This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft File: iB8oqx80yszxJe2ul-HgEGBYI0k.mft (raw, json) Hash identifier: EqYZ+YLDrgCEp4dQXmURz3AxtxVb14yy31EbsZQvEz0= Subject key identifier: BF:C4:25:89:D5:02:3A:00:A4:4C:72:E2:43:31:A1:03:6F:74:DC:F9 Authority key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 Certificate issuer: /CN=A91D342A/serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft Manifest number: 2C Signing time: Fri 05 Dec 2025 05:28:26 +0000 Manifest this update: Fri 05 Dec 2025 05:28:25 +0000 Manifest next update: Fri 12 Dec 2025 05:28:25 +0000 Files and hashes: 1: iB8oqx80yszxJe2ul-HgEGBYI0k.crl (hash: Dip0SPU5ofTdsEdY6qkskzS9S/VzyIJ41i8Jv1qIopA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Validity Not Before: Dec 5 05:28:25 2025 GMT Not After : Dec 12 05:28:25 2025 GMT Subject: CN=69326d79-69d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:bc:ff:e9:63:43:8e:e8:bc:73:bb:66:da: c0:b8:f6:2b:0c:1f:47:75:6f:57:7c:f9:f6:8d:be: a5:31:5d:c0:f5:09:cb:e9:cf:0a:81:0d:58:b8:e8: 80:fd:41:ea:1a:30:41:55:ce:16:85:df:d2:a8:07: b2:73:64:25:9e:86:97:7a:63:9c:1c:04:8d:12:19: db:4e:10:9c:0e:98:eb:30:a8:ae:ba:ff:4a:2b:21: cb:92:7d:36:01:87:15:3c:29:86:38:be:71:f4:6f: 42:da:0f:47:e5:f5:81:f4:8a:f7:67:80:26:7b:dd: 2b:69:11:d0:45:b7:20:ff:2c:e9:6e:44:0b:ee:63: cd:fe:0e:96:4f:f1:b5:b0:84:02:00:dc:6e:0e:28: 26:27:81:ff:45:c3:32:a8:89:ba:81:e6:00:b5:55: 04:dc:92:65:83:6f:db:ae:48:b8:53:22:bd:88:6b: bd:f8:93:1e:fc:dd:95:8e:69:63:a5:17:2e:88:12: c7:f2:1e:82:46:03:88:52:fc:a7:c2:12:d8:d9:64: 46:7f:da:62:0a:3c:f7:a9:a4:27:5e:b9:8d:a9:84: 40:bd:54:fc:60:c6:e9:4b:10:4a:5f:36:27:e2:7c: 93:cf:70:24:8a:91:95:fd:a0:14:cb:38:66:2b:48: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C4:25:89:D5:02:3A:00:A4:4C:72:E2:43:31:A1:03:6F:74:DC:F9 X509v3 Authority Key Identifier: keyid:88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:da:5d:e8:2b:60:45:d5:0f:b1:4c:f1:5c:38:76:2c:55:30: 9d:42:52:9b:15:27:a3:fe:c7:f5:7c:7b:2f:0d:5c:01:fa:3a: 71:54:9b:08:a0:9d:dc:c4:5f:d3:02:8f:30:e4:f1:30:b4:a1: 41:d9:29:76:84:6b:d6:5f:95:3a:fd:ff:94:0b:b0:bf:62:76: c9:27:48:86:84:eb:49:d0:8c:12:c5:07:07:2b:85:ef:12:39: d8:69:f6:6a:83:3e:15:9f:59:1b:9c:7c:3e:40:db:1d:61:e9: 98:a3:ef:1e:68:35:4e:c3:7a:ba:9a:48:71:96:63:f9:4c:50: ae:01:be:7b:0c:79:20:4b:26:b6:c4:a3:6b:50:ab:39:81:1b: d4:8b:7e:c0:9e:40:33:c3:06:a1:54:7d:af:b5:e7:b0:24:df: dc:35:e4:bd:37:34:96:97:76:9f:a6:19:fc:da:24:2f:fc:13: 81:50:36:c8:7d:13:5b:e0:76:08:20:a7:fb:02:da:6b:fc:b5: ba:6e:0b:68:4b:99:4d:24:fc:8f:bb:4d:cd:18:3c:5a:d2:66: ed:35:93:c8:52:39:9d:d1:81:4e:77:85:cd:35:1d:37:22:2e: ba:a0:55:ba:34:8a:3d:7c:d2:38:fc:cc:ad:7e:5c:5f:03:6f: 3c:b0:f5:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzQyQTExMC8GA1UEBRMoODgxRjI4QUIxRjM0Q0FDQ0YxMjVFREFFOTdFMUUwMTA2 MDU4MjM0OTAeFw0yNTEyMDUwNTI4MjVaFw0yNTEyMTIwNTI4MjVaMBgxFjAUBgNV BAMTDTY5MzI2ZDc5LTY5ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbxLz/6WNDjui8c7tm2sC49isMH0d1b1d8+faNvqUxXcD1CcvpzwqBDVi46ID9 QeoaMEFVzhaF39KoB7JzZCWehpd6Y5wcBI0SGdtOEJwOmOswqK66/0orIcuSfTYB hxU8KYY4vnH0b0LaD0fl9YH0ivdngCZ73StpEdBFtyD/LOluRAvuY83+DpZP8bWw hAIA3G4OKCYngf9FwzKoibqB5gC1VQTckmWDb9uuSLhTIr2Ia734kx783ZWOaWOl Fy6IEsfyHoJGA4hS/KfCEtjZZEZ/2mIKPPeppCdeuY2phEC9VPxgxulLEEpfNifi fJPPcCSKkZX9oBTLOGYrSF5/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv8QlidUC OgCkTHLiQzGhA2903PkwHwYDVR0jBBgwFoAUiB8oqx80yszxJe2ul+HgEGBYI0kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNDJBLzE3NzhCNzBDOEVD NzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6eEplMnVsLUhnRUdCWUkw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUI4b3F4ODB5c3p4SmUydWwtSGdFR0JZSTBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz NDJBLzE3NzhCNzBDOEVDNzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6 eEplMnVsLUhnRUdCWUkway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABjaXegrYEXVD7FM8Vw4dixVMJ1CUpsVJ6P+x/V8ey8NXAH6OnFUmwig ndzEX9MCjzDk8TC0oUHZKXaEa9ZflTr9/5QLsL9idsknSIaE60nQjBLFBwcrhe8S Odhp9mqDPhWfWRucfD5A2x1h6Zij7x5oNU7DerqaSHGWY/lMUK4BvnsMeSBLJrbE o2tQqzmBG9SLfsCeQDPDBqFUfa+157Ak39w15L03NJaXdp+mGfzaJC/8E4FQNsh9 E1vgdgggp/sC2mv8tbpuC2hLmU0k/I+7Tc0YPFrSZu01k8hSOZ3RgU53hc01HTci LrqgVbo0ij180jj8zK1+XF8Dbzyw9fM= -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:33 2025 by rpki-client