This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft File: IMAbBSwVg-NofN7L_BPplBAa1C8.mft (raw, json) Hash identifier: YjqOOqLb3kYVfCNBYy5FwhP4OsDX6z1msP7p/9wW5jM= Subject key identifier: FB:86:BF:3E:9B:AD:5F:0C:BD:43:DB:B7:FC:A2:0A:95:94:BB:C3:14 Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F Certificate issuer: /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft Manifest number: 01EA Signing time: Sun 07 Dec 2025 01:06:20 +0000 Manifest this update: Sun 07 Dec 2025 01:06:19 +0000 Manifest next update: Sun 14 Dec 2025 01:06:19 +0000 Files and hashes: 1: IMAbBSwVg-NofN7L_BPplBAa1C8.crl (hash: cyD7qj+Ndv6qvLZSsvkXGfBkbECj39hrjs1xdLS9f8A=) 2: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (hash: KHyj1otfkf2S5YApB/OtC5OI1QkNCQ8X27Eo+XCQipE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919794D, serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Validity Not Before: Dec 7 01:06:19 2025 GMT Not After : Dec 14 01:06:19 2025 GMT Subject: CN=6934d30b-2317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:35:59:74:53:47:05:b3:b5:b1:0b:39:d6: 15:23:a6:78:36:36:46:82:3c:50:62:2f:1c:89:77: df:51:97:12:c3:b2:20:a4:c5:56:0b:04:d9:26:c2: e3:9b:f8:1b:2e:7e:ee:99:39:58:10:8b:c5:53:b1: 1d:52:da:4e:73:c8:cb:65:dd:38:1a:e7:c4:2e:c5: e6:e1:ab:a7:51:b5:7c:2a:00:26:b8:21:b1:3f:d5: ee:1f:3e:50:f5:a6:79:a7:f5:8d:c4:37:16:98:2b: f9:a0:26:bb:7d:9a:19:9f:cd:aa:57:cf:15:1f:fe: 81:fc:6f:df:5d:9f:62:f6:5e:e1:0a:5a:00:de:28: 3e:f4:71:c5:ea:4d:27:da:16:ac:36:1d:e2:30:9e: f5:1f:ef:88:2e:1d:d9:f4:20:3a:ba:0c:d4:4f:a6: b7:d1:85:07:31:39:a9:33:52:85:12:bb:71:e6:da: ed:e6:45:76:6f:ea:5c:d5:39:3c:b5:95:d4:0e:42: f9:ed:15:99:21:17:1d:bb:c5:53:21:a6:c7:a6:81: ee:90:5d:35:12:05:2e:b3:f8:df:6b:e9:b8:7f:07: 09:f6:ab:c2:95:96:9c:34:1a:ed:bc:10:88:5c:3b: 34:48:6d:8f:79:5a:80:87:57:54:6c:79:20:fd:3d: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:86:BF:3E:9B:AD:5F:0C:BD:43:DB:B7:FC:A2:0A:95:94:BB:C3:14 X509v3 Authority Key Identifier: keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f6:29:4c:36:49:88:47:54:c6:be:0f:57:3c:5e:8b:70:a2: d7:6c:f3:39:ff:ae:bd:4a:f9:dc:c1:a1:80:65:9f:7e:d9:73: ee:9e:c0:53:37:44:e3:ed:fb:84:62:f2:38:92:37:32:b9:77: ac:d0:30:e0:97:90:92:69:40:ea:b5:f3:c2:eb:9f:dd:b4:00: a3:fc:e4:b9:e2:da:ad:1f:f5:d2:53:f8:f3:24:30:1b:17:86: ae:19:2f:32:d2:62:0b:07:0f:9a:b7:05:f3:48:79:8d:ec:b4: bf:a7:e0:9f:81:6a:12:5b:7a:cf:e2:2e:30:5c:40:86:4e:22: 52:d5:07:6d:a9:9b:9e:b0:e1:f1:fe:73:1a:1c:31:1f:87:84: a8:9f:29:6f:7c:37:7e:0a:d6:a7:5a:00:c4:50:75:3f:b1:c5: b5:b3:66:06:7b:eb:18:5f:2f:56:4d:ed:a7:37:40:c1:e3:e3: bf:74:7b:15:90:7a:9c:09:e6:42:0e:15:33:f8:ee:6a:f4:1f: 7d:4c:51:69:3e:59:ae:62:15:80:0c:35:93:09:1a:d9:a4:c6: 4c:bc:2a:96:a5:96:c4:7f:bb:a9:fa:5b:0d:23:ff:6f:21:aa: e6:b0:43:f2:45:50:75:ee:14:ac:22:2b:05:58:5a:a0:b0:af: 07:8e:03:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc5NEQxMTAvBgNVBAUTKDIwQzAxQjA1MkMxNTgzRTM2ODdDREVDQkZDMTNFOTk0 MTAxQUQ0MkYwHhcNMjUxMjA3MDEwNjE5WhcNMjUxMjE0MDEwNjE5WjAYMRYwFAYD VQQDEw02OTM0ZDMwYi0yMzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaw1WXRTRwWztbELOdYVI6Z4NjZGgjxQYi8ciXffUZcSw7IgpMVWCwTZJsLj m/gbLn7umTlYEIvFU7EdUtpOc8jLZd04GufELsXm4aunUbV8KgAmuCGxP9XuHz5Q 9aZ5p/WNxDcWmCv5oCa7fZoZn82qV88VH/6B/G/fXZ9i9l7hCloA3ig+9HHF6k0n 2hasNh3iMJ71H++ILh3Z9CA6ugzUT6a30YUHMTmpM1KFErtx5trt5kV2b+pc1Tk8 tZXUDkL57RWZIRcdu8VTIabHpoHukF01EgUus/jfa+m4fwcJ9qvClZacNBrtvBCI XDs0SG2PeVqAh1dUbHkg/T2zUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuGvz6b rV8MvUPbt/yiCpWUu8MUMB8GA1UdIwQYMBaAFCDAGwUsFYPjaHzey/wT6ZQQGtQv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Nzk0RC9DMkNDRTFEQ0U0 MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3VmctTm9mTjdMX0JQcGxCQWEx QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNQWJCU3dWZy1Ob2ZON0xfQlBwbEJBYTFDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Nzk0RC9DMkNDRTFEQ0U0MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3Vmct Tm9mTjdMX0JQcGxCQWExQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA59ilMNkmIR1TGvg9XPF6LcKLXbPM5/669SvncwaGAZZ9+2XPunsBT N0Tj7fuEYvI4kjcyuXes0DDgl5CSaUDqtfPC65/dtACj/OS54tqtH/XSU/jzJDAb F4auGS8y0mILBw+atwXzSHmN7LS/p+CfgWoSW3rP4i4wXECGTiJS1QdtqZuesOHx /nMaHDEfh4SonylvfDd+CtanWgDEUHU/scW1s2YGe+sYXy9WTe2nN0DB4+O/dHsV kHqcCeZCDhUz+O5q9B99TFFpPlmuYhWADDWTCRrZpMZMvCqWpZbEf7up+lsNI/9v IarmsEPyRVB17hSsIisFWFqgsK8HjgMe -----END CERTIFICATE-----Generated at Mon Dec 8 06:02:10 2025 by rpki-client