This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft File: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft (raw, json) Hash identifier: NaNNSx9TNvqA1V2z9s1h6wY8apmzb+TKDdHG8+dI8lo= Subject key identifier: 24:51:9D:23:97:9F:4D:7F:3B:E3:F8:E2:C5:E2:E8:E7:DF:7F:CD:72 Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD Certificate issuer: /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft Manifest number: 11 Signing time: Sun 07 Dec 2025 05:54:16 +0000 Manifest this update: Sun 07 Dec 2025 05:54:15 +0000 Manifest next update: Sun 14 Dec 2025 05:54:15 +0000 Files and hashes: 1: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl (hash: OU7LxmElNf0APk0ebaSSwbGjnVpP9o76/G9Wfk4dWuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD Validity Not Before: Dec 7 05:54:15 2025 GMT Not After : Dec 14 05:54:15 2025 GMT Subject: CN=69351687-ee3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:cf:87:22:b2:1d:3b:fe:77:fc:4e:1d:10: 7e:6c:e2:c0:ec:20:7c:ec:6a:54:f7:6d:eb:a8:ba: af:ac:62:1b:ba:9b:8c:fa:bf:89:77:af:5e:d2:99: 74:a2:06:1d:03:44:93:5e:ff:69:e5:30:87:0f:55: 73:f5:2e:a4:0a:d9:49:f8:73:16:40:12:15:91:d8: a7:89:f4:2c:a4:3f:98:46:aa:b9:2a:87:3a:54:e6: 91:da:1b:43:3b:e9:e4:ad:60:bc:da:79:a4:72:2e: 19:71:fe:f2:07:ef:43:63:1e:89:3f:72:8b:01:07: 38:60:19:ee:b4:bd:f6:90:fd:d4:8f:ac:ee:d4:c8: a2:a7:78:9a:bb:f4:3f:f4:70:a6:4d:00:7d:7a:7a: 55:a3:fd:f8:5b:af:46:ef:1c:54:79:d0:f6:c7:cd: 18:af:2c:0c:ee:09:3f:3e:b0:5c:d5:20:bf:2d:09: 4e:3e:2c:57:a2:db:21:d5:f8:fa:ac:ac:57:0c:60: c7:52:a7:c6:ce:9c:81:43:1c:ea:58:4f:0d:60:c7: ce:a7:81:a5:aa:3e:55:38:e7:f7:cb:c0:6f:21:db: f1:1a:ff:bf:ea:77:e4:43:d3:1c:87:2d:c3:a3:d6: f9:c8:63:d3:3c:5d:f6:dd:77:0e:f9:98:89:65:10: 43:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:51:9D:23:97:9F:4D:7F:3B:E3:F8:E2:C5:E2:E8:E7:DF:7F:CD:72 X509v3 Authority Key Identifier: keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:0a:eb:fa:7b:f2:75:2d:f1:76:44:95:f0:72:03:97:ba:1d: e4:0e:eb:0b:38:c3:de:51:cd:e5:34:b3:f0:be:bf:65:be:01: 07:20:fa:4c:50:58:41:72:7c:42:6e:42:8c:ba:f8:aa:5d:29: 6d:21:16:8c:e1:0c:63:69:2e:e1:b5:68:f4:96:31:b9:f9:72: ea:d8:3c:34:22:47:37:0c:06:76:6c:77:b5:b1:ad:63:b4:bd: 6d:aa:68:54:65:0a:9a:54:56:5e:2d:86:e6:80:a4:eb:41:5a: a9:c9:4d:8a:91:63:ef:fb:80:c5:e5:90:bc:ae:03:09:3f:d1: 4a:65:ec:de:57:ce:08:7b:de:f9:0c:47:98:af:dc:70:fa:fe: 77:b0:b4:21:cd:eb:b3:16:78:49:2e:a2:21:ac:53:d6:69:b7: de:52:eb:ed:10:fd:4a:41:d8:0b:fa:e1:02:a2:f2:e9:46:4a: 9f:e9:7e:e9:27:e9:64:bf:2a:e9:86:9b:e4:ea:6e:66:d6:ca: 91:25:0c:78:5c:b4:6a:5f:e4:e4:d5:b8:8f:16:70:cc:df:cf: 36:a8:55:c1:f5:ed:78:60:11:48:58:32:e9:53:bd:dd:a1:e7: 35:39:d8:a7:c6:ce:b3:68:ec:50:74:b6:39:ee:a6:d4:d3:8c: f1:5d:4c:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDk2MDExMC8GA1UEBRMoOEEwMzE3NjJFMDk0MzlDMUY1Nzc2NjdFNDJGRTBDMTM3 OUFCMURGRDAeFw0yNTEyMDcwNTU0MTVaFw0yNTEyMTQwNTU0MTVaMBgxFjAUBgNV BAMTDTY5MzUxNjg3LWVlM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVms+HIrIdO/53/E4dEH5s4sDsIHzsalT3beuouq+sYhu6m4z6v4l3r17SmXSi Bh0DRJNe/2nlMIcPVXP1LqQK2Un4cxZAEhWR2KeJ9CykP5hGqrkqhzpU5pHaG0M7 6eStYLzaeaRyLhlx/vIH70NjHok/cosBBzhgGe60vfaQ/dSPrO7UyKKneJq79D/0 cKZNAH16elWj/fhbr0bvHFR50PbHzRivLAzuCT8+sFzVIL8tCU4+LFei2yHV+Pqs rFcMYMdSp8bOnIFDHOpYTw1gx86ngaWqPlU45/fLwG8h2/Ea/7/qd+RD0xyHLcOj 1vnIY9M8Xfbddw75mIllEEN7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJFGdI5ef TX874/jixeLo599/zXIwHwYDVR0jBBgwFoAUigMXYuCUOcH1d2Z+Qv4ME3mrHf0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwOTYwL0NCMzAyQTlDQkI5 RTExRjA4NTU4RDExOUM0RjlBRTAyL2lnTVhZdUNVT2NIMWQyWi1RdjRNRTNtckhm MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWdNWFl1Q1VPY0gxZDJaLVF2NE1FM21ySGYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw OTYwL0NCMzAyQTlDQkI5RTExRjA4NTU4RDExOUM0RjlBRTAyL2lnTVhZdUNVT2NI MWQyWi1RdjRNRTNtckhmMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJUK6/p78nUt8XZElfByA5e6HeQO6ws4w95RzeU0s/C+v2W+AQcg+kxQ WEFyfEJuQoy6+KpdKW0hFozhDGNpLuG1aPSWMbn5curYPDQiRzcMBnZsd7WxrWO0 vW2qaFRlCppUVl4thuaApOtBWqnJTYqRY+/7gMXlkLyuAwk/0Upl7N5Xzgh73vkM R5iv3HD6/newtCHN67MWeEkuoiGsU9Zpt95S6+0Q/UpB2Av64QKi8ulGSp/pfukn 6WS/KumGm+TqbmbWypElDHhctGpf5OTVuI8WcMzfzzaoVcH17XhgEUhYMulTvd2h 5zU52KfGzrNo7FB0tjnuptTTjPFdTA0= -----END CERTIFICATE-----Generated at Mon Dec 8 05:57:46 2025 by rpki-client