This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json) Hash identifier: Y8IfS/DuAeRnFrTMXWd6KmTKI553iAkqhg+S510/IKA= Subject key identifier: A7:33:D6:FF:94:00:85:81:53:08:4F:B9:6E:38:C8:F4:EB:71:55:AE Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft Manifest number: 0117 Signing time: Wed 17 Dec 2025 04:23:23 +0000 Manifest this update: Wed 17 Dec 2025 04:23:22 +0000 Manifest next update: Wed 24 Dec 2025 04:23:22 +0000 Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: NkFcLf5idGzbd4RgH/Z++sGWDrVA41qNaPF1z/MtU5k=) 2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: 59HLMBrfjjdy7ZkLbK5ZAyw/H+2uYObVepiHANeb3uU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 04:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Validity Not Before: Dec 17 04:23:22 2025 GMT Not After : Dec 24 04:23:22 2025 GMT Subject: CN=6942303b-f10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:32:6a:b1:d0:54:1b:41:d7:2a:3f:da:90: a6:4b:ec:16:43:bf:05:3b:41:77:28:e1:01:42:93: 1f:8d:6c:c7:d6:97:52:a4:84:f0:59:80:85:27:75: 68:60:44:95:51:e9:f7:7c:d1:cc:ef:33:ed:d8:f1: 14:2c:fb:0e:37:33:4b:50:43:79:7f:ea:09:aa:e3: da:63:07:f4:c3:17:ba:6c:80:28:cf:79:8c:35:50: 49:9d:c8:18:96:ea:56:19:41:a4:60:b2:30:fc:6a: 5c:55:0f:35:9d:38:88:f2:93:ea:86:31:4c:f2:28: e3:4b:98:3e:80:3b:3c:17:96:55:44:74:1c:df:21: 9c:06:e9:07:ff:e2:31:07:55:61:00:67:be:17:9e: cd:38:ab:8d:fa:91:56:f9:29:6e:45:4e:33:53:c9: f0:73:52:8b:dd:9f:1c:c1:ec:73:58:9b:b8:d1:ab: cf:d5:3b:e3:a9:10:a3:a3:b4:1f:63:59:92:9a:31: c9:b6:c4:d1:1f:28:56:2d:7d:ce:9b:50:cf:6e:81: 24:cf:bd:be:f4:91:2b:1a:e0:83:90:b2:56:f3:4a: a9:04:54:ca:a3:92:2a:05:18:5b:89:e3:27:23:54: 50:cb:8d:15:06:06:6c:c1:f7:c2:84:0d:57:ae:ac: 14:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:33:D6:FF:94:00:85:81:53:08:4F:B9:6E:38:C8:F4:EB:71:55:AE X509v3 Authority Key Identifier: keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:e1:36:98:c3:3a:7d:8f:27:60:79:e6:d7:1b:58:43:9a:2d: 19:47:e5:31:79:9c:49:a9:2c:68:1c:1e:0b:54:3a:c0:00:de: 67:ad:2e:60:6b:e1:1c:b8:00:64:26:d1:20:b3:27:4c:44:57: 02:ea:a3:97:a8:c9:ee:d4:05:86:bb:8d:0a:c7:ea:df:14:0e: 5f:61:b7:24:8c:25:95:2b:13:2d:44:b1:a2:e1:4b:0a:65:ca: df:8b:08:67:d4:b4:31:15:8c:3b:7a:87:30:fd:bc:e3:c7:9c: ba:14:ed:f4:7d:4a:47:20:c6:68:d4:18:b5:1c:6f:b1:71:73: a1:6a:94:22:97:af:c9:c6:a1:c4:0a:74:82:2a:1e:e2:3f:66: 34:54:62:32:09:b7:be:f4:81:4d:0e:c6:3d:69:a5:f9:c3:5c: 9d:e4:c3:68:45:50:9e:f1:7a:0d:75:0b:07:3a:b3:a6:ff:ac: 4c:8e:f9:8b:67:3e:95:2e:30:84:d1:7d:62:9a:27:d5:7d:cc: f5:37:8d:3f:ff:2a:a6:5b:fd:cb:9b:3f:91:1a:2e:b2:41:00: 51:c8:00:62:8a:f3:ec:d1:fc:ba:e8:83:4a:05:01:d4:e8:36: c6:d7:8a:44:e7:61:02:b5:7b:f3:99:47:2a:a6:34:59:12:34: 0b:56:7b:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzMDIxMTAvBgNVBAUTKDIxQkU4QzhGRTk1M0Y2RUM5N0I3RjEyMTYxN0VEOTEw NDdEQUE1QTQwHhcNMjUxMjE3MDQyMzIyWhcNMjUxMjI0MDQyMzIyWjAYMRYwFAYD VQQDDA02OTQyMzAzYi1mMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQUyarHQVBtB1yo/2pCmS+wWQ78FO0F3KOEBQpMfjWzH1pdSpITwWYCFJ3Vo YESVUen3fNHM7zPt2PEULPsONzNLUEN5f+oJquPaYwf0wxe6bIAoz3mMNVBJncgY lupWGUGkYLIw/GpcVQ81nTiI8pPqhjFM8ijjS5g+gDs8F5ZVRHQc3yGcBukH/+Ix B1VhAGe+F57NOKuN+pFW+SluRU4zU8nwc1KL3Z8cwexzWJu40avP1TvjqRCjo7Qf Y1mSmjHJtsTRHyhWLX3Om1DPboEkz72+9JErGuCDkLJW80qpBFTKo5IqBRhbieMn I1RQy40VBgZswffChA1XrqwUTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcz1v+U AIWBUwhPuW44yPTrcVWuMB8GA1UdIwQYMBaAFCG+jI/pU/bsl7fxIWF+2RBH2qWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi9BMzJGREZERTM3 NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1eVh0X0VoWVg3WkVFZmFw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liNk1qLWxUOXV5WHRfRWhZWDdaRUVmYXBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjMwMi9BMzJGREZERTM3NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1 eVh0X0VoWVg3WkVFZmFwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY4TaYwzp9jydgeebXG1hDmi0ZR+UxeZxJqSxoHB4LVDrAAN5nrS5g a+EcuABkJtEgsydMRFcC6qOXqMnu1AWGu40Kx+rfFA5fYbckjCWVKxMtRLGi4UsK Zcrfiwhn1LQxFYw7eocw/bzjx5y6FO30fUpHIMZo1Bi1HG+xcXOhapQil6/JxqHE CnSCKh7iP2Y0VGIyCbe+9IFNDsY9aaX5w1yd5MNoRVCe8XoNdQsHOrOm/6xMjvmL Zz6VLjCE0X1imifVfcz1N40//yqmW/3Lmz+RGi6yQQBRyABiivPs0fy66INKBQHU 6DbG14pE52ECtXvzmUcqpjRZEjQLVntC -----END CERTIFICATE-----Generated at Thu Dec 18 14:36:31 2025 by rpki-client