This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft File: iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft (raw, json) Hash identifier: MJyv91Xf/zzA0s+xmcSxmZTULAyX0ONYH1Vrz8ZiWIM= Subject key identifier: F1:72:92:FA:84:23:64:74:49:2D:AD:B4:C4:5A:9F:49:F0:F6:17:BC Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft Manifest number: 3D Signing time: Tue 09 Dec 2025 05:17:56 +0000 Manifest this update: Tue 09 Dec 2025 05:17:56 +0000 Manifest next update: Tue 16 Dec 2025 05:17:56 +0000 Files and hashes: 1: iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl (hash: +wD2CmidRzdlStxJYYzVBwTU578Z3RYPeMWlyWq7YwQ=) 2: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (hash: LhJsIUDxJjf34uwAXx8g7B6lkG4erRS20bGVNhkO1Ek=) 3: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (hash: vQ9ge67AKzH4HNbVsuxX3Mwi95vAo6POwUTMCo0fB8I=) 4: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (hash: ccXunp3OE2ONSoYTGcr2m1hcygin6LHeeNQEO7if+44=) 5: 8B58F72A7BF511F0BEBF8326C4F9AE02.roa (hash: DPudtrZt3zDLn6cOKt8G2uNXGPQUskKpTDxbAvt9zzA=) 6: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (hash: 8VEPDf924YuQ0JrYCDPzrjF2qm9rSo7AZ2xnXGQmqpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 05:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Dec 9 05:17:56 2025 GMT Not After : Dec 16 05:17:56 2025 GMT Subject: CN=6937b104-69d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:ee:e4:61:c0:52:5a:25:c5:56:1e:81:1e:01: 6b:53:41:b9:5c:b7:7d:8c:e1:88:bc:db:19:99:4b: bc:5b:8f:fc:92:5e:e5:5b:7e:e9:40:86:d7:e3:43: 4b:c0:df:96:45:ef:15:25:5f:14:f1:67:11:94:70: 6d:a6:62:80:bd:2d:2f:26:d4:6c:d8:ff:60:fe:d8: ef:2d:8e:4d:6e:ed:74:2d:10:08:8a:8a:4e:e1:a8: 6e:61:36:b0:9e:0f:ae:c9:60:fa:b5:ae:ff:b6:f7: cc:f9:54:0d:27:6b:f9:2f:1e:67:bc:3c:a6:a0:38: 7a:3e:dc:ff:a0:5d:f0:fb:06:70:6a:60:46:f9:33: e4:ce:52:50:fd:33:58:2d:7c:84:ca:ab:7a:47:f8: b9:f6:ba:43:4b:af:ad:79:2d:a2:2e:98:4a:bf:dd: 87:e5:78:5f:ad:ee:f6:82:d5:ef:bb:7c:37:04:89: c4:01:f6:85:23:fd:0d:e1:ca:5f:8b:94:90:d1:1c: fa:00:45:bf:dd:8c:2e:45:45:ef:1a:dc:ac:0b:64: a1:d4:35:05:8c:1c:d9:1f:17:45:fd:52:ef:fb:1a: c8:03:4f:45:16:de:f8:9f:4f:c7:b8:8b:1d:ca:5a: db:50:80:ae:5b:09:09:cc:6a:fd:9f:b6:ee:d9:29: 2f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:72:92:FA:84:23:64:74:49:2D:AD:B4:C4:5A:9F:49:F0:F6:17:BC X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ab:fc:90:37:b1:7e:6c:6f:99:75:c2:31:dd:41:01:e5:55: ce:d0:0b:46:3c:53:53:6e:bb:05:9e:8c:ab:89:4f:c2:34:d1: 23:72:77:a3:52:67:10:e6:87:1b:91:d2:04:62:54:3a:1d:fe: c2:57:35:97:6e:57:e1:d5:92:9f:2c:11:77:76:b7:23:b8:67: 69:8b:7c:34:cf:29:22:bd:12:96:87:ac:ac:54:34:4b:64:b7: ad:88:09:b4:89:0e:13:4c:74:aa:88:0a:7c:fb:e6:54:d2:7b: 26:58:09:d9:70:b7:be:52:a5:e5:fa:7f:76:6e:83:db:29:cc: 9f:94:63:44:a2:4c:76:34:9e:6b:e8:d4:30:49:0e:a3:94:5c: 19:ba:56:70:8c:19:d0:c1:d0:de:ba:19:d0:ce:08:12:75:f9: 51:4b:c7:43:d5:b7:fe:93:04:fe:c6:76:8b:0f:14:ae:b4:b5: 6f:a4:53:23:c5:f7:24:a4:5a:d2:8b:7b:7b:3d:85:a8:62:a4: e4:85:e0:cc:ea:9a:a7:b2:4c:19:1f:1e:bb:25:37:59:7c:93: e3:18:01:2d:3a:71:f8:00:49:b1:2f:42:b0:53:09:30:52:40: 73:7a:7c:ad:10:4d:c3:19:5d:55:85:13:63:40:91:e0:c3:61: 9d:99:b3:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDU4ODExMC8GA1UEBRMoODgyODU5RDUyMzAxRjAxNTcxRDlENENGOTUzRjQ1RTA3 NUUwOUE5ODAeFw0yNTEyMDkwNTE3NTZaFw0yNTEyMTYwNTE3NTZaMBgxFjAUBgNV BAMTDTY5MzdiMTA0LTY5ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD67uRhwFJaJcVWHoEeAWtTQblct32M4Yi82xmZS7xbj/ySXuVbfulAhtfjQ0vA 35ZF7xUlXxTxZxGUcG2mYoC9LS8m1GzY/2D+2O8tjk1u7XQtEAiKik7hqG5hNrCe D67JYPq1rv+298z5VA0na/kvHme8PKagOHo+3P+gXfD7BnBqYEb5M+TOUlD9M1gt fITKq3pH+Ln2ukNLr615LaIumEq/3YfleF+t7vaC1e+7fDcEicQB9oUj/Q3hyl+L lJDRHPoARb/djC5FRe8a3KwLZKHUNQWMHNkfF0X9Uu/7GsgDT0UW3vifT8e4ix3K WttQgK5bCQnMav2ftu7ZKS8xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8XKS+oQj ZHRJLa20xFqfSfD2F7wwHwYDVR0jBBgwFoAUiChZ1SMB8BVx2dTPlT9F4HXgmpgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlENTg4L0JGN0Q1RTc2N0JG MzExRjBBMDVGQUQ4MkM0RjlBRTAyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21w Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUNoWjFTTUI4QlZ4MmRUUGxUOUY0SFhnbXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE NTg4L0JGN0Q1RTc2N0JGMzExRjBBMDVGQUQ4MkM0RjlBRTAyL2lDaFoxU01COEJW eDJkVFBsVDlGNEhYZ21wZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGur/JA3sX5sb5l1wjHdQQHlVc7QC0Y8U1NuuwWejKuJT8I00SNyd6NS ZxDmhxuR0gRiVDod/sJXNZduV+HVkp8sEXd2tyO4Z2mLfDTPKSK9EpaHrKxUNEtk t62ICbSJDhNMdKqICnz75lTSeyZYCdlwt75SpeX6f3Zug9spzJ+UY0SiTHY0nmvo 1DBJDqOUXBm6VnCMGdDB0N66GdDOCBJ1+VFLx0PVt/6TBP7GdosPFK60tW+kUyPF 9ySkWtKLe3s9hahipOSF4MzqmqeyTBkfHrslN1l8k+MYAS06cfgASbEvQrBTCTBS QHN6fK0QTcMZXVWFE2NAkeDDYZ2Zszk= -----END CERTIFICATE-----Generated at Fri Dec 12 02:40:01 2025 by rpki-client