This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft File: iEiqzfKVEwPnCY9BnYygBCKJDGk.mft (raw, json) Hash identifier: mcscmM2dOqiiJ8U/XlyFvotJ9v2Tp8KQ4jNj8tT+Ro8= Subject key identifier: FA:07:98:AD:13:84:16:A1:88:15:CF:8B:D6:CD:82:9A:9A:6A:06:A2 Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft Manifest number: D4 Signing time: Fri 05 Dec 2025 03:46:04 +0000 Manifest this update: Fri 05 Dec 2025 03:46:03 +0000 Manifest next update: Fri 12 Dec 2025 03:46:03 +0000 Files and hashes: 1: iEiqzfKVEwPnCY9BnYygBCKJDGk.crl (hash: Q8GYD9DjCTdgwOoRpBZFsmFNdNEMLdZCJCLx1uhgBh4=) 2: 029310329B1911EFA0BD6470C4F9AE02.roa (hash: ipUtH6de1n3QDXNmS4idd62IMEQfE9S8Kl6BBzpD9nQ=) 3: 07BAAB7C9B1611EFB5C28465C4F9AE02.roa (hash: ofbztl5uVlglZWvlUxP/w/vzUs13H0jw290VgxrDPX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Validity Not Before: Dec 5 03:46:03 2025 GMT Not After : Dec 12 03:46:03 2025 GMT Subject: CN=6932557c-cb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:ae:4a:7d:e1:b7:b9:22:27:dc:e7:45:b7: 8a:bb:33:33:ef:40:68:ba:1a:02:92:3b:d6:79:a6: de:e2:44:aa:27:7a:93:e8:0c:c8:f3:c8:26:f5:ad: 24:42:8a:0b:91:99:a6:dc:37:6c:58:68:63:69:46: eb:24:44:6c:0b:0d:aa:18:07:e9:3d:48:b1:f1:12: 05:15:de:96:21:4e:50:76:0e:07:24:d4:d5:f4:85: 9b:20:f9:27:0e:dd:0b:12:d7:24:b2:53:2f:23:de: fd:a3:ff:c5:8d:8d:1b:40:ac:b0:94:37:94:bc:47: b2:94:f3:f5:f8:92:37:b6:75:27:f8:61:47:df:01: 35:8a:73:b7:73:46:25:8f:8a:01:d4:2e:44:57:a4: 59:65:96:67:0c:96:33:03:a4:99:41:a0:55:d3:59: 1d:b0:46:0b:08:b6:fb:90:18:fe:3d:40:a2:7a:bd: 6e:db:c5:97:ad:5f:dc:66:4f:ff:14:36:a3:1c:6f: ea:24:34:62:45:ea:dc:54:f0:c7:23:69:21:20:67: 64:1b:64:fa:f2:02:5b:fe:1c:f8:75:ee:14:f3:d5: c3:9e:cf:80:1c:0a:a0:f8:4e:7f:16:ad:fb:43:f6: 38:0c:cf:3a:8a:16:0e:f6:e6:8e:19:f7:2d:c7:84: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:07:98:AD:13:84:16:A1:88:15:CF:8B:D6:CD:82:9A:9A:6A:06:A2 X509v3 Authority Key Identifier: keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d0:0b:63:8e:52:c2:6d:d2:55:37:29:ce:72:d3:ce:c8:90: 17:08:d9:f1:98:d7:2d:f2:9e:9e:d1:7d:f7:84:0e:16:05:17: 58:4e:e0:e8:4a:aa:68:56:a0:7d:ad:91:bc:36:25:d6:a2:af: c5:44:57:ea:10:ef:d4:81:e9:87:64:53:9c:35:6b:f6:86:e7: 53:2f:7d:e9:bf:3b:cc:7e:31:96:e5:42:54:93:ef:74:43:b7: e1:86:08:59:df:6c:50:91:94:1e:19:aa:dd:cc:2b:da:9d:4f: bb:02:2d:84:ee:69:d6:fc:ac:67:28:39:ec:53:cf:4e:98:e4: c2:40:7e:5e:95:6f:f9:c2:7d:8f:f1:11:b8:09:da:e1:e6:3f: ac:57:c1:95:30:c0:ac:26:ed:9b:81:4a:c0:1f:2a:4e:d6:46: 23:37:94:12:af:f5:e7:f4:7e:b6:6d:9e:34:8d:e6:14:88:86: 80:f3:dd:35:9d:61:aa:0b:2d:9c:60:43:ad:1a:45:9a:3b:41: 22:a9:be:67:03:14:9f:00:f1:a4:54:89:e5:3d:a3:43:ec:dc: 19:42:8c:c5:33:4d:18:62:39:38:b2:a8:1b:e9:6b:27:7a:e8: b6:c5:8c:a0:3c:ea:33:f2:63:9e:1a:5e:ea:21:d0:4d:56:59: 44:ca:4a:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwNDcxMTAvBgNVBAUTKDg4NDhBQUNERjI5NTEzMDNFNzA5OEY0MTlEOENBMDA0 MjI4OTBDNjkwHhcNMjUxMjA1MDM0NjAzWhcNMjUxMjEyMDM0NjAzWjAYMRYwFAYD VQQDEw02OTMyNTU3Yy1jYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCiuSn3ht7kiJ9znRbeKuzMz70BouhoCkjvWeabe4kSqJ3qT6AzI88gm9a0k QooLkZmm3DdsWGhjaUbrJERsCw2qGAfpPUix8RIFFd6WIU5Qdg4HJNTV9IWbIPkn Dt0LEtckslMvI979o//FjY0bQKywlDeUvEeylPP1+JI3tnUn+GFH3wE1inO3c0Yl j4oB1C5EV6RZZZZnDJYzA6SZQaBV01kdsEYLCLb7kBj+PUCier1u28WXrV/cZk// FDajHG/qJDRiRercVPDHI2khIGdkG2T68gJb/hz4de4U89XDns+AHAqg+E5/Fq37 Q/Y4DM86ihYO9uaOGfctx4TdCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoHmK0T hBahiBXPi9bNgpqaagaiMB8GA1UdIwQYMBaAFIhIqs3ylRMD5wmPQZ2MoAQiiQxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODA0Ny8zNDRBMDFBMjlC MTUxMUVGODZFQjM3NDZDNEY5QUUwMi9pRWlxemZLVkV3UG5DWTlCbll5Z0JDS0pE R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFaXF6ZktWRXdQbkNZOUJuWXlnQkNLSkRHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODA0Ny8zNDRBMDFBMjlCMTUxMUVGODZFQjM3NDZDNEY5QUUwMi9pRWlxemZLVkV3 UG5DWTlCbll5Z0JDS0pER2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF0AtjjlLCbdJVNynOctPOyJAXCNnxmNct8p6e0X33hA4WBRdYTuDo SqpoVqB9rZG8NiXWoq/FRFfqEO/UgemHZFOcNWv2hudTL33pvzvMfjGW5UJUk+90 Q7fhhghZ32xQkZQeGardzCvanU+7Ai2E7mnW/KxnKDnsU89OmOTCQH5elW/5wn2P 8RG4Cdrh5j+sV8GVMMCsJu2bgUrAHypO1kYjN5QSr/Xn9H62bZ40jeYUiIaA8901 nWGqCy2cYEOtGkWaO0Eiqb5nAxSfAPGkVInlPaND7NwZQozFM00YYjk4sqgb6Wsn eui2xYygPOoz8mOeGl7qIdBNVllEykqy -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:08 2025 by rpki-client