This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft File: ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json) Hash identifier: 0WWFyfKzsmE3l3yr4XbHTbiCpQsTOxVzNCwIZdlJy2c= Subject key identifier: 36:9E:6C:79:D0:B2:C7:DB:F7:E5:4B:B5:78:BD:39:F1:E2:10:9E:1A Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 Certificate issuer: /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Certificate serial: 34EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft Manifest number: 34EC Signing time: Mon 22 Dec 2025 14:47:29 +0000 Manifest this update: Mon 22 Dec 2025 14:47:29 +0000 Manifest next update: Mon 29 Dec 2025 14:47:29 +0000 Files and hashes: 1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: vYEKdRSekadJlSW4aXB4TyROgyZ7DesDpc2mdx/bF/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13548 (0x34ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31 Validity Not Before: Dec 22 14:47:29 2025 GMT Not After : Dec 29 14:47:29 2025 GMT Subject: CN=69495a01-e7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:da:69:40:89:72:5c:a6:8b:01:82:35:c7: 94:3d:f4:85:3a:cf:a0:ac:18:f8:e7:ac:49:8c:ad: fa:26:59:2c:da:5a:8e:40:65:6d:74:0b:d6:55:ee: a1:13:9d:3e:a2:41:ed:7f:6b:a1:36:0f:53:32:ee: 3d:3a:85:4f:9a:92:74:ad:dd:6c:6d:81:64:b5:c2: ca:fe:c2:77:f0:2a:7c:97:fe:3c:6f:89:76:f4:61: e7:17:ba:f2:35:89:fe:b0:aa:4b:b0:2d:32:84:6c: 39:c2:12:16:cc:6d:fe:f7:b7:38:55:0e:db:bd:55: f2:ba:f4:16:25:fb:30:c6:c5:61:2f:b9:64:4a:f3: 28:8a:10:aa:91:2f:28:4d:3c:62:b9:16:c1:43:1a: 46:99:f2:f5:bc:1d:a5:59:b5:55:36:3c:9b:2b:3e: ae:36:ea:4a:1f:6a:2d:80:fb:42:49:f0:33:bc:c2: f7:07:6f:65:fe:10:61:ea:fa:6e:78:a8:44:8d:ff: d8:30:96:96:fd:19:2b:5a:3e:0f:d4:5f:65:26:fd: 0b:9e:48:1c:3a:26:1f:63:32:b5:63:f4:fe:11:e2: f5:b2:93:da:9b:e1:b2:84:bd:18:6b:7f:6d:7a:b9: 3d:3e:7f:41:9b:cb:c3:3c:6b:42:5a:61:25:3d:7e: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9E:6C:79:D0:B2:C7:DB:F7:E5:4B:B5:78:BD:39:F1:E2:10:9E:1A X509v3 Authority Key Identifier: keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:0a:ca:c8:04:26:fb:22:f6:ef:88:38:d3:e9:da:fa:ce:a4: 4a:48:47:a7:ba:8c:ed:ec:03:44:f7:d9:ed:f8:f7:7d:a5:10: 86:24:69:89:41:df:ea:7a:f6:db:da:ed:64:ab:f8:f6:d9:1c: 10:12:9c:fc:71:d5:8e:58:5f:5d:ed:2a:0a:8a:85:d3:a6:cb: d2:0f:ca:ae:7d:e9:06:31:39:30:4c:8c:da:eb:e8:bd:11:dc: 14:02:49:6d:3b:e0:58:98:25:65:bf:85:6d:40:6e:23:0a:19: d4:f5:0c:b6:0c:20:e0:ad:49:64:9e:7f:ee:d5:02:5a:4e:7c: 5d:cf:11:31:df:44:47:98:a4:93:42:91:f1:5a:d0:24:3d:67: 37:9a:7d:14:6c:e5:41:57:36:35:77:ae:8e:be:c9:2b:d8:4d: 56:02:e7:79:ec:84:5a:d2:7e:ce:fe:8c:20:2c:d2:39:6b:d6: a8:c1:67:b9:a4:31:e5:d3:2c:c6:5c:3c:0d:c9:18:dd:82:ba: 41:1e:ff:c3:c8:97:a8:6e:1f:63:0c:cd:05:b7:88:d5:75:50: ed:45:cc:97:e5:95:19:90:da:6b:e3:c9:c6:46:04:57:5d:28: 43:d4:d3:7a:8c:7b:c8:56:57:41:ad:c3:f8:17:45:cf:35:59: 6b:a1:b1:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNFNTcxMTAvBgNVBAUTKDhCMTk4MDJEMjAxMjY4QkU2MUQ5RjA1N0UzRkVGMzRF NTQ5NDRDMzEwHhcNMjUxMjIyMTQ0NzI5WhcNMjUxMjI5MTQ0NzI5WjAYMRYwFAYD VQQDDA02OTQ5NWEwMS1lN2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArp3aaUCJclymiwGCNceUPfSFOs+grBj456xJjK36Jlks2lqOQGVtdAvWVe6h E50+okHtf2uhNg9TMu49OoVPmpJ0rd1sbYFktcLK/sJ38Cp8l/48b4l29GHnF7ry NYn+sKpLsC0yhGw5whIWzG3+97c4VQ7bvVXyuvQWJfswxsVhL7lkSvMoihCqkS8o TTxiuRbBQxpGmfL1vB2lWbVVNjybKz6uNupKH2otgPtCSfAzvML3B29l/hBh6vpu eKhEjf/YMJaW/RkrWj4P1F9lJv0LnkgcOiYfYzK1Y/T+EeL1spPam+GyhL0Ya39t erk9Pn9Bm8vDPGtCWmElPX6vvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaebHnQ ssfb9+VLtXi9OfHiEJ4aMB8GA1UdIwQYMBaAFIsZgC0gEmi+YdnwV+P+805UlEwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0U1Ny81NzgyN0VEQzFE OTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FMNWgyZkJYNF83elRsU1VU REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l4bUFMU0FTYUw1aDJmQlg0Xzd6VGxTVVRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0U1Ny81NzgyN0VEQzFEOTcxMUUyQjVGQTg0ODAwOEIwMkNEMi9peG1BTFNBU2FM NWgyZkJYNF83elRsU1VUREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdCsrIBCb7IvbviDjT6dr6zqRKSEenuozt7ANE99nt+Pd9pRCGJGmJ Qd/qevbb2u1kq/j22RwQEpz8cdWOWF9d7SoKioXTpsvSD8qufekGMTkwTIza6+i9 EdwUAkltO+BYmCVlv4VtQG4jChnU9Qy2DCDgrUlknn/u1QJaTnxdzxEx30RHmKST QpHxWtAkPWc3mn0UbOVBVzY1d66Ovskr2E1WAud57IRa0n7O/owgLNI5a9aowWe5 pDHl0yzGXDwNyRjdgrpBHv/DyJeobh9jDM0Ft4jVdVDtRcyX5ZUZkNpr48nGRgRX XShD1NN6jHvIVldBrcP4F0XPNVlrobFN -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:44 2025 by rpki-client