This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft File: It8xdbHdMjEX4MGfP21qHncfnB8.mft (raw, json) Hash identifier: N+szydUmqoe88miXFyE0N9txVxFhW1FkoOTN2B0MJZ4= Subject key identifier: DA:3F:7B:AB:81:F4:05:88:96:93:68:BC:D1:EE:AC:90:19:6A:65:77 Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft Manifest number: 0C96 Signing time: Mon 22 Dec 2025 17:59:57 +0000 Manifest this update: Mon 22 Dec 2025 17:59:57 +0000 Manifest next update: Mon 29 Dec 2025 17:59:57 +0000 Files and hashes: 1: It8xdbHdMjEX4MGfP21qHncfnB8.crl (hash: nNX6aRdHovqrVXEk+yywvkYIsvGgWkTEhgIPMMIh+W4=) 2: D725AC5C091411EABBFC8739C4F9AE02.roa (hash: jTKb6UqoxVKwoNueFvf3BZWhxggm3hq3OfDJsuiV3HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Dec 22 17:59:57 2025 GMT Not After : Dec 29 17:59:57 2025 GMT Subject: CN=6949871d-fd76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f8:88:be:77:f0:f1:6c:c5:87:88:6e:56:7b: f7:43:04:14:b0:a3:85:b7:97:c6:38:01:f9:06:68: e7:76:7e:d6:0d:32:50:7b:f1:1f:28:36:a7:c9:8d: 8e:68:3f:5a:20:d6:d3:73:49:a2:0c:ed:0e:db:ed: 16:27:f7:8a:0e:1b:4a:3a:90:8e:8e:cd:68:c7:aa: 84:49:9c:19:86:5f:07:be:c8:1b:e1:b2:7f:d1:34: 45:96:9e:fa:4b:1c:b8:75:b6:3d:df:44:11:57:a5: 51:db:41:fe:8d:e6:d6:42:52:ee:b7:1f:95:e2:7a: 09:56:27:9c:1c:24:80:44:5c:72:f7:87:1c:98:10: 29:58:b4:bd:37:de:aa:3f:ef:14:07:76:9d:46:71: 94:35:44:f2:20:12:32:0a:c4:22:f4:eb:a4:0e:18: 27:0f:2d:60:a6:1e:68:f1:4a:57:08:bf:cf:83:8e: 59:f7:03:d5:f6:af:16:14:51:bd:48:e8:71:a9:e1: af:46:05:75:16:24:0b:f2:1a:ad:b7:26:a2:a7:0c: f4:42:19:16:2e:6a:01:1f:aa:8c:6f:d6:35:86:df: 85:e0:46:ae:bd:ed:6c:21:01:42:01:82:75:8f:ed: a1:cf:1a:fe:9d:a3:c1:f5:9a:0f:6a:1f:ab:e3:cc: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3F:7B:AB:81:F4:05:88:96:93:68:BC:D1:EE:AC:90:19:6A:65:77 X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:15:84:5b:18:cb:d1:83:84:35:b4:9c:e9:30:32:46:3e:b6: fb:10:49:b2:a4:eb:69:d6:06:16:d5:8d:5e:5b:d8:97:2c:8e: fc:0c:9b:53:2e:da:e1:4f:95:94:b2:3c:ab:06:c0:4b:23:9f: 27:24:7c:b8:e2:42:58:02:eb:d5:8c:1c:98:e7:36:a1:ea:12: 78:6c:56:32:a2:ab:a2:c7:34:80:4b:43:bb:61:3d:ed:99:d8: 85:ef:1e:c3:e1:b9:c9:db:99:fa:2d:09:8d:c7:8b:f0:29:de: d1:13:7e:5b:99:12:4a:14:38:c0:a0:73:17:7f:b5:44:05:e7: f8:53:fb:cf:1e:23:8a:7c:c2:40:b7:32:3c:8e:b6:44:d8:bf: e9:21:d2:9b:8d:cb:80:df:6d:0b:64:ac:05:ae:ae:2f:85:a7: 17:ae:fd:46:ea:5c:46:51:72:60:70:c5:de:80:61:4b:16:22: 51:86:09:21:fd:bd:92:d8:6d:cf:53:3e:8c:6e:cd:a5:c2:9d: 91:62:87:09:19:e4:b2:41:03:3d:bb:11:9d:6a:a9:75:c5:cd: 07:c5:aa:c9:c2:81:3d:55:8d:d7:af:9e:dd:79:0d:c1:e5:70: 62:49:9b:6f:1d:cb:1a:a9:77:a8:8d:97:ae:67:c9:90:c4:d6: f6:1d:59:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjUxMjIyMTc1OTU3WhcNMjUxMjI5MTc1OTU3WjAYMRYwFAYD VQQDDA02OTQ5ODcxZC1mZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlviIvnfw8WzFh4huVnv3QwQUsKOFt5fGOAH5Bmjndn7WDTJQe/EfKDanyY2O aD9aINbTc0miDO0O2+0WJ/eKDhtKOpCOjs1ox6qESZwZhl8Hvsgb4bJ/0TRFlp76 Sxy4dbY930QRV6VR20H+jebWQlLutx+V4noJViecHCSARFxy94ccmBApWLS9N96q P+8UB3adRnGUNUTyIBIyCsQi9OukDhgnDy1gph5o8UpXCL/Pg45Z9wPV9q8WFFG9 SOhxqeGvRgV1FiQL8hqttyaipwz0QhkWLmoBH6qMb9Y1ht+F4Eauve1sIQFCAYJ1 j+2hzxr+naPB9ZoPah+r48w+XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNo/e6uB 9AWIlpNovNHurJAZamV3MB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTQ4Qi8wNDk0MTBBRTA5MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1q RVg0TUdmUDIxcUhuY2ZuQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsFYRbGMvRg4Q1tJzpMDJGPrb7EEmypOtp1gYW1Y1eW9iXLI78DJtT LtrhT5WUsjyrBsBLI58nJHy44kJYAuvVjByY5zah6hJ4bFYyoquixzSAS0O7YT3t mdiF7x7D4bnJ25n6LQmNx4vwKd7RE35bmRJKFDjAoHMXf7VEBef4U/vPHiOKfMJA tzI8jrZE2L/pIdKbjcuA320LZKwFrq4vhacXrv1G6lxGUXJgcMXegGFLFiJRhgkh /b2S2G3PUz6Mbs2lwp2RYocJGeSyQQM9uxGdaql1xc0HxarJwoE9VY3Xr57deQ3B 5XBiSZtvHcsaqXeojZeuZ8mQxNb2HVl5 -----END CERTIFICATE-----Generated at Tue Dec 23 11:21:01 2025 by rpki-client