This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: j50MyYdpF6o/3mdy6CGUURyRW0hHwvPQY6NE+2F2zqs= Subject key identifier: 2D:6C:13:72:3F:A5:60:1A:50:7F:09:1A:6B:DE:4B:98:08:DF:94:1C Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 04CB Signing time: Thu 04 Dec 2025 22:23:01 +0000 Manifest this update: Thu 04 Dec 2025 22:23:01 +0000 Manifest next update: Thu 11 Dec 2025 22:23:01 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: DrOl1tngzz21+YiXLAWXU6k+amwnmc8BeoFca4jckh0=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: FXBB9DdsLSCSLqmcy5GfEeeUEH9NAw4i9aMiOHO8iOI=) 3: E097013E910C11EFB994E187C4F9AE02.roa (hash: vrgdHN+EQa1Kq7q/Jj9Y5Q0FA9lEQE1lA2kxOo5yBEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Dec 4 22:23:01 2025 GMT Not After : Dec 11 22:23:01 2025 GMT Subject: CN=693209c5-8896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:b0:5a:0d:51:2f:e3:e4:c2:bc:47:1e:e5: 27:16:d4:19:16:eb:5f:43:5c:3b:48:6a:62:70:ee: 17:91:8d:34:91:d3:c0:f6:b3:35:45:b2:2c:19:9f: 78:72:86:8b:10:c9:15:3d:cd:b1:50:8f:2b:d6:2d: 81:06:26:9e:33:c1:31:bb:0e:38:ee:01:c7:b8:f8: 02:12:3f:24:11:68:b2:ee:8c:ba:e6:1c:f6:2d:b6: c2:e8:9b:a5:e5:03:46:a4:31:e4:bf:3a:61:5f:4c: d2:08:ec:f2:ac:5b:3f:b2:84:3a:ee:68:6e:d6:3d: d4:68:1f:5a:fc:46:07:d6:94:d4:35:d4:be:a1:e6: 7b:eb:de:5a:de:8d:d4:e7:6b:47:44:64:d3:59:b4: ca:ec:6a:d9:f0:dd:5f:47:e7:ab:54:5a:ce:a3:63: f1:ef:67:82:8e:39:01:a2:8a:df:36:36:d3:62:a0: 99:fe:27:d2:99:fc:c6:b5:af:c7:0d:42:dd:02:e0: 9d:f0:6e:13:5b:c8:22:f7:62:12:72:be:40:68:91: 33:52:13:22:ca:a7:3a:fe:ea:ca:a3:ea:f5:bc:b1: f1:98:90:ad:58:a2:a9:d9:11:66:bb:e4:d5:37:2c: 78:a9:e3:d2:5d:15:ca:a8:97:ca:ca:c5:97:8e:9e: 45:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6C:13:72:3F:A5:60:1A:50:7F:09:1A:6B:DE:4B:98:08:DF:94:1C X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:fc:48:6b:bf:99:7e:91:74:f4:f9:65:cc:5e:d3:bf:e9:7d: c0:19:ff:69:ae:7a:52:f1:3f:36:41:ff:4c:54:9f:4c:4a:82: 8d:f4:bd:cc:28:19:1f:5d:a5:dc:e6:9f:1d:df:ac:98:42:15: 1f:f9:6b:e0:3f:c6:d5:2a:45:b7:d5:12:42:33:ff:dd:81:bf: dd:e8:57:48:6e:81:4a:6c:bc:cd:ba:12:e3:45:75:a4:64:3c: b7:4c:3a:71:5e:6c:1a:0d:de:d7:f4:70:93:47:0c:cd:c1:e7: 20:1b:36:6d:36:e3:d7:a9:8d:f4:dd:4e:3d:49:a6:c9:4a:97: 54:1c:7b:03:87:b4:11:4a:5c:a6:dd:4b:7b:a6:82:ad:05:75: 81:fb:c7:d9:ae:94:e3:5c:82:78:d8:3e:58:4e:43:70:a8:8c: bd:0e:40:52:c8:b4:8a:de:03:44:e8:2d:8b:67:02:6c:71:1b: 4d:d6:9a:14:72:08:ad:49:f6:5c:94:e8:df:ca:c0:e6:83:6f: 37:c5:28:0a:f1:fb:96:11:fb:40:b8:19:90:88:21:dc:0d:7a: 1f:1d:17:ae:65:d0:db:94:20:ef:c2:cc:55:26:e2:ac:b2:da: c0:a8:e4:49:46:ee:a8:98:40:ef:bd:58:08:5a:fe:68:3d:14: 1a:cb:17:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjUxMjA0MjIyMzAxWhcNMjUxMjExMjIyMzAxWjAYMRYwFAYD VQQDEw02OTMyMDljNS04ODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTuwWg1RL+PkwrxHHuUnFtQZFutfQ1w7SGpicO4XkY00kdPA9rM1RbIsGZ94 coaLEMkVPc2xUI8r1i2BBiaeM8Exuw447gHHuPgCEj8kEWiy7oy65hz2LbbC6Jul 5QNGpDHkvzphX0zSCOzyrFs/soQ67mhu1j3UaB9a/EYH1pTUNdS+oeZ7695a3o3U 52tHRGTTWbTK7GrZ8N1fR+erVFrOo2Px72eCjjkBoorfNjbTYqCZ/ifSmfzGta/H DULdAuCd8G4TW8gi92IScr5AaJEzUhMiyqc6/urKo+r1vLHxmJCtWKKp2RFmu+TV Nyx4qePSXRXKqJfKysWXjp5FiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1sE3I/ pWAaUH8JGmveS5gI35QcMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo/Ehrv5l+kXT0+WXMXtO/6X3AGf9prnpS8T82Qf9MVJ9MSoKN9L3M KBkfXaXc5p8d36yYQhUf+WvgP8bVKkW31RJCM//dgb/d6FdIboFKbLzNuhLjRXWk ZDy3TDpxXmwaDd7X9HCTRwzNwecgGzZtNuPXqY303U49SabJSpdUHHsDh7QRSlym 3Ut7poKtBXWB+8fZrpTjXIJ42D5YTkNwqIy9DkBSyLSK3gNE6C2LZwJscRtN1poU cgitSfZclOjfysDmg283xSgK8fuWEftAuBmQiCHcDXofHReuZdDblCDvwsxVJuKs strAqORJRu6omEDvvVgIWv5oPRQayxdj -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:42 2025 by rpki-client