This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft File: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json) Hash identifier: MU0hodV5undnjtuSQGZEAmJH4KBx4bLC7hSYQTNT8bI= Subject key identifier: 85:92:59:EA:1C:E3:AD:B9:7D:8E:7E:21:62:B1:E1:46:6F:9C:5A:30 Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 Certificate issuer: /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Certificate serial: 08A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft Manifest number: 0896 Signing time: Mon 22 Dec 2025 19:54:15 +0000 Manifest this update: Mon 22 Dec 2025 19:54:14 +0000 Manifest next update: Mon 29 Dec 2025 19:54:14 +0000 Files and hashes: 1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: cqJDjmW57A3QjrhVtIOYoAnWJ66PRCi8tT4u+qi1u3Q=) 2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: aH5SgttT3yBxPoJZcOUIaaeUL8JdCzJhMaUjR/JZqLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2212 (0x8a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91226E9, serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Validity Not Before: Dec 22 19:54:14 2025 GMT Not After : Dec 29 19:54:14 2025 GMT Subject: CN=6949a1e7-f129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:8c:eb:71:29:d4:33:b3:53:4d:2d:5e:24: df:64:d7:9b:58:da:a8:dd:fe:d1:8f:23:29:2d:26: 4f:cc:57:5f:e1:d7:8f:82:f7:de:ed:9f:06:d7:c5: 6c:f6:c5:11:7a:ff:d7:e1:7f:7f:e7:7e:dd:54:56: 8d:25:15:32:a9:9a:3d:76:e3:6f:c6:c9:4e:6f:8f: fc:27:16:c0:e9:35:30:4b:90:eb:bd:ca:7d:46:1c: a8:7f:b9:1b:35:fa:29:4b:64:42:3e:ac:75:93:d1: e4:52:2f:fa:ff:dc:4d:e0:10:82:1a:19:ca:da:58: 39:bf:3a:d7:78:0e:07:d6:e9:2a:b3:4d:25:16:1b: 13:59:63:28:1b:cb:02:29:55:69:36:32:c8:1e:d1: 75:0e:e0:0c:5b:af:8e:81:ad:c5:84:d1:47:7c:c7: f6:fc:e7:5d:2a:09:95:16:05:13:d5:4f:9e:f3:27: 7d:32:e3:1a:e0:f1:4d:50:0f:58:1c:73:bc:62:eb: c2:f4:0d:b3:69:a4:f3:1b:a3:05:cf:5a:e4:7b:12: 25:50:58:8b:2f:96:ab:b1:87:da:1e:7b:97:62:eb: 3f:64:3d:5a:50:f1:16:01:0c:4e:46:86:e2:1f:b2: cf:12:c3:1f:e8:7f:5a:02:91:a3:a7:a0:68:8b:6b: 4c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:92:59:EA:1C:E3:AD:B9:7D:8E:7E:21:62:B1:E1:46:6F:9C:5A:30 X509v3 Authority Key Identifier: keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ca:43:85:22:ad:f2:1d:5c:b1:f7:a0:30:75:0b:51:63:99: e2:ec:79:4e:5d:49:8c:18:07:39:72:ac:7a:43:67:ff:f2:88: 7e:31:20:4e:5b:b8:04:c8:9b:e6:f9:9b:cf:ef:c9:e8:da:50: 9a:0a:00:3b:45:20:83:f2:38:57:6c:62:8e:50:17:a6:c8:c5: b1:a5:a7:ac:cf:87:92:5b:a8:8c:2d:8f:bb:28:42:8d:e0:99: ae:9b:0a:61:0c:26:73:a6:2e:e3:e3:07:64:96:a2:72:9e:87: a5:a3:80:e8:f8:a4:39:71:cb:70:cd:82:fc:72:fd:d8:0c:b0: 8a:9f:62:85:b7:0f:d4:ac:f2:2a:a7:f5:fd:47:d5:8d:c1:f6: 24:a2:24:38:dc:d7:92:67:bb:b8:b7:4b:a1:8f:07:53:dd:68: a8:5b:9f:93:07:e0:03:43:15:49:7f:c1:bf:11:a1:49:28:b1: 37:70:4a:fe:f7:ca:25:6a:66:6e:79:fc:6e:a4:b1:87:45:60: fa:bb:9e:11:ab:ab:65:fb:e5:bc:f3:1f:b0:49:7c:ce:aa:c9: 4d:e1:11:71:09:30:6a:8c:ec:e1:43:47:f0:da:dd:70:a4:67: 75:c1:34:72:fb:eb:a9:1b:87:c5:ec:0a:a4:8f:c1:64:5e:ab: e7:1f:9a:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI2RTkxMTAvBgNVBAUTKEZDOEVEMDhGQzkyMzAxNzRFMzExOTBFREFENTg1MkFD NDVDMzg1MDMwHhcNMjUxMjIyMTk1NDE0WhcNMjUxMjI5MTk1NDE0WjAYMRYwFAYD VQQDDA02OTQ5YTFlNy1mMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcSM63Ep1DOzU00tXiTfZNebWNqo3f7RjyMpLSZPzFdf4dePgvfe7Z8G18Vs 9sURev/X4X9/537dVFaNJRUyqZo9duNvxslOb4/8JxbA6TUwS5Drvcp9Rhyof7kb NfopS2RCPqx1k9HkUi/6/9xN4BCCGhnK2lg5vzrXeA4H1ukqs00lFhsTWWMoG8sC KVVpNjLIHtF1DuAMW6+Oga3FhNFHfMf2/OddKgmVFgUT1U+e8yd9MuMa4PFNUA9Y HHO8YuvC9A2zaaTzG6MFz1rkexIlUFiLL5arsYfaHnuXYus/ZD1aUPEWAQxORobi H7LPEsMf6H9aApGjp6Boi2tM8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWSWeoc 4625fY5+IWKx4UZvnFowMB8GA1UdIwQYMBaAFPyO0I/JIwF04xGQ7a1YUqxFw4UD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjZFOS84M0RFNjg3OEQx RjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFYVGpFWkR0clZoU3JFWERo UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JN1FqOGtqQVhUakVaRHRyVmhTckVYRGhRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjZFOS84M0RFNjg3OEQxRjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFY VGpFWkR0clZoU3JFWERoUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWykOFIq3yHVyx96AwdQtRY5ni7HlOXUmMGAc5cqx6Q2f/8oh+MSBO W7gEyJvm+ZvP78no2lCaCgA7RSCD8jhXbGKOUBemyMWxpaesz4eSW6iMLY+7KEKN 4JmumwphDCZzpi7j4wdklqJynoelo4Do+KQ5cctwzYL8cv3YDLCKn2KFtw/UrPIq p/X9R9WNwfYkoiQ43NeSZ7u4t0uhjwdT3WioW5+TB+ADQxVJf8G/EaFJKLE3cEr+ 98olamZuefxupLGHRWD6u54Rq6tl++W88x+wSXzOqslN4RFxCTBqjOzhQ0fw2t1w pGd1wTRy++upG4fF7Aqkj8FkXqvnH5qO -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:18 2025 by rpki-client