This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: BjldVN2UyTLX98zERwP1h1pJuc01hRtPilhFx+CVgrA= Subject key identifier: DA:85:88:A8:D0:E2:E3:E2:95:10:4E:D2:C9:B5:35:E5:16:54:39:3E Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0AE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0AC5 Signing time: Wed 10 Dec 2025 18:37:33 +0000 Manifest this update: Wed 10 Dec 2025 18:37:32 +0000 Manifest next update: Wed 17 Dec 2025 18:37:32 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: ZyPtjDRjrEm1yAlCqWaazsasSicJTSZeBlKY+Bc6/3k=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: UQI8Fd4IsbMRQfXyTMFvSmN0fjZzMOEN8kbfmrroqXA=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: SvGpd5pCGO9/pwIUeRowgxIT0zcF1gs1tLMG2Scm/1Q=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: O6xTukSXkRkmptzUfSfbkc6euxNs5PIvwDcK/m8EIkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 18:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2789 (0xae5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Dec 10 18:37:32 2025 GMT Not After : Dec 17 18:37:32 2025 GMT Subject: CN=6939bdec-49d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:02:6f:24:b0:3e:07:9b:04:35:99:3a:4b:e2: ab:e6:21:d1:35:a0:de:76:ce:32:de:2b:74:10:75: bd:72:a9:24:0b:39:e5:5e:ce:03:aa:30:74:f0:26: f8:50:aa:7b:ab:37:f7:99:72:b9:13:de:56:13:97: de:6d:8c:ed:f3:0e:6a:1d:2a:33:92:3e:07:89:cf: 1d:32:82:6d:dc:58:c0:b5:2f:62:f8:2d:a2:90:12: 60:19:b7:5d:19:1b:bb:38:b3:90:60:8e:a8:86:53: 7c:7d:42:ca:18:9a:3e:37:38:2d:20:40:a3:e9:2d: f6:02:da:ed:26:58:19:36:4f:a5:1b:d9:25:08:28: 64:73:c1:fd:24:e1:bc:1e:2f:be:cc:8d:e5:50:f6: 69:ea:53:c3:69:60:11:69:17:a7:be:68:9e:ea:94: 25:41:df:87:87:f2:d6:18:6d:30:ff:5a:42:33:8b: eb:22:75:57:bc:bb:c9:93:91:0e:36:44:2f:a4:ce: f6:3c:e0:e4:2a:b7:5e:2e:fe:a0:4f:cd:cb:12:eb: 5b:4f:02:23:11:2b:fd:35:f6:b7:12:86:17:7b:8f: 64:54:a2:9f:4b:22:8e:2c:65:0d:26:c1:b0:d0:8e: 93:59:04:99:60:85:1b:32:56:25:ae:cd:a1:a0:ba: 80:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:88:A8:D0:E2:E3:E2:95:10:4E:D2:C9:B5:35:E5:16:54:39:3E X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d7:f9:3f:37:88:97:4f:51:31:c4:fe:ad:6e:63:81:35:69: a2:c0:13:3e:97:4b:1c:76:1c:93:73:02:b5:41:09:46:44:23: c0:02:b8:ca:ef:b8:0d:06:97:72:c0:2d:64:59:47:c3:92:04: ca:f5:fd:12:1c:c8:3f:cb:95:f6:f5:7f:dc:e2:0d:fb:4d:20: c5:d6:9d:28:05:93:a2:6a:22:87:60:e4:52:97:bf:6d:f0:53: 22:24:2a:5f:74:24:f1:b7:2d:70:27:a6:b2:c2:ce:b3:1c:0b: d7:4d:cc:14:e9:88:de:5d:d0:fc:0b:8e:48:c7:02:04:a3:94: df:88:82:54:09:80:76:f9:e6:0e:e4:9e:15:ae:18:f9:89:1f: 31:62:c3:2a:39:79:d3:9b:bc:0c:04:2b:7c:19:96:44:c3:67: 0d:19:e8:f8:f4:3c:09:f8:4d:c3:40:a2:37:15:5a:0c:ce:58: 61:55:ff:46:b5:2b:41:14:42:21:a5:85:5d:f6:3e:84:5e:0a: 8e:dc:45:fe:ca:28:53:2b:f5:3f:56:8e:5e:4b:21:81:4d:20: b8:a6:36:2e:7a:19:5d:cc:9f:64:c5:2a:00:b9:60:ef:e5:0c: c9:74:5f:aa:52:a5:31:41:a0:7c:0d:bb:ad:2c:6f:ca:d4:27: c9:f1:19:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjUxMjEwMTgzNzMyWhcNMjUxMjE3MTgzNzMyWjAYMRYwFAYD VQQDEw02OTM5YmRlYy00OWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQJvJLA+B5sENZk6S+Kr5iHRNaDeds4y3it0EHW9cqkkCznlXs4DqjB08Cb4 UKp7qzf3mXK5E95WE5febYzt8w5qHSozkj4Hic8dMoJt3FjAtS9i+C2ikBJgGbdd GRu7OLOQYI6ohlN8fULKGJo+NzgtIECj6S32AtrtJlgZNk+lG9klCChkc8H9JOG8 Hi++zI3lUPZp6lPDaWARaRenvmie6pQlQd+Hh/LWGG0w/1pCM4vrInVXvLvJk5EO NkQvpM72PODkKrdeLv6gT83LEutbTwIjESv9Nfa3EoYXe49kVKKfSyKOLGUNJsGw 0I6TWQSZYIUbMlYlrs2hoLqApwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqFiKjQ 4uPilRBO0sm1NeUWVDk+MB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj1/k/N4iXT1ExxP6tbmOBNWmiwBM+l0scdhyTcwK1QQlGRCPAArjK 77gNBpdywC1kWUfDkgTK9f0SHMg/y5X29X/c4g37TSDF1p0oBZOiaiKHYORSl79t 8FMiJCpfdCTxty1wJ6ayws6zHAvXTcwU6YjeXdD8C45IxwIEo5TfiIJUCYB2+eYO 5J4Vrhj5iR8xYsMqOXnTm7wMBCt8GZZEw2cNGej49DwJ+E3DQKI3FVoMzlhhVf9G tStBFEIhpYVd9j6EXgqO3EX+yihTK/U/Vo5eSyGBTSC4pjYuehldzJ9kxSoAuWDv 5QzJdF+qUqUxQaB8DbutLG/K1CfJ8Rm5 -----END CERTIFICATE-----Generated at Thu Dec 11 23:02:04 2025 by rpki-client