This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft File: iBzVaxmrfMJiYzdmnqtzClWnLLY.mft (raw, json) Hash identifier: ciXlHKmkI92VjuVpCpocZX1Lc2Z0LFL50jG91OPBQsk= Subject key identifier: CE:F9:CF:7E:F3:97:AA:A6:33:A1:CA:E3:AE:46:4E:70:88:9A:52:7B Authority key identifier: 88:1C:D5:6B:19:AB:7C:C2:62:63:37:66:9E:AB:73:0A:55:A7:2C:B6 Certificate issuer: /CN=A91ED9F9/serialNumber=881CD56B19AB7CC2626337669EAB730A55A72CB6 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft Manifest number: 0155 Signing time: Fri 05 Dec 2025 02:19:38 +0000 Manifest this update: Fri 05 Dec 2025 02:19:38 +0000 Manifest next update: Fri 12 Dec 2025 02:19:38 +0000 Files and hashes: 1: iBzVaxmrfMJiYzdmnqtzClWnLLY.crl (hash: LBBzUJMGseQG8C7kbiGDf+bAI2PNjz5V7O1LH/m8JLw=) 2: D714E00CB26F11EFB2BFFC58C4F9AE02.roa (hash: fbK8JApyPVI7CqfBV4idqbGNutPDQ+/1nnEJoajk5Ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=881CD56B19AB7CC2626337669EAB730A55A72CB6 Validity Not Before: Dec 5 02:19:38 2025 GMT Not After : Dec 12 02:19:38 2025 GMT Subject: CN=6932413a-6492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a1:45:0f:30:d6:01:e9:43:a4:c2:c0:33:8e: cc:95:32:45:22:5d:d4:c7:b9:6f:53:8a:b6:95:e6: 30:fb:05:7a:65:6e:88:c1:d0:28:88:09:94:27:07: 8d:d3:18:9e:ba:26:ce:4d:9c:d2:bc:cc:fd:93:05: 7b:44:92:51:3d:66:dd:38:43:1c:6e:a4:53:11:1f: 48:30:5c:e7:b9:9a:e8:3f:43:d3:c3:0b:31:56:c2: 82:3f:cc:33:84:42:b1:42:7f:f4:a1:7f:61:e7:aa: 9b:91:b3:fe:f3:03:b0:ce:4b:99:ba:b2:59:84:c5: 78:bd:a9:01:64:61:ad:14:f1:0d:a5:2d:fc:f5:b6: 92:56:0d:60:ca:33:1a:01:23:e6:f2:55:6e:fc:34: 35:79:5c:18:29:8c:63:01:4c:d6:79:5e:16:77:08: ed:64:69:20:35:49:93:5f:ed:22:ef:bb:33:aa:9c: d3:a0:34:dd:d7:de:1c:65:ad:75:ad:55:62:26:27: 71:ee:1e:34:27:f0:12:7a:26:f1:d9:45:f0:60:2a: 06:84:3b:f2:54:58:22:c2:cb:31:81:3d:c4:6a:28: 89:8e:de:7c:b9:23:c4:af:fd:6e:9b:2d:51:36:93: 21:8c:c1:70:fd:f5:cd:e7:17:fd:eb:c6:da:fa:2f: 51:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F9:CF:7E:F3:97:AA:A6:33:A1:CA:E3:AE:46:4E:70:88:9A:52:7B X509v3 Authority Key Identifier: keyid:88:1C:D5:6B:19:AB:7C:C2:62:63:37:66:9E:AB:73:0A:55:A7:2C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iBzVaxmrfMJiYzdmnqtzClWnLLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/5F379DB0C95211EEB7ADDD4EC4F9AE02/iBzVaxmrfMJiYzdmnqtzClWnLLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:9d:9a:f7:8f:eb:e7:9a:fe:db:8a:79:eb:61:4f:5b:02:6b: 6b:27:bb:b0:52:af:a0:dc:16:73:1d:64:ff:3f:69:4c:72:b1: 07:02:0e:94:33:51:90:45:f1:09:4a:e2:76:4c:d6:c4:78:78: c2:2d:12:7d:55:c8:6b:d8:88:f9:25:34:03:3f:29:bd:d7:c2: ce:a3:cb:75:1f:b3:76:1a:dc:67:d8:76:95:28:a5:c7:f5:e2: 56:66:55:a7:7a:b8:3a:d2:f2:da:94:f4:07:3e:9f:87:cc:fc: 6d:55:be:6d:42:3c:61:d7:28:f7:24:cf:5b:37:99:34:3e:be: 51:9b:27:e7:94:ff:05:5d:4c:f0:d6:53:1f:2f:2f:56:a9:59: 83:64:98:93:0e:09:67:84:bd:e9:d9:97:49:58:69:25:aa:09: 37:d9:29:99:e5:62:6f:83:42:be:45:5c:95:aa:a4:04:cc:c7: 3c:b1:22:e7:5d:a4:c0:fb:25:ec:f7:05:78:7d:6f:97:29:45: 54:20:97:6d:2d:a9:c4:9a:0b:de:c3:d6:2c:24:d6:89:fb:dc: fb:28:c5:95:40:25:97:17:50:1e:ac:d0:31:1e:9b:0e:ba:d3: 65:aa:f3:e9:d3:67:d2:a3:d7:1a:5b:0a:ba:06:ae:6f:88:f2: 81:87:b6:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDg4MUNENTZCMTlBQjdDQzI2MjYzMzc2NjlFQUI3MzBB NTVBNzJDQjYwHhcNMjUxMjA1MDIxOTM4WhcNMjUxMjEyMDIxOTM4WjAYMRYwFAYD VQQDEw02OTMyNDEzYS02NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KFFDzDWAelDpMLAM47MlTJFIl3Ux7lvU4q2leYw+wV6ZW6IwdAoiAmUJweN 0xieuibOTZzSvMz9kwV7RJJRPWbdOEMcbqRTER9IMFznuZroP0PTwwsxVsKCP8wz hEKxQn/0oX9h56qbkbP+8wOwzkuZurJZhMV4vakBZGGtFPENpS389baSVg1gyjMa ASPm8lVu/DQ1eVwYKYxjAUzWeV4WdwjtZGkgNUmTX+0i77szqpzToDTd194cZa11 rVViJidx7h40J/ASeibx2UXwYCoGhDvyVFgiwssxgT3EaiiJjt58uSPEr/1umy1R NpMhjMFw/fXN5xf968ba+i9RGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM75z37z l6qmM6HK465GTnCImlJ7MB8GA1UdIwQYMBaAFIgc1WsZq3zCYmM3Zp6rcwpVpyy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS81RjM3OURCMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9pQnpWYXhtcmZNSmlZemRtbnF0ekNsV25M TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lCelZheG1yZk1KaVl6ZG1ucXR6Q2xXbkxMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS81RjM3OURCMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9pQnpWYXhtcmZN SmlZemRtbnF0ekNsV25MTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSnZr3j+vnmv7binnrYU9bAmtrJ7uwUq+g3BZzHWT/P2lMcrEHAg6U M1GQRfEJSuJ2TNbEeHjCLRJ9Vchr2Ij5JTQDPym918LOo8t1H7N2Gtxn2HaVKKXH 9eJWZlWnerg60vLalPQHPp+HzPxtVb5tQjxh1yj3JM9bN5k0Pr5RmyfnlP8FXUzw 1lMfLy9WqVmDZJiTDglnhL3p2ZdJWGklqgk32SmZ5WJvg0K+RVyVqqQEzMc8sSLn XaTA+yXs9wV4fW+XKUVUIJdtLanEmgvew9YsJNaJ+9z7KMWVQCWXF1AerNAxHpsO utNlqvPp02fSo9caWwq6Bq5viPKBh7am -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:02 2025 by rpki-client