This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json) Hash identifier: otNnCp+Vj38oN+uSUrVs+2iW0pGi569hf+Vc+aIRA88= Subject key identifier: 8F:FA:78:3E:6B:00:63:A6:C0:B2:6A:31:4D:99:85:7F:D7:CC:78:80 Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Certificate serial: 0BBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft Manifest number: 0B9D Signing time: Sat 06 Dec 2025 18:19:12 +0000 Manifest this update: Sat 06 Dec 2025 18:19:11 +0000 Manifest next update: Sat 13 Dec 2025 18:19:11 +0000 Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: JoLaRjpiz+SG/WBRZlhVIFVsYOJQbVhLhMT3t4FuzL0=) 2: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: eddZTpWlG2T9ATgQlQm2WB6FlpB3ZUxT2iZNYIcetK0=) 3: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 6SPV2FX7Tph5ZmideN5WrWfiO8/8Sir95YP17tl87tY=) 4: 5103E4B6B3F611F0B4911A0BC4F9AE02.roa (hash: aYVxYlefMzWSklvVE7ejL8LQCyo0uoBkp7yy2+ne9nw=) 5: 390D5400B3F611F0A01DFD0AC4F9AE02.roa (hash: 9/vsBgZN7XUMB0FwbC8U2AbPlxviAttp/GCpXk5Ccgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3004 (0xbbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Validity Not Before: Dec 6 18:19:11 2025 GMT Not After : Dec 13 18:19:11 2025 GMT Subject: CN=693473a0-49ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:fd:c5:bd:44:f6:83:b5:a3:98:f4:23:55: bf:49:df:b6:88:51:8c:6c:63:fb:45:bb:f7:d4:79: 45:40:1b:18:c2:e2:e1:c7:5d:f8:d4:e3:23:38:00: b4:de:56:fa:b3:9d:4d:83:c3:1e:61:03:8b:c2:1e: bf:e8:c7:30:cc:8d:90:ba:1d:7e:2d:ae:ea:aa:a9: 31:a4:45:5c:b1:27:ee:d6:45:42:6a:b6:d2:13:d5: 13:d2:05:09:34:89:af:05:fd:4b:bd:96:77:20:fa: 09:f3:bf:1d:92:11:ee:68:d9:85:25:da:11:1e:ca: 93:4f:e2:78:9c:fe:9f:cd:9c:f8:9d:a6:d6:bb:75: d6:60:05:69:2a:1c:91:52:76:3f:d2:20:26:16:c7: 25:c6:c1:55:7a:7a:3a:51:42:71:35:a8:58:ae:98: 80:35:16:aa:62:e9:d8:36:70:7c:0f:3f:25:00:3e: 0a:47:25:fd:32:70:d9:38:3b:c9:39:40:98:51:72: 98:ec:1b:77:a3:12:0b:e6:f9:23:ee:50:5d:75:8b: 40:c7:25:c7:a6:99:a1:0a:88:10:6a:4f:37:1c:cc: 32:9f:a5:22:a6:d8:31:63:1d:c2:6c:46:f3:a6:33: d6:3c:87:18:98:92:e8:1b:c7:df:93:6e:6b:d6:df: ba:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FA:78:3E:6B:00:63:A6:C0:B2:6A:31:4D:99:85:7F:D7:CC:78:80 X509v3 Authority Key Identifier: keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e2:03:6f:11:38:48:8f:a5:1a:a2:0a:11:4d:b2:cc:9f:d9: ff:04:23:c7:64:53:01:ab:e3:f3:6c:0c:c6:da:12:e5:a3:85: 7f:52:77:70:27:b0:81:fb:c2:4f:d6:db:e0:51:ea:c6:24:58: 68:9a:7f:d5:03:b4:96:ff:4d:ce:15:14:0f:e0:0f:c6:eb:28: 47:75:0f:a6:87:42:7c:7d:db:e0:e9:c5:6c:c9:ae:3c:3d:43: 55:f5:4e:37:ef:49:2a:e0:1c:07:fd:fa:53:ba:fc:51:27:d4: b1:48:92:a2:80:f9:d9:e9:60:56:7e:47:b6:7a:03:d4:b8:8c: 16:0a:5e:16:d5:5a:3b:88:57:83:09:a4:9b:64:68:98:52:34: 2f:68:c0:59:b3:10:6d:da:45:00:ad:10:fb:31:15:89:98:ad: 50:98:ac:92:24:ff:e7:85:2c:44:34:04:ed:34:c6:2f:9d:7f: 4d:4a:a8:66:ee:40:58:89:9a:80:7f:f1:19:9d:8a:b8:45:a4: 3f:06:7e:b9:17:1c:59:85:51:03:59:bc:10:00:ba:6d:22:01: 4f:20:33:29:9b:75:8f:e3:56:08:d2:79:53:9f:c1:42:eb:dd: 84:56:ec:2d:99:dd:ea:f5:4b:91:0e:3c:6d:32:3a:aa:c4:97: e4:df:c3:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC RjZCMTIyQUUwHhcNMjUxMjA2MTgxOTExWhcNMjUxMjEzMTgxOTExWjAYMRYwFAYD VQQDEw02OTM0NzNhMC00OWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkl39xb1E9oO1o5j0I1W/Sd+2iFGMbGP7Rbv31HlFQBsYwuLhx1341OMjOAC0 3lb6s51Ng8MeYQOLwh6/6McwzI2Quh1+La7qqqkxpEVcsSfu1kVCarbSE9UT0gUJ NImvBf1LvZZ3IPoJ878dkhHuaNmFJdoRHsqTT+J4nP6fzZz4nabWu3XWYAVpKhyR UnY/0iAmFsclxsFVeno6UUJxNahYrpiANRaqYunYNnB8Dz8lAD4KRyX9MnDZODvJ OUCYUXKY7Bt3oxIL5vkj7lBddYtAxyXHppmhCogQak83HMwyn6UiptgxYx3CbEbz pjPWPIcYmJLoG8ffk25r1t+6AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/6eD5r AGOmwLJqMU2ZhX/XzHiAMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3 OFlZaUhScVpnbnlfYXhJcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo4gNvEThIj6UaogoRTbLMn9n/BCPHZFMBq+PzbAzG2hLlo4V/Undw J7CB+8JP1tvgUerGJFhomn/VA7SW/03OFRQP4A/G6yhHdQ+mh0J8fdvg6cVsya48 PUNV9U4370kq4BwH/fpTuvxRJ9SxSJKigPnZ6WBWfke2egPUuIwWCl4W1Vo7iFeD CaSbZGiYUjQvaMBZsxBt2kUArRD7MRWJmK1QmKySJP/nhSxENATtNMYvnX9NSqhm 7kBYiZqAf/EZnYq4RaQ/Bn65FxxZhVEDWbwQALptIgFPIDMpm3WP41YI0nlTn8FC 692EVuwtmd3q9UuRDjxtMjqqxJfk38PI -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:59 2025 by rpki-client