This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: /E+QUrKIcAtdGNwmq6xPcXZaU3NMZfS3YFriXF3TDp8= Subject key identifier: F2:FC:42:8A:1A:B3:21:E1:42:45:78:8C:73:F3:87:19:7D:65:23:08 Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 27EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 2796 Signing time: Sat 06 Dec 2025 15:25:33 +0000 Manifest this update: Sat 06 Dec 2025 15:25:33 +0000 Manifest next update: Sat 13 Dec 2025 15:25:33 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: Lr9D/mRu9GyJF/zugVEiRRCPE1JKxN2DXDoDAKXIT1w=) 2: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: H54eXqaAth/AANz7/DMFwtH0FIhN3UXJcrmsK7fhMXQ=) 3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: oG5ygd/penwWyXmZZkzYKDAIiWuJVz9Qy2pJuzyaYxo=) 4: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: 2jCysRc/ncxmWEacRP7Buw4ItBzXogCKyOpUtSSf4Ks=) 5: AE887848662211E7BC7E2636C4F9AE02.roa (hash: 4dAtwCU1fi5Bo6SCfNalDzxKHkBj/DREl9uromRy6Rs=) 6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: SILTusquGoHpNsMBJynofIsPOUuJK+mXoArSIu6+szM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10220 (0x27ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Dec 6 15:25:33 2025 GMT Not After : Dec 13 15:25:33 2025 GMT Subject: CN=69344aed-fb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:25:c5:fc:36:73:8e:10:7f:3c:3f:2d:3d: 2e:a6:90:8a:72:81:bc:d9:51:9b:37:77:59:f5:76: 93:ab:95:41:5a:2c:4d:1a:86:97:38:3a:f7:70:e0: db:c2:6f:a0:8e:c3:c8:b0:c2:99:6c:02:89:6c:40: 41:eb:e1:d1:d7:c6:92:e3:a7:ee:ac:f5:22:60:5f: 8d:9e:27:d2:6d:60:6b:13:20:24:87:ee:a4:a4:d3: c5:c2:58:05:cd:f6:97:27:66:34:4a:2a:d0:d6:b3: 8a:24:b6:c0:d8:e5:76:a6:07:55:96:96:fd:55:82: f0:a5:2e:54:21:03:36:b2:32:05:26:75:67:f5:b7: d0:05:8d:2f:2c:88:7e:cc:9f:2b:16:2a:c6:f7:78: 51:e5:4a:e2:5d:84:1a:85:65:22:3a:98:45:b2:b4: 3d:14:b5:80:68:54:50:14:f9:fe:58:02:e5:da:0b: b9:54:30:ca:cc:66:29:de:18:61:95:16:85:c3:17: 04:85:98:4b:d9:06:2a:0e:0f:ad:2e:99:5b:4d:2a: 5f:3e:b1:8d:7d:db:29:3e:30:0f:ab:d2:cd:cb:22: fb:e4:c6:a8:01:39:ab:43:d7:72:a5:81:c6:19:e3: cd:01:44:82:3e:08:b8:f3:19:bb:58:6e:1a:ab:4f: 05:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FC:42:8A:1A:B3:21:E1:42:45:78:8C:73:F3:87:19:7D:65:23:08 X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:89:0a:2c:53:0a:6f:cd:c2:fe:3b:d2:c7:80:27:34:6a:68: aa:59:cb:41:7d:22:f5:e6:c4:fd:21:65:ec:4b:97:5f:c0:c5: 07:10:0a:fd:6d:3f:d3:5b:d8:cd:5b:24:ea:d0:25:8f:7d:d2: 62:de:d4:db:bc:2a:c9:3a:de:b5:a4:54:79:0e:23:33:17:a6: 23:12:d7:86:fb:d3:34:5a:24:9d:c6:de:c3:22:8d:be:5e:e7: cd:cd:11:d4:60:99:be:35:dd:84:3b:6a:cb:a3:55:b2:e2:1b: 8d:63:0f:6c:ee:21:29:2d:47:0c:65:55:93:ee:53:b3:71:ec: 5f:2e:2d:e3:1a:64:19:b4:05:a3:71:00:5b:43:31:b0:16:c0: b1:56:ca:80:c5:da:a7:6b:12:dd:e5:2a:78:82:3c:69:fa:c6: c2:a7:0b:d0:e8:e5:8f:92:e8:bd:05:cb:ea:f1:c1:9a:c2:a6: 2f:95:d3:11:be:ab:d2:06:9a:72:e8:d1:99:93:53:ce:bf:67: f6:e9:4d:ac:66:1c:7f:65:7f:70:6a:d4:b5:81:92:6b:48:57: 93:70:c6:88:d1:47:44:d9:d4:d5:bc:d2:eb:ff:fd:46:7d:05: 6b:b1:50:c3:76:8d:24:63:32:8e:44:6d:8a:5c:3f:0a:53:2c: 9c:43:81:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUxMjA2MTUyNTMzWhcNMjUxMjEzMTUyNTMzWjAYMRYwFAYD VQQDEw02OTM0NGFlZC1mYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrMlxfw2c44Qfzw/LT0uppCKcoG82VGbN3dZ9XaTq5VBWixNGoaXODr3cODb wm+gjsPIsMKZbAKJbEBB6+HR18aS46furPUiYF+NnifSbWBrEyAkh+6kpNPFwlgF zfaXJ2Y0SirQ1rOKJLbA2OV2pgdVlpb9VYLwpS5UIQM2sjIFJnVn9bfQBY0vLIh+ zJ8rFirG93hR5UriXYQahWUiOphFsrQ9FLWAaFRQFPn+WALl2gu5VDDKzGYp3hhh lRaFwxcEhZhL2QYqDg+tLplbTSpfPrGNfdspPjAPq9LNyyL75MaoATmrQ9dypYHG GePNAUSCPgi48xm7WG4aq08FSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPL8Qooa syHhQkV4jHPzhxl9ZSMIMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgiQosUwpvzcL+O9LHgCc0amiqWctBfSL15sT9IWXsS5dfwMUHEAr9 bT/TW9jNWyTq0CWPfdJi3tTbvCrJOt61pFR5DiMzF6YjEteG+9M0WiSdxt7DIo2+ XufNzRHUYJm+Nd2EO2rLo1Wy4huNYw9s7iEpLUcMZVWT7lOzcexfLi3jGmQZtAWj cQBbQzGwFsCxVsqAxdqnaxLd5Sp4gjxp+sbCpwvQ6OWPkui9Bcvq8cGawqYvldMR vqvSBppy6NGZk1POv2f26U2sZhx/ZX9watS1gZJrSFeTcMaI0UdE2dTVvNLr//1G fQVrsVDDdo0kYzKORG2KXD8KUyycQ4EK -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:12 2025 by rpki-client