This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json) Hash identifier: 2qPPpzMkwgWEgI/wP9c6cWncKEYH/9P0p6H7np2+TvI= Subject key identifier: 07:35:ED:29:C4:8B:05:30:26:5C:81:41:33:BD:F7:C9:45:3B:B6:C6 Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 0A57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft Manifest number: 0A4B Signing time: Mon 22 Dec 2025 19:07:01 +0000 Manifest this update: Mon 22 Dec 2025 19:07:00 +0000 Manifest next update: Mon 29 Dec 2025 19:07:00 +0000 Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: Vk2raRyc1/j/0HIc33cutV8Y+mBuwhkeaP8lBGOW2E0=) 2: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: qSGZ+j4RvXroFxByBDcPf9/bS2chAaWe7JM19f3ZPpw=) 3: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: ZCM+V6Y56yepaeegUajjp4xOF8Q6SeyZY2EvL4X5a+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2647 (0xa57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: Dec 22 19:07:00 2025 GMT Not After : Dec 29 19:07:00 2025 GMT Subject: CN=694996d5-65c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:74:44:80:78:0c:4d:3f:14:b9:cf:ee:d9: be:6a:9b:8b:29:0e:28:33:1e:59:c6:2f:9e:ca:c6: 2f:e7:82:aa:9d:dd:25:43:cc:ef:cf:83:d8:53:2b: ab:f9:41:7a:e4:05:1d:33:9a:ec:b5:ca:84:29:bc: fb:12:70:c2:b3:ce:77:82:59:a6:3a:29:ee:4b:16: 97:d6:62:af:42:e9:f0:d9:14:46:d6:ee:5d:00:35: b4:eb:52:db:ca:7b:d3:d8:c1:1e:e5:1b:2b:69:b3: 00:09:58:0d:54:1f:f4:50:6a:8c:10:f1:ef:75:3c: 68:11:4b:8a:59:34:dd:f6:1c:c7:45:74:41:7d:62: 85:6f:d1:d6:d6:c9:0f:80:54:99:25:c7:68:a1:63: 9e:6a:b6:9c:60:69:d8:12:5d:d2:0f:d6:1a:58:76: 73:dc:27:29:c4:13:04:50:21:29:cc:08:b9:c9:9c: 38:7f:e4:8b:cf:ac:28:fe:cd:d3:26:74:fe:84:93: 59:41:b8:c0:a8:f6:e3:4d:ac:33:83:10:2b:bb:bc: 0e:2a:82:d3:c9:74:d5:52:3d:c2:46:6b:ec:c0:a7: 64:8e:b3:74:c6:7c:d2:8d:3b:ce:d5:79:2b:83:49: 9f:dc:47:59:7d:51:e4:9f:2c:de:b5:fd:33:48:f5: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:35:ED:29:C4:8B:05:30:26:5C:81:41:33:BD:F7:C9:45:3B:B6:C6 X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:40:3d:85:9d:9a:4f:e1:95:ad:7d:e0:e2:ce:24:cb:c1:04: ad:2e:db:01:24:08:a5:e4:bf:da:9b:69:1a:3d:72:02:e7:53: 71:60:31:8a:12:49:b5:78:d7:27:55:cb:85:03:25:38:fa:fc: ad:1c:4d:65:be:c2:2e:26:25:cc:3d:04:17:c3:09:cf:da:95: 36:70:74:76:98:d9:04:7d:5e:19:f5:44:96:14:ef:40:85:71: 88:49:8f:56:59:1d:be:e5:5c:f6:df:18:94:db:55:b5:0f:6f: fd:be:7f:bb:d9:50:08:0d:11:36:69:72:46:18:2e:ea:0b:d7: 2d:03:12:68:ea:e6:27:04:1f:07:7f:46:d1:4b:1c:7f:91:c9: 2f:7a:02:7d:2f:f0:e4:3c:fb:60:d2:bb:4a:86:60:4c:5d:d6: 83:12:ae:e7:26:46:f3:cd:67:75:5c:55:ff:28:f0:f4:c1:a0: d5:26:3d:df:b5:4d:c9:e2:7c:c1:1d:57:3a:64:b4:fb:c8:ae: 28:45:21:04:53:91:f7:74:a0:e2:27:32:2f:48:b1:b1:00:9b: 9b:5e:7a:2d:c8:b0:dc:74:c4:9f:c6:94:a0:a7:29:fb:11:7f: 44:76:ad:a7:6e:da:8d:2f:2c:b2:78:aa:ec:44:e6:dc:78:36: 0c:a3:35:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjUxMjIyMTkwNzAwWhcNMjUxMjI5MTkwNzAwWjAYMRYwFAYD VQQDDA02OTQ5OTZkNS02NWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKF0RIB4DE0/FLnP7tm+apuLKQ4oMx5Zxi+eysYv54Kqnd0lQ8zvz4PYUyur +UF65AUdM5rstcqEKbz7EnDCs853glmmOinuSxaX1mKvQunw2RRG1u5dADW061Lb ynvT2MEe5RsrabMACVgNVB/0UGqMEPHvdTxoEUuKWTTd9hzHRXRBfWKFb9HW1skP gFSZJcdooWOearacYGnYEl3SD9YaWHZz3CcpxBMEUCEpzAi5yZw4f+SLz6wo/s3T JnT+hJNZQbjAqPbjTawzgxAru7wOKoLTyXTVUj3CRmvswKdkjrN0xnzSjTvO1Xkr g0mf3EdZfVHknyzetf0zSPWDGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc17SnE iwUwJlyBQTO998lFO7bGMB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjY3Qy81QjUzODk2NjdCRDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6 YUVIX1VEVTJfNWtZX3JKY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYQD2FnZpP4ZWtfeDiziTLwQStLtsBJAil5L/am2kaPXIC51NxYDGK Ekm1eNcnVcuFAyU4+vytHE1lvsIuJiXMPQQXwwnP2pU2cHR2mNkEfV4Z9USWFO9A hXGISY9WWR2+5Vz23xiU21W1D2/9vn+72VAIDRE2aXJGGC7qC9ctAxJo6uYnBB8H f0bRSxx/kckvegJ9L/DkPPtg0rtKhmBMXdaDEq7nJkbzzWd1XFX/KPD0waDVJj3f tU3J4nzBHVc6ZLT7yK4oRSEEU5H3dKDiJzIvSLGxAJubXnotyLDcdMSfxpSgpyn7 EX9Edq2nbtqNLyyyeKrsRObceDYMozU/ -----END CERTIFICATE-----Generated at Tue Dec 23 09:43:13 2025 by rpki-client