This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft File: iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json) Hash identifier: deU8GNb6pD9eIvY4yzmbdd1rLELqdqWWlEaDWjY+e1c= Subject key identifier: 6F:43:DF:9E:CA:A4:29:DF:EA:71:C7:DB:75:DD:8C:E2:BA:5C:03:02 Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft Manifest number: 0225 Signing time: Fri 05 Dec 2025 00:25:33 +0000 Manifest this update: Fri 05 Dec 2025 00:25:33 +0000 Manifest next update: Fri 12 Dec 2025 00:25:33 +0000 Files and hashes: 1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: Zl/ZdxSrnzEM5IRNBXL0CYioBzflFf89IJJSjR3+ktU=) 2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: hyVOWGrjCzsgaB5t6a964tLdF9KDC2L1JSe9IYMG8n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Validity Not Before: Dec 5 00:25:33 2025 GMT Not After : Dec 12 00:25:33 2025 GMT Subject: CN=6932267d-e1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:24:03:a8:b7:e0:49:1f:00:25:b4:fe:33: 88:d2:7b:34:8d:4b:3c:51:55:47:26:a6:8b:4d:a0: 42:22:d9:90:db:de:8d:31:cc:55:09:eb:73:e2:26: 9b:94:fd:29:89:d2:ae:5d:b7:a9:92:f3:04:0d:04: 95:d0:a5:90:66:f0:26:db:d9:b8:ad:ff:5c:05:ac: 82:17:e9:b2:39:b7:7e:f5:33:dc:b4:41:0c:3c:e6: 50:7c:23:6d:2e:98:32:5e:95:df:3a:08:b5:06:de: e8:e5:4a:76:81:0f:56:bf:72:48:6a:00:23:85:7d: 51:b8:97:3f:6a:b0:37:7a:86:11:50:66:78:e6:d5: 2f:e9:4a:00:2c:2c:57:fb:3d:12:08:18:2c:ae:d2: 8f:f7:52:92:29:34:96:e0:22:3e:e3:fd:a0:b5:98: fb:8d:d0:9c:d4:76:a5:1c:de:73:7a:17:bf:1b:b9: ce:ad:8c:64:5f:ec:3a:92:c4:0f:74:9e:8d:d9:cf: c4:fc:3a:05:ff:02:c1:ea:22:83:42:74:f4:7d:6a: 4b:d7:95:f5:b0:94:c9:08:bd:cd:74:9c:ff:e0:7a: 50:b2:b5:b5:14:8a:cb:3e:91:67:b9:33:83:14:64: 72:af:bd:cb:37:90:fe:c5:e2:35:51:59:a5:db:90: 9a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:43:DF:9E:CA:A4:29:DF:EA:71:C7:DB:75:DD:8C:E2:BA:5C:03:02 X509v3 Authority Key Identifier: keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:2d:48:86:b2:37:3b:93:b2:c7:56:99:11:2d:57:36:c1:7d: c0:16:01:85:e3:ba:4d:7d:6a:56:a2:84:4e:1a:1b:7a:90:89: 64:9e:1e:5e:40:00:ec:6d:13:4d:54:7b:0a:0e:6d:fb:50:99: e3:2a:5f:19:5c:80:b2:fb:b1:e4:46:e4:38:77:92:46:aa:ec: 61:6f:45:3a:0b:a9:61:8a:b8:5c:10:25:43:18:f3:4a:f1:64: 66:b2:2e:76:45:8c:a7:d3:0f:56:d6:9f:87:c7:9a:53:30:2a: d2:47:0b:7a:59:74:c8:9e:5d:fe:de:2c:a7:ca:fb:db:92:05: 53:70:85:ef:c0:57:a1:99:eb:6e:77:be:ca:60:ed:38:3f:82: a9:52:e1:85:9e:03:89:7a:08:09:a0:f0:bb:60:3a:01:5a:a9: fb:0e:61:62:45:8f:a2:aa:c0:3d:1a:d4:d5:21:1a:c3:5b:bb: 7e:e5:f5:f6:96:39:10:84:f2:f2:24:72:2d:8e:7c:f8:cf:20: 7c:42:31:40:17:50:fb:4f:7d:80:af:d5:88:fd:11:52:1a:aa: 13:6b:05:3f:a7:9f:c4:ad:3e:56:2b:74:aa:64:18:b0:cc:89: af:c3:d6:b2:85:4e:3e:4b:b5:6e:0f:69:1f:50:73:1f:db:3b: fb:1b:6f:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDMkQxMTAvBgNVBAUTKDhCM0YyM0VCNUZFMjhGNTgwNUUzRDI3Qjk1MzdCQkFG QTdDREY5NDYwHhcNMjUxMjA1MDAyNTMzWhcNMjUxMjEyMDAyNTMzWjAYMRYwFAYD VQQDEw02OTMyMjY3ZC1lMWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7skA6i34EkfACW0/jOI0ns0jUs8UVVHJqaLTaBCItmQ296NMcxVCetz4iab lP0pidKuXbepkvMEDQSV0KWQZvAm29m4rf9cBayCF+myObd+9TPctEEMPOZQfCNt LpgyXpXfOgi1Bt7o5Up2gQ9Wv3JIagAjhX1RuJc/arA3eoYRUGZ45tUv6UoALCxX +z0SCBgsrtKP91KSKTSW4CI+4/2gtZj7jdCc1HalHN5zehe/G7nOrYxkX+w6ksQP dJ6N2c/E/DoF/wLB6iKDQnT0fWpL15X1sJTJCL3NdJz/4HpQsrW1FIrLPpFnuTOD FGRyr73LN5D+xeI1UVml25CatwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9D357K pCnf6nHH23XdjOK6XAMCMB8GA1UdIwQYMBaAFIs/I+tf4o9YBePSe5U3u6+nzflG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkMyRC9DMzcyMTMyQzhB MDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWoxZ0Y0OUo3bFRlN3I2Zk4t VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l6OGo2MV9pajFnRjQ5SjdsVGU3cjZmTi1VWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkMyRC9DMzcyMTMyQzhBMDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWox Z0Y0OUo3bFRlN3I2Zk4tVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgLUiGsjc7k7LHVpkRLVc2wX3AFgGF47pNfWpWooROGht6kIlknh5e QADsbRNNVHsKDm37UJnjKl8ZXICy+7HkRuQ4d5JGquxhb0U6C6lhirhcECVDGPNK 8WRmsi52RYyn0w9W1p+Hx5pTMCrSRwt6WXTInl3+3iynyvvbkgVTcIXvwFehmetu d77KYO04P4KpUuGFngOJeggJoPC7YDoBWqn7DmFiRY+iqsA9GtTVIRrDW7t+5fX2 ljkQhPLyJHItjnz4zyB8QjFAF1D7T32Ar9WI/RFSGqoTawU/p5/ErT5WK3SqZBiw zImvw9ayhU4+S7VuD2kfUHMf2zv7G2/I -----END CERTIFICATE-----Generated at Sun Dec 7 00:56:05 2025 by rpki-client