This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json) Hash identifier: sjInnXqN/+NMCOvaxSI4kSi9y1iQZu8m97dfxgl4AtU= Subject key identifier: 1D:4A:35:0E:65:1A:F7:88:AC:EC:9E:A9:BD:A7:CD:00:B4:A4:AB:2E Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft Manifest number: 097E Signing time: Thu 18 Dec 2025 20:20:56 +0000 Manifest this update: Thu 18 Dec 2025 20:20:56 +0000 Manifest next update: Thu 25 Dec 2025 20:20:56 +0000 Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: 98vmEX3ZfEmI1EqPAcb0UyyRRtI6lnkmozi6fXQlN50=) 2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: hLWcPUyVJnyv7l6njaVAxEoaSy2MA1Ss+BiiJSefS0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Validity Not Before: Dec 18 20:20:56 2025 GMT Not After : Dec 25 20:20:56 2025 GMT Subject: CN=69446228-249c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:41:89:07:ab:c0:dc:58:85:87:ea:e9:6c:cc: 59:67:a8:c2:f2:85:b4:22:91:e9:80:d4:6b:e0:e0: 1b:28:b4:e7:7f:d6:9f:78:f7:a5:11:fa:48:b4:cf: f6:6e:04:76:dc:a2:a0:b2:d9:3c:ff:48:f0:15:f3: 48:98:48:74:8e:f6:84:6a:2e:eb:7d:c5:25:61:4c: e4:19:a6:2e:b3:d2:57:25:61:57:da:a7:81:4f:44: 70:bb:e5:50:5a:cd:fa:b2:48:28:09:4a:cf:a3:a3: 82:ab:60:80:51:75:ac:38:09:c2:c2:42:7b:17:36: c7:f4:31:db:0a:29:87:71:08:d0:5b:fe:23:e2:b9: 0b:81:d3:f6:bc:d3:77:f0:1a:d3:4d:3b:6f:83:6c: 1c:75:a9:61:40:68:41:e0:5e:d8:5f:4a:49:a4:7d: 2c:b0:0c:ef:63:f0:1f:3c:10:15:80:36:ae:ea:40: 6c:0c:e5:40:b3:c4:76:ba:e0:da:85:57:f6:fb:db: 43:c0:6b:c1:83:ac:47:d4:be:42:18:b9:6f:34:5f: b0:e6:7e:8a:de:2d:5f:e9:7c:0a:ec:e8:fa:4d:9f: bb:80:dd:86:ad:80:fb:cd:76:10:f8:9b:96:97:e5: 73:de:94:4d:a4:20:b1:ee:5b:f6:e7:43:0e:33:7a: de:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4A:35:0E:65:1A:F7:88:AC:EC:9E:A9:BD:A7:CD:00:B4:A4:AB:2E X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:45:d6:ee:4c:b8:a7:df:b4:d7:4c:f3:e6:e9:2f:1b:27:43: 22:3c:66:46:7c:ad:13:f2:63:91:81:61:8d:97:f7:7c:31:e3: aa:66:29:a3:f0:e7:06:8d:c6:13:f8:8a:0d:25:34:9d:8a:60: ab:91:4c:33:92:a8:f3:f0:18:5b:29:cd:1f:81:e0:59:19:f4: 6c:91:8f:07:09:c8:db:f6:19:b8:ac:21:02:e3:c9:47:74:43: 52:a3:7a:92:37:84:0a:be:db:b8:d4:7a:ad:d5:d7:0d:c6:d8: c4:50:21:60:50:2c:0e:43:1a:ac:09:56:4d:c4:74:fe:bc:5f: 9a:2a:5f:70:59:a4:72:27:27:9f:43:1f:ae:9c:68:bf:96:08: db:09:1f:4b:83:9d:5e:24:2d:46:b8:96:e5:3b:8f:61:93:91: 95:c7:12:3f:5c:70:b8:0d:5d:6e:2e:07:80:1d:dc:38:cc:9d: 50:52:30:dd:69:2c:f7:21:c3:7b:43:43:69:cf:2c:89:00:a2: 0e:45:66:a0:f3:92:2a:ef:cf:94:d1:5f:4d:8e:a8:b8:98:6f: bc:10:b8:57:d4:f3:ad:e0:1b:8a:81:91:66:f7:51:76:f2:46: 05:eb:a2:41:ce:19:07:09:c9:c3:03:79:0c:0f:ec:d3:50:ed: 21:95:a7:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDIyQjRBOUFBQTk4MkFCQ0IzOUY5Nzg5ODZCQ0I2Nzcw QjYwMkMxQTQwHhcNMjUxMjE4MjAyMDU2WhcNMjUxMjI1MjAyMDU2WjAYMRYwFAYD VQQDDA02OTQ0NjIyOC0yNDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9UGJB6vA3FiFh+rpbMxZZ6jC8oW0IpHpgNRr4OAbKLTnf9afePelEfpItM/2 bgR23KKgstk8/0jwFfNImEh0jvaEai7rfcUlYUzkGaYus9JXJWFX2qeBT0Rwu+VQ Ws36skgoCUrPo6OCq2CAUXWsOAnCwkJ7FzbH9DHbCimHcQjQW/4j4rkLgdP2vNN3 8BrTTTtvg2wcdalhQGhB4F7YX0pJpH0ssAzvY/AfPBAVgDau6kBsDOVAs8R2uuDa hVf2+9tDwGvBg6xH1L5CGLlvNF+w5n6K3i1f6XwK7Oj6TZ+7gN2GrYD7zXYQ+JuW l+Vz3pRNpCCx7lv250MOM3reRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1KNQ5l GveIrOyeqb2nzQC0pKsuMB8GA1UdIwQYMBaAFCK0qaqpgqvLOfl4mGvLZ3C2AsGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4czUtWGlZYTh0bmNMWUN3 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4 czUtWGlZYTh0bmNMWUN3YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGRdbuTLin37TXTPPm6S8bJ0MiPGZGfK0T8mORgWGNl/d8MeOqZimj 8OcGjcYT+IoNJTSdimCrkUwzkqjz8BhbKc0fgeBZGfRskY8HCcjb9hm4rCEC48lH dENSo3qSN4QKvtu41Hqt1dcNxtjEUCFgUCwOQxqsCVZNxHT+vF+aKl9wWaRyJyef Qx+unGi/lgjbCR9Lg51eJC1GuJblO49hk5GVxxI/XHC4DV1uLgeAHdw4zJ1QUjDd aSz3IcN7Q0NpzyyJAKIORWag85Iq78+U0V9Njqi4mG+8ELhX1POt4BuKgZFm91F2 8kYF66JBzhkHCcnDA3kMD+zTUO0hlaeY -----END CERTIFICATE-----Generated at Fri Dec 19 22:56:23 2025 by rpki-client