This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft File: iyhQBa2gBz4MCUttpqOLtR__oaQ.mft (raw, json) Hash identifier: gCiLjXfaspDZWLabyS4ZBrDtrkA5bKufrXr7RIWXP9U= Subject key identifier: 0F:3E:32:B1:61:10:F4:3F:36:99:D1:3D:5B:0D:42:EA:8A:10:5F:6C Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 Certificate issuer: /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft Manifest number: 041D Signing time: Sat 06 Dec 2025 23:02:54 +0000 Manifest this update: Sat 06 Dec 2025 23:02:54 +0000 Manifest next update: Sat 13 Dec 2025 23:02:54 +0000 Files and hashes: 1: iyhQBa2gBz4MCUttpqOLtR__oaQ.crl (hash: TUdcte40U+MGJZGjxTVdT3KyzlZfXksxd5qNcplNQhQ=) 2: 58C00854905211EC90E6100FC4F9AE02.roa (hash: 5eLmPskwIg5y4gDpqWBeusWbrOc+t34TIFwmF+boTps=) 3: 989BBF70904F11EC8B118911C4F9AE02.roa (hash: sO6E1E+nR+eYc5iIU6EYUSE2ekfNEYMYq4mKBPQmsro=) 4: 7E8442B68FE511EC94D98C7BC4F9AE02.roa (hash: oJI3ab/8fzhkHDC4Wzdxeh+CGGzoOkYJ9B82+ons7t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4 Validity Not Before: Dec 6 23:02:54 2025 GMT Not After : Dec 13 23:02:54 2025 GMT Subject: CN=6934b61e-c5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:4c:a1:b3:c6:31:7a:ef:9e:1c:3b:c4:39: 58:d2:65:09:3b:be:32:ce:4b:5d:d8:29:fb:ab:3b: dc:88:16:5d:a6:d1:66:cd:d9:cf:fc:e7:e8:6c:b1: e1:9e:e8:a8:d1:97:23:b1:ca:8b:9f:f2:40:60:54: 3d:b3:c7:06:8b:b0:0d:7f:d5:e7:6a:92:2e:1d:e4: 96:4f:4a:9c:f0:3f:0b:4b:60:1c:82:78:62:a1:d2: c0:86:d8:11:06:f4:9b:99:b8:11:1a:fe:d2:f0:b7: 01:d6:23:25:ff:45:17:c6:33:49:e3:8b:af:4e:eb: 3a:8d:f3:41:7a:7e:e2:c7:59:a6:08:72:b2:8d:bc: 48:ad:85:d3:4b:48:1b:7f:7b:4c:1e:18:9b:57:05: 0e:68:64:28:02:2c:37:4c:db:43:dd:be:61:ee:ef: ec:54:e2:13:c5:6f:8f:b7:e3:42:84:af:a7:aa:5e: a8:4a:17:f2:c3:c7:1c:59:7e:39:1d:8e:56:3d:48: 15:3d:fb:45:b6:3f:6a:96:1d:7b:cc:c2:7c:d4:89: e1:89:d3:0c:ff:d2:e1:0f:2a:bc:a4:ca:10:96:3c: 84:5e:6c:1e:46:ef:45:38:4b:9a:21:46:8a:86:bc: ad:4a:ce:a8:bc:0d:c9:f1:66:0f:c2:38:2b:24:18: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3E:32:B1:61:10:F4:3F:36:99:D1:3D:5B:0D:42:EA:8A:10:5F:6C X509v3 Authority Key Identifier: keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:90:54:f5:1d:57:8d:24:cb:40:7a:40:35:d5:8a:68:63:e0: da:b1:c3:54:e8:7f:5b:15:ab:8e:7e:43:89:e4:f3:f0:94:f0: ab:5d:9d:60:9c:34:b2:d1:e6:8c:6f:5a:df:55:ea:5f:da:ca: ee:7f:69:a7:48:30:58:9d:99:02:f9:a6:d8:ea:0c:e3:ce:f9: 1c:5c:51:b8:99:4c:0f:ec:5c:14:ef:dd:ea:9d:82:72:2f:86: af:ac:e0:df:cd:d2:7d:82:b7:72:f5:1b:d7:a9:de:6c:54:2d: dc:2f:dc:3a:23:06:59:e4:1b:1d:f2:bb:da:b8:ac:51:75:10: 1a:b9:2a:a8:01:56:6f:24:0c:c6:d7:91:1d:1d:5f:89:f0:0f: 63:19:38:b1:1d:68:e5:9b:e2:c4:58:cd:d1:c5:04:3e:7d:56: 30:7b:d5:93:82:43:48:d2:22:b1:41:7d:45:fa:0a:b1:9d:5b: ad:59:54:48:4f:77:e8:3e:ff:f3:76:11:8f:ee:d9:25:03:68: ec:ac:dd:02:0d:5d:dd:7b:94:cc:d3:20:ec:8e:3c:4d:f4:c2: 22:ab:28:d8:67:81:b2:19:d5:6a:50:12:0c:8e:d2:ce:fa:b7: f1:52:d5:28:45:75:6f:89:78:2e:a1:2a:23:bd:ba:0a:b4:6c: c5:c6:57:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1 MUZGRkExQTQwHhcNMjUxMjA2MjMwMjU0WhcNMjUxMjEzMjMwMjU0WjAYMRYwFAYD VQQDEw02OTM0YjYxZS1jNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsShMobPGMXrvnhw7xDlY0mUJO74yzktd2Cn7qzvciBZdptFmzdnP/OfobLHh nuio0ZcjscqLn/JAYFQ9s8cGi7ANf9XnapIuHeSWT0qc8D8LS2AcgnhiodLAhtgR BvSbmbgRGv7S8LcB1iMl/0UXxjNJ44uvTus6jfNBen7ix1mmCHKyjbxIrYXTS0gb f3tMHhibVwUOaGQoAiw3TNtD3b5h7u/sVOITxW+Pt+NChK+nql6oShfyw8ccWX45 HY5WPUgVPftFtj9qlh17zMJ81InhidMM/9LhDyq8pMoQljyEXmweRu9FOEuaIUaK hrytSs6ovA3J8WYPwjgrJBj5BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8+MrFh EPQ/NpnRPVsNQuqKEF9sMB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDE0Qi85NEM4OThDQzhGRTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6 NE1DVXR0cHFPTHRSX19vYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkkFT1HVeNJMtAekA11YpoY+DascNU6H9bFauOfkOJ5PPwlPCrXZ1g nDSy0eaMb1rfVepf2sruf2mnSDBYnZkC+abY6gzjzvkcXFG4mUwP7FwU793qnYJy L4avrODfzdJ9grdy9RvXqd5sVC3cL9w6IwZZ5Bsd8rvauKxRdRAauSqoAVZvJAzG 15EdHV+J8A9jGTixHWjlm+LEWM3RxQQ+fVYwe9WTgkNI0iKxQX1F+gqxnVutWVRI T3foPv/zdhGP7tklA2jsrN0CDV3de5TM0yDsjjxN9MIiqyjYZ4GyGdVqUBIMjtLO +rfxUtUoRXVviXguoSojvboKtGzFxldf -----END CERTIFICATE-----Generated at Sun Dec 7 02:03:54 2025 by rpki-client