This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft File: ItyTZY3G6XAwereu8eJV3j1D9bc.mft (raw, json) Hash identifier: nOjLZ8NZTCyb2wwH/4psFJerMeN4FRW4OIgbpgyTII8= Subject key identifier: D7:CA:34:67:21:2A:05:95:34:AA:D8:BC:ED:E2:0C:83:04:E4:9F:D3 Authority key identifier: 22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7 Certificate issuer: /CN=A91F0C45/serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft Manifest number: 31 Signing time: Fri 05 Dec 2025 05:26:13 +0000 Manifest this update: Fri 05 Dec 2025 05:26:13 +0000 Manifest next update: Fri 12 Dec 2025 05:26:13 +0000 Files and hashes: 1: ItyTZY3G6XAwereu8eJV3j1D9bc.crl (hash: ARn8I9kYvfCqS0JYVQytqIER7BAo2pMqAXRpDmdpskc=) 2: 96AF1D609A0F11F09F475111C4F9AE02.roa (hash: tFfEWYriExxsv1Kbj1C8BLmYz3OJt9i3cLz0eyOnVkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C45, serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7 Validity Not Before: Dec 5 05:26:13 2025 GMT Not After : Dec 12 05:26:13 2025 GMT Subject: CN=69326cf5-f265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:43:5f:a3:5a:73:1c:45:cf:39:18:49:ab: 9e:a1:70:0d:34:49:a0:f5:9f:90:71:ec:02:1e:b1: 0f:86:c6:b6:7a:48:87:51:55:72:14:82:99:32:fe: d5:4c:87:1b:d6:99:7c:ee:7c:db:53:38:4e:85:4a: 27:22:d2:6a:11:22:d7:d2:b9:6f:5d:ce:31:cc:51: 1f:c8:88:37:11:00:a3:67:6c:a0:7c:00:73:3e:14: 51:72:da:49:19:fa:8a:14:26:45:f0:05:0b:3b:fb: b2:17:d6:89:e3:bc:45:01:83:a9:c0:67:c3:8f:c3: a6:d2:40:c4:0d:f7:8c:05:9d:de:18:20:01:9a:14: f4:3d:10:2c:ed:53:90:e7:5f:3d:e8:ed:51:ef:1a: 4d:06:a2:f2:e6:39:07:84:0c:c9:97:a9:c6:a0:0f: 5c:aa:5d:11:8e:b5:49:fe:42:d3:e2:13:e7:b0:a2: e7:1b:e3:48:bf:ae:38:b8:d3:1e:b5:f7:96:c1:6f: 2c:1d:25:8d:6d:40:3b:24:8c:7e:65:9b:f0:35:7e: 68:b7:72:d1:8c:bc:e0:5e:a2:d2:c7:b3:40:0d:56: 9f:b9:fc:8d:72:a1:08:e6:e0:ee:ae:d8:a3:55:cb: d7:8d:a2:7e:29:95:02:43:61:b9:6d:31:02:9b:74: 75:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CA:34:67:21:2A:05:95:34:AA:D8:BC:ED:E2:0C:83:04:E4:9F:D3 X509v3 Authority Key Identifier: keyid:22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ce:6b:38:a4:93:b8:9a:65:6b:59:46:4f:6e:68:c6:0b:7e: 8a:b0:6f:4d:4a:33:bd:1b:9e:e0:3d:0e:01:07:bd:04:43:ce: d8:b8:ea:4c:2b:cd:23:83:6f:69:d8:78:7b:95:a2:80:75:9e: 08:9a:1c:4a:03:77:d0:37:92:37:22:69:ad:eb:c6:b3:b8:ac: ba:97:c2:c3:b7:f0:1b:cc:cf:42:98:16:54:e5:31:6c:f3:b1: d4:e5:81:db:32:6d:ea:33:65:a9:99:e7:52:70:4f:8e:16:5d: 16:f8:e3:f8:43:3b:5b:42:66:cc:57:bc:90:fc:2c:4b:4a:8f: a5:b0:92:c8:80:d0:aa:89:3d:82:ba:c2:98:1b:fa:f5:73:a7: a3:a7:38:22:b7:34:75:21:eb:43:06:de:dd:5f:ff:f6:52:d2: 69:7e:77:67:33:ce:1e:55:cc:35:c7:54:6e:1b:1d:95:71:81: dc:52:28:fe:75:b3:87:04:28:95:f4:82:0a:c3:c3:b9:25:02: f1:bb:5d:43:1b:90:ba:fd:95:de:14:f5:86:d1:69:50:81:05: fd:9a:2b:14:47:ca:44:b8:48:03:57:41:4f:6c:99:27:36:71: b7:b9:2c:12:6a:e4:de:ec:56:3b:82:76:d6:bb:b3:cd:a2:e1: a7:21:9a:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEM0NTExMC8GA1UEBRMoMjJEQzkzNjU4REM2RTk3MDMwN0FCN0FFRjFFMjU1REUz RDQzRjVCNzAeFw0yNTEyMDUwNTI2MTNaFw0yNTEyMTIwNTI2MTNaMBgxFjAUBgNV BAMTDTY5MzI2Y2Y1LWYyNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO4kNfo1pzHEXPORhJq56hcA00SaD1n5Bx7AIesQ+GxrZ6SIdRVXIUgpky/tVM hxvWmXzufNtTOE6FSici0moRItfSuW9dzjHMUR/IiDcRAKNnbKB8AHM+FFFy2kkZ +ooUJkXwBQs7+7IX1onjvEUBg6nAZ8OPw6bSQMQN94wFnd4YIAGaFPQ9ECztU5Dn Xz3o7VHvGk0GovLmOQeEDMmXqcagD1yqXRGOtUn+QtPiE+ewoucb40i/rji40x61 95bBbywdJY1tQDskjH5lm/A1fmi3ctGMvOBeotLHs0ANVp+5/I1yoQjm4O6u2KNV y9eNon4plQJDYbltMQKbdHUVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU18o0ZyEq BZU0qti87eIMgwTkn9MwHwYDVR0jBBgwFoAUItyTZY3G6XAwereu8eJV3j1D9bcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQzQ1LzkxQTE4OTlFODky RTExRjA5N0FDNjYyRkM0RjlBRTAyL0l0eVRaWTNHNlhBd2VyZXU4ZUpWM2oxRDli Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXR5VFpZM0c2WEF3ZXJldThlSlYzajFEOWJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QzQ1LzkxQTE4OTlFODkyRTExRjA5N0FDNjYyRkM0RjlBRTAyL0l0eVRaWTNHNlhB d2VyZXU4ZUpWM2oxRDliYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGPOazikk7iaZWtZRk9uaMYLfoqwb01KM70bnuA9DgEHvQRDzti46kwr zSODb2nYeHuVooB1ngiaHEoDd9A3kjciaa3rxrO4rLqXwsO38BvMz0KYFlTlMWzz sdTlgdsybeozZamZ51JwT44WXRb44/hDO1tCZsxXvJD8LEtKj6WwksiA0KqJPYK6 wpgb+vVzp6OnOCK3NHUh60MG3t1f//ZS0ml+d2czzh5VzDXHVG4bHZVxgdxSKP51 s4cEKJX0ggrDw7klAvG7XUMbkLr9ld4U9YbRaVCBBf2aKxRHykS4SANXQU9smSc2 cbe5LBJq5N7sVjuCdta7s82i4achmhk= -----END CERTIFICATE-----Generated at Sat Dec 6 20:41:56 2025 by rpki-client