This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: t6A+BOh8vFc3ctw/lzGOQyRVRw4W5xGh+rQKFKiev00= Subject key identifier: 05:51:F0:6B:1F:D9:1A:B1:7A:80:96:D7:87:C4:2E:BA:1B:3E:04:87 Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 05A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 059B Signing time: Thu 18 Dec 2025 22:31:30 +0000 Manifest this update: Thu 18 Dec 2025 22:31:29 +0000 Manifest next update: Thu 25 Dec 2025 22:31:29 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: MhzbaMWyBu52BDaTPG34wb+cBL2ZlMwl193bdgPgMXQ=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: xQl2oR7pAbge5iF8YPhv/hbmMFqMQxGSZC11zhknFak=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: M0rop6u3XFd48CsMz0Ik0R+4A+HjyQyG2cdgIdeoY8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1447 (0x5a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: Dec 18 22:31:29 2025 GMT Not After : Dec 25 22:31:29 2025 GMT Subject: CN=694480c2-38f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:a1:9c:e0:8e:93:70:eb:c7:59:8d:57:51: 84:11:db:1f:b0:24:f9:84:4d:7a:cf:4f:14:a8:e4: fa:53:0b:33:36:e6:3a:58:cb:d1:3b:76:fc:d5:0a: c3:63:fd:c0:09:cb:52:de:59:f7:0f:e8:3e:17:b8: dd:00:09:e9:61:ea:7e:cd:a6:4e:4e:83:28:64:b8: 4f:fe:44:f6:d6:64:c5:27:f1:8a:8b:15:44:96:1e: 4e:03:47:76:71:13:2c:bb:40:44:4e:d6:78:74:a7: 55:7f:fa:50:4d:63:ab:3b:06:34:57:e4:85:ed:e5: 36:4f:33:cb:22:7e:1d:e4:66:d1:c6:5e:c1:14:40: 70:cb:e3:b6:36:c6:da:d6:ab:e7:18:3b:9a:a4:96: b6:58:77:e3:d2:39:19:5d:28:75:a9:3b:73:f7:77: 0e:d6:5d:2d:16:33:9f:c0:a5:dd:04:9f:b9:39:6e: 0f:0b:cf:f2:ba:8e:27:3a:98:00:a6:b2:3b:62:f1: 76:82:f2:78:9c:89:42:59:57:4c:0d:c4:8e:66:62: 81:d2:ac:16:4e:b2:fb:a6:1d:34:e3:e9:ed:c0:76: 4e:a5:d8:54:92:5e:07:d4:08:16:e6:cf:37:cf:56: a6:9a:9f:f8:02:f1:a4:5e:30:f7:15:e0:5c:90:43: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:51:F0:6B:1F:D9:1A:B1:7A:80:96:D7:87:C4:2E:BA:1B:3E:04:87 X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:3d:5c:ee:89:11:77:d5:ce:07:5f:d0:59:35:90:af:52:ad: 3e:0d:08:53:4e:19:02:10:16:66:44:ac:d7:0d:cc:d8:fc:26: 3e:18:28:f6:5a:f3:f8:2c:ca:47:0a:39:26:7b:90:93:f1:02: b2:8e:49:48:7f:1f:54:68:c0:5b:c0:f8:a2:61:85:c6:be:8e: 75:7a:19:cd:d0:27:1c:51:39:79:e8:5c:3e:9d:ca:bc:e7:4a: ff:44:0e:9d:d5:35:dc:91:0c:78:46:a1:fe:17:10:82:01:41: 2f:1a:50:af:36:73:6c:db:4e:77:1a:a6:21:50:2f:27:aa:f3: 55:c9:d0:17:12:09:c1:45:6f:4c:01:52:94:79:1d:d4:a3:51: 6f:db:09:13:21:a1:f4:78:85:59:36:61:32:71:ff:b2:f4:75: 4d:d0:0f:bf:3b:c3:42:00:26:b0:29:67:d9:5c:93:2d:b0:43: 1e:39:bc:29:e8:c8:d1:1f:50:07:92:8f:03:e8:16:3d:a0:d0: 40:c6:6a:ac:56:e0:44:27:78:4a:80:1f:d2:8f:29:3c:00:f3: bd:57:a4:64:66:e1:11:2b:11:5a:3c:f6:a3:89:73:96:13:66: 8e:b0:90:be:5e:1d:21:81:cc:2c:f2:e7:6a:93:16:d0:11:e3: 9d:13:51:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUxMjE4MjIzMTI5WhcNMjUxMjI1MjIzMTI5WjAYMRYwFAYD VQQDDA02OTQ0ODBjMi0zOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjmhnOCOk3Drx1mNV1GEEdsfsCT5hE16z08UqOT6UwszNuY6WMvRO3b81QrD Y/3ACctS3ln3D+g+F7jdAAnpYep+zaZOToMoZLhP/kT21mTFJ/GKixVElh5OA0d2 cRMsu0BETtZ4dKdVf/pQTWOrOwY0V+SF7eU2TzPLIn4d5GbRxl7BFEBwy+O2Nsba 1qvnGDuapJa2WHfj0jkZXSh1qTtz93cO1l0tFjOfwKXdBJ+5OW4PC8/yuo4nOpgA prI7YvF2gvJ4nIlCWVdMDcSOZmKB0qwWTrL7ph004+ntwHZOpdhUkl4H1AgW5s83 z1ammp/4AvGkXjD3FeBckEME0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVR8Gsf 2RqxeoCW14fELrobPgSHMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcPVzuiRF31c4HX9BZNZCvUq0+DQhTThkCEBZmRKzXDczY/CY+GCj2 WvP4LMpHCjkme5CT8QKyjklIfx9UaMBbwPiiYYXGvo51ehnN0CccUTl56Fw+ncq8 50r/RA6d1TXckQx4RqH+FxCCAUEvGlCvNnNs2053GqYhUC8nqvNVydAXEgnBRW9M AVKUeR3Uo1Fv2wkTIaH0eIVZNmEycf+y9HVN0A+/O8NCACawKWfZXJMtsEMeObwp 6MjRH1AHko8D6BY9oNBAxmqsVuBEJ3hKgB/Sjyk8APO9V6RkZuERKxFaPPajiXOW E2aOsJC+Xh0hgcws8udqkxbQEeOdE1H9 -----END CERTIFICATE-----Generated at Fri Dec 19 13:48:29 2025 by rpki-client