This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json) Hash identifier: lB1HPI9RuqGwhLeG/7uOyQxVD4GT1KkLw2n1Gr8kPoc= Subject key identifier: 0E:9F:A1:3C:9D:20:EC:B0:64:80:19:7E:10:DE:A7:05:08:2D:8C:60 Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Certificate serial: 0D73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft Manifest number: 0D66 Signing time: Wed 24 Dec 2025 17:40:08 +0000 Manifest this update: Wed 24 Dec 2025 17:40:08 +0000 Manifest next update: Wed 31 Dec 2025 17:40:08 +0000 Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: 2rhNgFBnZMo1dG2lZA6aYGCJI9LZXbCk7HmMOHbaBoM=) 2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: KmGf8Zvcyufmo51iUasTSRX2HWDW8cDhuB6ClqAH62g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3443 (0xd73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Validity Not Before: Dec 24 17:40:08 2025 GMT Not After : Dec 31 17:40:08 2025 GMT Subject: CN=694c2578-53ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:e2:a9:d4:0f:b3:e5:70:79:a3:25:a6:20: fa:43:36:f3:d9:e3:88:1c:c8:0a:83:ae:ce:44:ab: 0c:73:ad:55:89:73:b6:98:23:a4:ae:fb:2a:9a:1f: 2a:c1:1c:72:ea:ea:55:7f:8d:2d:2e:0b:96:09:66: 34:72:8f:52:f4:59:df:19:70:d3:38:dd:22:f4:66: db:04:dc:74:b8:f9:b8:66:c4:7f:7f:fb:da:76:f9: 94:06:3b:47:14:39:82:40:43:9a:b5:b4:b8:d0:83: c3:0a:71:b8:34:3c:bc:03:06:f6:21:a6:7c:f2:9f: 03:20:e9:46:dc:5d:09:3f:9d:65:cc:45:c6:3c:b8: 1f:83:73:ed:cf:eb:87:46:ff:15:30:dd:6f:79:8a: bd:fe:fc:62:d2:c1:61:89:23:c9:17:67:1d:99:3b: a1:b2:fc:b2:63:15:2b:ad:b7:46:27:36:10:73:26: 4d:92:4e:54:54:98:fe:80:23:c9:bc:6f:62:1a:a7: ef:01:3d:90:67:73:fc:ac:1e:23:32:95:3d:6b:b3: 36:db:a0:a3:f0:50:75:40:6e:fa:c4:8c:88:09:b9: c3:4f:2c:54:65:c1:20:f2:72:8a:1e:a6:c0:8c:18: ab:e7:86:e4:f1:2a:e4:c9:10:3f:ac:34:f6:88:e1: 8b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9F:A1:3C:9D:20:EC:B0:64:80:19:7E:10:DE:A7:05:08:2D:8C:60 X509v3 Authority Key Identifier: keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:0b:6b:21:af:e8:75:7e:8e:9d:00:3b:c0:1c:f7:31:7c:2c: b6:2c:1b:51:c5:a4:91:c1:fc:c0:b7:2d:15:45:e2:84:1b:cb: 28:25:ad:b3:d5:6b:d1:6c:bd:ba:de:67:06:58:28:62:da:47: 4e:33:e7:90:32:26:12:74:6d:10:f4:9e:b8:4f:d0:31:71:8c: df:90:51:1d:7e:d5:0b:c6:71:b9:cb:72:13:a0:3a:a6:56:e0: ba:37:25:e1:78:3b:0a:72:38:e4:a7:f5:ad:e3:a3:d0:14:eb: 8b:89:3e:a1:2d:74:3f:3f:d6:e8:74:da:d7:d8:03:b8:6d:d2: a5:f9:a3:29:fc:ed:b3:9b:19:3a:77:61:2b:db:20:b4:47:45: dc:cd:63:8f:22:70:d0:2d:e3:0b:9d:53:3f:5f:f4:27:74:73: 2b:f5:ca:9d:87:84:69:62:8a:e2:88:69:74:86:9c:38:0e:03: e6:e3:bd:0c:39:eb:89:2b:98:ae:fe:df:08:fb:3e:28:50:e7: 99:be:ec:20:82:ae:b6:5b:df:fc:4e:b7:87:d0:ac:6f:d6:60: 43:4e:17:4e:fc:a7:7a:17:c6:a0:32:1d:f5:27:2e:de:0e:4c: 30:b2:08:68:c1:24:0a:54:b7:65:76:4b:e2:64:0e:91:c1:76: ac:c4:f1:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF OTM1Nzc2QTYwHhcNMjUxMjI0MTc0MDA4WhcNMjUxMjMxMTc0MDA4WjAYMRYwFAYD VQQDDA02OTRjMjU3OC01M2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjviqdQPs+VweaMlpiD6Qzbz2eOIHMgKg67ORKsMc61ViXO2mCOkrvsqmh8q wRxy6upVf40tLguWCWY0co9S9FnfGXDTON0i9GbbBNx0uPm4ZsR/f/vadvmUBjtH FDmCQEOatbS40IPDCnG4NDy8Awb2IaZ88p8DIOlG3F0JP51lzEXGPLgfg3Ptz+uH Rv8VMN1veYq9/vxi0sFhiSPJF2cdmTuhsvyyYxUrrbdGJzYQcyZNkk5UVJj+gCPJ vG9iGqfvAT2QZ3P8rB4jMpU9a7M226Cj8FB1QG76xIyICbnDTyxUZcEg8nKKHqbA jBir54bk8SrkyRA/rDT2iOGLDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6foTyd IOywZIAZfhDepwUILYxgMB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTlCNy9BNEVDNTNGNkUyQjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNm aGpoSnEyUXlNOFBwTlhkcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjC2shr+h1fo6dADvAHPcxfCy2LBtRxaSRwfzAty0VReKEG8soJa2z 1WvRbL263mcGWChi2kdOM+eQMiYSdG0Q9J64T9AxcYzfkFEdftULxnG5y3IToDqm VuC6NyXheDsKcjjkp/Wt46PQFOuLiT6hLXQ/P9bodNrX2AO4bdKl+aMp/O2zmxk6 d2Er2yC0R0XczWOPInDQLeMLnVM/X/QndHMr9cqdh4RpYoriiGl0hpw4DgPm470M OeuJK5iu/t8I+z4oUOeZvuwggq62W9/8TreH0Kxv1mBDThdO/Kd6F8agMh31Jy7e DkwwsghowSQKVLdldkviZA6RwXasxPGa -----END CERTIFICATE-----Generated at Wed Dec 24 19:31:24 2025 by rpki-client