This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json) Hash identifier: LeU4sXmnSQNACnuFPpJpYy3v9/4XdIZInA2IMzURnk8= Subject key identifier: F6:DD:88:44:27:F7:D3:DA:2C:BF:19:5D:88:10:13:E5:9C:54:B8:23 Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 2674 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft Manifest number: 25E5 Signing time: Mon 22 Dec 2025 15:34:16 +0000 Manifest this update: Mon 22 Dec 2025 15:34:16 +0000 Manifest next update: Mon 29 Dec 2025 15:34:16 +0000 Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: ZYlLw8auS+/juYsBsQAwim1Aev6oY6LPkXXnl8shTW4=) 2: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (hash: /CgW1RCBBKg0G9J60cVrkPNi3RQ9sxBskKzs6426hF8=) 3: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: wmE3dy22cCh7DDeNE31Jx/DmkbwsEQ9KR2+uUk3Z/H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9844 (0x2674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Dec 22 15:34:16 2025 GMT Not After : Dec 29 15:34:16 2025 GMT Subject: CN=694964f8-9500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:24:f9:ce:ad:1a:de:31:86:56:0f:50:2b:60: cb:da:64:5f:88:2d:18:58:93:bb:3e:89:54:87:12: 36:dc:12:c3:1c:36:5e:0b:98:92:af:1b:32:8d:6d: d6:08:33:ab:4c:3a:36:85:9d:13:8e:74:97:3d:aa: 5e:9f:49:eb:c2:f0:c0:fc:64:72:02:1c:e6:6a:6c: b2:78:76:f7:40:88:1c:8c:f3:fe:80:c2:ad:12:e2: c1:8d:48:3f:da:dd:07:9e:15:8f:93:7d:53:22:2c: 6f:4d:0e:bb:85:16:7c:f9:6d:27:a6:b1:d7:97:94: 23:98:70:7e:3e:dc:82:91:d6:37:e2:83:16:90:aa: 43:35:34:02:a3:d9:a8:5d:f4:19:d7:c3:ed:be:27: f8:84:cf:4a:38:6c:39:cd:a0:b1:ef:f8:13:b2:5f: eb:59:ae:0b:5e:dd:13:44:d9:ab:0b:3e:48:17:6d: 0d:ce:3b:58:d8:35:af:75:82:ba:43:f9:e4:bc:57: 90:f4:54:c8:b0:4d:79:7a:5d:1e:18:80:b9:a9:67: ca:70:a1:b8:d7:df:f1:17:1d:e3:06:62:f2:9a:9b: cd:d8:0f:ce:4a:d8:b6:09:b5:25:ca:bc:7f:32:78: fe:04:3f:ab:b8:64:a0:23:87:9d:8c:2c:6a:ce:e2: dd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DD:88:44:27:F7:D3:DA:2C:BF:19:5D:88:10:13:E5:9C:54:B8:23 X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:83:e2:37:39:45:74:8c:ea:ba:58:98:21:19:ba:3f:9c:04: 62:8e:d6:52:5d:c4:7e:99:03:a2:e0:c6:c8:01:2f:0d:6c:db: 4c:e6:c3:97:3b:a8:a5:42:70:17:5f:ca:8b:24:16:72:03:b4: fa:a4:32:d9:81:0b:06:af:fc:a3:d2:e1:52:b0:85:25:15:a9: 52:ba:32:f9:fb:f7:8c:0b:57:a9:22:8f:dd:f7:13:6d:78:cf: 48:2e:9c:45:d6:25:7b:74:7c:db:47:d2:83:57:2d:43:15:2a: 46:15:20:a8:8a:30:7c:e5:b7:99:0f:7c:31:35:2d:24:3a:8e: ee:4f:44:10:43:6c:8e:25:6e:74:c5:ec:1e:b6:41:e3:d3:fd: 9c:aa:29:cc:47:72:6f:93:1c:e1:97:3a:88:11:af:9e:49:13: a0:93:ca:8a:e7:8e:1d:5f:cc:ac:ad:fb:04:02:51:c6:89:01: aa:79:65:b0:fb:5a:18:5f:6b:4d:e8:fa:59:84:4e:a3:97:81: 7e:15:6c:9d:5f:d6:32:c3:b2:18:36:48:32:0c:68:21:7c:2a: 60:7a:93:16:27:9c:69:cb:c8:b8:e6:20:54:86:54:9d:0b:c9: 12:54:03:19:3b:77:73:b4:c3:7f:c7:54:97:bd:a6:ba:62:1a: bf:df:4e:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjUxMjIyMTUzNDE2WhcNMjUxMjI5MTUzNDE2WjAYMRYwFAYD VQQDDA02OTQ5NjRmOC05NTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiyT5zq0a3jGGVg9QK2DL2mRfiC0YWJO7PolUhxI23BLDHDZeC5iSrxsyjW3W CDOrTDo2hZ0TjnSXPapen0nrwvDA/GRyAhzmamyyeHb3QIgcjPP+gMKtEuLBjUg/ 2t0HnhWPk31TIixvTQ67hRZ8+W0nprHXl5QjmHB+PtyCkdY34oMWkKpDNTQCo9mo XfQZ18Ptvif4hM9KOGw5zaCx7/gTsl/rWa4LXt0TRNmrCz5IF20NzjtY2DWvdYK6 Q/nkvFeQ9FTIsE15el0eGIC5qWfKcKG419/xFx3jBmLympvN2A/OSti2CbUlyrx/ Mnj+BD+ruGSgI4edjCxqzuLdewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbdiEQn 99PaLL8ZXYgQE+WcVLgjMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU0Ri8yQUQxNkYzMDFBNEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpP ZGh2RGs3X0xqV2RtaGZiQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzg+I3OUV0jOq6WJghGbo/nARijtZSXcR+mQOi4MbIAS8NbNtM5sOX O6ilQnAXX8qLJBZyA7T6pDLZgQsGr/yj0uFSsIUlFalSujL5+/eMC1epIo/d9xNt eM9ILpxF1iV7dHzbR9KDVy1DFSpGFSCoijB85beZD3wxNS0kOo7uT0QQQ2yOJW50 xewetkHj0/2cqinMR3JvkxzhlzqIEa+eSROgk8qK544dX8ysrfsEAlHGiQGqeWWw +1oYX2tN6PpZhE6jl4F+FWydX9Yyw7IYNkgyDGghfCpgepMWJ5xpy8i45iBUhlSd C8kSVAMZO3dztMN/x1SXvaa6Yhq/3058 -----END CERTIFICATE-----Generated at Tue Dec 23 09:11:51 2025 by rpki-client