This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json) Hash identifier: PTocP/S7ZpkWu2pCfAW4JF3dAO3UTN/27mMG42q4hvE= Subject key identifier: 40:19:83:B2:53:BE:B8:DF:CB:E7:53:E4:37:B5:48:9B:8F:15:6A:A9 Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0B9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft Manifest number: 0B97 Signing time: Mon 22 Dec 2025 18:31:31 +0000 Manifest this update: Mon 22 Dec 2025 18:31:31 +0000 Manifest next update: Mon 29 Dec 2025 18:31:31 +0000 Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: E5JDnb/IroWveYlRRTSOgz08iVdcO0FxPydQa9WizFg=) 2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: Q4J9l++n+la5Zfxccf3dc2lEQlGumKMJ7Sd1OPrz7gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2975 (0xb9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F, serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: Dec 22 18:31:31 2025 GMT Not After : Dec 29 18:31:31 2025 GMT Subject: CN=69498e83-2e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:c7:b9:80:38:f8:19:96:20:96:cb:d2:45: 34:76:85:35:ea:b3:c0:41:65:37:20:57:07:7f:0a: 11:74:b2:55:03:03:20:ba:c6:2a:38:e2:3e:14:59: 0d:f8:cb:a7:11:52:51:3f:97:26:7d:5b:39:c7:36: 91:50:1a:88:7a:27:ef:86:93:03:13:56:8d:cd:42: de:66:e3:4f:bc:e5:26:e6:e3:22:a1:54:e0:02:72: 18:4b:80:07:15:bb:32:5a:c0:dd:2a:13:5c:cb:b3: ad:db:74:b1:31:7d:3c:04:65:77:b0:94:8f:57:90: 9b:d7:94:ef:54:fb:36:a7:c7:44:f1:30:79:1d:0a: 7b:16:fc:b7:59:38:fb:9b:0e:15:be:bf:cd:58:64: 9d:29:51:fa:8d:82:8e:9d:e1:78:b7:80:c9:af:06: 90:ee:27:43:07:ec:d9:52:80:31:5c:01:5d:9c:31: bd:94:73:48:23:4f:88:69:69:95:db:db:21:25:3f: 53:cf:fc:7d:74:69:9d:e7:2e:86:50:84:e3:32:75: c4:4d:ba:e1:cf:92:7d:7e:85:85:4c:dd:87:42:82: f5:7e:71:00:87:19:eb:1b:7b:c5:d3:21:4d:8a:b7: b2:63:03:65:61:fc:98:08:d4:5d:72:f7:90:95:f7: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:19:83:B2:53:BE:B8:DF:CB:E7:53:E4:37:B5:48:9B:8F:15:6A:A9 X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:45:1e:52:5f:49:cc:49:94:25:fa:5e:61:64:db:0c:c5:cb: c9:76:74:01:64:94:a2:74:99:41:0f:33:e4:17:b0:fa:73:0a: 49:c2:49:0d:bb:bf:d3:3f:4c:ae:bf:c0:92:1e:02:f6:93:17: 36:9e:28:71:04:f6:48:4e:a7:fe:7f:0a:44:0c:12:15:00:a0: 09:61:de:69:fd:db:f8:dd:8f:36:b8:ec:40:1c:69:2f:59:77: a5:f7:8d:3e:74:96:83:f6:44:5d:33:b8:3b:29:40:11:92:92: 34:a1:80:92:d9:f3:89:32:34:0a:80:72:5a:ef:46:ab:6c:ce: aa:27:87:23:e7:c4:b7:1d:f6:c7:d8:24:8d:35:a1:72:a2:0b: 7b:39:b3:b7:be:ae:db:de:b8:5b:3b:44:fb:9c:c3:bf:9e:92: 23:af:0e:e5:38:e5:fa:21:cf:83:11:f3:75:c9:01:9b:bf:a4: 10:6d:cc:6e:f1:28:94:2d:23:df:91:1a:60:92:2d:58:31:e4: 7b:36:61:c4:b4:19:fd:a8:72:14:43:c0:8d:96:9b:f4:4c:c3: 40:5b:18:45:2b:9c:da:d3:6c:19:78:3d:7e:f3:42:96:5f:d3: 3d:4d:f3:f4:10:f4:37:f6:d2:f3:e5:8a:2a:54:9e:e8:1b:09: b4:72:75:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjUxMjIyMTgzMTMxWhcNMjUxMjI5MTgzMTMxWjAYMRYwFAYD VQQDDA02OTQ5OGU4My0yZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApezHuYA4+BmWIJbL0kU0doU16rPAQWU3IFcHfwoRdLJVAwMgusYqOOI+FFkN +MunEVJRP5cmfVs5xzaRUBqIeifvhpMDE1aNzULeZuNPvOUm5uMioVTgAnIYS4AH FbsyWsDdKhNcy7Ot23SxMX08BGV3sJSPV5Cb15TvVPs2p8dE8TB5HQp7Fvy3WTj7 mw4Vvr/NWGSdKVH6jYKOneF4t4DJrwaQ7idDB+zZUoAxXAFdnDG9lHNII0+IaWmV 29shJT9Tz/x9dGmd5y6GUITjMnXETbrhz5J9foWFTN2HQoL1fnEAhxnrG3vF0yFN ireyYwNlYfyYCNRdcveQlfdxqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAZg7JT vrjfy+dT5De1SJuPFWqpMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP dEdGVlpiQWhEVlIxeFJpS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAERR5SX0nMSZQl+l5hZNsMxcvJdnQBZJSidJlBDzPkF7D6cwpJwkkN u7/TP0yuv8CSHgL2kxc2nihxBPZITqf+fwpEDBIVAKAJYd5p/dv43Y82uOxAHGkv WXel940+dJaD9kRdM7g7KUARkpI0oYCS2fOJMjQKgHJa70arbM6qJ4cj58S3HfbH 2CSNNaFyogt7ObO3vq7b3rhbO0T7nMO/npIjrw7lOOX6Ic+DEfN1yQGbv6QQbcxu 8SiULSPfkRpgki1YMeR7NmHEtBn9qHIUQ8CNlpv0TMNAWxhFK5za02wZeD1+80KW X9M9TfP0EPQ39tLz5YoqVJ7oGwm0cnWM -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:20 2025 by rpki-client