This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: irKJP+aWQEdvmrdf+FE1hKNL9rj471HaU3CALml4oKo= Subject key identifier: 05:8A:96:8C:33:75:0A:D0:5F:10:24:69:62:E1:15:D3:1B:D1:F4:DC Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 033F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 033A Signing time: Tue 23 Dec 2025 00:01:22 +0000 Manifest this update: Tue 23 Dec 2025 00:01:21 +0000 Manifest next update: Tue 30 Dec 2025 00:01:21 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: dNps1BAudlwwp2J37j3+boyyWp2enbTiqit/E04fTy0=) 2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: fawgiTLHzpx5EX5PXRfNoSCoBTl9+GYe2SP8BVC/WiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 831 (0x33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: Dec 23 00:01:21 2025 GMT Not After : Dec 30 00:01:21 2025 GMT Subject: CN=6949dbd1-0c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0a:54:f0:66:e6:7c:36:87:6f:9e:ab:cf:6d: 2e:15:96:af:bb:52:43:34:f9:42:52:85:9e:e0:5c: 8c:49:7e:b8:4c:82:76:47:30:75:ba:c9:58:89:bb: b9:68:dd:5b:bd:6f:37:9d:e4:dd:32:47:ce:41:bf: 63:78:fd:e8:76:97:3f:9d:69:24:a6:fa:ca:2c:ed: 4f:df:a6:4a:00:7f:7b:11:2e:31:93:6e:73:51:86: fd:a2:86:df:5a:b6:a8:3e:a3:f6:33:6d:2d:48:2e: 29:8b:03:86:83:fc:c3:33:ed:3d:82:6c:e1:40:03: 2f:e6:59:0e:68:e1:46:8a:18:81:9b:1e:7d:68:9c: f9:cf:6e:3e:d9:d9:87:02:b3:a2:29:88:01:25:ff: 6d:f5:5b:9f:37:e8:2a:b5:fa:84:81:14:8a:ca:3c: be:69:03:7b:3d:20:85:0b:7a:d6:44:fc:5e:8b:85: 11:7e:09:1d:67:d1:4d:0b:e7:1a:eb:be:9c:ac:7b: 13:65:fc:26:d3:e2:e7:19:94:39:c7:e5:5e:4f:9e: 6b:77:7e:da:d6:c1:63:0b:02:21:7e:6e:55:93:d4: 6c:ed:25:28:c9:dd:1d:57:5c:30:f7:47:ef:92:e0: 24:46:fe:96:7c:07:4e:f1:7a:1c:a0:5e:79:1c:dd: b1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8A:96:8C:33:75:0A:D0:5F:10:24:69:62:E1:15:D3:1B:D1:F4:DC X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:00:c8:da:fe:ec:dc:3e:f9:f3:ed:e5:03:46:b5:87:eb:98: 90:99:6d:17:f9:fa:2b:3c:d2:28:4a:66:6f:28:98:bd:46:cc: a6:47:f5:93:6c:55:cd:c2:a0:04:3c:d2:4b:02:59:55:1f:cd: 19:58:e3:71:5d:97:85:dc:b1:a9:20:1b:1f:cd:ee:44:be:17: 05:41:d7:8d:45:52:20:3e:3e:f1:9c:bc:76:44:7a:4b:04:87: 10:ff:90:7c:78:b8:30:f0:86:64:f1:b3:3b:69:ba:f4:84:2e: 7c:3c:f0:e3:61:40:f0:43:36:3c:8b:b4:78:d8:97:d8:a6:10: 56:61:6a:70:35:0e:d9:3c:03:bd:ba:45:9b:b6:49:b6:8d:88: 5c:0c:bf:cb:e4:13:2d:0e:39:c4:af:be:8e:13:e7:c4:c3:12: b7:83:39:52:f1:27:3e:8e:8a:62:18:ab:ae:c6:fe:ea:56:7a: 72:9d:6d:91:0b:1d:7b:c3:45:bc:70:86:80:27:f6:cd:93:3f: ed:c8:a7:f2:08:4b:43:84:26:17:46:6a:d2:18:3b:57:8d:ee: cd:43:92:97:6c:76:d9:ce:96:26:aa:5d:9d:57:98:91:53:13: 3b:e1:87:b9:15:78:54:a6:07:7f:40:f7:35:a8:7b:da:24:80: b4:41:af:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjUxMjIzMDAwMTIxWhcNMjUxMjMwMDAwMTIxWjAYMRYwFAYD VQQDDA02OTQ5ZGJkMS0wYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzApU8GbmfDaHb56rz20uFZavu1JDNPlCUoWe4FyMSX64TIJ2RzB1uslYibu5 aN1bvW83neTdMkfOQb9jeP3odpc/nWkkpvrKLO1P36ZKAH97ES4xk25zUYb9oobf WraoPqP2M20tSC4piwOGg/zDM+09gmzhQAMv5lkOaOFGihiBmx59aJz5z24+2dmH ArOiKYgBJf9t9VufN+gqtfqEgRSKyjy+aQN7PSCFC3rWRPxei4URfgkdZ9FNC+ca 676crHsTZfwm0+LnGZQ5x+VeT55rd37a1sFjCwIhfm5Vk9Rs7SUoyd0dV1ww90fv kuAkRv6WfAdO8XocoF55HN2x1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWKlowz dQrQXxAkaWLhFdMb0fTcMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyAMja/uzcPvnz7eUDRrWH65iQmW0X+forPNIoSmZvKJi9RsymR/WT bFXNwqAEPNJLAllVH80ZWONxXZeF3LGpIBsfze5EvhcFQdeNRVIgPj7xnLx2RHpL BIcQ/5B8eLgw8IZk8bM7abr0hC58PPDjYUDwQzY8i7R42JfYphBWYWpwNQ7ZPAO9 ukWbtkm2jYhcDL/L5BMtDjnEr76OE+fEwxK3gzlS8Sc+jopiGKuuxv7qVnpynW2R Cx17w0W8cIaAJ/bNkz/tyKfyCEtDhCYXRmrSGDtXje7NQ5KXbHbZzpYmql2dV5iR UxM74Ye5FXhUpgd/QPc1qHvaJIC0Qa8r -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:38 2025 by rpki-client