This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: yY11JXj4aP50/Qpmxwc6iGT1Id0Ev2Wta1r/x1dq7UY= Subject key identifier: 37:FD:13:46:96:69:21:86:FC:4D:EB:1A:2E:89:8E:79:40:16:AC:4E Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 0236 Signing time: Sun 07 Dec 2025 00:30:08 +0000 Manifest this update: Sun 07 Dec 2025 00:30:07 +0000 Manifest next update: Sun 14 Dec 2025 00:30:07 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: VzqAe6ZwehFjeZjoen+R9sBu24kM/tRWHjKxsTWbGVU=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: vCKD+CzoArcalyziR+d7Ov1DlN61zdE8Qt99sD5HF3I=) 3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Ecx2uEYsiUTMI1pp2hzwrKj0DYLLvVQ4KuzNnfcJWcM=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Z3Pgsl7gnEpPUpQRogkAmZeZ95NlxutDljfa11ERFDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Dec 7 00:30:07 2025 GMT Not After : Dec 14 00:30:07 2025 GMT Subject: CN=6934ca8f-87bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:8f:32:6c:48:78:d1:ea:12:a0:19:27:62: e3:1b:15:2e:bc:d2:3f:8e:50:85:5c:21:dd:fd:a0: 0c:42:e8:07:90:99:99:e2:ab:bb:92:ad:34:27:3e: 16:eb:0d:18:60:2b:b0:2b:87:66:6b:10:ea:59:26: 56:ae:67:5a:83:e8:c6:ef:f7:51:6d:74:a5:3e:dd: 1e:10:f5:4d:cf:3e:04:04:e4:a9:5d:28:3e:a8:53: 9b:41:04:34:90:9d:f9:a7:0f:5a:53:39:67:85:bc: 03:09:43:a4:13:56:44:0f:17:c4:68:9c:3b:31:35: 23:0d:81:8c:26:93:58:a5:66:07:69:8a:98:a9:60: 35:c6:85:db:d6:7a:f5:7a:d4:af:0c:c8:b0:a6:42: 7a:61:f7:c6:bd:4c:64:5f:58:70:3e:58:8c:a5:ab: 51:7e:65:b7:f5:1e:56:53:3c:44:9b:df:3e:93:d0: a2:3c:52:93:08:52:7e:7c:7c:f6:9a:7a:6e:55:34: 90:e2:04:61:89:8a:48:cb:88:ef:b9:a8:33:c6:41: 25:ae:4f:b5:54:97:70:43:ef:c6:bd:f1:c5:9a:5e: 26:19:3f:43:38:63:af:14:62:5a:9c:4b:7c:82:e5: 16:79:17:00:f1:fa:68:36:9b:e3:7d:38:84:88:9d: 57:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FD:13:46:96:69:21:86:FC:4D:EB:1A:2E:89:8E:79:40:16:AC:4E X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1e:cd:83:74:84:43:f8:35:8d:09:36:61:86:cb:e2:64:e9: 3b:84:67:64:34:0e:e7:15:b0:12:71:d8:28:6e:0c:02:c2:5e: 1a:a3:eb:cf:d3:8a:6d:2a:1d:77:80:25:aa:61:3e:5c:29:9e: d7:3c:28:67:8f:34:5b:6f:6b:7f:88:44:93:3c:bc:f0:37:61: 55:a9:e7:d7:de:0e:b2:88:bc:57:01:97:00:4f:be:13:e5:74: 7d:aa:7f:68:23:a7:c1:f8:c4:15:43:8b:21:8d:a5:62:bd:26: 25:33:72:00:6e:a0:9d:6e:a0:ac:99:38:28:57:12:ef:e8:33: e1:0b:da:37:22:6f:23:49:69:63:da:49:bc:f4:fc:c1:35:8e: 1c:6b:6b:c8:23:6a:ae:e6:6c:88:78:93:71:84:6e:7c:0b:7d: 5d:45:a2:de:2b:0f:59:37:fd:93:03:29:81:02:1a:64:be:ba: 60:10:40:28:0c:70:03:dd:b0:85:7e:86:2b:55:f6:4a:ec:d6: 0c:7c:cb:48:7e:e1:a7:d5:9d:c0:4c:5c:5f:74:ac:a4:f2:20: 6b:8e:56:25:49:ec:fa:3f:ae:9e:d9:b0:22:83:3d:a3:f7:9a: 0e:66:5e:1b:49:7e:29:1a:e7:20:20:e6:a7:32:6e:9a:e5:0f: 8a:01:f9:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjUxMjA3MDAzMDA3WhcNMjUxMjE0MDAzMDA3WjAYMRYwFAYD VQQDEw02OTM0Y2E4Zi04N2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseyPMmxIeNHqEqAZJ2LjGxUuvNI/jlCFXCHd/aAMQugHkJmZ4qu7kq00Jz4W 6w0YYCuwK4dmaxDqWSZWrmdag+jG7/dRbXSlPt0eEPVNzz4EBOSpXSg+qFObQQQ0 kJ35pw9aUzlnhbwDCUOkE1ZEDxfEaJw7MTUjDYGMJpNYpWYHaYqYqWA1xoXb1nr1 etSvDMiwpkJ6YffGvUxkX1hwPliMpatRfmW39R5WUzxEm98+k9CiPFKTCFJ+fHz2 mnpuVTSQ4gRhiYpIy4jvuagzxkElrk+1VJdwQ+/GvfHFml4mGT9DOGOvFGJanEt8 guUWeRcA8fpoNpvjfTiEiJ1XfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf9E0aW aSGG/E3rGi6JjnlAFqxOMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Hs2DdIRD+DWNCTZhhsviZOk7hGdkNA7nFbAScdgobgwCwl4ao+vP 04ptKh13gCWqYT5cKZ7XPChnjzRbb2t/iESTPLzwN2FVqefX3g6yiLxXAZcAT74T 5XR9qn9oI6fB+MQVQ4shjaVivSYlM3IAbqCdbqCsmTgoVxLv6DPhC9o3Im8jSWlj 2km89PzBNY4ca2vII2qu5myIeJNxhG58C31dRaLeKw9ZN/2TAymBAhpkvrpgEEAo DHAD3bCFfoYrVfZK7NYMfMtIfuGn1Z3ATFxfdKyk8iBrjlYlSez6P66e2bAigz2j 95oOZl4bSX4pGucgIOanMm6a5Q+KAflv -----END CERTIFICATE-----Generated at Sun Dec 7 15:07:19 2025 by rpki-client