This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft File: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft (raw, json) Hash identifier: bpAPJUBVMbqUEJmRh+vYmVLV4+d6PvG3Ir57t+lYDMU= Subject key identifier: D7:AF:D7:8A:1F:5F:35:57:77:42:1B:76:A6:B4:34:17:C1:48:F7:E6 Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft Manifest number: CA Signing time: Sun 21 Dec 2025 04:57:09 +0000 Manifest this update: Sun 21 Dec 2025 04:57:08 +0000 Manifest next update: Sun 28 Dec 2025 04:57:08 +0000 Files and hashes: 1: ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl (hash: +U9adw90FIaRBBs6+uEo9Ymhfz28R6HT9UYh6IUisUM=) 2: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (hash: H5cfxoLL862cb5gfNbu7rXxwWCXmbFUjKDm2O6hUwkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Validity Not Before: Dec 21 04:57:08 2025 GMT Not After : Dec 28 04:57:08 2025 GMT Subject: CN=69477e25-cd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:25:17:93:c9:87:3f:44:a2:a8:db:af:05: dc:1a:55:bd:7b:00:88:b3:db:fc:91:33:7f:29:f7: b4:b6:9f:2e:b8:78:58:b6:5e:0c:93:cb:c2:ca:12: 5c:1e:ad:35:8a:53:53:5c:69:3b:a4:93:c4:87:87: 55:e6:e9:e8:ba:fc:77:ee:59:ce:f4:a0:99:df:97: 01:53:e0:e9:f0:19:a3:fa:df:e9:7d:75:81:2c:40: 86:db:6e:47:e6:c2:6e:78:1c:76:46:e4:90:40:92: 0c:10:ab:aa:71:19:a6:91:9d:3c:e4:51:56:79:0a: 60:e8:a8:6b:7f:af:51:64:d2:67:14:c3:7c:97:ae: d5:c9:11:42:e5:0c:0c:aa:bf:7c:87:b4:f1:64:18: 7d:53:ab:2e:2e:8a:65:b3:52:43:2f:0e:22:ce:7d: 22:6f:1e:85:4b:1f:09:19:2e:33:8f:fa:ea:f4:ea: 3d:c2:ec:ed:31:61:0a:34:7c:50:53:91:06:a0:e7: d5:39:7a:02:79:3f:5e:f9:64:d4:1b:a7:0c:70:98: 45:2a:ce:c9:6b:a5:cd:ba:9a:ab:88:bb:6e:02:83: 77:4d:96:b2:2b:5e:c6:13:ce:7d:07:d3:93:a7:25: 7c:e1:b8:35:9c:f9:ca:a9:ec:3f:af:6e:b0:82:a3: 86:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AF:D7:8A:1F:5F:35:57:77:42:1B:76:A6:B4:34:17:C1:48:F7:E6 X509v3 Authority Key Identifier: keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:71:af:d9:a8:57:70:b7:79:36:7b:9d:51:38:ad:53:36:5b: 4f:48:d2:77:f4:ad:5f:09:f3:5d:90:63:f4:d6:22:79:04:4f: 70:12:5d:8d:c9:ae:62:6a:c6:9c:c2:60:81:a5:92:43:73:f6: db:ad:8b:6a:0e:be:d0:ad:d5:87:f3:58:a3:fb:2c:54:3d:0c: 3a:e6:c0:18:47:59:f7:3f:7c:cc:d8:e3:f2:64:69:de:72:db: 66:b3:12:43:5b:c4:fe:90:4c:5a:3c:b8:03:bf:92:49:b7:60: 3e:48:18:9c:fd:52:c3:97:0a:ec:0d:49:8c:9c:44:b6:18:69: 6b:6c:49:1d:e9:94:ea:23:72:d1:ad:e3:20:e8:c3:90:f2:96: 49:85:78:29:52:79:62:5a:4b:5f:52:87:18:c7:63:1c:89:5d: 06:61:49:7f:d8:29:ee:6e:ca:cd:1d:de:43:59:0b:bd:e8:82: d9:38:bf:8f:78:5f:4d:9b:3a:f1:3c:53:62:fb:91:a0:89:d2: c9:ba:cf:9d:15:59:1a:70:82:94:97:6a:aa:d8:b6:98:88:2c: dc:92:0a:ad:83:b9:44:dc:b7:ef:ec:83:b4:89:f4:1c:96:7a: 79:a8:56:74:2a:2a:de:98:3a:e7:91:85:8e:d5:6d:37:61:f9: 67:de:6f:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMzcxMTAvBgNVBAUTKDhBODBGRThBMEQyM0JDMzBDNjY0QTc3QUEwOEVEOTBF MTlCNTkxREMwHhcNMjUxMjIxMDQ1NzA4WhcNMjUxMjI4MDQ1NzA4WjAYMRYwFAYD VQQDDA02OTQ3N2UyNS1jZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2UlF5PJhz9EoqjbrwXcGlW9ewCIs9v8kTN/Kfe0tp8uuHhYtl4Mk8vCyhJc Hq01ilNTXGk7pJPEh4dV5unouvx37lnO9KCZ35cBU+Dp8Bmj+t/pfXWBLECG225H 5sJueBx2RuSQQJIMEKuqcRmmkZ085FFWeQpg6Khrf69RZNJnFMN8l67VyRFC5QwM qr98h7TxZBh9U6suLopls1JDLw4izn0ibx6FSx8JGS4zj/rq9Oo9wuztMWEKNHxQ U5EGoOfVOXoCeT9e+WTUG6cMcJhFKs7Ja6XNupqriLtuAoN3TZayK17GE859B9OT pyV84bg1nPnKqew/r26wgqOG7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNev14of XzVXd0Ibdqa0NBfBSPfmMB8GA1UdIwQYMBaAFIqA/ooNI7wwxmSneqCO2Q4ZtZHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIzNy81MzJBMkUwQUFC QkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZEREdaS2Q2b0k3WkRobTFr ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lvRC1pZzBqdkRER1pLZDZvSTdaRGhtMWtkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIzNy81MzJBMkUwQUFCQkMxMUVGQjNEOUNFNkVDNEY5QUUwMi9pb0QtaWcwanZE REdaS2Q2b0k3WkRobTFrZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTca/ZqFdwt3k2e51ROK1TNltPSNJ39K1fCfNdkGP01iJ5BE9wEl2N ya5iasacwmCBpZJDc/bbrYtqDr7QrdWH81ij+yxUPQw65sAYR1n3P3zM2OPyZGne cttmsxJDW8T+kExaPLgDv5JJt2A+SBic/VLDlwrsDUmMnES2GGlrbEkd6ZTqI3LR reMg6MOQ8pZJhXgpUnliWktfUocYx2MciV0GYUl/2CnubsrNHd5DWQu96ILZOL+P eF9NmzrxPFNi+5GgidLJus+dFVkacIKUl2qq2LaYiCzckgqtg7lE3Lfv7IO0ifQc lnp5qFZ0KiremDrnkYWO1W03Yfln3m9k -----END CERTIFICATE-----Generated at Mon Dec 22 20:46:48 2025 by rpki-client