This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: uOTKn1PUU8O8dCz3nDzPi5+5sF65BwGQFH+c1DzTgAY= Subject key identifier: 5E:A6:24:49:CA:73:2A:10:2A:F9:D9:99:D5:80:7A:DC:E6:4B:F1:0D Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: 0122 Signing time: Mon 15 Dec 2025 04:06:35 +0000 Manifest this update: Mon 15 Dec 2025 04:06:34 +0000 Manifest next update: Mon 22 Dec 2025 04:06:34 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: IRwrVwChwyqLy1zlPSqMby9l9gaP/9l4zwax/R5mAN8=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: 2Ea6pfyMHuu7UJGQSJfsHF3FX8pvDKiDVHdhUSz8QqA=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: fSTt/OP/CCIEWdda0wFEWb+9ChFos6G9oFISz4g6itU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 04:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Dec 15 04:06:34 2025 GMT Not After : Dec 22 04:06:34 2025 GMT Subject: CN=693f894b-d6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:64:82:9f:19:92:bb:21:6e:04:78:ac:04: 42:47:88:56:a8:bf:3b:86:d8:86:80:0f:8f:0c:50: c3:4e:f2:ce:c6:e2:24:fc:e4:2c:4e:9e:8d:85:38: ff:e1:16:aa:da:e4:00:01:09:6b:31:ef:29:0d:fe: 50:bb:a5:a9:3d:31:a0:15:a8:fe:00:9b:13:bc:5c: b6:d7:8a:81:02:7a:06:fc:c0:66:d5:5e:c8:99:19: 0c:64:0b:00:8b:dc:d3:cb:a7:f3:7a:68:c7:6c:73: 55:f3:f3:a8:a6:de:ff:f0:19:b8:d3:71:80:4e:81: ff:73:0f:20:c3:a5:42:4e:04:dd:ff:bb:d7:bb:69: 6f:19:37:67:a2:b7:16:f3:8f:b6:e9:01:32:4a:7d: 00:a8:f9:d0:85:7f:d5:67:a8:ae:d9:77:df:52:a6: b4:72:46:25:88:b0:8a:e0:bd:7c:73:85:6f:66:ac: 31:6c:65:95:29:dd:36:0b:77:bd:57:23:f3:f2:cd: 77:6b:0e:d0:68:d5:12:98:09:e1:7e:39:06:17:ba: a7:dc:84:0f:6a:32:1b:02:a6:be:25:aa:db:86:69: 35:7f:8b:14:80:ee:ad:1f:32:b3:2e:8c:d2:13:ab: 51:3d:d8:97:70:5c:a7:75:fe:53:94:08:8d:44:5f: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A6:24:49:CA:73:2A:10:2A:F9:D9:99:D5:80:7A:DC:E6:4B:F1:0D X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a9:e7:e3:70:a8:20:78:77:ed:24:c0:0c:05:fc:f5:62:79: 6b:83:f9:ce:59:b5:8c:78:b0:ae:b2:bc:d8:91:a9:ee:92:03: 71:b6:c8:79:a2:df:68:cf:1c:d7:4c:af:33:bd:fd:d1:35:da: b3:de:a0:66:7c:a1:dc:f1:2b:0e:42:0d:de:38:4e:ea:5b:a7: 76:9f:0c:ec:58:d1:76:23:6d:51:81:8f:5c:7a:40:3a:ea:eb: 49:63:43:b3:66:ff:ad:b4:3d:82:5f:48:fd:a7:4d:61:24:a9: a0:56:4e:b0:bd:e0:00:80:d3:40:53:ae:81:3d:f9:6a:bd:11: 81:db:99:9b:47:f6:aa:6d:61:6c:7f:02:42:bb:72:a2:d5:2c: 67:bb:e8:0c:45:c1:20:ee:4b:a2:a3:13:0d:4c:8b:85:1d:f9: 44:c4:bc:46:bf:e5:fb:61:a0:dc:d1:77:09:0d:cc:39:8a:8a: 73:7b:bc:ad:2b:53:ea:00:b7:f4:55:62:7b:95:82:bc:84:82: ff:0b:b1:ad:7b:03:a7:d6:02:53:d2:d4:01:44:f6:ee:5d:88: e5:5d:21:cd:93:f4:41:54:23:5b:7a:3d:c1:33:1c:72:d1:03: 4e:dd:61:e0:92:48:41:e5:d7:c4:3e:ff:be:77:fc:d9:54:9c: 2b:3a:65:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjUxMjE1MDQwNjM0WhcNMjUxMjIyMDQwNjM0WjAYMRYwFAYD VQQDDA02OTNmODk0Yi1kNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArllkgp8ZkrshbgR4rARCR4hWqL87htiGgA+PDFDDTvLOxuIk/OQsTp6NhTj/ 4Raq2uQAAQlrMe8pDf5Qu6WpPTGgFaj+AJsTvFy214qBAnoG/MBm1V7ImRkMZAsA i9zTy6fzemjHbHNV8/Oopt7/8Bm403GAToH/cw8gw6VCTgTd/7vXu2lvGTdnorcW 84+26QEySn0AqPnQhX/VZ6iu2XffUqa0ckYliLCK4L18c4VvZqwxbGWVKd02C3e9 VyPz8s13aw7QaNUSmAnhfjkGF7qn3IQPajIbAqa+Jarbhmk1f4sUgO6tHzKzLozS E6tRPdiXcFyndf5TlAiNRF9UnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6mJEnK cyoQKvnZmdWAetzmS/ENMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBqefjcKggeHftJMAMBfz1Ynlrg/nOWbWMeLCusrzYkanukgNxtsh5 ot9ozxzXTK8zvf3RNdqz3qBmfKHc8SsOQg3eOE7qW6d2nwzsWNF2I21RgY9cekA6 6utJY0OzZv+ttD2CX0j9p01hJKmgVk6wveAAgNNAU66BPflqvRGB25mbR/aqbWFs fwJCu3Ki1Sxnu+gMRcEg7kuioxMNTIuFHflExLxGv+X7YaDc0XcJDcw5iopze7yt K1PqALf0VWJ7lYK8hIL/C7GtewOn1gJT0tQBRPbuXYjlXSHNk/RBVCNbej3BMxxy 0QNO3WHgkkhB5dfEPv++d/zZVJwrOmWm -----END CERTIFICATE-----Generated at Tue Dec 16 21:35:01 2025 by rpki-client