This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json) Hash identifier: UzZp/PrrlCtiIkoRfQ4rHeuoX9AnzMOS1S2A50mmKvE= Subject key identifier: DB:55:9C:21:9B:92:CB:75:2E:12:0C:0F:58:E5:FB:76:E1:C2:FE:D3 Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 138B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft Manifest number: 132D Signing time: Tue 02 Dec 2025 16:46:15 +0000 Manifest this update: Tue 02 Dec 2025 16:46:14 +0000 Manifest next update: Tue 09 Dec 2025 16:46:14 +0000 Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: Ecobrxpy8X9oTQmUQ1a03Ck9BYKePsi4X/kXPc65Ox8=) 2: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: 7cgMEZO8tN+1Cmn/CZonBr3at8tPmq+bBhIi3Hlmo8w=) 3: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: Wnr6Nu+wn4KpT3jxG77VWtuMf2NiqHg0vBMGp2AER8s=) 4: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: nCv8KSq1x9Ijvp8OSX/9bUAYQko+S3mPDE0oXqFbbRA=) 5: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: Yr7221/AjrFVZuk28SsMWsCKf7jgwJUz8UL6k6tO024=) 6: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: 5H1pM+kreN4Oi8C8HZm8e4S8ShHr8LgmiJJ+cKgYRHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 16:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5003 (0x138b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Dec 2 16:46:14 2025 GMT Not After : Dec 9 16:46:14 2025 GMT Subject: CN=692f17d7-7e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:a8:1d:83:73:6f:63:69:ed:e6:12:1b:1c: fc:56:43:36:43:6a:e9:f3:94:dd:6c:dd:8a:3d:f1: 35:91:83:c2:e7:70:16:c1:8f:19:1d:a1:fb:33:7a: 8b:63:49:ed:3a:82:f0:1e:97:73:4d:93:2d:3c:df: d6:f0:a4:f2:75:42:2a:a1:e7:c2:d0:25:be:c1:83: 53:c9:be:64:f5:98:58:ef:9f:12:9a:1a:9e:9d:63: ac:6f:c6:79:29:fb:40:1a:a8:64:04:23:1a:af:c3: 22:81:73:cc:f1:84:56:6e:92:bc:ae:c8:8f:a6:91: 98:52:fd:b5:32:88:b7:6d:7d:a3:7a:91:08:0d:46: 5a:dd:14:33:b6:4a:79:c2:20:34:24:d3:9d:15:4a: 67:22:e6:36:c9:af:02:1c:49:e4:8f:e8:f6:b3:99: ae:94:8c:08:73:d3:9d:48:19:82:f7:22:ef:bf:28: 0d:cb:38:a3:d7:aa:75:ab:a2:5a:b5:73:2a:93:a9: aa:4b:f4:30:e0:0f:2f:80:4b:b1:5a:75:5d:31:94: 29:2b:d5:f1:9c:b9:cc:6c:94:5e:39:68:02:7b:bb: 02:6d:2d:af:74:6f:9e:9c:66:e1:b5:d9:d6:cc:a7: fe:d3:59:a4:11:6a:7b:83:f1:f0:34:56:ed:96:75: 5b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:55:9C:21:9B:92:CB:75:2E:12:0C:0F:58:E5:FB:76:E1:C2:FE:D3 X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d9:cd:24:ab:f9:f5:7d:64:66:08:c8:e8:40:1f:e7:2f:2a: 4f:ad:7a:a8:e8:05:d7:fe:9b:42:19:2a:65:5c:5a:c4:0e:90: 99:a3:aa:07:4b:a0:53:33:15:6d:b6:84:7d:20:2d:ff:4e:7e: e8:e4:61:dc:e5:aa:6f:70:da:25:03:f0:f6:58:5d:f9:a4:f4: de:2f:d0:42:80:a2:5d:1b:9f:e1:8d:f4:bd:ef:6e:a3:cc:d3: d8:29:44:09:af:e6:54:ce:88:c9:23:3b:4e:f2:3a:ad:23:0f: f0:52:e7:ea:e4:d1:d9:6f:db:4d:bb:d5:be:13:bf:c0:54:de: 8d:39:67:44:c8:60:c4:c8:e2:b9:38:d0:c7:f9:d4:ed:ca:02: 8b:62:ce:bd:00:72:2c:ca:78:ed:35:3c:e5:62:be:84:66:2f: 88:9f:35:3d:f2:63:b4:6d:5c:6d:66:9a:2b:93:f4:3d:7b:80: 35:5d:be:74:39:83:07:7d:5e:af:9f:89:f0:da:41:18:b5:d9: 6f:e4:75:bb:2d:a0:81:65:fd:5f:06:f3:4d:b7:91:20:b2:d4: 6e:1b:7a:5d:69:6b:ef:d1:c6:b2:06:c8:e6:d1:68:f4:a0:bf: 7d:ba:c3:0e:1e:ab:56:6f:e9:c2:e2:3e:ea:25:41:ff:85:07: 6b:22:eb:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjUxMjAyMTY0NjE0WhcNMjUxMjA5MTY0NjE0WjAYMRYwFAYD VQQDEw02OTJmMTdkNy03ZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwk+oHYNzb2Np7eYSGxz8VkM2Q2rp85TdbN2KPfE1kYPC53AWwY8ZHaH7M3qL Y0ntOoLwHpdzTZMtPN/W8KTydUIqoefC0CW+wYNTyb5k9ZhY758SmhqenWOsb8Z5 KftAGqhkBCMar8MigXPM8YRWbpK8rsiPppGYUv21Moi3bX2jepEIDUZa3RQztkp5 wiA0JNOdFUpnIuY2ya8CHEnkj+j2s5mulIwIc9OdSBmC9yLvvygNyzij16p1q6Ja tXMqk6mqS/Qw4A8vgEuxWnVdMZQpK9XxnLnMbJReOWgCe7sCbS2vdG+enGbhtdnW zKf+01mkEWp7g/HwNFbtlnVbMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtVnCGb kst1LhIMD1jl+3bhwv7TMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8wRTA4MkU3MkNEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0oz SERad1pPSUVtMmlwQThjYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA52c0kq/n1fWRmCMjoQB/nLypPrXqo6AXX/ptCGSplXFrEDpCZo6oH S6BTMxVttoR9IC3/Tn7o5GHc5apvcNolA/D2WF35pPTeL9BCgKJdG5/hjfS9726j zNPYKUQJr+ZUzojJIztO8jqtIw/wUufq5NHZb9tNu9W+E7/AVN6NOWdEyGDEyOK5 ONDH+dTtygKLYs69AHIsynjtNTzlYr6EZi+InzU98mO0bVxtZpork/Q9e4A1Xb50 OYMHfV6vn4nw2kEYtdlv5HW7LaCBZf1fBvNNt5EgstRuG3pdaWvv0cayBsjm0Wj0 oL99usMOHqtWb+nC4j7qJUH/hQdrIuvb -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:14 2025 by rpki-client