This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: WMO4vULRaQR7YeeXSqITXZiP0dPkCgziqa21iKhUWx4= Subject key identifier: BE:A2:70:0D:AA:C8:87:AA:52:76:9C:E1:71:AD:7B:ED:D8:AF:65:A3 Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 0193 Signing time: Sun 07 Dec 2025 01:55:50 +0000 Manifest this update: Sun 07 Dec 2025 01:55:49 +0000 Manifest next update: Sun 14 Dec 2025 01:55:49 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: 2McOJtAswVoSutN8wdR1D/Vo8CH+lf31bcxeIBCpCjo=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: /Y8xFoBMkV8uPy89Axb0Y8yaa9CAWLFHVU01k7AfOCU=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: olVXu+2blIiQ/nPaKs9oAvL7LtQPo2noHIFDjFZB8b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Dec 7 01:55:49 2025 GMT Not After : Dec 14 01:55:49 2025 GMT Subject: CN=6934dea6-e6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:45:65:68:92:3b:fe:de:b1:0f:b8:c6:3a:9d: 3d:ca:da:34:2f:9a:42:33:10:c5:44:87:57:53:ca: 22:36:58:97:59:16:2a:3e:74:54:5f:d8:b8:98:a9: cd:3c:73:3b:7f:4b:1a:26:c4:c0:93:2d:4c:fd:d2: 57:6d:e8:2c:fd:d9:41:74:f1:5c:c9:70:c6:a9:e7: c9:c6:30:77:d4:0c:2a:b7:d7:95:19:0c:d5:9c:0e: f4:d1:d8:0f:b2:d5:38:21:32:83:7c:08:cc:d7:48: 9e:c2:b3:1a:fa:ee:f7:7a:aa:e9:cd:a7:a9:25:96: 96:d9:6e:e3:49:05:52:56:fc:2b:73:d2:cd:11:74: 3c:87:3c:04:b6:a3:58:59:98:62:6d:4a:4e:67:30: 12:a8:20:71:99:ea:27:df:43:ed:06:f0:af:8f:3b: ad:25:b2:fe:d2:fd:74:b7:55:21:75:3a:0f:49:a2: 35:66:fb:b7:75:da:31:7d:1b:21:eb:a9:b8:44:62: 93:a5:11:ea:a3:93:01:8f:8b:2b:25:34:44:a1:0c: 0c:bd:45:99:1a:55:7f:7c:8c:d6:19:69:61:2b:2d: 6d:28:09:2e:ba:2a:7e:10:05:aa:b2:f8:79:a4:8d: 5f:d3:f2:13:fe:17:fc:4f:08:b1:95:65:fd:66:88: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A2:70:0D:AA:C8:87:AA:52:76:9C:E1:71:AD:7B:ED:D8:AF:65:A3 X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c6:f8:80:e7:49:a9:f4:23:32:c3:9a:33:11:1c:ce:34:12: 8e:ec:8d:ab:5d:55:bc:d6:45:1b:68:5a:01:2e:dc:34:53:5f: d4:79:1b:1f:d3:e0:f2:22:de:cf:c9:22:c0:cb:6d:c5:d0:89: fe:95:e2:c1:4f:81:04:52:69:d6:38:a7:47:3b:e2:d1:78:c2: 28:d2:a2:be:17:0f:07:33:a9:8a:92:3d:62:bb:ee:f8:25:58: 5d:e6:94:42:d5:d4:c0:26:12:54:77:b6:df:bb:5a:3c:21:97: 74:e2:8f:2c:e4:1b:16:56:bd:81:0c:ef:44:03:0b:2b:8a:d2: 2c:72:81:62:ba:bd:26:ad:b1:7f:88:74:ee:a3:29:ee:28:d1: b6:b5:4e:fe:2a:98:48:86:8a:44:6c:5c:bf:72:e4:00:97:53: 96:a7:89:7c:54:97:c1:db:a4:2a:7a:dd:fe:1c:32:e3:59:15: fb:0f:e2:ec:85:a2:78:96:5a:48:a7:ee:b2:11:62:c1:b8:2b: b1:e9:49:85:cd:1a:ea:c8:11:ce:61:ca:35:bb:60:9e:c2:00: 38:8a:50:7b:7c:11:2b:bc:17:1c:51:29:8a:be:e6:b6:cf:59: 03:98:5d:cf:3f:ff:92:53:01:f9:02:0a:5e:9e:71:82:4a:ec: b9:67:88:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjUxMjA3MDE1NTQ5WhcNMjUxMjE0MDE1NTQ5WjAYMRYwFAYD VQQDEw02OTM0ZGVhNi1lNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUVlaJI7/t6xD7jGOp09yto0L5pCMxDFRIdXU8oiNliXWRYqPnRUX9i4mKnN PHM7f0saJsTAky1M/dJXbegs/dlBdPFcyXDGqefJxjB31Awqt9eVGQzVnA700dgP stU4ITKDfAjM10iewrMa+u73eqrpzaepJZaW2W7jSQVSVvwrc9LNEXQ8hzwEtqNY WZhibUpOZzASqCBxmeon30PtBvCvjzutJbL+0v10t1UhdToPSaI1Zvu3ddoxfRsh 66m4RGKTpRHqo5MBj4srJTREoQwMvUWZGlV/fIzWGWlhKy1tKAkuuip+EAWqsvh5 pI1f0/IT/hf8TwixlWX9Zoi6/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6icA2q yIeqUnac4XGte+3Yr2WjMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADxviA50mp9CMyw5ozERzONBKO7I2rXVW81kUbaFoBLtw0U1/UeRsf 0+DyIt7PySLAy23F0In+leLBT4EEUmnWOKdHO+LReMIo0qK+Fw8HM6mKkj1iu+74 JVhd5pRC1dTAJhJUd7bfu1o8IZd04o8s5BsWVr2BDO9EAwsritIscoFiur0mrbF/ iHTuoynuKNG2tU7+KphIhopEbFy/cuQAl1OWp4l8VJfB26Qqet3+HDLjWRX7D+Ls haJ4llpIp+6yEWLBuCux6UmFzRrqyBHOYco1u2CewgA4ilB7fBErvBccUSmKvua2 z1kDmF3PP/+SUwH5AgpennGCSuy5Z4gM -----END CERTIFICATE-----Generated at Sun Dec 7 05:09:22 2025 by rpki-client