This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: U/pj6X4JlhGRS/woXaem0oGO4WS+SnaSNb2XCSBNHxo= Subject key identifier: AB:38:2E:06:66:A9:33:8B:C7:C5:89:FC:9D:73:94:00:AE:AE:4E:9E Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 03A1 Signing time: Thu 04 Dec 2025 23:09:48 +0000 Manifest this update: Thu 04 Dec 2025 23:09:48 +0000 Manifest next update: Thu 11 Dec 2025 23:09:48 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: 8pZoD2McOs7y3MICNltmH5r8oDXEmyM5rNvbXIKGs5s=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Dec 4 23:09:48 2025 GMT Not After : Dec 11 23:09:48 2025 GMT Subject: CN=693214bc-de71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:0d:4f:50:0f:75:7e:ae:d2:51:93:da:12: a8:e2:8e:fd:b4:e8:2c:eb:4c:c6:11:9e:17:91:bc: 08:3b:ba:e5:e1:b1:ee:4a:6e:6c:7c:ff:c8:dd:43: f8:92:90:7d:a6:64:c3:3e:20:c6:05:4f:65:aa:4d: ef:9b:76:28:c5:2d:5c:41:cb:e8:55:65:94:38:cb: 77:6f:3c:98:00:66:2e:ad:95:1f:e4:22:ae:ee:5b: fe:f2:59:51:48:00:66:e9:48:7f:09:e3:85:dc:35: c6:e4:ff:ef:5a:e2:01:c6:3b:59:4a:15:c8:44:44: 16:f6:df:7d:53:5e:0f:6d:3e:42:85:02:23:a7:06: 24:35:be:22:03:4c:c4:de:e8:dd:fa:36:9d:3d:5a: da:ff:8d:f5:b0:53:3a:ed:1b:e9:32:ad:4b:71:55: cd:73:35:8c:b7:f5:bb:1c:0a:e7:d8:92:a1:dc:7e: 7b:a9:47:a6:3b:9a:30:9a:8b:4e:c4:b6:91:87:70: 18:d1:d9:6c:3d:57:18:fd:7b:e7:44:d4:5b:94:92: b6:2a:de:79:1c:88:c4:6e:8a:f9:35:95:cf:1f:3b: cd:50:96:85:3e:33:78:29:78:d1:e2:43:7c:2f:4f: e6:5d:c2:58:6a:d5:63:9d:f6:fe:fb:cd:22:42:7a: a2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:38:2E:06:66:A9:33:8B:C7:C5:89:FC:9D:73:94:00:AE:AE:4E:9E X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:cd:e1:50:fd:4c:c9:6d:03:42:09:c8:94:0d:c7:1e:f1:b7: 3d:e8:21:4b:33:37:ae:4f:9d:09:40:1d:bb:0f:d9:70:f0:70: a8:ff:bc:ef:57:d8:9e:67:58:dd:d3:f9:60:5f:d4:80:1c:2e: 94:e1:12:68:e5:29:ec:d0:8f:47:f4:97:cb:f4:77:ef:71:b3: 4d:ef:df:37:eb:dd:30:c2:37:81:b5:0e:d9:98:b1:34:73:64: d7:9f:1c:4d:fe:57:ff:be:24:f2:19:49:12:36:ba:c1:7a:8b: 4a:c0:3b:7e:f6:58:27:d4:f1:07:91:48:b7:a5:0b:a1:d2:33: bd:0f:5d:08:7f:aa:19:f1:00:88:b6:d7:91:a1:39:f9:eb:f5: e7:47:47:ab:03:c2:29:00:cc:14:1a:78:33:e9:95:29:91:b6: 0a:9f:b3:49:20:cc:ce:f2:be:08:cb:3d:47:80:1f:39:b5:33: aa:bc:6e:8d:8f:4c:dc:34:b0:86:13:aa:e7:fd:47:50:bd:9d: 42:a0:09:49:8e:38:c2:ed:7d:27:0d:cf:57:a1:19:09:84:68: 35:96:ad:75:f7:44:8f:f5:ae:07:65:59:62:34:a4:c2:ab:27: 98:85:25:60:22:b8:52:67:46:7e:1a:0e:10:ca:e8:36:ab:18: 06:fd:2f:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUxMjA0MjMwOTQ4WhcNMjUxMjExMjMwOTQ4WjAYMRYwFAYD VQQDEw02OTMyMTRiYy1kZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPcNT1APdX6u0lGT2hKo4o79tOgs60zGEZ4XkbwIO7rl4bHuSm5sfP/I3UP4 kpB9pmTDPiDGBU9lqk3vm3YoxS1cQcvoVWWUOMt3bzyYAGYurZUf5CKu7lv+8llR SABm6Uh/CeOF3DXG5P/vWuIBxjtZShXIREQW9t99U14PbT5ChQIjpwYkNb4iA0zE 3ujd+jadPVra/431sFM67RvpMq1LcVXNczWMt/W7HArn2JKh3H57qUemO5owmotO xLaRh3AY0dlsPVcY/XvnRNRblJK2Kt55HIjEbor5NZXPHzvNUJaFPjN4KXjR4kN8 L0/mXcJYatVjnfb++80iQnqiSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKs4LgZm qTOLx8WJ/J1zlACurk6eMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4zeFQ/UzJbQNCCciUDcce8bc96CFLMzeuT50JQB27D9lw8HCo/7zv V9ieZ1jd0/lgX9SAHC6U4RJo5Sns0I9H9JfL9HfvcbNN7983690wwjeBtQ7ZmLE0 c2TXnxxN/lf/viTyGUkSNrrBeotKwDt+9lgn1PEHkUi3pQuh0jO9D10If6oZ8QCI tteRoTn56/XnR0erA8IpAMwUGngz6ZUpkbYKn7NJIMzO8r4Iyz1HgB85tTOqvG6N j0zcNLCGE6rn/UdQvZ1CoAlJjjjC7X0nDc9XoRkJhGg1lq1190SP9a4HZVliNKTC qyeYhSVgIrhSZ0Z+Gg4Qyug2qxgG/S9/ -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:04 2025 by rpki-client