:8C:5E:8B Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft Manifest number: F1 Signing time: Fri 05 Dec 2025 03:20:07 +0000 Manifest this update: Fri 05 Dec 2025 03:20:07 +0000 Manifest next update: Fri 12 Dec 2025 03:20:07 +0000 Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: Xy54liHQqXFQBb0uG947lqxRgbbh/FWNN+KO82vtu0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436 Validity Not Before: Dec 5 03:20:07 2025 GMT Not After : Dec 12 03:20:07 2025 GMT Subject: CN=69324f67-422c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:64:49:b0:dd:e4:77:64:b2:00:1e:22:e3: 1d:63:40:5a:ec:dc:48:fb:65:1f:6d:83:5d:40:93: 5c:98:0c:ed:26:58:03:b5:11:e6:e9:db:ca:54:89: 63:af:66:5e:7f:45:97:a5:38:52:3a:af:c9:9d:c6: 82:10:a8:51:df:66:91:5e:aa:21:f2:d6:b1:68:e9: 93:0e:61:f6:7e:5b:2a:24:de:a3:c3:89:c1:aa:e0: 63:9b:8d:bb:11:ae:30:2e:49:f9:fc:1f:d6:ce:6e: a9:35:c2:b6:12:77:11:d0:31:f2:6a:cd:98:a5:31: 1a:9f:67:f1:9e:04:21:e7:5f:9a:57:e3:04:49:b4: 05:b4:fb:37:0b:cd:b7:2b:0e:03:06:3e:ba:8e:df: e5:9c:81:1a:d1:06:8e:b9:18:6b:9d:2d:00:71:74: c4:d7:1c:7e:8a:45:17:3d:9f:b6:5c:22:38:2e:64: 79:a0:d7:fa:4a:f1:32:e3:cf:34:fb:49:6b:43:8d: 03:9a:04:63:cf:59:f1:0f:be:a1:57:5b:50:e5:ce: 6d:38:73:91:85:32:b0:37:cc:8b:ef:bc:30:6c:af: 91:0d:9c:00:04:f6:11:26:a9:3e:5e:1e:df:73:6f: 35:af:1b:e7:e4:2a:89:f3:4f:91:b7:a3:ef:d3:2a: 32:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1B:17:C2:37:E4:17:F4:28:6E:3A:D5:77:05:9A:83:DD:8C:5E:8B X509v3 Authority Key Identifier: keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a8:2b:57:54:e7:9d:c1:fb:db:94:22:47:a2:53:6d:84:3c: f5:e7:7d:99:01:19:98:7e:98:1b:44:29:72:d9:38:cd:27:97: 65:fd:32:74:6a:00:66:fb:f7:d4:a3:e1:c2:11:e3:dc:be:00: 0b:f1:11:4d:a7:c9:cf:3f:d0:ed:1d:a5:03:fe:ac:d9:a9:dc: 7a:52:40:13:2b:be:49:ea:0e:ab:09:d7:58:70:59:af:d8:0f: 3a:b3:5f:81:0b:4b:b9:c9:9d:a6:25:88:c4:dc:e3:e6:08:19: e6:f5:32:f8:1a:95:a3:f5:dd:2c:2f:c4:39:c3:1c:c2:db:56: 9e:ea:73:b3:e7:9e:e6:40:16:37:90:7c:91:42:10:f6:d8:63: f5:37:f8:88:0e:9b:15:ec:7a:96:d9:5d:e1:3c:77:3a:19:54: 1a:77:d7:39:3d:22:df:b3:37:c3:f0:71:5a:7f:33:61:10:3a: 00:0d:65:ee:43:f2:fb:29:fb:fa:62:8f:14:fe:d8:17:30:19: 26:c9:8c:89:d2:fb:4b:22:34:1f:00:9c:e0:87:fc:cb:6c:1f: 86:dd:3e:ef:a6:51:3c:ec:26:5d:f1:ba:a6:5f:fe:0d:fb:c0: 04:c0:c1:d1:ac:9e:45:3f:c3:85:b9:1a:1f:07:36:92:a0:08: 79:2e:b5:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw RUQwRDQ0MzYwHhcNMjUxMjA1MDMyMDA3WhcNMjUxMjEyMDMyMDA3WjAYMRYwFAYD VQQDEw02OTMyNGY2Ny00MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9pkSbDd5HdksgAeIuMdY0Ba7NxI+2UfbYNdQJNcmAztJlgDtRHm6dvKVIlj r2Zef0WXpThSOq/JncaCEKhR32aRXqoh8taxaOmTDmH2flsqJN6jw4nBquBjm427 Ea4wLkn5/B/Wzm6pNcK2EncR0DHyas2YpTEan2fxngQh51+aV+MESbQFtPs3C823 Kw4DBj66jt/lnIEa0QaOuRhrnS0AcXTE1xx+ikUXPZ+2XCI4LmR5oNf6SvEy4880 +0lrQ40DmgRjz1nxD76hV1tQ5c5tOHORhTKwN8yL77wwbK+RDZwABPYRJqk+Xh7f c281rxvn5CqJ80+Rt6Pv0yoybQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwbF8I3 5Bf0KG461XcFmoPdjF6LMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O NmlJUi1idkpwMTBPME5SRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKqCtXVOedwfvblCJHolNthDz1532ZARmYfpgbRCly2TjNJ5dl/TJ0 agBm+/fUo+HCEePcvgAL8RFNp8nPP9DtHaUD/qzZqdx6UkATK75J6g6rCddYcFmv 2A86s1+BC0u5yZ2mJYjE3OPmCBnm9TL4GpWj9d0sL8Q5wxzC21ae6nOz557mQBY3 kHyRQhD22GP1N/iIDpsV7HqW2V3hPHc6GVQad9c5PSLfszfD8HFafzNhEDoADWXu Q/L7Kfv6Yo8U/tgXMBkmyYyJ0vtLIjQfAJzgh/zLbB+G3T7vplE87CZd8bqmX/4N +8AEwMHRrJ5FP8OFuRofBzaSoAh5LrUN -----END CERTIFICATE-----Generated at Sat Dec 6 16:14:50 2025 by rpki-client