This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: iFAaYfB6+E4sNGUkQGbd4I55RnkZwZp8ubrNG/5Tg1I= Subject key identifier: 44:22:F5:B1:CD:90:F0:0C:AA:7E:6D:AA:6A:DC:E5:7D:6A:9D:FE:95 Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 0235 Signing time: Fri 05 Dec 2025 00:17:56 +0000 Manifest this update: Fri 05 Dec 2025 00:17:55 +0000 Manifest next update: Fri 12 Dec 2025 00:17:55 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: KIMD1d9t+buYIgD16Vq+khWNSz4iiZCrKE/UWPGVWCs=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: vCKD+CzoArcalyziR+d7Ov1DlN61zdE8Qt99sD5HF3I=) 3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Ecx2uEYsiUTMI1pp2hzwrKj0DYLLvVQ4KuzNnfcJWcM=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Z3Pgsl7gnEpPUpQRogkAmZeZ95NlxutDljfa11ERFDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Dec 5 00:17:55 2025 GMT Not After : Dec 12 00:17:55 2025 GMT Subject: CN=693224b3-9cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:a8:37:a0:2e:f7:92:f5:37:68:f2:35:f2: 4d:fe:96:e5:3e:6f:7c:60:05:f3:87:35:31:aa:fb: 3e:9b:06:d5:c0:78:a0:65:42:36:a8:d2:92:51:39: 7e:06:f4:1d:e5:f0:fe:a6:64:01:80:89:58:49:70: 8c:6d:64:31:91:e1:a5:fd:36:87:86:8d:94:cc:4d: 28:f7:77:49:90:bc:fa:38:a2:71:e0:8d:83:c8:ab: bf:ab:c3:a8:ab:ab:55:69:72:7b:57:e6:e7:dd:de: 48:5c:18:d2:a8:f1:17:41:54:77:93:75:8e:91:13: 10:dd:c9:51:60:7f:99:9a:83:93:ae:79:5b:14:0b: dd:8a:26:8e:40:4c:b7:e1:f7:63:4c:d4:54:64:0f: da:58:7b:48:5b:40:2d:e0:9f:f1:1f:c8:96:68:17: 02:4d:e8:f7:32:b2:fd:06:07:4e:6f:b0:d9:e3:6f: ac:cf:cf:b0:8f:cf:19:eb:17:d9:ba:64:a2:33:22: 79:b7:93:4a:3f:78:e9:48:cd:c7:5f:00:da:ad:69: 58:10:42:82:68:ac:06:7e:f7:0b:51:14:7d:16:18: d5:7c:98:98:14:06:ea:88:b9:19:b0:d8:1f:91:b8: 68:b5:7a:9e:e0:cf:60:da:e8:97:cd:2f:48:9d:6b: 61:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:22:F5:B1:CD:90:F0:0C:AA:7E:6D:AA:6A:DC:E5:7D:6A:9D:FE:95 X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:72:2c:5b:fd:d3:c0:e4:f3:7f:1b:14:58:15:ef:ec:c7:3f: 9a:7c:66:3e:0d:7c:e5:29:41:4e:6a:ec:5e:60:ca:38:06:4f: cb:97:1f:e8:c6:0c:a1:a3:c4:bc:29:7d:64:1e:b8:c6:d5:0c: 46:18:e5:fe:e0:17:83:e0:99:27:b6:d2:2d:a5:4d:3b:ca:c3: 0d:e5:0d:a7:68:e3:dc:1e:ba:44:12:35:c5:78:51:6c:4e:f0: ae:c0:42:65:2d:29:76:ab:16:57:96:b1:8e:ef:7a:e2:cd:bd: ca:7c:65:76:bb:c9:a1:d9:3d:22:11:4d:79:d2:a4:b9:18:62: 75:62:5f:74:ae:74:43:af:58:cc:34:31:33:6d:f7:76:5e:f1: 2d:f5:5b:97:0b:8a:e5:61:39:80:92:41:fb:1f:7b:53:91:a8: 8c:02:21:91:97:98:30:c1:72:fd:0b:88:db:47:a2:77:71:58: f2:9c:91:02:7d:0d:aa:ad:59:68:93:27:ca:20:98:c0:b0:e6: 5d:2a:4d:80:37:77:30:9f:95:aa:c2:fe:14:9d:40:6d:43:57: 84:98:d9:d9:71:c0:83:ac:3a:fc:88:0e:b2:3c:7b:32:22:a8: 28:16:eb:94:a4:b4:af:98:a3:80:00:76:03:7c:d6:43:01:e9: 1b:df:db:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjUxMjA1MDAxNzU1WhcNMjUxMjEyMDAxNzU1WjAYMRYwFAYD VQQDEw02OTMyMjRiMy05Y2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxESoN6Au95L1N2jyNfJN/pblPm98YAXzhzUxqvs+mwbVwHigZUI2qNKSUTl+ BvQd5fD+pmQBgIlYSXCMbWQxkeGl/TaHho2UzE0o93dJkLz6OKJx4I2DyKu/q8Oo q6tVaXJ7V+bn3d5IXBjSqPEXQVR3k3WOkRMQ3clRYH+ZmoOTrnlbFAvdiiaOQEy3 4fdjTNRUZA/aWHtIW0At4J/xH8iWaBcCTej3MrL9BgdOb7DZ42+sz8+wj88Z6xfZ umSiMyJ5t5NKP3jpSM3HXwDarWlYEEKCaKwGfvcLURR9FhjVfJiYFAbqiLkZsNgf kbhotXqe4M9g2uiXzS9InWthcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQi9bHN kPAMqn5tqmrc5X1qnf6VMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAncixb/dPA5PN/GxRYFe/sxz+afGY+DXzlKUFOauxeYMo4Bk/Llx/o xgyho8S8KX1kHrjG1QxGGOX+4BeD4JknttItpU07ysMN5Q2naOPcHrpEEjXFeFFs TvCuwEJlLSl2qxZXlrGO73rizb3KfGV2u8mh2T0iEU150qS5GGJ1Yl90rnRDr1jM NDEzbfd2XvEt9VuXC4rlYTmAkkH7H3tTkaiMAiGRl5gwwXL9C4jbR6J3cVjynJEC fQ2qrVlokyfKIJjAsOZdKk2AN3cwn5Wqwv4UnUBtQ1eEmNnZccCDrDr8iA6yPHsy IqgoFuuUpLSvmKOAAHYDfNZDAekb39tH -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:12 2025 by rpki-client