This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: yXKgZUgbrRtBgPb2AAs6TAAYihTflXILu4Nzgo5v1yQ= Subject key identifier: F7:B6:27:B8:B4:5B:83:CF:8C:20:10:E6:9A:BA:28:0D:A3:77:98:F3 Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 09E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 09D9 Signing time: Sat 06 Dec 2025 19:09:43 +0000 Manifest this update: Sat 06 Dec 2025 19:09:43 +0000 Manifest next update: Sat 13 Dec 2025 19:09:43 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: 9+6hukaRfhHClN2PXJ/gJVaYm8zDPQZwq9hmEtxoMC0=) 2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: 8JSwEQed2eJqn9OytcIj9IctVhOahjE7HP6K7LQO8mE=) 3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: rFSplheoWDm+5MPYS0jTevwHFfJ593Fp0RQ1ghGpvEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2536 (0x9e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: Dec 6 19:09:43 2025 GMT Not After : Dec 13 19:09:43 2025 GMT Subject: CN=69347f77-dca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2d:a3:e4:73:74:f9:2a:b6:2a:bd:fd:de:80: 98:51:69:ae:1d:4e:52:52:70:a5:dc:11:ac:d0:cc: 72:73:b9:2a:0d:05:b5:61:93:7a:c4:47:b0:96:68: 09:f6:72:9f:01:ca:6c:ff:c9:ee:0f:9b:3c:49:b3: 13:4f:1b:b2:7d:71:67:f6:4c:68:25:a2:c1:94:83: 33:6f:c6:b8:e4:a0:50:a6:f8:a3:3e:77:8e:4e:bc: 97:37:6a:12:6a:19:aa:03:54:a4:dd:67:eb:e7:35: 15:4b:e3:d6:2e:52:10:18:d3:a6:6f:d9:88:83:4c: af:8e:74:dd:a2:96:b2:65:88:79:f2:3d:7c:86:70: 32:13:eb:1f:dc:93:85:38:01:49:c5:2a:e8:22:06: da:b1:c9:15:e3:a1:c0:e1:b2:41:14:e1:22:0f:90: 9d:3c:cd:4f:be:3e:56:7a:60:d8:a3:ad:df:d0:98: 1b:ff:9c:ca:97:c2:d3:0b:14:77:6f:e6:d2:03:fb: 8d:0e:37:84:80:e0:35:30:5a:16:ca:57:29:3c:ca: 31:f2:96:43:55:18:d7:24:90:a3:48:31:73:af:e2: 7f:8c:7e:3a:29:7d:ea:f0:80:93:7c:37:01:cb:47: 1e:68:fb:8e:38:28:96:e7:e6:9b:57:08:df:e9:ad: 94:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B6:27:B8:B4:5B:83:CF:8C:20:10:E6:9A:BA:28:0D:A3:77:98:F3 X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:d3:58:83:6c:70:39:4d:a6:47:18:72:fb:e8:52:d3:85:6d: cd:58:69:4a:06:48:02:91:c6:f4:c5:a1:d1:b4:77:99:95:a8: cf:66:3b:a7:3e:2a:a8:c4:6f:f4:88:12:bf:5b:66:50:e4:e1: fc:6b:a6:a7:8d:3c:a4:9a:fe:46:36:66:a0:f1:2b:61:48:f6: 87:28:a9:96:1d:5f:5a:91:ee:26:25:42:0c:24:b7:b8:18:2b: 25:a9:66:40:ad:f7:27:5d:e0:46:7e:99:e2:78:48:19:6c:54: 2e:b4:35:86:f6:aa:0c:ff:fe:f0:34:6a:4e:35:60:16:32:f3: fa:60:2d:9d:e9:8d:4d:0e:c8:9b:bb:2d:48:64:7c:66:33:4a: 04:91:93:81:f0:6c:c2:00:49:ac:8a:06:66:2b:39:9f:f8:57: ca:70:f3:8b:88:7a:0c:24:06:ca:cf:f6:e9:0b:3f:bd:53:77: 18:20:10:09:73:39:8f:d6:ae:c1:6f:03:b7:a5:75:d6:c1:44: b0:5d:f3:6e:05:fe:47:63:37:6e:98:93:9d:e6:57:8c:b7:92: bf:e4:73:4e:ec:f8:d3:9b:00:77:60:37:50:c0:c7:20:93:cd: d3:04:94:86:79:18:21:76:16:26:9d:15:26:3a:14:0e:81:56: 6a:db:c1:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjUxMjA2MTkwOTQzWhcNMjUxMjEzMTkwOTQzWjAYMRYwFAYD VQQDEw02OTM0N2Y3Ny1kY2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6y2j5HN0+Sq2Kr393oCYUWmuHU5SUnCl3BGs0Mxyc7kqDQW1YZN6xEewlmgJ 9nKfAcps/8nuD5s8SbMTTxuyfXFn9kxoJaLBlIMzb8a45KBQpvijPneOTryXN2oS ahmqA1Sk3Wfr5zUVS+PWLlIQGNOmb9mIg0yvjnTdopayZYh58j18hnAyE+sf3JOF OAFJxSroIgbasckV46HA4bJBFOEiD5CdPM1Pvj5WemDYo63f0Jgb/5zKl8LTCxR3 b+bSA/uNDjeEgOA1MFoWylcpPMox8pZDVRjXJJCjSDFzr+J/jH46KX3q8ICTfDcB y0ceaPuOOCiW5+abVwjf6a2U9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPe2J7i0 W4PPjCAQ5pq6KA2jd5jzMB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDd01iDbHA5TaZHGHL76FLThW3NWGlKBkgCkcb0xaHRtHeZlajPZjun PiqoxG/0iBK/W2ZQ5OH8a6anjTykmv5GNmag8SthSPaHKKmWHV9ake4mJUIMJLe4 GCslqWZArfcnXeBGfpnieEgZbFQutDWG9qoM//7wNGpONWAWMvP6YC2d6Y1NDsib uy1IZHxmM0oEkZOB8GzCAEmsigZmKzmf+FfKcPOLiHoMJAbKz/bpCz+9U3cYIBAJ czmP1q7BbwO3pXXWwUSwXfNuBf5HYzdumJOd5leMt5K/5HNO7PjTmwB3YDdQwMcg k83TBJSGeRghdhYmnRUmOhQOgVZq28Ft -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:25 2025 by rpki-client