This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json) Hash identifier: tlRJRfiHJLNa9xX0HDf4bGxgDkMneg93PdePVA+CkIM= Subject key identifier: BA:B5:87:99:80:4D:40:61:E4:F3:74:35:BC:98:6D:22:A8:66:85:D6 Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft Manifest number: 0158 Signing time: Fri 19 Dec 2025 03:19:41 +0000 Manifest this update: Fri 19 Dec 2025 03:19:41 +0000 Manifest next update: Fri 26 Dec 2025 03:19:41 +0000 Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: XxIPQwKRBc2NBUjVu0KrDntaIQzOrKQ6Fd/oIf377XU=) 2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: 6P1QigKgDh/og+D4IavE2ADNPbY260YTNHIn9cQtib4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Validity Not Before: Dec 19 03:19:41 2025 GMT Not After : Dec 26 03:19:41 2025 GMT Subject: CN=6944c44d-3aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:df:c4:eb:d1:12:65:ea:c4:50:67:f1:65: ff:9c:d7:84:65:3e:ae:b4:02:ec:5c:53:9f:39:37: 29:8c:62:2e:8d:05:bc:f0:0b:45:42:28:5f:4f:42: 68:30:64:a2:fe:ff:2d:35:81:8c:c9:19:ff:1a:c1: 2d:a2:90:1f:c0:00:76:c1:52:16:e3:15:28:9b:77: fc:0f:06:c8:09:0b:4f:f6:f8:ae:39:35:21:25:b5: be:03:42:e0:b0:76:f1:6c:19:c3:33:7d:61:07:7d: 3d:34:c3:5f:b6:29:b0:34:d8:d3:56:2d:e1:9c:48: a8:85:45:c2:e6:2d:e1:25:9f:41:27:cc:83:cb:07: 00:32:c9:2a:dc:94:59:59:b4:60:68:ca:8b:71:89: 9b:1f:af:6b:b8:20:a2:d1:98:63:01:74:08:70:b7: 70:14:b2:cf:f4:fa:6c:57:fa:6a:fc:d9:1d:8d:80: 32:cd:f4:46:40:f9:ef:60:2f:4f:22:cf:c7:25:fc: 3c:d0:e7:d2:51:b6:47:b8:c0:cb:b6:6a:05:81:a9: 6f:7a:b9:59:85:dd:f8:73:70:92:c4:ed:14:c8:94: a6:28:5b:2c:bc:47:67:02:9c:35:b8:62:2b:38:f1: fb:1c:4d:9f:4b:b9:bf:bd:9a:29:13:10:28:3c:53: a9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B5:87:99:80:4D:40:61:E4:F3:74:35:BC:98:6D:22:A8:66:85:D6 X509v3 Authority Key Identifier: keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:bb:94:73:88:d4:ea:d2:df:55:3b:5b:e7:90:b1:7f:5c:03: f2:02:b1:2b:23:3e:3f:8b:e7:f0:07:80:93:c3:66:45:26:85: ed:f3:0d:77:b6:f6:6b:03:23:3c:82:ff:15:92:48:25:79:71: b9:66:18:06:43:e1:24:43:02:d7:c2:62:b3:52:3a:2b:db:a1: 3a:03:a1:19:ed:d1:7d:06:de:69:d3:f0:51:75:1b:0d:99:35: 78:1c:2f:ef:c4:79:88:63:dc:53:a5:a7:b7:f5:61:7a:9e:28: 2d:40:a4:64:c5:06:3a:df:f4:5a:d8:9f:48:d5:7c:22:53:02: c0:27:7c:85:3d:58:81:4a:23:49:df:0a:42:67:cb:3c:83:47: 9a:36:ee:8d:31:1c:4e:21:ed:38:97:7b:45:27:a4:e7:0f:ef: 0c:9f:b4:3f:12:ae:68:81:6e:96:f6:dd:93:2e:a4:26:1d:04: 8c:0e:3b:ed:98:c0:bd:18:1a:fd:5e:44:6d:25:42:84:b9:6c: b2:12:3a:e7:ec:84:c6:4d:f5:03:50:ae:ed:47:e8:5c:2c:aa: 68:be:6b:b9:1b:df:ab:d7:53:7e:45:af:9f:aa:5c:e4:8d:32: a8:6a:d5:2c:d0:f7:1b:7d:e2:f0:e1:b9:bf:72:af:ef:75:2f: fc:f9:1d:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFREYxMTAvBgNVBAUTKDhCNjQxOTY4NjkxMTdCOTlCODc5QjREQ0JBRjA0Mjkw QkMxNjgxMEMwHhcNMjUxMjE5MDMxOTQxWhcNMjUxMjI2MDMxOTQxWjAYMRYwFAYD VQQDDA02OTQ0YzQ0ZC0zYWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3XfxOvREmXqxFBn8WX/nNeEZT6utALsXFOfOTcpjGIujQW88AtFQihfT0Jo MGSi/v8tNYGMyRn/GsEtopAfwAB2wVIW4xUom3f8DwbICQtP9viuOTUhJbW+A0Lg sHbxbBnDM31hB309NMNftimwNNjTVi3hnEiohUXC5i3hJZ9BJ8yDywcAMskq3JRZ WbRgaMqLcYmbH69ruCCi0ZhjAXQIcLdwFLLP9PpsV/pq/NkdjYAyzfRGQPnvYC9P Is/HJfw80OfSUbZHuMDLtmoFgalverlZhd34c3CSxO0UyJSmKFssvEdnApw1uGIr OPH7HE2fS7m/vZopExAoPFOpUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLq1h5mA TUBh5PN0NbyYbSKoZoXWMB8GA1UdIwQYMBaAFItkGWhpEXuZuHm03LrwQpC8FoEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEVERi8zREUzOUU4MkNG QUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1bTRlYlRjdXZCQ2tMd1dn UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEVERi8zREUzOUU4MkNGQUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1 bTRlYlRjdXZCQ2tMd1dnUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxu5RziNTq0t9VO1vnkLF/XAPyArErIz4/i+fwB4CTw2ZFJoXt8w13 tvZrAyM8gv8VkkgleXG5ZhgGQ+EkQwLXwmKzUjor26E6A6EZ7dF9Bt5p0/BRdRsN mTV4HC/vxHmIY9xTpae39WF6nigtQKRkxQY63/Ra2J9I1XwiUwLAJ3yFPViBSiNJ 3wpCZ8s8g0eaNu6NMRxOIe04l3tFJ6TnD+8Mn7Q/Eq5ogW6W9t2TLqQmHQSMDjvt mMC9GBr9XkRtJUKEuWyyEjrn7ITGTfUDUK7tR+hcLKpovmu5G9+r11N+Ra+fqlzk jTKoatUs0PcbfeLw4bm/cq/vdS/8+R2S -----END CERTIFICATE-----Generated at Fri Dec 19 07:46:49 2025 by rpki-client