This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft File: ilHqWMRcL0Rg46sT62pnRUZdr4s.mft (raw, json) Hash identifier: C9YHNMG/mDkHftSMJbCaBWrZ1yireggiKcJWovY4GyI= Subject key identifier: E4:F1:B1:A5:23:86:51:2F:8D:29:B7:A9:4F:3D:E0:61:3A:2C:62:DD Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B Certificate issuer: /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft Manifest number: 30 Signing time: Sun 21 Dec 2025 06:36:13 +0000 Manifest this update: Sun 21 Dec 2025 06:36:13 +0000 Manifest next update: Sun 28 Dec 2025 06:36:13 +0000 Files and hashes: 1: ilHqWMRcL0Rg46sT62pnRUZdr4s.crl (hash: B81lcNitZcdygkAp0TLSJ4u9+bXTcPBnw2USzcpKmLw=) 2: A537B070BA4B11F0BD639513C4F9AE02.roa (hash: 0l8g3gNriOaViV+iMR9Fta7puFfPWbZN01yos+CCpxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B Validity Not Before: Dec 21 06:36:13 2025 GMT Not After : Dec 28 06:36:13 2025 GMT Subject: CN=6947955d-1dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:a9:80:6a:99:8b:bb:a3:b8:37:00:ad:04: f3:df:67:3f:45:a4:c0:87:9b:30:8b:77:bc:b9:5b: 64:68:1a:f5:36:05:24:2a:c8:33:f6:62:3a:f2:47: 59:18:7a:17:15:a5:e6:e6:c8:37:e2:ec:aa:29:13: 3f:52:93:c5:d6:7f:fb:09:1b:de:85:24:e6:73:da: e3:b5:be:ec:db:65:3f:03:db:a1:b3:c7:6c:ee:7e: 96:50:9e:6c:47:e5:29:3b:c2:82:3c:81:3a:ab:2d: 71:21:32:49:3e:c1:02:94:f4:ca:9c:bd:2d:9a:48: ac:bc:84:0e:5a:08:68:d4:b6:3a:79:2a:02:df:2f: a7:67:63:99:41:d0:a4:60:95:47:cd:77:ee:0a:95: 09:34:f3:70:5f:16:32:c7:3d:71:1a:1e:21:e4:60: e4:e1:b7:45:6e:c8:41:87:18:4a:7f:1b:03:82:7e: 94:9a:78:fa:a7:07:f0:e2:8c:1a:21:35:3b:05:19: 38:60:cc:85:2f:6d:60:e9:23:c7:26:83:d7:45:9c: d6:57:bc:65:9a:9a:f4:d3:43:63:80:24:4d:ff:30: 23:94:74:d6:f0:f3:74:9b:b5:94:c2:fd:02:63:e4: 0e:f7:2c:20:58:77:d8:90:98:d9:09:b1:83:f6:a8: fd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F1:B1:A5:23:86:51:2F:8D:29:B7:A9:4F:3D:E0:61:3A:2C:62:DD X509v3 Authority Key Identifier: keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:32:c5:9a:0d:a8:90:79:98:f0:ae:b6:99:22:e3:d1:a2:5a: ef:e3:e9:ad:8f:c3:32:9f:f9:18:18:7b:03:89:06:31:5b:f7: f0:bd:4b:5e:a7:1f:7b:00:ab:2d:9c:bf:b4:73:a2:4f:da:26: 27:ba:1b:ad:e4:77:c6:81:54:cf:19:42:b4:d8:04:68:a0:0b: 8b:28:38:0d:44:8f:29:ad:d8:fe:05:29:ab:c2:3b:5b:06:4e: 67:8c:e3:1f:bf:65:02:ad:3f:ee:68:42:f2:37:5e:9b:8d:e9: 13:49:08:1a:a0:3b:d1:80:bc:57:51:9b:f9:27:25:c4:83:fa: a9:0b:74:5c:98:4b:d6:c2:71:a2:0e:62:f9:86:ee:20:2e:a6: 47:07:d1:3d:66:22:d8:fa:c7:60:7e:3c:32:5f:86:2f:a1:dd: 89:d3:b9:61:3e:c8:98:57:80:05:8e:ac:87:dd:96:60:94:f4: 4b:df:3f:ed:cb:90:e8:eb:61:cf:05:42:2c:86:b2:bd:52:eb: 15:be:21:91:4b:34:ff:37:50:42:93:9d:63:9a:1e:92:57:e8: de:d5:9f:6e:e0:46:6a:fb:a6:f7:4b:49:65:aa:0a:a5:64:fe: e8:fc:db:98:69:b8:5d:19:3b:25:e6:7f:1f:dc:c0:b0:0d:d6: 01:05:d0:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUY3MjExMC8GA1UEBRMoOEE1MUVBNThDNDVDMkY0NDYwRTNBQjEzRUI2QTY3NDU0 NjVEQUY4QjAeFw0yNTEyMjEwNjM2MTNaFw0yNTEyMjgwNjM2MTNaMBgxFjAUBgNV BAMMDTY5NDc5NTVkLTFkZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2gKmAapmLu6O4NwCtBPPfZz9FpMCHmzCLd7y5W2RoGvU2BSQqyDP2YjryR1kY ehcVpebmyDfi7KopEz9Sk8XWf/sJG96FJOZz2uO1vuzbZT8D26Gzx2zufpZQnmxH 5Sk7woI8gTqrLXEhMkk+wQKU9MqcvS2aSKy8hA5aCGjUtjp5KgLfL6dnY5lB0KRg lUfNd+4KlQk083BfFjLHPXEaHiHkYOTht0VuyEGHGEp/GwOCfpSaePqnB/DijBoh NTsFGThgzIUvbWDpI8cmg9dFnNZXvGWamvTTQ2OAJE3/MCOUdNbw83SbtZTC/QJj 5A73LCBYd9iQmNkJsYP2qP2ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5PGxpSOG US+NKbepTz3gYTosYt0wHwYDVR0jBBgwFoAUilHqWMRcL0Rg46sT62pnRUZdr4sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRjcyLzgwOUNDNEJBOTdB QzExRjA5MTVFNEUyOEM0RjlBRTAyL2lsSHFXTVJjTDBSZzQ2c1Q2MnBuUlVaZHI0 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWxIcVdNUmNMMFJnNDZzVDYycG5SVVpkcjRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RjcyLzgwOUNDNEJBOTdBQzExRjA5MTVFNEUyOEM0RjlBRTAyL2lsSHFXTVJjTDBS ZzQ2c1Q2MnBuUlVaZHI0cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJIyxZoNqJB5mPCutpki49GiWu/j6a2PwzKf+RgYewOJBjFb9/C9S16n H3sAqy2cv7Rzok/aJie6G63kd8aBVM8ZQrTYBGigC4soOA1Ejymt2P4FKavCO1sG TmeM4x+/ZQKtP+5oQvI3XpuN6RNJCBqgO9GAvFdRm/knJcSD+qkLdFyYS9bCcaIO YvmG7iAupkcH0T1mItj6x2B+PDJfhi+h3YnTuWE+yJhXgAWOrIfdlmCU9EvfP+3L kOjrYc8FQiyGsr1S6xW+IZFLNP83UEKTnWOaHpJX6N7Vn27gRmr7pvdLSWWqCqVk /uj825hpuF0ZOyXmfx/cwLAN1gEF0FA= -----END CERTIFICATE-----Generated at Mon Dec 22 20:29:25 2025 by rpki-client