This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json) Hash identifier: 8ntG+oGM9uqSEeQ50tf17RnJG7exldlLMdDs3JwR38I= Subject key identifier: 89:F4:70:C3:AE:13:53:52:3D:E0:A0:F3:92:24:6D:E0:47:AE:00:1B Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft Manifest number: 45 Signing time: Fri 05 Dec 2025 05:15:56 +0000 Manifest this update: Fri 05 Dec 2025 05:15:55 +0000 Manifest next update: Fri 12 Dec 2025 05:15:55 +0000 Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: vp8iUMBTrh081AhzqwpMqHtotk5m+yN5IUHixPQZYnM=) 2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: WDMb5z1Oep3KObXAq9yk+eELcjcBrGqtQZEb/aGlqi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Validity Not Before: Dec 5 05:15:55 2025 GMT Not After : Dec 12 05:15:55 2025 GMT Subject: CN=69326a8c-cbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:49:60:c2:be:bb:e8:9a:e0:53:0e:6d:17: 73:ff:1a:d4:63:bb:ec:fb:dc:51:ff:b8:6e:68:33: 93:12:00:ec:d1:30:22:f7:7a:f3:8a:23:50:17:56: e2:d8:70:7f:5c:e7:36:bb:e4:54:bf:72:fa:cf:bf: a7:80:3f:e5:43:78:ce:40:a4:ce:30:42:c3:ae:91: 7a:4d:66:17:d0:cb:60:35:df:1a:bc:fe:76:91:18: 31:09:9e:51:d4:85:8e:1a:ae:b3:43:37:17:72:f7: 3d:bb:0f:7c:9d:80:54:51:59:16:fd:86:15:6f:32: a9:c0:3d:f5:e5:cb:56:04:78:d5:9b:d2:6d:8c:7a: 7f:e4:c2:8f:ed:c8:a1:d2:40:dc:9d:03:9d:55:7a: b4:b7:af:96:cd:76:5f:da:bf:fa:18:d8:41:df:b6: d3:c0:0c:17:c2:6b:f5:1b:0b:e3:13:0d:8a:5b:6d: f5:ba:9d:80:59:bf:56:d7:b2:64:be:72:0f:12:44: 44:82:ae:76:55:30:86:f8:b3:64:b3:ce:24:3c:87: 74:4e:0e:ae:9a:ca:2f:a1:a0:42:9f:47:b5:27:2f: 0b:4e:ad:5d:7e:95:c7:eb:f4:e0:2d:d4:e8:f7:37: e0:2c:0a:fd:b0:a1:4e:94:fd:13:bb:fb:f2:f7:eb: 92:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:70:C3:AE:13:53:52:3D:E0:A0:F3:92:24:6D:E0:47:AE:00:1B X509v3 Authority Key Identifier: keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:31:8c:a7:18:56:02:02:bb:10:37:8a:3a:f0:78:3e:c3:39: b7:c8:13:db:69:10:82:93:21:e8:d5:da:33:03:3c:33:96:32: 25:9c:60:58:1d:29:45:6b:36:d2:2e:29:b9:7f:cc:0d:9d:63: db:ad:b5:4c:ca:54:2b:f8:11:61:3d:a0:cf:e8:97:e9:f0:25: 87:30:3f:e9:1a:13:a1:ea:52:52:8b:d5:2a:67:2f:01:db:57: 5a:83:92:5f:71:4e:e1:7c:5a:5b:80:fd:60:28:70:01:bf:6b: 0f:ee:12:d1:d9:27:6a:a2:80:00:37:b3:f9:75:ee:53:99:f9: a1:04:26:90:e4:03:6f:f2:0e:c5:c8:1b:ed:50:a3:e6:47:8f: ef:b4:9d:11:69:72:f7:55:cc:be:d0:b0:9d:a7:d4:c8:1a:21: 86:0b:b0:10:9c:f4:02:be:61:8c:47:c6:7c:df:75:f9:f3:3e: bd:8b:27:e2:6b:8b:c8:92:68:d7:cb:49:be:64:c2:1c:e8:b8: a0:28:6f:02:16:66:da:de:49:87:d1:86:de:90:23:4b:15:3e: 1e:44:64:00:92:fc:bd:73:9c:29:25:30:8a:d1:54:49:cc:5a: f8:a9:70:3b:9a:48:41:3c:17:c7:68:76:bf:6d:70:d8:98:3a: 91:24:df:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUM2MjExMC8GA1UEBRMoMjFDOEYyQjZFMDFEMEE4MkQxM0MzNTE4OEMzQzkzRTZG NTE0QkE5NDAeFw0yNTEyMDUwNTE1NTVaFw0yNTEyMTIwNTE1NTVaMBgxFjAUBgNV BAMTDTY5MzI2YThjLWNiZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG0Elgwr676JrgUw5tF3P/GtRju+z73FH/uG5oM5MSAOzRMCL3evOKI1AXVuLY cH9c5za75FS/cvrPv6eAP+VDeM5ApM4wQsOukXpNZhfQy2A13xq8/naRGDEJnlHU hY4arrNDNxdy9z27D3ydgFRRWRb9hhVvMqnAPfXly1YEeNWb0m2Men/kwo/tyKHS QNydA51VerS3r5bNdl/av/oY2EHfttPADBfCa/UbC+MTDYpbbfW6nYBZv1bXsmS+ cg8SRESCrnZVMIb4s2SzziQ8h3RODq6ayi+hoEKfR7UnLwtOrV1+lcfr9OAt1Oj3 N+AsCv2woU6U/RO7+/L365K9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUifRww64T U1I94KDzkiRt4EeuABswHwYDVR0jBBgwFoAUIcjytuAdCoLRPDUYjDyT5vUUupQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5QzYyLzBBRUFBQ0Q2NkI2 NjExRjBCN0Y4RUI0MEM0RjlBRTAyL0ljanl0dUFkQ29MUlBEVVlqRHlUNXZVVXVw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWNqeXR1QWRDb0xSUERVWWpEeVQ1dlVVdXBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 QzYyLzBBRUFBQ0Q2NkI2NjExRjBCN0Y4RUI0MEM0RjlBRTAyL0ljanl0dUFkQ29M UlBEVVlqRHlUNXZVVXVwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHExjKcYVgICuxA3ijrweD7DObfIE9tpEIKTIejV2jMDPDOWMiWcYFgd KUVrNtIuKbl/zA2dY9uttUzKVCv4EWE9oM/ol+nwJYcwP+kaE6HqUlKL1SpnLwHb V1qDkl9xTuF8WluA/WAocAG/aw/uEtHZJ2qigAA3s/l17lOZ+aEEJpDkA2/yDsXI G+1Qo+ZHj++0nRFpcvdVzL7QsJ2n1MgaIYYLsBCc9AK+YYxHxnzfdfnzPr2LJ+Jr i8iSaNfLSb5kwhzouKAobwIWZtreSYfRht6QI0sVPh5EZACS/L1znCklMIrRVEnM WvipcDuaSEE8F8dodr9tcNiYOpEk35s= -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:42 2025 by rpki-client