This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: iJa2irEGYN3qs2uW14MS0xrsPib2IfhinDL/jViu8pQ= Subject key identifier: B4:BE:03:6B:A8:D9:6D:81:25:75:06:B7:A5:84:BA:F0:D6:F1:8F:AB Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 018C Signing time: Fri 05 Dec 2025 01:55:53 +0000 Manifest this update: Fri 05 Dec 2025 01:55:52 +0000 Manifest next update: Fri 12 Dec 2025 01:55:52 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: 3+cyQbCf/Q3prd2hha26vRz0V3Z5NTzUusO7m+rgT1k=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: tag8qRB5tEUFx1QNVuAqpyg8ujg0HPWl8zfOULOO91k=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: g09cAtW7q38tkGDCJXd5RjCBSKiULHxUGiRzWgP6Rj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Dec 5 01:55:52 2025 GMT Not After : Dec 12 01:55:52 2025 GMT Subject: CN=69323ba9-9e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:14:8f:d1:5f:35:04:ad:e4:c5:87:ae:2f:fd: 1d:fb:66:ba:4a:b8:32:df:f8:e3:a5:47:cb:40:1e: d6:47:cf:3f:32:21:03:15:8f:ac:4f:50:ca:67:32: 61:db:da:30:9e:a4:51:f8:31:99:e3:d7:56:5d:f1: b0:b0:c6:7c:32:ee:17:4e:62:ba:98:ab:23:19:27: 0d:74:76:ca:a0:37:18:99:f3:2d:aa:95:74:63:a1: bb:31:76:b4:48:d9:8c:31:38:07:0f:85:63:19:0e: ad:5b:85:e4:8f:7b:2e:dc:11:88:ff:ca:04:4a:53: 56:03:7b:2a:e3:62:1f:3c:15:e8:f0:b3:af:c2:35: ab:9a:e6:a7:00:21:a7:08:67:be:f4:59:ef:1b:9b: 2b:09:d7:2d:7a:73:84:1b:e3:2f:86:e6:de:db:40: c1:4d:6e:84:27:a2:35:2c:f3:01:fc:24:a7:ed:f3: db:3e:bf:c6:66:0a:65:00:bb:08:1b:6f:64:b0:65: 21:2a:d9:77:34:22:40:2a:f8:14:40:62:3c:dd:e5: bb:39:f7:8f:19:fd:ce:d2:36:1b:3a:3e:4c:95:4c: 29:78:d8:1f:31:bf:0c:dd:8b:d2:23:fa:b2:f7:03: 89:fa:ec:db:92:3e:24:35:22:14:01:27:cd:d8:c9: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BE:03:6B:A8:D9:6D:81:25:75:06:B7:A5:84:BA:F0:D6:F1:8F:AB X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e9:c1:5a:4f:e8:9c:a0:dd:47:e7:54:cd:54:72:8b:b0:2d: 2b:e5:b2:73:6f:3d:2e:e0:ff:64:5f:a8:96:1f:c4:19:a3:d6: f7:7c:5b:b0:36:45:f2:64:27:19:35:5f:7b:e9:41:a4:03:22: a8:77:15:b8:01:d6:21:72:6e:53:4f:5d:53:98:31:61:5e:f1: f4:2a:82:1f:0d:1e:de:a4:35:ac:e4:04:65:1e:c6:73:04:74: c9:47:44:31:18:47:12:1d:02:9b:e2:eb:f4:f6:4a:5f:b9:8a: 45:e7:0d:43:a1:fd:91:78:5b:3a:6b:ae:47:44:92:a9:17:6a: 6e:24:a0:b2:b2:78:86:4b:2e:92:c2:1f:8a:c7:8e:e7:fb:66: 47:7e:81:1b:16:b3:c7:5d:66:53:ac:a3:41:64:dc:ce:92:50: 38:6c:23:3a:e6:46:c4:35:26:89:f7:74:5b:3f:49:bc:36:34: a9:47:aa:44:0b:0d:12:27:f4:fe:69:ef:9e:80:e3:fc:3a:9a: 83:1c:8b:2c:be:25:81:7b:5c:7b:36:24:d9:e5:ce:5d:87:a1: e3:42:18:1e:61:fc:ef:1a:99:55:aa:7e:f2:07:f8:65:66:10: fa:33:bc:bf:15:e8:59:f5:8e:2f:87:2d:0c:04:6b:a6:f4:2d: af:15:31:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjUxMjA1MDE1NTUyWhcNMjUxMjEyMDE1NTUyWjAYMRYwFAYD VQQDEw02OTMyM2JhOS05ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hSP0V81BK3kxYeuL/0d+2a6Srgy3/jjpUfLQB7WR88/MiEDFY+sT1DKZzJh 29ownqRR+DGZ49dWXfGwsMZ8Mu4XTmK6mKsjGScNdHbKoDcYmfMtqpV0Y6G7MXa0 SNmMMTgHD4VjGQ6tW4Xkj3su3BGI/8oESlNWA3sq42IfPBXo8LOvwjWrmuanACGn CGe+9FnvG5srCdctenOEG+Mvhube20DBTW6EJ6I1LPMB/CSn7fPbPr/GZgplALsI G29ksGUhKtl3NCJAKvgUQGI83eW7OfePGf3O0jYbOj5MlUwpeNgfMb8M3YvSI/qy 9wOJ+uzbkj4kNSIUASfN2MlMRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLS+A2uo 2W2BJXUGt6WEuvDW8Y+rMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz6cFaT+icoN1H51TNVHKLsC0r5bJzbz0u4P9kX6iWH8QZo9b3fFuw NkXyZCcZNV976UGkAyKodxW4AdYhcm5TT11TmDFhXvH0KoIfDR7epDWs5ARlHsZz BHTJR0QxGEcSHQKb4uv09kpfuYpF5w1Dof2ReFs6a65HRJKpF2puJKCysniGSy6S wh+Kx47n+2ZHfoEbFrPHXWZTrKNBZNzOklA4bCM65kbENSaJ93RbP0m8NjSpR6pE Cw0SJ/T+ae+egOP8OpqDHIssviWBe1x7NiTZ5c5dh6HjQhgeYfzvGplVqn7yB/hl ZhD6M7y/FehZ9Y4vhy0MBGum9C2vFTGG -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:30 2025 by rpki-client