This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft File: IaR__8gaEzNcB7kmBaLd_RgHoUw.mft (raw, json) Hash identifier: 5DYgt/UEDf8QCMkhSHy/ERJx0DZIZlbdzcnfQF07Nyw= Subject key identifier: 40:93:66:A3:17:E8:73:C7:A6:9D:1F:CD:5E:DB:40:06:33:2D:9D:77 Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Certificate serial: 0B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft Manifest number: 0B4C Signing time: Thu 04 Dec 2025 18:34:23 +0000 Manifest this update: Thu 04 Dec 2025 18:34:22 +0000 Manifest next update: Thu 11 Dec 2025 18:34:22 +0000 Files and hashes: 1: IaR__8gaEzNcB7kmBaLd_RgHoUw.crl (hash: I2NfdOMMfs7Bna+L54M6pv9J4HL9NhrDk161tpwQfnM=) 2: CDEFCF14801F11EF99206C47C4F9AE02.roa (hash: kISEPEmE2ZLNGr7M+gIIuLb+wfjhIl0pN5Ozrn7290M=) 3: A558194E801F11EFB86B2647C4F9AE02.roa (hash: yZl4Rgg31ofEgyuQezY4Q6zD53Q3cflOAAa2hJJAiIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Validity Not Before: Dec 4 18:34:22 2025 GMT Not After : Dec 11 18:34:22 2025 GMT Subject: CN=6931d42f-8c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:94:d9:75:7f:17:06:a5:58:4b:38:0f:85: 27:76:69:14:c8:e4:f9:3c:b8:a0:2d:b8:60:dc:3f: 68:bf:39:c5:32:b9:1a:a5:f6:b6:17:05:9a:66:1d: 4f:0f:d7:5b:42:1e:70:52:12:ac:45:28:21:43:bc: 47:d6:5a:3d:71:62:c8:5c:cf:01:3f:f8:67:34:77: 9b:c1:fa:d0:4c:5b:e8:36:d7:13:32:07:57:69:38: 81:c9:15:99:1d:07:5c:e5:d0:4c:2a:dc:d7:4c:af: e7:07:34:b0:0d:f1:7c:a0:8a:0c:c9:97:56:7e:ea: 91:a2:8d:e9:1c:51:46:dc:9a:c4:a4:ff:5a:a2:ce: 49:ae:c1:5b:ea:38:40:01:36:a4:8c:cf:21:75:1f: 91:c7:9d:47:1e:27:19:fc:93:ab:9e:89:5b:4a:c4: 9e:99:f7:a9:22:54:75:37:95:73:21:db:be:5d:5e: 03:67:b5:22:2d:85:45:d2:34:f4:17:6a:52:4e:2a: da:b2:1c:bf:5d:70:ff:43:5e:a6:3f:7c:ea:b5:3f: 10:57:be:82:57:0d:69:24:3d:43:7a:f5:e5:97:e0: 08:87:88:5b:e5:ac:b0:9c:e8:e7:4c:6c:a4:16:37: a8:60:8e:d6:9d:ba:a8:29:41:50:b1:b7:ed:47:02: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:93:66:A3:17:E8:73:C7:A6:9D:1F:CD:5E:DB:40:06:33:2D:9D:77 X509v3 Authority Key Identifier: keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:68:86:2d:68:da:39:8b:07:20:5b:92:8e:66:bf:78:f3:be: 56:da:9c:aa:e3:0b:ca:6b:d3:b1:2c:87:bb:0a:d7:7a:45:4f: 5d:e7:3e:61:a1:4a:23:0f:89:cb:b3:d6:58:2d:71:ac:e9:f4: dc:fa:58:f4:93:c7:36:08:c8:3e:44:a6:51:b2:5d:cc:e6:a1: 89:2f:74:1c:3d:44:05:d1:c5:67:4d:ca:bd:63:e3:e4:ba:3c: 13:49:2d:84:3f:f2:35:69:9b:16:18:0a:ff:9c:72:86:38:28: a1:f4:48:eb:46:66:65:a6:2c:af:42:7a:be:ad:3a:1c:85:21: f0:11:80:7f:fd:50:f7:28:b7:06:e9:9e:63:be:49:01:4a:7e: f4:57:a9:b5:e7:88:2b:82:13:a6:00:6f:ca:9d:d8:a1:13:5a: 7b:bc:79:ba:db:38:b9:2f:99:37:be:ae:4e:42:bc:ac:d3:3d: 94:8d:2d:56:31:65:16:54:f4:08:88:68:ee:e6:53:d9:68:2d: 87:12:c3:44:2a:39:da:5d:40:55:da:eb:55:99:3e:d7:b6:fd: 8e:6f:0d:55:42:9e:d9:f5:89:1c:c3:2a:29:7e:ca:06:2d:a3: 40:a9:49:db:a6:a1:42:84:df:b7:25:ea:5f:a3:70:20:88:7b: 34:a1:e5:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5MDUxMTAvBgNVBAUTKDIxQTQ3RkZGQzgxQTEzMzM1QzA3QjkyNjA1QTJEREZE MTgwN0ExNEMwHhcNMjUxMjA0MTgzNDIyWhcNMjUxMjExMTgzNDIyWjAYMRYwFAYD VQQDEw02OTMxZDQyZi04YzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFGU2XV/FwalWEs4D4UndmkUyOT5PLigLbhg3D9ovznFMrkapfa2FwWaZh1P D9dbQh5wUhKsRSghQ7xH1lo9cWLIXM8BP/hnNHebwfrQTFvoNtcTMgdXaTiByRWZ HQdc5dBMKtzXTK/nBzSwDfF8oIoMyZdWfuqRoo3pHFFG3JrEpP9aos5JrsFb6jhA ATakjM8hdR+Rx51HHicZ/JOrnolbSsSemfepIlR1N5VzIdu+XV4DZ7UiLYVF0jT0 F2pSTirashy/XXD/Q16mP3zqtT8QV76CVw1pJD1DevXll+AIh4hb5aywnOjnTGyk FjeoYI7WnbqoKUFQsbftRwKALwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECTZqMX 6HPHpp0fzV7bQAYzLZ13MB8GA1UdIwQYMBaAFCGkf//IGhMzXAe5JgWi3f0YB6FM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjkwNS8xRkE3QzQ2QzQ4 RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6TmNCN2ttQmFMZF9SZ0hv VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhUl9fOGdhRXpOY0I3a21CYUxkX1JnSG9Vdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjkwNS8xRkE3QzQ2QzQ4RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6 TmNCN2ttQmFMZF9SZ0hvVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMaIYtaNo5iwcgW5KOZr94875W2pyq4wvKa9OxLIe7Ctd6RU9d5z5h oUojD4nLs9ZYLXGs6fTc+lj0k8c2CMg+RKZRsl3M5qGJL3QcPUQF0cVnTcq9Y+Pk ujwTSS2EP/I1aZsWGAr/nHKGOCih9EjrRmZlpiyvQnq+rTochSHwEYB//VD3KLcG 6Z5jvkkBSn70V6m154grghOmAG/KndihE1p7vHm62zi5L5k3vq5OQrys0z2UjS1W MWUWVPQIiGju5lPZaC2HEsNEKjnaXUBV2utVmT7Xtv2Obw1VQp7Z9YkcwyopfsoG LaNAqUnbpqFChN+3Jepfo3AgiHs0oeU8 -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:28 2025 by rpki-client