This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft File: Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json) Hash identifier: bL07bHISZAT/fteUFU0D99nELjnna2zQ3UyR2MnuqT8= Subject key identifier: 94:81:4F:17:6B:C2:94:BA:FF:14:89:F9:EC:3F:97:D7:B1:66:11:0E Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 Certificate issuer: /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Certificate serial: 0B2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft Manifest number: 0B24 Signing time: Mon 22 Dec 2025 18:45:58 +0000 Manifest this update: Mon 22 Dec 2025 18:45:58 +0000 Manifest next update: Mon 29 Dec 2025 18:45:58 +0000 Files and hashes: 1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: xQwPQpcqqBwTad9CImffzAEJ3Ncq+UFhpjiC4Ooa1QY=) 2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: AU3Frw6p1SnNaYVLPNPNSlHZdunuBupMTCIgXK+Ojng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2861 (0xb2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B413, serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Validity Not Before: Dec 22 18:45:58 2025 GMT Not After : Dec 29 18:45:58 2025 GMT Subject: CN=694991e6-5b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:76:21:08:e7:67:5d:94:c5:89:2a:c3:3a: 3f:12:02:ac:96:2b:90:ac:93:ce:b7:10:de:05:53: 06:b4:b7:de:ac:61:28:37:f1:4e:60:52:68:63:bf: 9c:ee:76:7e:81:59:9a:b5:a1:f8:f4:55:79:aa:24: ac:aa:e2:08:5e:ea:4c:2d:49:3a:6b:1e:ea:80:5e: 65:5a:c9:d8:34:96:8d:cd:98:36:8d:eb:bf:cf:44: ef:59:02:ff:8a:a9:13:d0:3b:c1:32:80:00:9f:43: 35:30:7b:85:bc:39:3b:58:2c:8e:b9:67:46:f4:58: ce:fa:ec:d0:1f:7c:ea:11:e2:be:63:c9:cd:11:86: b5:56:37:d4:9f:1f:ec:be:56:2c:5e:84:5b:00:1f: 3f:52:d9:d1:3f:1e:4a:4d:82:fb:50:c5:39:95:45: b3:bb:dd:22:00:5b:c3:53:bf:6b:da:34:40:0a:66: cb:7a:51:e0:61:7f:d8:a9:fb:19:6c:67:bb:1d:36: b5:7a:d9:07:ef:d4:2f:1f:c4:41:fb:5d:d6:fe:4f: d6:33:66:34:bd:53:10:ec:a1:18:a7:d8:9b:78:44: a2:94:29:36:f9:04:80:3a:fc:4e:1a:0c:65:ff:3d: a4:02:42:f9:99:ec:0d:ab:f2:d0:32:2b:dc:b3:62: 92:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:81:4F:17:6B:C2:94:BA:FF:14:89:F9:EC:3F:97:D7:B1:66:11:0E X509v3 Authority Key Identifier: keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ba:87:26:e2:09:3e:5e:28:88:b9:f0:12:a6:01:71:db:15: 1e:b8:65:a8:00:23:11:1e:57:d0:8b:19:df:e7:7e:8c:88:eb: 3e:54:0d:6c:bb:9c:9b:f4:5a:f3:c3:41:c7:e0:16:65:29:98: f7:1b:b3:8f:84:27:74:21:42:d6:56:2b:19:6a:28:2c:76:7f: 9a:8d:f7:9a:72:24:2d:f8:dc:d3:40:fd:1e:d8:27:5d:b9:d4: d1:47:48:5c:25:55:26:b7:ea:01:c4:4f:46:68:40:21:64:76: f2:94:cc:4b:a1:ee:5d:a3:46:9a:cc:31:1f:8c:73:c1:c7:56: 43:a1:89:fe:77:b0:75:d0:94:2f:8f:ad:d8:44:ea:27:33:9d: 7d:5e:6f:68:54:b8:91:6e:fc:7f:94:94:9e:71:67:5b:5f:56: 21:68:d1:bf:33:e6:02:5c:1f:79:a3:43:34:1b:31:b7:59:00: 93:d3:b4:1d:2f:86:eb:24:6a:0a:4c:a1:6d:d2:be:fa:bf:f1: 57:48:bd:cc:1a:25:7b:1d:13:d6:78:75:8f:75:3f:86:9a:18: de:1f:9f:20:8a:eb:9a:0f:56:45:a6:6d:9a:0a:96:a0:85:7b: f9:bc:f9:93:44:4b:0a:c5:05:d0:53:04:fd:4a:a3:8a:8e:26: f8:5e:81:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0MTMxMTAvBgNVBAUTKDIxQ0ZFMTQ5OUJBMzZFOTQxNkI3RkVCQzgxM0MzQzJF QTkxNkJDNDYwHhcNMjUxMjIyMTg0NTU4WhcNMjUxMjI5MTg0NTU4WjAYMRYwFAYD VQQDDA02OTQ5OTFlNi01YjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6p2IQjnZ12UxYkqwzo/EgKsliuQrJPOtxDeBVMGtLferGEoN/FOYFJoY7+c 7nZ+gVmataH49FV5qiSsquIIXupMLUk6ax7qgF5lWsnYNJaNzZg2jeu/z0TvWQL/ iqkT0DvBMoAAn0M1MHuFvDk7WCyOuWdG9FjO+uzQH3zqEeK+Y8nNEYa1VjfUnx/s vlYsXoRbAB8/UtnRPx5KTYL7UMU5lUWzu90iAFvDU79r2jRACmbLelHgYX/YqfsZ bGe7HTa1etkH79QvH8RB+13W/k/WM2Y0vVMQ7KEYp9ibeESilCk2+QSAOvxOGgxl /z2kAkL5mewNq/LQMivcs2KStQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSBTxdr wpS6/xSJ+ew/l9exZhEOMB8GA1UdIwQYMBaAFCHP4Umbo26UFrf+vIE8PC6pFrxG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjQxMy9COEZDQTdCQTUx NkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJwUVd0XzY4Z1R3OExxa1d2 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljX2hTWnVqYnBRV3RfNjhnVHc4THFrV3ZFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjQxMy9COEZDQTdCQTUxNkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJw UVd0XzY4Z1R3OExxa1d2RVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKuocm4gk+XiiIufASpgFx2xUeuGWoACMRHlfQixnf536MiOs+VA1s u5yb9Frzw0HH4BZlKZj3G7OPhCd0IULWVisZaigsdn+ajfeaciQt+NzTQP0e2Cdd udTRR0hcJVUmt+oBxE9GaEAhZHbylMxLoe5do0aazDEfjHPBx1ZDoYn+d7B10JQv j63YROonM519Xm9oVLiRbvx/lJSecWdbX1YhaNG/M+YCXB95o0M0GzG3WQCT07Qd L4brJGoKTKFt0r76v/FXSL3MGiV7HRPWeHWPdT+GmhjeH58giuuaD1ZFpm2aCpag hXv5vPmTREsKxQXQUwT9SqOKjib4XoE+ -----END CERTIFICATE-----Generated at Wed Dec 24 16:00:34 2025 by rpki-client