This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json) Hash identifier: cOP+A1EU6i8Suusacmo15uvf8GZ2p/L9SNSZNNKU1Xk= Subject key identifier: 29:A3:87:AE:A9:3D:22:D8:E9:67:E1:23:45:11:01:B1:15:D8:14:30 Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft Manifest number: 04FC Signing time: Sat 20 Dec 2025 22:57:59 +0000 Manifest this update: Sat 20 Dec 2025 22:57:59 +0000 Manifest next update: Sat 27 Dec 2025 22:57:59 +0000 Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: 4dKF3E/6/0U+dZAsM59dZLmOnfImJrLYBwBP8MOhinc=) 2: D19C3D9CCB9F11F090C50D0BC4F9AE02.roa (hash: qRx7TQ6UV8tNdrKdv3Zo/CrjupoAaJ536/Jh6JtiZmA=) 3: A18054D6CB9F11F088CB660AC4F9AE02.roa (hash: FvO8DlZzQVmPTZqjUi7Dxx3ih+VGjpPESsv0+jY8ciU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Validity Not Before: Dec 20 22:57:59 2025 GMT Not After : Dec 27 22:57:59 2025 GMT Subject: CN=694729f7-a341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:a5:c8:89:18:76:a2:d1:fd:c0:db:fb:7b: 65:49:af:27:a0:2d:1d:59:da:80:4c:ab:09:58:d9: 4e:5c:bf:9f:b2:d2:4e:62:48:2a:25:1b:43:39:4d: c2:38:ce:ac:05:ae:e9:a3:b9:fe:bb:74:0a:ff:83: fa:f6:c0:8e:57:76:58:e4:05:0a:a5:87:da:db:37: e7:44:3f:54:70:f7:a7:ac:69:fe:cb:28:2d:a1:e8: a1:ed:d4:21:50:bb:b5:3d:cf:99:c6:2a:73:4f:56: d0:1a:58:fc:9d:f6:b8:40:4e:be:36:49:c0:aa:48: b4:13:5e:b1:4c:ed:14:25:5f:14:6d:18:a9:9e:cb: 70:73:73:73:d3:46:4e:85:de:a7:8a:0c:3d:a6:3b: c1:8d:76:7e:2b:df:d5:48:0d:e8:b2:fa:60:a0:15: f7:14:ac:fe:ff:b7:20:4e:17:92:0b:21:ea:9b:8a: 4b:73:3f:62:2a:b1:4e:94:9e:3a:90:8b:8a:b5:3c: 08:48:17:db:59:ee:f6:2f:4b:5f:75:d3:8a:36:03: d3:96:40:af:04:37:ea:9a:6f:fc:87:1f:d2:c1:4f: 7e:99:a7:6b:76:a5:6e:38:02:d1:a9:d3:f6:a4:9e: 68:8d:6b:a6:13:5b:0b:25:40:32:59:98:4a:dd:36: 29:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A3:87:AE:A9:3D:22:D8:E9:67:E1:23:45:11:01:B1:15:D8:14:30 X509v3 Authority Key Identifier: keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:06:ec:1f:71:b6:5e:6e:49:5d:2f:f3:72:96:15:63:be:9e: cc:89:a9:7c:a8:f5:85:15:da:ea:b9:c8:b8:8c:54:00:8e:c5: 3b:28:f9:1d:64:dc:b3:50:84:89:17:e1:06:91:2e:c1:df:ab: 3d:a9:c5:5f:b2:0b:86:93:d6:9a:c7:d3:9b:bd:05:55:b3:a0: 1d:9f:16:89:1a:4c:6f:e7:72:b5:d2:de:53:ba:b8:77:48:21: 35:12:d9:38:56:7b:9b:1a:5f:79:f5:f1:f6:b9:98:2e:c5:de: c7:01:21:bc:50:39:ca:69:24:ab:ac:1b:ad:34:ad:75:cf:b9: f4:02:ef:07:79:c6:6c:d4:81:69:f9:03:ca:81:3b:73:78:11: b1:d9:93:36:4b:2c:0f:93:30:cb:a5:45:93:01:85:b3:77:cb: b1:35:93:a4:a3:01:36:1d:e1:27:34:ad:1c:b1:74:8f:44:7b: a0:8a:db:62:1b:18:dd:c0:e8:3e:d3:fd:31:ae:3e:7a:7c:62: 57:26:a6:3f:c1:72:ae:43:e8:f7:0b:af:01:f6:d6:9c:98:3a: ad:09:aa:00:41:54:6c:bc:bb:61:b2:83:9c:16:66:6d:10:95: 3b:58:ed:c9:0b:74:fa:60:af:60:bb:73:e2:84:fe:fc:08:f4: b6:a4:29:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5N0ExMTAvBgNVBAUTKDg5NDM2NjNEQ0Y4MzA5RkEyNzRBNDY1MkZBODNBQkQy NkQ4NDI2NEYwHhcNMjUxMjIwMjI1NzU5WhcNMjUxMjI3MjI1NzU5WjAYMRYwFAYD VQQDDA02OTQ3MjlmNy1hMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8GlyIkYdqLR/cDb+3tlSa8noC0dWdqATKsJWNlOXL+fstJOYkgqJRtDOU3C OM6sBa7po7n+u3QK/4P69sCOV3ZY5AUKpYfa2zfnRD9UcPenrGn+yygtoeih7dQh ULu1Pc+ZxipzT1bQGlj8nfa4QE6+NknAqki0E16xTO0UJV8UbRipnstwc3Nz00ZO hd6nigw9pjvBjXZ+K9/VSA3osvpgoBX3FKz+/7cgTheSCyHqm4pLcz9iKrFOlJ46 kIuKtTwISBfbWe72L0tfddOKNgPTlkCvBDfqmm/8hx/SwU9+madrdqVuOALRqdP2 pJ5ojWumE1sLJUAyWZhK3TYpgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmjh66p PSLY6WfhI0URAbEV2BQwMB8GA1UdIwQYMBaAFIlDZj3Pgwn6J0pGUvqDq9JthCZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDk3QS82MTY3QTZEMjNC MDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENmb25Ta1pTLW9PcjBtMkVK azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVTm1QYy1EQ2ZvblNrWlMtb09yMG0yRUprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDk3QS82MTY3QTZEMjNCMDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENm b25Ta1pTLW9PcjBtMkVKazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaBuwfcbZebkldL/NylhVjvp7Mial8qPWFFdrquci4jFQAjsU7KPkd ZNyzUISJF+EGkS7B36s9qcVfsguGk9aax9ObvQVVs6AdnxaJGkxv53K10t5Turh3 SCE1Etk4VnubGl959fH2uZguxd7HASG8UDnKaSSrrButNK11z7n0Au8HecZs1IFp +QPKgTtzeBGx2ZM2SywPkzDLpUWTAYWzd8uxNZOkowE2HeEnNK0csXSPRHugitti GxjdwOg+0/0xrj56fGJXJqY/wXKuQ+j3C68B9tacmDqtCaoAQVRsvLthsoOcFmZt EJU7WO3JC3T6YK9gu3PihP78CPS2pCmb -----END CERTIFICATE-----Generated at Mon Dec 22 12:19:42 2025 by rpki-client