This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: 9DauO70d//kY21LhMusXd09xAyRL61dOjLlPtf3Z/No= Subject key identifier: 2B:B5:7F:7D:B8:E0:24:3C:AA:0F:0F:CE:FA:AF:A7:48:97:FA:DC:A2 Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 051E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 0514 Signing time: Mon 22 Dec 2025 22:43:01 +0000 Manifest this update: Mon 22 Dec 2025 22:43:00 +0000 Manifest next update: Mon 29 Dec 2025 22:43:00 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: UmQJ7evt+S9DV5k7eDvrCBIbeX2tOnwlsbw/EfORkZk=) 2: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: yUQWHT36J9pLE1kpKGBgRzyjB4VNhd4/HCHR7qeOtAQ=) 3: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: CU8ZA4/4TdlPTUdktMFTY7GCuwd/QCyrxC7+CMDATDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1310 (0x51e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Dec 22 22:43:00 2025 GMT Not After : Dec 29 22:43:00 2025 GMT Subject: CN=6949c975-8378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:ab:9e:53:75:42:0d:31:c4:fd:19:36:33: 53:13:19:90:75:9c:f4:b8:23:bf:b2:a8:da:70:84: d3:33:e3:5f:a1:d0:39:ad:28:c3:94:32:3b:de:aa: fa:ec:dc:18:51:58:eb:e5:b1:7e:e7:16:f7:72:01: 4e:a1:a2:2f:90:cc:82:89:fe:94:61:7a:60:fa:2e: 30:4d:b5:90:e7:9d:54:2b:cf:a6:c9:fd:25:e3:5e: 70:42:6d:8b:e2:8f:37:a7:c1:fe:06:fc:92:a5:c8: 45:78:80:40:f6:43:53:12:ee:c4:41:cc:be:a0:68: 9d:81:88:be:9c:66:4c:e9:48:e7:7c:08:f9:80:f9: 93:a7:8b:05:6f:54:ba:22:be:83:ac:f5:bb:90:13: 59:73:7a:06:58:2d:51:d4:38:93:f6:d3:e9:89:9c: 3f:9d:19:f2:ff:78:51:0a:5f:7d:db:c8:7d:ac:37: dc:74:5d:01:73:74:88:75:40:19:73:7a:4b:76:a8: 87:93:59:23:b1:f5:20:1c:23:e0:c8:2f:7b:cb:04: b7:03:0d:af:b0:d7:a6:c3:0d:c0:37:39:db:34:2a: 2e:3e:c5:d8:bb:6c:34:9a:83:f6:4a:95:a8:ef:84: 08:a1:56:54:97:4b:af:9c:24:d6:61:14:6e:84:79: d0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B5:7F:7D:B8:E0:24:3C:AA:0F:0F:CE:FA:AF:A7:48:97:FA:DC:A2 X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:c7:2e:65:96:bd:a2:bf:c1:5d:4a:5a:fc:fc:a2:f7:9d:82: 38:b8:0a:10:69:71:d4:4d:3a:6d:22:14:8d:56:37:f8:81:b7: 90:27:15:49:a8:81:da:67:e3:d4:19:39:08:21:e4:de:ba:69: f4:27:ad:64:d2:f4:55:2e:db:7e:b9:31:b8:b1:bd:05:ff:6c: 4d:4c:b1:a5:15:c5:da:fe:1a:bb:b4:fc:7a:ec:3f:55:dc:fd: bd:e0:a7:e9:c5:84:86:16:d7:eb:37:5e:b1:3d:a2:26:c0:d5: 68:22:d8:08:5b:8f:d5:39:34:32:39:0a:5d:06:08:89:11:d8: ba:2b:84:f0:cd:ef:ee:36:a2:d4:b3:53:38:d7:17:92:70:ad: db:7e:b9:52:e8:f8:78:b4:91:c0:1b:d0:e6:2c:57:3f:64:21: 0c:80:b4:62:9f:ba:dc:95:1d:5c:ce:3c:78:8b:0b:05:04:eb: 4c:bf:de:04:15:dc:77:5d:d9:1e:c7:26:f4:89:c1:b9:1a:c1: 21:6c:df:01:a3:26:dc:c1:d6:07:43:20:4f:3b:42:10:4f:0a: 02:12:81:d7:c4:1d:fd:85:c9:bc:1d:9e:a5:03:39:dc:73:f6: e9:7f:9c:a8:ef:c9:12:96:2e:18:af:d8:10:03:da:57:d0:97: a0:14:56:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjUxMjIyMjI0MzAwWhcNMjUxMjI5MjI0MzAwWjAYMRYwFAYD VQQDDA02OTQ5Yzk3NS04Mzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfqrnlN1Qg0xxP0ZNjNTExmQdZz0uCO/sqjacITTM+NfodA5rSjDlDI73qr6 7NwYUVjr5bF+5xb3cgFOoaIvkMyCif6UYXpg+i4wTbWQ551UK8+myf0l415wQm2L 4o83p8H+BvySpchFeIBA9kNTEu7EQcy+oGidgYi+nGZM6UjnfAj5gPmTp4sFb1S6 Ir6DrPW7kBNZc3oGWC1R1DiT9tPpiZw/nRny/3hRCl9928h9rDfcdF0Bc3SIdUAZ c3pLdqiHk1kjsfUgHCPgyC97ywS3Aw2vsNemww3ANznbNCouPsXYu2w0moP2SpWo 74QIoVZUl0uvnCTWYRRuhHnQMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCu1f324 4CQ8qg8Pzvqvp0iX+tyiMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxxy5llr2iv8FdSlr8/KL3nYI4uAoQaXHUTTptIhSNVjf4gbeQJxVJ qIHaZ+PUGTkIIeTeumn0J61k0vRVLtt+uTG4sb0F/2xNTLGlFcXa/hq7tPx67D9V 3P294KfpxYSGFtfrN16xPaImwNVoItgIW4/VOTQyOQpdBgiJEdi6K4Twze/uNqLU s1M41xeScK3bfrlS6Ph4tJHAG9DmLFc/ZCEMgLRin7rclR1czjx4iwsFBOtMv94E Fdx3Xdkexyb0icG5GsEhbN8BoybcwdYHQyBPO0IQTwoCEoHXxB39hcm8HZ6lAznc c/bpf5yo78kSli4Yr9gQA9pX0JegFFYB -----END CERTIFICATE-----Generated at Tue Dec 23 16:46:23 2025 by rpki-client