This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft File: ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft (raw, json) Hash identifier: X079K/ujjGR7cH3Avkq4E83CjcnHpZOmJ9nEffI+6GE= Subject key identifier: 34:DA:4A:28:2C:51:C2:7F:2B:00:DA:45:90:CA:E2:BC:B9:6E:EB:05 Authority key identifier: 8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54 Certificate issuer: /CN=A9167671/serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft Manifest number: 0F Signing time: Wed 03 Dec 2025 06:00:59 +0000 Manifest this update: Wed 03 Dec 2025 06:00:58 +0000 Manifest next update: Wed 10 Dec 2025 06:00:58 +0000 Files and hashes: 1: ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl (hash: ATedaeSjsKT6jd6eLaMI8LxBLIu9JcaoCl1N5SfAdB8=) 2: 42AD4128C0FD11F0883D987DC4F9AE02.roa (hash: B3E19cErq0rxkUxEs2ukfuNM5Pd8kiV4OJ4LzCkwHF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167671, serialNumber=8A57717E62E115BAD0AF167942235B01B9B1F354 Validity Not Before: Dec 3 06:00:58 2025 GMT Not After : Dec 10 06:00:58 2025 GMT Subject: CN=692fd21a-f75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:13:27:07:07:5b:23:cb:4e:be:7c:3a:47:60: e8:b7:c5:db:fd:12:4b:97:36:4e:fb:7f:74:c8:0e: 2a:79:73:32:4e:98:9a:d3:e1:f0:2a:96:4e:73:f6: e7:9f:19:b4:c8:a5:44:c9:1b:fd:15:85:01:3a:e8: ca:79:ad:22:a4:48:88:e1:2d:6b:54:7c:ce:8e:a5: 21:aa:2e:d2:f5:b6:68:de:1a:ea:34:09:8a:c3:0a: 74:9c:3d:44:22:74:be:f5:ab:85:d0:c4:25:7f:85: d9:76:0a:74:65:e3:f8:e3:a7:91:fc:78:1a:3c:7a: 30:17:3a:d3:de:6c:77:5a:bb:07:6b:70:93:e0:87: 87:0a:b6:4c:f8:98:c5:22:4c:03:e9:46:a3:cb:39: da:6f:74:aa:51:3d:73:f6:d8:f2:f5:8e:71:59:a7: 34:a0:6f:f5:67:4d:6b:92:f8:b3:2e:3d:d5:94:7a: e8:35:a0:2d:46:85:a6:17:0c:c4:7e:29:e0:52:c6: af:7c:03:63:f6:83:69:95:be:70:45:7c:cf:2b:f1: b4:15:94:13:c3:c9:42:53:eb:f2:dc:4f:e3:03:74: 4a:ab:4c:eb:89:1e:07:2b:3a:a4:42:06:73:60:fb: 67:b7:f4:8b:26:2b:71:56:ea:d8:af:70:32:28:dd: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DA:4A:28:2C:51:C2:7F:2B:00:DA:45:90:CA:E2:BC:B9:6E:EB:05 X509v3 Authority Key Identifier: keyid:8A:57:71:7E:62:E1:15:BA:D0:AF:16:79:42:23:5B:01:B9:B1:F3:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ildxfmLhFbrQrxZ5QiNbAbmx81Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/460B0804BE1F11F095435D6EC4F9AE02/ildxfmLhFbrQrxZ5QiNbAbmx81Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1f:b7:12:6c:1a:f2:aa:cd:5f:ba:9f:88:cf:38:b4:82:65: 8d:9f:1f:f3:ce:71:05:56:7a:70:e4:0e:57:f5:e6:7d:1f:58: ec:bf:3a:79:c3:84:76:7d:37:ee:87:56:8e:02:66:83:be:b8: b5:67:a2:0d:24:21:2e:d2:2c:66:d7:63:00:48:28:da:0e:9f: d0:d9:24:44:7f:fa:d7:f7:b1:ec:7e:4c:de:fe:d2:55:cf:e7: bf:e0:d6:1d:16:6e:67:85:e8:1d:65:46:4e:75:a9:cc:3c:12: 6c:83:63:c3:be:07:b4:ef:fc:c9:58:33:3a:74:29:04:b5:b1: 89:0b:ec:a5:46:9e:45:2c:1d:b3:43:cc:28:9a:06:fa:38:18: 37:c5:57:83:46:23:62:c6:f4:e2:fb:26:57:29:89:8c:49:b3: cd:cd:ac:6d:9b:73:eb:fa:bb:c1:4f:f5:a2:33:eb:39:a0:82: 07:15:c9:f8:fd:ca:39:eb:e0:77:4f:e3:29:3d:91:0c:89:ee: 46:7f:e9:6b:8b:83:b5:e8:81:f3:22:47:76:08:ab:8e:27:d8: 23:e2:34:d6:39:05:70:c9:e5:4f:1e:ec:19:a2:02:f6:06:0b: 57:a9:27:ec:ca:32:f6:5f:53:63:77:69:cd:93:ed:c1:a8:5e: a6:03:62:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzY3MTExMC8GA1UEBRMoOEE1NzcxN0U2MkUxMTVCQUQwQUYxNjc5NDIyMzVCMDFC OUIxRjM1NDAeFw0yNTEyMDMwNjAwNThaFw0yNTEyMTAwNjAwNThaMBgxFjAUBgNV BAMTDTY5MmZkMjFhLWY3NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdEycHB1sjy06+fDpHYOi3xdv9EkuXNk77f3TIDip5czJOmJrT4fAqlk5z9uef GbTIpUTJG/0VhQE66Mp5rSKkSIjhLWtUfM6OpSGqLtL1tmjeGuo0CYrDCnScPUQi dL71q4XQxCV/hdl2CnRl4/jjp5H8eBo8ejAXOtPebHdauwdrcJPgh4cKtkz4mMUi TAPpRqPLOdpvdKpRPXP22PL1jnFZpzSgb/VnTWuS+LMuPdWUeug1oC1GhaYXDMR+ KeBSxq98A2P2g2mVvnBFfM8r8bQVlBPDyUJT6/LcT+MDdEqrTOuJHgcrOqRCBnNg +2e39IsmK3FW6tivcDIo3W9NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNNpKKCxR wn8rANpFkMrivLlu6wUwHwYDVR0jBBgwFoAUildxfmLhFbrQrxZ5QiNbAbmx81Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NjcxLzQ2MEIwODA0QkUx RjExRjA5NTQzNUQ2RUM0RjlBRTAyL2lsZHhmbUxoRmJyUXJ4WjVRaU5iQWJteDgx US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWxkeGZtTGhGYnJRcnhaNVFpTmJBYm14ODFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 NjcxLzQ2MEIwODA0QkUxRjExRjA5NTQzNUQ2RUM0RjlBRTAyL2lsZHhmbUxoRmJy UXJ4WjVRaU5iQWJteDgxUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJIftxJsGvKqzV+6n4jPOLSCZY2fH/POcQVWenDkDlf15n0fWOy/OnnD hHZ9N+6HVo4CZoO+uLVnog0kIS7SLGbXYwBIKNoOn9DZJER/+tf3sex+TN7+0lXP 57/g1h0WbmeF6B1lRk51qcw8EmyDY8O+B7Tv/MlYMzp0KQS1sYkL7KVGnkUsHbND zCiaBvo4GDfFV4NGI2LG9OL7JlcpiYxJs83NrG2bc+v6u8FP9aIz6zmgggcVyfj9 yjnr4HdP4yk9kQyJ7kZ/6WuLg7XogfMiR3YIq44n2CPiNNY5BXDJ5U8e7BmiAvYG C1epJ+zKMvZfU2N3ac2T7cGoXqYDYg0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:16 2025 by rpki-client