This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: ev7xuQVXytKGAAS7GwTP87YafJkRg5QFmAYwJrvhO3o= Subject key identifier: EB:5B:17:45:99:3B:59:CC:BE:8A:D5:17:F2:54:4E:5C:02:79:08:BF Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 07F3 Signing time: Sat 20 Dec 2025 20:29:07 +0000 Manifest this update: Sat 20 Dec 2025 20:29:06 +0000 Manifest next update: Sat 27 Dec 2025 20:29:06 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: X9+WiJrmtJSwDwzgvfjvcbGfLrvF6Du99eAPHRWfOjE=) 2: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: faGNUns0UIB/6rsiDFhIe2V0V3MDd2DqirXM6CF0Z8Q=) 3: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: x1swDqDbdRpW1YcvJW4XZPVqkw29NgcBcxcpOtDQ400=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Dec 20 20:29:06 2025 GMT Not After : Dec 27 20:29:06 2025 GMT Subject: CN=69470713-904c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:1a:eb:73:62:20:e8:48:5f:87:a1:77:7a: d9:5e:11:8e:3f:dc:6d:51:2d:93:93:a8:38:f9:b5: 67:44:2b:bf:df:df:8f:36:44:55:ba:54:24:75:46: 48:18:24:89:68:a6:21:0e:40:22:83:83:d5:14:66: f3:ba:e8:65:52:5c:fe:7b:e2:82:73:d4:69:a3:a3: f1:51:53:e0:62:98:d3:99:75:9e:31:ec:25:b4:56: 5e:ab:0a:4e:48:80:35:5a:f9:e4:f6:d7:19:ed:cd: 69:64:c7:78:87:19:05:67:dd:42:58:c8:86:92:f8: 7c:d9:e5:7b:20:91:a2:24:f7:94:31:36:08:35:66: c4:ce:ae:ee:19:1b:74:da:ef:89:62:e9:70:08:9f: 71:b8:37:f5:c5:73:6b:04:98:17:1a:9d:28:d9:8d: 9b:d4:e1:af:f2:26:ff:0c:74:3f:bf:31:36:71:7b: 72:f8:24:97:fe:26:eb:ae:ee:7e:90:f8:1e:be:24: 12:47:20:34:ae:26:ef:0d:56:78:08:2b:2d:e0:93: 2c:8b:02:90:bc:b2:d2:eb:bb:3c:df:4f:5d:ac:7d: 73:97:89:73:0b:20:a7:e9:8d:2b:75:b2:da:30:63: 9b:26:71:a0:ce:ff:b8:b6:3c:21:e8:53:42:1d:d4: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5B:17:45:99:3B:59:CC:BE:8A:D5:17:F2:54:4E:5C:02:79:08:BF X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:dc:fd:41:b2:61:fa:6e:b2:91:38:b6:16:3e:bb:ed:2d:09: ea:93:0e:9d:fb:81:dd:ee:06:42:fe:ac:c2:99:b3:8e:44:9e: b2:df:93:c8:8e:44:4f:aa:47:04:d6:69:3f:d4:40:cd:01:a0: c4:a5:c3:d7:a6:22:bc:e5:5b:39:4c:86:98:64:5f:9b:6f:39: 48:44:43:a5:80:79:c1:2d:5d:ca:0d:ba:d7:6a:fc:4a:3c:32: 63:5b:c9:da:c8:82:f8:9f:6f:0d:a3:31:46:09:61:c8:35:83: 94:76:18:30:3d:c0:00:e6:64:54:72:1b:85:7a:32:58:b8:ba: fb:34:52:9f:90:3e:31:86:7a:23:5e:ae:13:8d:5a:a5:6b:a5: 60:c3:bb:f9:f9:90:b8:6a:07:fa:23:1e:cd:83:7a:b6:0b:a7: dd:bd:ce:cb:33:b7:23:9e:10:04:ae:b9:8d:7c:21:4d:33:3d: f3:a9:f6:03:aa:d4:01:80:d7:eb:12:08:68:b1:92:37:bd:60: 11:4b:bd:91:63:df:f0:93:0f:08:b6:d2:55:ff:38:e7:f3:fb: 6d:ac:8a:93:49:71:3b:92:6d:a0:9f:ac:f5:74:27:b7:18:f9: b8:e8:ff:8e:f4:d3:76:ae:5f:4b:26:79:30:7c:db:d9:80:13: 64:f7:d6:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjUxMjIwMjAyOTA2WhcNMjUxMjI3MjAyOTA2WjAYMRYwFAYD VQQDDA02OTQ3MDcxMy05MDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1Ea63NiIOhIX4ehd3rZXhGOP9xtUS2Tk6g4+bVnRCu/39+PNkRVulQkdUZI GCSJaKYhDkAig4PVFGbzuuhlUlz+e+KCc9Rpo6PxUVPgYpjTmXWeMewltFZeqwpO SIA1Wvnk9tcZ7c1pZMd4hxkFZ91CWMiGkvh82eV7IJGiJPeUMTYINWbEzq7uGRt0 2u+JYulwCJ9xuDf1xXNrBJgXGp0o2Y2b1OGv8ib/DHQ/vzE2cXty+CSX/ibrru5+ kPgeviQSRyA0ribvDVZ4CCst4JMsiwKQvLLS67s8309drH1zl4lzCyCn6Y0rdbLa MGObJnGgzv+4tjwh6FNCHdRWjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtbF0WZ O1nMvorVF/JUTlwCeQi/MB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS3P1BsmH6brKROLYWPrvtLQnqkw6d+4Hd7gZC/qzCmbOORJ6y35PI jkRPqkcE1mk/1EDNAaDEpcPXpiK85Vs5TIaYZF+bbzlIREOlgHnBLV3KDbrXavxK PDJjW8nayIL4n28NozFGCWHINYOUdhgwPcAA5mRUchuFejJYuLr7NFKfkD4xhnoj Xq4TjVqla6Vgw7v5+ZC4agf6Ix7Ng3q2C6fdvc7LM7cjnhAErrmNfCFNMz3zqfYD qtQBgNfrEghosZI3vWARS72RY9/wkw8IttJV/zjn8/ttrIqTSXE7km2gn6z1dCe3 GPm46P+O9NN2rl9LJnkwfNvZgBNk99aB -----END CERTIFICATE-----Generated at Sun Dec 21 16:16:52 2025 by rpki-client