This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: Db774/vojWR2NB6aMIKwDaDDo828vVuEcCqnJXjoLP8= Subject key identifier: 89:4F:9F:6E:5A:6A:E8:D0:E4:31:DB:76:C9:52:DE:57:23:06:87:51 Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 051A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 0510 Signing time: Sun 14 Dec 2025 22:56:15 +0000 Manifest this update: Sun 14 Dec 2025 22:56:14 +0000 Manifest next update: Sun 21 Dec 2025 22:56:14 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: SYkG0DXhzQWjTYiV05Je9z6T4OdFABV332/ieG4gSq4=) 2: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: CU8ZA4/4TdlPTUdktMFTY7GCuwd/QCyrxC7+CMDATDo=) 3: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: yUQWHT36J9pLE1kpKGBgRzyjB4VNhd4/HCHR7qeOtAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Dec 14 22:56:14 2025 GMT Not After : Dec 21 22:56:14 2025 GMT Subject: CN=693f408f-684e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:89:05:37:d5:34:2d:82:d6:f2:0d:79:c2: 67:3a:cf:e2:bf:e7:ce:61:e9:1a:be:4d:15:6f:79: 5a:fd:ff:e2:27:57:bb:21:9b:1e:a7:fe:00:3d:4d: 25:16:fe:5a:7a:8a:26:7a:73:39:57:d6:f4:52:c3: 75:fa:d3:1b:4e:fa:ed:a3:a8:e5:ff:e3:df:00:3e: f0:b1:ee:01:5d:b8:9b:a9:8e:5c:d4:23:9a:cd:c6: 15:f1:25:f1:7d:67:a8:44:3f:d5:29:71:06:b2:62: 6d:5a:f8:69:36:53:b5:ce:90:07:53:81:33:22:e0: e3:74:05:3e:23:21:90:a5:4d:e4:69:b9:7e:65:76: e0:1d:a0:f0:3c:c2:77:63:4d:f2:d7:57:43:33:3d: 9e:a8:05:8f:a1:e7:b8:54:ff:58:a2:98:dd:1c:a7: 20:65:71:3a:9b:8a:06:f5:90:40:53:34:fb:9f:dd: 58:49:b0:a7:21:a9:0f:b2:6a:10:48:a1:fb:e2:0d: 36:1e:17:e7:f7:b7:9b:3c:d1:82:d5:58:c3:51:f4: 9f:ae:21:2a:e2:da:fc:04:84:78:e0:8d:7f:35:5e: 7f:90:3f:8f:86:f4:f5:1b:01:ad:d4:e5:d6:2b:4f: 6c:25:ef:e0:18:65:1e:a9:65:13:d2:e8:61:0b:1f: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4F:9F:6E:5A:6A:E8:D0:E4:31:DB:76:C9:52:DE:57:23:06:87:51 X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f7:6a:fc:c3:f9:b2:0a:32:ee:8b:68:95:ac:af:ef:d7:ca: 4c:67:80:6e:a5:03:dc:5e:96:d3:8e:cf:e6:4d:8b:d4:53:2a: 66:37:2f:8f:81:12:40:26:a0:1c:1f:00:f3:98:ea:39:cf:75: ef:20:52:32:08:63:df:fa:2b:05:f2:d5:03:9f:ed:70:14:57: 61:71:75:9b:a7:1e:16:ca:c9:7b:b6:73:db:19:f0:b7:a5:bf: 14:47:7c:f2:be:17:96:03:c4:42:65:01:4d:18:5d:3f:47:e0: 6b:6c:11:3e:71:94:64:df:f2:ac:e3:70:93:42:f6:18:f6:ab: 96:13:87:48:7d:d6:3c:da:49:21:56:23:56:95:f6:fb:c8:73: 57:42:20:65:61:29:df:74:60:5e:57:82:0d:95:11:18:8d:a7: 5a:28:0b:7b:1d:8b:ef:e7:3b:42:8e:2c:11:5c:30:5d:ae:cd: 32:6c:3c:d6:f0:cc:e8:77:f5:ba:06:88:24:1d:4d:59:a6:fd: fc:92:be:8b:38:e8:54:6f:c6:a2:81:52:5b:33:80:0f:c6:0c: b6:4e:8e:dc:76:66:12:b7:9f:a7:f2:71:84:72:b3:85:fc:b1: d6:32:cc:d5:6f:6b:5f:97:d0:14:87:39:60:be:a6:52:45:d4: 1d:58:ef:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjUxMjE0MjI1NjE0WhcNMjUxMjIxMjI1NjE0WjAYMRYwFAYD VQQDDA02OTNmNDA4Zi02ODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCWJBTfVNC2C1vINecJnOs/iv+fOYekavk0Vb3la/f/iJ1e7IZsep/4APU0l Fv5aeoomenM5V9b0UsN1+tMbTvrto6jl/+PfAD7wse4BXbibqY5c1COazcYV8SXx fWeoRD/VKXEGsmJtWvhpNlO1zpAHU4EzIuDjdAU+IyGQpU3kabl+ZXbgHaDwPMJ3 Y03y11dDMz2eqAWPoee4VP9YopjdHKcgZXE6m4oG9ZBAUzT7n91YSbCnIakPsmoQ SKH74g02Hhfn97ebPNGC1VjDUfSfriEq4tr8BIR44I1/NV5/kD+PhvT1GwGt1OXW K09sJe/gGGUeqWUT0uhhCx/5pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlPn25a aujQ5DHbdslS3lcjBodRMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr92r8w/myCjLui2iVrK/v18pMZ4BupQPcXpbTjs/mTYvUUypmNy+P gRJAJqAcHwDzmOo5z3XvIFIyCGPf+isF8tUDn+1wFFdhcXWbpx4Wysl7tnPbGfC3 pb8UR3zyvheWA8RCZQFNGF0/R+BrbBE+cZRk3/Ks43CTQvYY9quWE4dIfdY82kkh ViNWlfb7yHNXQiBlYSnfdGBeV4INlREYjadaKAt7HYvv5ztCjiwRXDBdrs0ybDzW 8Mzod/W6BogkHU1Zpv38kr6LOOhUb8aigVJbM4APxgy2To7cdmYSt5+n8nGEcrOF /LHWMszVb2tfl9AUhzlgvqZSRdQdWO9P -----END CERTIFICATE-----Generated at Tue Dec 16 12:52:42 2025 by rpki-client