This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft File: iZOTjIV1ACgOj15T3As-kweu1Kc.mft (raw, json) Hash identifier: XV0w1jy57DSm0oCygwS457B+PwjIOGmpol4/0uchoB0= Subject key identifier: 01:E8:63:1A:F0:BE:FE:32:AE:33:02:26:84:1C:10:90:D8:5E:CE:79 Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 Certificate issuer: /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft Manifest number: 9F Signing time: Tue 23 Dec 2025 05:17:33 +0000 Manifest this update: Tue 23 Dec 2025 05:17:32 +0000 Manifest next update: Tue 30 Dec 2025 05:17:32 +0000 Files and hashes: 1: iZOTjIV1ACgOj15T3As-kweu1Kc.crl (hash: S2SmyUORMI7RCrHG840T0N09gxld3VUHjdmMeov42x0=) 2: 459FAF10EF4811EF8F4B9284C4F9AE02.roa (hash: t4VsjBzDPnCNqQJ4/+l/e7o+o8AvICh72VVWJ8BMmY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3E1, serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Validity Not Before: Dec 23 05:17:32 2025 GMT Not After : Dec 30 05:17:32 2025 GMT Subject: CN=694a25ed-55d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ab:84:92:41:08:0d:5a:97:dc:7b:d1:89:e0: 53:c2:92:32:cf:9c:35:5c:46:1a:a6:c7:21:42:c9: 2e:0e:64:56:ee:30:04:65:80:48:7d:1f:40:fb:e0: a2:47:51:58:de:54:38:60:0c:ba:c4:b4:80:db:34: a8:f0:3f:f0:8d:c9:14:6d:93:44:b7:fe:25:57:19: d5:85:9c:e2:a8:17:7b:29:99:33:95:20:6b:21:13: 6a:46:a0:7b:cd:e4:fe:0b:46:c5:ce:b3:f8:77:f2: 9e:46:b4:7a:eb:ff:d7:3c:ad:7b:fa:1f:ce:a6:f7: 01:e1:9d:44:17:14:ad:97:41:63:92:b5:09:38:81: 79:85:7e:a6:f6:6c:c7:86:1e:55:31:6d:07:c6:e6: b7:ba:40:12:74:43:c0:ec:77:28:45:f9:56:d5:fd: 3b:65:14:1d:56:e6:57:77:62:5c:e0:bc:cb:24:9d: c9:6b:c8:28:29:bb:bd:1f:26:ff:03:c9:6b:6d:bd: b6:61:ba:7b:b0:1e:a9:ab:31:9d:7c:eb:a4:c2:c4: 49:fa:7a:2e:78:02:7f:f0:b8:0f:e4:14:fd:eb:a8: b7:92:9d:da:da:fc:99:1c:ae:bd:4a:7a:ad:e0:f4: 1c:44:6f:24:3f:78:cd:d5:c4:05:77:39:45:e4:6f: ec:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E8:63:1A:F0:BE:FE:32:AE:33:02:26:84:1C:10:90:D8:5E:CE:79 X509v3 Authority Key Identifier: keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:27:25:b0:f0:88:bd:23:72:62:2e:07:0b:28:0f:f6:e0:93: 21:b5:29:36:c7:f6:0c:ad:1e:d1:65:2b:1e:77:b3:e8:20:7f: bc:34:29:7e:f1:a2:98:9d:3e:bb:a0:bc:4c:04:88:96:0b:9b: 6f:8a:d9:c5:b1:a4:96:6c:a1:d5:ec:d9:84:05:cd:1c:c9:c6: 33:cf:4a:21:0d:b1:36:ab:c1:d5:dc:46:c5:99:4b:93:d4:4f: 3a:47:09:96:25:fe:8b:b6:03:18:d0:9d:74:d1:1a:49:a8:b7: b7:4d:aa:2d:93:bc:22:50:38:78:53:2a:8f:f1:a8:58:7a:c7: 33:e8:83:fa:3f:53:b6:ec:3c:e5:16:ed:0d:84:2a:89:05:d3: d8:fd:58:ba:7b:f4:79:78:23:76:ef:72:db:af:fe:77:a6:d6: 01:2e:16:48:ba:49:7a:d0:68:1b:7c:5f:cb:e0:58:cc:2d:e0: 3b:5d:ca:71:24:c8:ee:71:ec:2b:d7:d2:31:36:18:61:c2:21: a9:6b:f5:c6:c6:bf:88:7a:a0:39:df:b3:4f:a4:fc:a3:a1:e6: d5:a3:57:20:f7:ad:6f:a2:32:41:67:30:d8:84:ab:71:5d:36: 22:74:f7:9d:59:63:94:da:2e:bd:b4:23:7f:4d:d3:f7:df:1a: a6:47:21:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRTExMTAvBgNVBAUTKDg5OTM5MzhDODU3NTAwMjgwRThGNUU1M0RDMEIzRTkz MDdBRUQ0QTcwHhcNMjUxMjIzMDUxNzMyWhcNMjUxMjMwMDUxNzMyWjAYMRYwFAYD VQQDDA02OTRhMjVlZC01NWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjquEkkEIDVqX3HvRieBTwpIyz5w1XEYapschQskuDmRW7jAEZYBIfR9A++Ci R1FY3lQ4YAy6xLSA2zSo8D/wjckUbZNEt/4lVxnVhZziqBd7KZkzlSBrIRNqRqB7 zeT+C0bFzrP4d/KeRrR66//XPK17+h/OpvcB4Z1EFxStl0FjkrUJOIF5hX6m9mzH hh5VMW0Hxua3ukASdEPA7HcoRflW1f07ZRQdVuZXd2Jc4LzLJJ3Ja8goKbu9Hyb/ A8lrbb22Ybp7sB6pqzGdfOukwsRJ+noueAJ/8LgP5BT966i3kp3a2vyZHK69Snqt 4PQcRG8kP3jN1cQFdzlF5G/sdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHoYxrw vv4yrjMCJoQcEJDYXs55MB8GA1UdIwQYMBaAFImTk4yFdQAoDo9eU9wLPpMHrtSn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNFMS83Q0YwN0JDNkVG NDcxMUVGQUY0QzQ5NjhDNEY5QUUwMi9pWk9UaklWMUFDZ09qMTVUM0FzLWt3ZXUx S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2laT1RqSVYxQUNnT2oxNVQzQXMta3dldTFLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNFMS83Q0YwN0JDNkVGNDcxMUVGQUY0QzQ5NjhDNEY5QUUwMi9pWk9UaklWMUFD Z09qMTVUM0FzLWt3ZXUxS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0JyWw8Ii9I3JiLgcLKA/24JMhtSk2x/YMrR7RZSsed7PoIH+8NCl+ 8aKYnT67oLxMBIiWC5tvitnFsaSWbKHV7NmEBc0cycYzz0ohDbE2q8HV3EbFmUuT 1E86RwmWJf6LtgMY0J100RpJqLe3Taotk7wiUDh4UyqP8ahYescz6IP6P1O27Dzl Fu0NhCqJBdPY/Vi6e/R5eCN273Lbr/53ptYBLhZIukl60GgbfF/L4FjMLeA7Xcpx JMjucewr19IxNhhhwiGpa/XGxr+IeqA537NPpPyjoebVo1cg961vojJBZzDYhKtx XTYidPedWWOU2i69tCN/TdP33xqmRyHe -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:37 2025 by rpki-client