This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft File: IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft (raw, json) Hash identifier: mhgryGdbeqh7lV3Uo3V8VvuZUhUkOqyAKkbpJNORdSU= Subject key identifier: 6C:67:64:37:E9:DE:C8:E2:2D:F7:5E:70:E9:31:17:93:A3:15:15:6B Authority key identifier: 21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66 Certificate issuer: /CN=A91AE81E/serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft Manifest number: 21 Signing time: Tue 23 Dec 2025 06:35:53 +0000 Manifest this update: Tue 23 Dec 2025 06:35:52 +0000 Manifest next update: Tue 30 Dec 2025 06:35:52 +0000 Files and hashes: 1: IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl (hash: ZXjnUQ6ElN8sjo05pW1xfzHRFJXxRGKQglCCeNErqhQ=) 2: 06048736B08B11F087892851C4F9AE02.roa (hash: MGTRUGiY/PpMjOJIUcW60kEx30zE7nrfm4YqqIZVmAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE81E, serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66 Validity Not Before: Dec 23 06:35:52 2025 GMT Not After : Dec 30 06:35:52 2025 GMT Subject: CN=694a3849-5ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:cc:07:0f:89:4a:07:c0:fb:cd:f8:ed:75: 37:b6:05:ee:06:e8:5d:58:d9:22:c2:27:27:c6:99: 82:45:99:f8:d7:b2:95:a7:f6:b0:d5:46:e0:92:c0: 25:78:97:ad:c1:69:fe:ea:a6:9b:cb:f8:44:61:83: 11:6d:cc:5f:6a:db:5e:78:b9:3f:3b:4e:68:9e:f1: d4:3b:7a:7a:45:ea:88:c8:66:09:12:3b:a0:69:70: 07:bd:c0:6c:ce:c8:b0:e5:fe:db:ca:a2:85:58:5a: 1a:37:7c:af:85:3e:8c:29:72:44:d3:ac:e8:e8:ec: 70:4f:61:8b:e8:f8:9e:cb:70:92:40:bc:c4:c6:4e: c2:35:c9:d4:a5:57:27:49:96:0a:d3:cd:04:a2:a3: 76:72:eb:5c:a3:b4:b8:18:6a:fd:8d:de:30:7b:5c: b7:f2:72:57:28:4d:02:fe:4d:4c:83:21:9a:52:ca: 41:9e:c9:d8:f1:55:8b:ad:32:1e:61:16:88:8b:14: 19:ac:06:45:72:ba:b7:cf:45:e7:eb:14:13:20:ff: ed:34:fd:2f:10:6d:53:95:68:3a:c0:5e:07:2f:42: be:03:13:ec:68:0b:32:da:f1:59:1e:2d:8f:37:d4: 4f:0f:10:92:af:19:9c:a0:84:8f:7e:c0:94:dd:9a: db:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:67:64:37:E9:DE:C8:E2:2D:F7:5E:70:E9:31:17:93:A3:15:15:6B X509v3 Authority Key Identifier: keyid:21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:bf:d7:0a:42:06:27:68:6e:f1:e3:55:b1:fe:56:09:fe:fc: 8a:1a:0d:c5:70:8c:1a:b1:8b:1d:90:e8:35:65:16:74:2d:cd: e9:28:d1:07:db:67:11:73:9a:a5:f6:94:b2:9a:a2:28:12:43: e8:f5:76:9f:27:13:60:40:cf:b4:f9:fb:eb:86:69:5a:7e:b1: d9:d6:e5:89:e2:d4:d4:39:48:e9:b2:b7:de:53:27:b0:ec:71: 56:8a:12:70:1d:96:cc:8f:7c:f7:6c:2c:2a:7b:a2:75:28:60: 00:98:83:06:19:ed:58:b4:78:58:78:ba:db:a8:bc:07:51:76: 24:cf:45:cc:5e:89:8c:38:6b:ee:9c:44:15:ad:02:fd:c2:42: b0:e3:8b:38:0c:8d:74:33:2a:0f:d4:04:ab:c3:b9:15:a9:af: b1:6d:e7:f8:41:26:67:c1:79:4d:3c:81:2b:fb:d4:6e:1f:d8: db:63:d9:6a:fb:47:63:99:58:52:b5:90:4a:5b:58:5c:02:f8: 4f:25:b8:02:ee:17:00:75:24:dc:7d:e0:63:1b:45:7c:88:07: 88:61:b1:29:7e:45:b8:1a:51:d4:f2:fc:bf:ac:d9:c9:5a:6a: c4:8c:50:55:2b:d0:00:6c:2f:7c:1c:65:94:b4:7e:29:4d:07: a4:08:80:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTgxRTExMC8GA1UEBRMoMjE3NjA1QTVERURFMkQ2MjJGOThBRUE2QzJGNkY5NUQ4 RkFFMUI2NjAeFw0yNTEyMjMwNjM1NTJaFw0yNTEyMzAwNjM1NTJaMBgxFjAUBgNV BAMMDTY5NGEzODQ5LTVhYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQpswHD4lKB8D7zfjtdTe2Be4G6F1Y2SLCJyfGmYJFmfjXspWn9rDVRuCSwCV4 l63Baf7qppvL+ERhgxFtzF9q2154uT87Tmie8dQ7enpF6ojIZgkSO6BpcAe9wGzO yLDl/tvKooVYWho3fK+FPowpckTTrOjo7HBPYYvo+J7LcJJAvMTGTsI1ydSlVydJ lgrTzQSio3Zy61yjtLgYav2N3jB7XLfyclcoTQL+TUyDIZpSykGeydjxVYutMh5h FoiLFBmsBkVyurfPRefrFBMg/+00/S8QbVOVaDrAXgcvQr4DE+xoCzLa8VkeLY83 1E8PEJKvGZyghI9+wJTdmtuLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbGdkN+ne yOIt915w6TEXk6MVFWswHwYDVR0jBBgwFoAUIXYFpd7eLWIvmK6mwvb5XY+uG2Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFODFFL0VBNzgyMEQ4QjA4 ODExRjA5QzIyMkIyRUM0RjlBRTAyL0lYWUZwZDdlTFdJdm1LNm13dmI1WFktdUcy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVhZRnBkN2VMV0l2bUs2bXd2YjVYWS11RzJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF ODFFL0VBNzgyMEQ4QjA4ODExRjA5QzIyMkIyRUM0RjlBRTAyL0lYWUZwZDdlTFdJ dm1LNm13dmI1WFktdUcyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHS/1wpCBidobvHjVbH+Vgn+/IoaDcVwjBqxix2Q6DVlFnQtzeko0Qfb ZxFzmqX2lLKaoigSQ+j1dp8nE2BAz7T5++uGaVp+sdnW5Yni1NQ5SOmyt95TJ7Ds cVaKEnAdlsyPfPdsLCp7onUoYACYgwYZ7Vi0eFh4utuovAdRdiTPRcxeiYw4a+6c RBWtAv3CQrDjizgMjXQzKg/UBKvDuRWpr7Ft5/hBJmfBeU08gSv71G4f2Ntj2Wr7 R2OZWFK1kEpbWFwC+E8luALuFwB1JNx94GMbRXyIB4hhsSl+RbgaUdTy/L+s2cla asSMUFUr0ABsL3wcZZS0filNB6QIgN4= -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:56 2025 by rpki-client