This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json) Hash identifier: 0SbarMRwiSkhXqS+QapZ9BfgDLApcs3s36CKodpLvpY= Subject key identifier: E7:62:5A:90:20:20:AF:41:F5:BB:D7:B9:EC:6A:88:7B:6E:BF:4E:D6 Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 0873 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft Manifest number: 085F Signing time: Sun 14 Dec 2025 20:06:09 +0000 Manifest this update: Sun 14 Dec 2025 20:06:09 +0000 Manifest next update: Sun 21 Dec 2025 20:06:09 +0000 Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: XuIJDFRBQ5DZ1TM5zvBb1vDWz3o5LamGMWK83rQ/blk=) 2: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: tSePHI7aLjEFlYS6xw+YOLrRBy4JYZe6TL89trJbrgc=) 3: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: DOctWr/OPgqaZuQo/Vg8BKPX28KWmuANahI8jBAfLDc=) 4: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: H1FuH2ZNH03uYQtNzb3TWzIjcp7o0St6uGtbs7VdGro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: Dec 14 20:06:09 2025 GMT Not After : Dec 21 20:06:09 2025 GMT Subject: CN=693f18b1-5862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:00:e1:e6:f4:cf:c2:60:96:45:fb:2e:65:d4: 95:06:40:6c:a8:95:f5:29:80:01:40:02:07:0f:49: df:10:dc:1c:06:e5:3d:0f:cc:3a:2c:3d:7e:18:2b: c4:fb:5d:89:6d:e5:a1:5d:0c:d4:78:95:9f:fe:be: f8:6d:b1:1e:24:e2:d6:e2:d3:a6:57:29:6a:52:8a: 79:3a:79:89:04:f3:aa:15:6f:da:89:70:bf:f7:4c: d2:03:8a:a1:22:da:bc:00:b3:c7:9a:29:11:2b:83: 82:e9:b0:24:e2:6b:48:44:dd:a7:5b:c0:6a:5d:b2: b3:04:90:d2:a9:e1:28:75:c4:29:01:37:e4:30:5e: a4:02:d2:5b:af:bc:33:77:84:38:9f:fc:78:f3:35: 8e:46:d1:5f:58:7f:75:82:ef:5f:0f:37:42:d6:f0: e6:7b:1e:3e:dc:db:fb:50:89:40:2e:de:4b:45:61: d5:0e:da:57:d9:61:8e:2d:a5:51:11:c5:a0:cb:99: be:9b:c6:0d:6f:86:6b:ae:03:b4:9d:58:28:71:67: c6:03:15:2e:bb:3c:f5:05:96:33:9e:63:e9:c9:f5: b9:4d:7f:a6:55:fc:22:c5:8a:eb:5f:85:e1:92:2b: b8:77:8e:e6:77:e8:03:e9:94:a5:6f:b9:17:2e:30: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:62:5A:90:20:20:AF:41:F5:BB:D7:B9:EC:6A:88:7B:6E:BF:4E:D6 X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:69:6d:40:15:43:b6:d2:84:77:af:c5:9e:eb:dd:d0:e5:5b: 91:1d:5a:df:bf:a5:d2:05:29:a7:90:bd:ca:00:32:f0:f6:7c: 00:40:ef:90:25:dd:c1:f3:de:76:61:4b:83:6d:00:54:5c:f6: 62:23:f0:13:e4:2d:f1:5c:96:e6:9d:87:ee:1e:20:02:13:8d: 2a:35:91:7d:95:7e:02:b0:b1:16:d7:6b:c1:fd:a3:48:87:44: 95:b1:a7:0c:46:1b:88:1e:09:80:b6:6e:f4:26:40:61:ea:e9: b3:0d:f1:be:a9:e8:18:fc:e8:72:a1:ca:14:ca:3d:f6:d1:34: 24:11:6f:65:0d:ea:86:cb:e1:db:d3:62:5b:58:e9:f1:d2:99: 1d:72:ab:46:f5:fc:ab:72:ae:9b:e8:d0:1e:bd:ce:a8:f3:6c: 3c:a7:6b:96:6f:e8:6a:23:f1:01:7d:98:6c:5e:21:62:40:72: ae:7a:06:9f:e7:9c:ee:98:d9:1c:2f:f1:96:7b:28:fb:97:99: 38:ba:27:a8:f4:4e:69:d1:45:ce:a7:9b:44:1e:fb:5a:c7:59: c6:e8:3a:13:3c:b9:c5:22:c7:e2:1f:c6:b3:60:ac:38:7d:94: 32:4e:1a:71:12:9b:0c:02:58:3b:21:5b:3c:ff:a1:0c:ca:51: 6b:1e:4c:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjUxMjE0MjAwNjA5WhcNMjUxMjIxMjAwNjA5WjAYMRYwFAYD VQQDDA02OTNmMThiMS01ODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQDh5vTPwmCWRfsuZdSVBkBsqJX1KYABQAIHD0nfENwcBuU9D8w6LD1+GCvE +12JbeWhXQzUeJWf/r74bbEeJOLW4tOmVylqUop5OnmJBPOqFW/aiXC/90zSA4qh Itq8ALPHmikRK4OC6bAk4mtIRN2nW8BqXbKzBJDSqeEodcQpATfkMF6kAtJbr7wz d4Q4n/x48zWORtFfWH91gu9fDzdC1vDmex4+3Nv7UIlALt5LRWHVDtpX2WGOLaVR EcWgy5m+m8YNb4ZrrgO0nVgocWfGAxUuuzz1BZYznmPpyfW5TX+mVfwixYrrX4Xh kiu4d47md+gD6ZSlb7kXLjBV5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdiWpAg IK9B9bvXuexqiHtuv07WMB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1 UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZaW1AFUO20oR3r8We693Q5VuRHVrfv6XSBSmnkL3KADLw9nwAQO+Q Jd3B8952YUuDbQBUXPZiI/AT5C3xXJbmnYfuHiACE40qNZF9lX4CsLEW12vB/aNI h0SVsacMRhuIHgmAtm70JkBh6umzDfG+qegY/OhyocoUyj320TQkEW9lDeqGy+Hb 02JbWOnx0pkdcqtG9fyrcq6b6NAevc6o82w8p2uWb+hqI/EBfZhsXiFiQHKuegaf 55zumNkcL/GWeyj7l5k4uieo9E5p0UXOp5tEHvtax1nG6DoTPLnFIsfiH8azYKw4 fZQyThpxEpsMAlg7IVs8/6EMylFrHkx9 -----END CERTIFICATE-----Generated at Mon Dec 15 19:57:57 2025 by rpki-client