This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: xSwn/Sc3930DVusAiUB1E4vT3f+LEbFeQufMeFY3d6E= Subject key identifier: FD:29:AD:91:A6:0F:F7:A1:EC:39:E2:C9:9A:32:8D:FE:CA:1E:36:FC Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 0192 Signing time: Fri 05 Dec 2025 01:43:05 +0000 Manifest this update: Fri 05 Dec 2025 01:43:04 +0000 Manifest next update: Fri 12 Dec 2025 01:43:04 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: b3LdeoS18Klg5sEIZBVB3uMjWPNWunmobjf8U1Bzbkg=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: /Y8xFoBMkV8uPy89Axb0Y8yaa9CAWLFHVU01k7AfOCU=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: olVXu+2blIiQ/nPaKs9oAvL7LtQPo2noHIFDjFZB8b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Dec 5 01:43:04 2025 GMT Not After : Dec 12 01:43:04 2025 GMT Subject: CN=693238a8-3a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:1d:6f:67:4a:98:78:ff:ef:06:38:38:61: 59:0f:73:be:06:2c:cd:4d:08:24:35:5e:2e:63:10: 23:7e:64:31:46:39:ae:18:cf:0b:77:da:3e:0b:e5: a6:0d:99:8d:85:e7:5b:d9:d0:64:92:fc:e7:b8:1d: ab:7c:e0:2e:d4:12:ae:8b:10:e4:98:92:16:2e:14: 11:a5:92:79:df:63:52:31:05:2a:58:1b:e1:78:dc: 6c:e4:92:01:4f:92:8b:bb:99:5e:c8:b8:06:fb:5e: 96:2e:bf:ad:29:72:75:d5:c5:c1:f2:63:41:2d:80: c3:b1:ae:0d:e3:8e:1a:57:a7:26:f1:87:7d:f8:47: 7e:24:9d:e0:2f:d0:26:70:a3:db:b0:12:4a:25:82: 7e:fd:74:73:e7:73:92:d9:12:79:7e:93:2d:80:33: 47:a2:fb:ef:ef:22:b9:6d:6b:6f:27:3d:14:86:16: 7a:5f:e4:c1:47:e0:15:50:c6:6c:c6:bb:e7:06:fb: 3b:f7:fd:a8:fa:66:16:15:bc:61:0a:4e:de:4a:86: fa:de:13:6f:25:8b:46:21:e3:55:cd:d9:14:d5:d8: f8:c3:ef:e1:bb:80:0f:e3:f3:71:36:f5:52:8c:6f: 5e:c6:10:6a:3b:c6:45:12:5b:71:e0:9c:82:37:90: 7b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:29:AD:91:A6:0F:F7:A1:EC:39:E2:C9:9A:32:8D:FE:CA:1E:36:FC X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:72:9e:81:53:c0:9f:68:74:17:d0:d2:ea:7e:38:48:99:23: c2:b4:16:bc:60:0b:e5:a9:21:3d:b9:27:bd:51:ac:21:94:d7: f0:5d:fb:54:89:58:86:33:5b:2b:9a:96:5d:85:d3:28:52:92: 56:db:e3:46:11:78:94:cc:8e:da:d1:b9:81:35:30:0d:cb:e8: 39:71:88:6e:72:d4:28:05:ed:4c:52:63:5b:99:03:97:be:86: f2:ab:07:ef:59:ae:df:f5:3c:25:33:6c:27:d7:6f:29:f0:14: 24:c8:82:0f:8c:5f:37:fa:9c:e0:99:8b:fb:fd:7e:89:18:0a: dc:0c:58:ba:30:97:e6:92:50:72:f6:7a:bd:fa:b2:ce:ac:9c: 00:60:21:96:82:e7:6f:0e:35:a0:94:34:ab:b2:07:26:d3:3a: 76:da:2c:89:d8:b2:6f:bd:5c:6d:39:6b:c1:53:4d:64:7b:9a: f8:0b:d2:f0:bc:c6:2b:61:0a:09:f7:f2:6d:7b:10:db:df:1e: c4:7c:1f:6e:7a:96:cb:b0:c9:21:7a:6f:f4:3d:71:25:d4:83: bb:22:a5:1d:01:a1:7c:1e:bf:65:2f:45:f7:a8:e0:3e:6a:dd: e2:75:69:a2:21:c8:83:45:36:0b:4c:3a:7e:7d:52:39:74:e8: 3c:a6:ca:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjUxMjA1MDE0MzA0WhcNMjUxMjEyMDE0MzA0WjAYMRYwFAYD VQQDEw02OTMyMzhhOC0zYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvX8db2dKmHj/7wY4OGFZD3O+BizNTQgkNV4uYxAjfmQxRjmuGM8Ld9o+C+Wm DZmNhedb2dBkkvznuB2rfOAu1BKuixDkmJIWLhQRpZJ532NSMQUqWBvheNxs5JIB T5KLu5leyLgG+16WLr+tKXJ11cXB8mNBLYDDsa4N444aV6cm8Yd9+Ed+JJ3gL9Am cKPbsBJKJYJ+/XRz53OS2RJ5fpMtgDNHovvv7yK5bWtvJz0UhhZ6X+TBR+AVUMZs xrvnBvs79/2o+mYWFbxhCk7eSob63hNvJYtGIeNVzdkU1dj4w+/hu4AP4/NxNvVS jG9exhBqO8ZFEltx4JyCN5B7LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0prZGm D/eh7DniyZoyjf7KHjb8MB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJcp6BU8CfaHQX0NLqfjhImSPCtBa8YAvlqSE9uSe9UawhlNfwXftU iViGM1srmpZdhdMoUpJW2+NGEXiUzI7a0bmBNTANy+g5cYhuctQoBe1MUmNbmQOX vobyqwfvWa7f9TwlM2wn128p8BQkyIIPjF83+pzgmYv7/X6JGArcDFi6MJfmklBy 9nq9+rLOrJwAYCGWgudvDjWglDSrsgcm0zp22iyJ2LJvvVxtOWvBU01ke5r4C9Lw vMYrYQoJ9/JtexDb3x7EfB9uepbLsMkhem/0PXEl1IO7IqUdAaF8Hr9lL0X3qOA+ at3idWmiIciDRTYLTDp+fVI5dOg8psrH -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:35 2025 by rpki-client