This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: O8VJ77h7ctN4Ssz3l0AcIziIc9Aez5Lx8kZn7NYT294= Subject key identifier: F5:7B:80:AC:2C:7F:D4:42:B0:1F:E1:CA:FF:4B:E3:0C:F9:1F:83:F3 Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: BF Signing time: Sat 20 Dec 2025 17:18:51 +0000 Manifest this update: Sat 20 Dec 2025 17:18:50 +0000 Manifest next update: Sat 27 Dec 2025 17:18:50 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: Mcr8LuurUlgZy/Hk/tag2Vc+isRRVPTaON8i/twZ3FA=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: GGtGV78DXnx+758QjjUFzDYEJZn1i4ItJjSZC8rC92A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Dec 20 17:18:50 2025 GMT Not After : Dec 27 17:18:50 2025 GMT Subject: CN=6946da7b-849d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:b1:bc:88:8d:61:b1:f7:0a:b4:24:c0:b8: c5:16:6f:f2:30:25:35:a8:d4:06:56:a6:90:dc:2a: b7:2c:4b:0f:3e:d7:17:1a:b4:d6:69:4e:89:40:42: df:dc:fc:d9:18:49:6c:49:45:1a:70:d0:b0:1a:b1: da:08:26:f6:18:d6:08:fa:df:28:8e:50:2f:ca:03: fb:8f:97:d9:ad:c2:2f:9f:b3:1d:cf:4a:b3:1e:a4: 78:7f:d5:d2:1d:b6:da:f4:10:f1:ab:80:52:55:47: 87:c2:cb:29:2a:59:46:cd:b2:09:9e:00:aa:d1:2d: b5:3d:74:5b:d7:f1:86:71:55:34:33:5d:c4:05:0e: 8c:f8:12:f6:68:d7:70:84:47:0d:ad:8d:89:2a:56: 48:f4:31:8e:a0:27:50:d3:fb:ad:eb:2e:e4:28:3d: 64:9a:f2:37:f3:98:06:28:75:4b:d2:15:77:8d:2c: bb:8d:9c:e8:02:f9:07:84:9f:7b:86:d9:7e:e5:a9: 55:57:02:de:05:84:ac:5e:f4:30:41:69:75:c3:42: 7e:dc:f1:d8:e8:24:ce:00:52:b0:19:7e:07:20:29: f6:c1:48:58:56:02:ce:2b:74:df:45:3d:de:a0:39: 14:8b:5e:77:f2:98:a9:2d:04:3d:4e:9e:f1:6e:a7: 46:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7B:80:AC:2C:7F:D4:42:B0:1F:E1:CA:FF:4B:E3:0C:F9:1F:83:F3 X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:f7:d0:3e:92:8c:a7:7d:51:0f:27:28:3c:70:47:03:24:0d: 4d:40:54:3d:01:5f:a6:fb:2c:ba:76:5f:56:54:54:9c:7d:f4: 7e:ea:db:83:10:38:7d:4b:d8:c1:ef:e8:08:33:47:9a:0c:a8: 18:36:92:65:f5:0a:96:f1:f0:27:c7:93:a8:56:06:55:c8:ba: 70:60:a2:c4:11:36:2d:49:08:af:78:b7:18:3a:fa:8c:95:95: 92:86:72:da:18:e2:b9:86:d1:6c:32:50:68:60:b7:d4:06:20: 20:f3:5e:92:f7:1e:11:6a:0e:a4:ed:d0:0f:31:15:8b:48:e1: ad:1b:ab:6f:9f:d2:42:fd:17:6f:53:2b:8f:d9:d4:32:2c:09: 59:bc:96:f1:35:6d:e4:51:a0:a0:70:f7:7e:8c:61:4a:1d:2f: b2:5f:78:50:6f:50:22:10:04:da:59:85:b9:e9:c6:c2:40:86: 35:f3:6f:d1:2b:1b:af:7b:eb:34:ff:90:19:ac:24:bd:f7:cc: 1c:a1:7a:b2:e5:0b:b2:cf:35:35:18:dc:cb:4f:0f:4c:40:a0: 26:86:33:af:fa:10:40:9c:47:5c:a8:69:8b:d6:97:f3:a8:ea: 9a:0b:7f:be:ee:e3:7a:b9:f4:48:c2:8e:02:ab:e7:4a:4a:e9: 3e:85:81:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKDIyQzdFQzNDRDlFRDRDNTBFODk0QTExQkNENzBEMDMx MENENUY4NTkwHhcNMjUxMjIwMTcxODUwWhcNMjUxMjI3MTcxODUwWjAYMRYwFAYD VQQDDA02OTQ2ZGE3Yi04NDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2uxvIiNYbH3CrQkwLjFFm/yMCU1qNQGVqaQ3Cq3LEsPPtcXGrTWaU6JQELf 3PzZGElsSUUacNCwGrHaCCb2GNYI+t8ojlAvygP7j5fZrcIvn7Mdz0qzHqR4f9XS Hbba9BDxq4BSVUeHwsspKllGzbIJngCq0S21PXRb1/GGcVU0M13EBQ6M+BL2aNdw hEcNrY2JKlZI9DGOoCdQ0/ut6y7kKD1kmvI385gGKHVL0hV3jSy7jZzoAvkHhJ97 htl+5alVVwLeBYSsXvQwQWl1w0J+3PHY6CTOAFKwGX4HICn2wUhYVgLOK3TfRT3e oDkUi1538pipLQQ9Tp7xbqdGLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPV7gKws f9RCsB/hyv9L4wz5H4PzMB8GA1UdIwQYMBaAFCLH7DzZ7UxQ6JShG81w0DEM1fhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS9DOTQ0N0ZGMEJF RjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRGRG9sS0VielhEUU1RelYt RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS9DOTQ0N0ZGMEJFRjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRG RG9sS0VielhEUU1RelYtRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC899A+koynfVEPJyg8cEcDJA1NQFQ9AV+m+yy6dl9WVFScffR+6tuD EDh9S9jB7+gIM0eaDKgYNpJl9QqW8fAnx5OoVgZVyLpwYKLEETYtSQiveLcYOvqM lZWShnLaGOK5htFsMlBoYLfUBiAg816S9x4Rag6k7dAPMRWLSOGtG6tvn9JC/Rdv UyuP2dQyLAlZvJbxNW3kUaCgcPd+jGFKHS+yX3hQb1AiEATaWYW56cbCQIY182/R Kxuve+s0/5AZrCS998wcoXqy5QuyzzU1GNzLTw9MQKAmhjOv+hBAnEdcqGmL1pfz qOqaC3++7uN6ufRIwo4Cq+dKSuk+hYHd -----END CERTIFICATE-----Generated at Sun Dec 21 23:44:34 2025 by rpki-client