This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft File: IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft (raw, json) Hash identifier: +FMHn8ugKkZxNE6GeXdGMy5Nb6cegLxFJj3ekpEXIZg= Subject key identifier: F3:0E:F7:16:5F:2F:2F:64:7C:D1:CD:AD:0C:31:85:4A:22:19:3D:73 Authority key identifier: 20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0 Certificate issuer: /CN=A91B40B2/serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft Manifest number: 05 Signing time: Tue 23 Dec 2025 06:57:33 +0000 Manifest this update: Tue 23 Dec 2025 06:57:33 +0000 Manifest next update: Tue 30 Dec 2025 06:57:33 +0000 Files and hashes: 1: IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl (hash: iQ23ZqcouWmRg67S2Jx6e7v9tSBFM43N5J9o3pQLL9k=) 2: 78211876DA3811F080F82F148DD3641D.roa (hash: D8fUifUMsWM3OJd2OmgVxau2OHyuq+eeEEgXuGTeJA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B40B2, serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0 Validity Not Before: Dec 23 06:57:33 2025 GMT Not After : Dec 30 06:57:33 2025 GMT Subject: CN=694a3d5d-76b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5c:85:1d:4d:cf:49:b3:6e:1c:df:7b:5c:5c: cd:3e:e2:d7:93:65:15:e9:f9:f3:c2:f7:ff:17:25: bd:02:56:68:fd:a5:7a:a0:50:0f:09:4d:b3:82:bd: 06:9b:0a:7d:51:dd:da:c2:22:ba:ca:45:55:ff:31: f5:73:f3:cd:7e:c0:43:cd:47:97:f8:53:fa:15:01: 5c:20:46:d4:55:7f:29:1e:c5:de:97:98:6d:ae:c7: cd:b0:6c:8e:b4:e3:a5:6f:e9:0a:a3:e3:ed:18:d4: 85:e9:fc:0a:89:16:d6:72:c6:7d:2a:8f:4d:06:e2: 05:ba:60:87:2b:27:24:be:e9:6a:ad:81:d8:ad:89: 25:07:26:03:94:9a:dc:2f:2e:0f:a5:0b:65:7f:1e: 6a:45:07:df:fc:3c:0f:e1:09:74:f6:1a:23:c8:55: 1d:4c:c3:f3:30:c5:9c:c5:e4:52:84:6a:1f:88:bd: 0f:32:2a:2d:0e:d0:67:33:a7:64:f9:3a:9c:47:a3: b4:be:c9:e2:c9:77:cf:9c:7a:89:fd:94:96:f2:20: ac:93:f9:0e:b1:56:c4:8f:57:b2:e1:91:59:c7:f8: 40:29:9b:bb:2c:eb:75:dd:14:f0:fe:cb:bd:36:25: 68:0f:f8:29:28:40:16:45:ae:63:7a:a5:82:6a:f0: c1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0E:F7:16:5F:2F:2F:64:7C:D1:CD:AD:0C:31:85:4A:22:19:3D:73 X509v3 Authority Key Identifier: keyid:20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:71:fa:d2:d8:f6:d6:fa:3b:7c:83:19:f6:d1:fd:0c:42:9b: 6b:b8:e7:10:6e:6b:35:8b:eb:9b:d8:73:ab:c1:65:82:b8:a0: a1:9a:dd:f4:55:dc:f6:9c:58:02:ef:3d:8f:76:6e:24:e4:48: c6:8e:90:95:de:20:7d:3e:ff:0d:31:37:b7:06:bd:f2:d3:6e: 82:e2:84:fe:99:6c:2c:c5:d4:ef:89:93:20:07:0f:b9:76:dc: 3a:b1:a1:f2:f3:93:d3:7b:b3:1c:0b:67:d8:95:b5:29:53:dd: ad:6a:6f:48:d3:79:12:1f:6b:08:d7:81:44:aa:c5:ae:96:ed: db:cc:e7:38:e5:ec:c6:5c:f6:71:4c:9f:10:71:ee:bb:d8:30: 2b:ea:d6:c6:7c:0f:3d:88:10:f2:35:fe:ed:8b:02:48:60:f5: 52:75:3a:3d:2a:f9:f0:b3:ce:cb:eb:2e:8c:95:1e:1c:52:89: 1e:48:ce:f6:1d:d4:c4:dd:21:5b:32:48:d1:ba:54:0b:23:16: 2d:55:a3:1c:65:94:3e:8e:10:2f:a6:dd:bf:7a:df:53:9b:97: b9:0f:39:f9:e6:3c:b4:91:8e:94:56:f2:00:40:9e:9a:92:a6: d1:81:2d:56:f5:11:16:b8:23:e6:a6:23:9c:b9:46:e5:df:e5: 28:89:eb:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDBCMjExMC8GA1UEBRMoMjBGM0JCRDQ5OEY0M0M5NzkxM0VFMUI5OTQyOURCODkw QjQ3NjJCMDAeFw0yNTEyMjMwNjU3MzNaFw0yNTEyMzAwNjU3MzNaMBgxFjAUBgNV BAMMDTY5NGEzZDVkLTc2YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMXIUdTc9Js24c33tcXM0+4teTZRXp+fPC9/8XJb0CVmj9pXqgUA8JTbOCvQab Cn1R3drCIrrKRVX/MfVz881+wEPNR5f4U/oVAVwgRtRVfykexd6XmG2ux82wbI60 46Vv6Qqj4+0Y1IXp/AqJFtZyxn0qj00G4gW6YIcrJyS+6WqtgditiSUHJgOUmtwv Lg+lC2V/HmpFB9/8PA/hCXT2GiPIVR1Mw/MwxZzF5FKEah+IvQ8yKi0O0Gczp2T5 OpxHo7S+yeLJd8+ceon9lJbyIKyT+Q6xVsSPV7LhkVnH+EApm7ss63XdFPD+y702 JWgP+CkoQBZFrmN6pYJq8MElAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8w73Fl8v L2R80c2tDDGFSiIZPXMwHwYDVR0jBBgwFoAUIPO71Jj0PJeRPuG5lCnbiQtHYrAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0MEIyL0QxNDZFNEYwREEz NjExRjBBOTMzRDI0QzhDRDM2NDFEL0lQTzcxSmowUEplUlB1RzVsQ25iaVF0SFly QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVBPNzFKajBQSmVSUHVHNWxDbmJpUXRIWXJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 MEIyL0QxNDZFNEYwREEzNjExRjBBOTMzRDI0QzhDRDM2NDFEL0lQTzcxSmowUEpl UlB1RzVsQ25iaVF0SFlyQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAApx+tLY9tb6O3yDGfbR/QxCm2u45xBuazWL65vYc6vBZYK4oKGa3fRV 3PacWALvPY92biTkSMaOkJXeIH0+/w0xN7cGvfLTboLihP6ZbCzF1O+JkyAHD7l2 3DqxofLzk9N7sxwLZ9iVtSlT3a1qb0jTeRIfawjXgUSqxa6W7dvM5zjl7MZc9nFM nxBx7rvYMCvq1sZ8Dz2IEPI1/u2LAkhg9VJ1Oj0q+fCzzsvrLoyVHhxSiR5IzvYd 1MTdIVsySNG6VAsjFi1VoxxllD6OEC+m3b9631Obl7kPOfnmPLSRjpRW8gBAnpqS ptGBLVb1ERa4I+amI5y5RuXf5SiJ6yM= -----END CERTIFICATE-----Generated at Wed Dec 24 22:39:58 2025 by rpki-client