This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft File: iB8oqx80yszxJe2ul-HgEGBYI0k.mft (raw, json) Hash identifier: ubU2zaGmaQyfK7utr/EKLplgpJNEuj3Hfy2KdAGIZrg= Subject key identifier: 69:FA:A1:86:8A:10:4A:4F:3D:66:D5:AE:28:A4:0A:1E:96:87:D4:E1 Authority key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 Certificate issuer: /CN=A91D342A/serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft Manifest number: 35 Signing time: Tue 23 Dec 2025 06:22:50 +0000 Manifest this update: Tue 23 Dec 2025 06:22:49 +0000 Manifest next update: Tue 30 Dec 2025 06:22:49 +0000 Files and hashes: 1: iB8oqx80yszxJe2ul-HgEGBYI0k.crl (hash: V8G+sF14cXyvs052XR/089PsKHfI+tSh6pMhZuZ+0jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Validity Not Before: Dec 23 06:22:49 2025 GMT Not After : Dec 30 06:22:49 2025 GMT Subject: CN=694a3539-34c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:56:e7:4e:dd:ea:fe:91:ee:5f:4b:c0:e3: 4c:e1:f7:d1:1c:6b:58:a7:a9:df:dd:0c:94:77:5d: 96:9d:f2:19:ff:91:60:c7:42:d4:62:d8:bf:4b:a6: 0e:b4:e6:09:82:4f:10:8a:a1:8d:ef:84:68:ff:a3: a3:95:98:e6:32:4a:39:d5:79:fb:9e:76:42:d8:c3: 65:9b:71:48:1e:2f:2c:9a:80:8a:7a:59:88:11:2a: b0:93:ea:5c:54:ef:44:46:66:fb:0a:6b:cd:4b:51: 45:34:ff:d6:a8:ff:62:fc:95:7b:ae:5c:95:2c:34: c9:4f:65:3a:3b:e4:fc:e5:8a:01:44:c4:c3:9d:85: 71:c9:71:63:bf:75:36:64:6e:ba:d9:fa:ef:b6:23: fd:fc:2c:a8:4d:f8:ff:f4:ee:f4:cc:e7:76:77:70: 06:72:a8:27:2e:6f:df:53:98:f7:69:34:99:9a:a0: 29:65:bb:05:52:32:ce:04:73:71:8d:65:36:e0:88: c6:c4:d6:69:59:14:ea:d9:dc:ca:df:91:0b:af:f0: d9:c5:a3:68:2b:f5:c3:f9:a9:da:6a:ca:dd:6b:c7: 34:6e:88:4a:d5:e5:24:c3:bb:5a:9b:19:7c:95:3c: 76:fd:39:bc:47:e8:3c:c3:68:35:ea:6f:e1:2d:5f: 89:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FA:A1:86:8A:10:4A:4F:3D:66:D5:AE:28:A4:0A:1E:96:87:D4:E1 X509v3 Authority Key Identifier: keyid:88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:67:c9:aa:d9:22:65:01:88:57:c0:8f:11:97:0b:c7:70:a4: 44:b6:9e:e3:6c:fd:da:03:9d:e5:b1:e5:43:49:8a:62:59:b2: ab:5e:8d:f6:d0:a6:78:b1:9e:76:2d:1d:da:5e:7b:65:b1:aa: ce:6e:fe:e9:35:63:19:c2:aa:ee:41:ca:7f:d2:22:a4:c1:bc: 29:ea:60:d6:34:cc:b0:72:09:bd:e2:59:30:8e:74:f7:e8:9f: 80:09:60:7b:c4:f5:7e:1a:6d:bf:d2:37:d7:c7:f3:15:53:64: fb:52:ea:18:e8:8b:c3:18:56:cb:51:fb:c0:ee:8e:a0:22:3b: bc:68:35:20:19:83:1e:42:bb:6f:fa:85:13:18:0d:fd:0d:4b: 9c:62:12:a6:65:49:8e:69:65:74:ef:b8:77:0e:b9:f3:81:11: 75:25:f6:c5:d9:1d:11:17:87:e1:2e:d4:62:0d:c9:c2:0c:7e: 78:67:3b:9c:7d:d1:ba:37:e3:a8:38:09:02:f5:04:5f:aa:fb: bd:9e:f6:9f:47:b8:9c:35:b5:af:1d:75:b6:6c:1f:40:22:5b: 16:dc:aa:e0:89:11:9a:82:e4:97:bb:20:73:20:6c:dc:ce:ea: 15:d8:fa:c6:52:d8:8c:7f:e8:17:8d:dc:4c:33:e4:28:f8:9d: b9:f5:1f:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzQyQTExMC8GA1UEBRMoODgxRjI4QUIxRjM0Q0FDQ0YxMjVFREFFOTdFMUUwMTA2 MDU4MjM0OTAeFw0yNTEyMjMwNjIyNDlaFw0yNTEyMzAwNjIyNDlaMBgxFjAUBgNV BAMMDTY5NGEzNTM5LTM0YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5PVbnTt3q/pHuX0vA40zh99Eca1inqd/dDJR3XZad8hn/kWDHQtRi2L9Lpg60 5gmCTxCKoY3vhGj/o6OVmOYySjnVefuedkLYw2WbcUgeLyyagIp6WYgRKrCT6lxU 70RGZvsKa81LUUU0/9ao/2L8lXuuXJUsNMlPZTo75PzligFExMOdhXHJcWO/dTZk brrZ+u+2I/38LKhN+P/07vTM53Z3cAZyqCcub99TmPdpNJmaoClluwVSMs4Ec3GN ZTbgiMbE1mlZFOrZ3MrfkQuv8NnFo2gr9cP5qdpqyt1rxzRuiErV5STDu1qbGXyV PHb9ObxH6DzDaDXqb+EtX4kvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUafqhhooQ Sk89ZtWuKKQKHpaH1OEwHwYDVR0jBBgwFoAUiB8oqx80yszxJe2ul+HgEGBYI0kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNDJBLzE3NzhCNzBDOEVD NzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6eEplMnVsLUhnRUdCWUkw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUI4b3F4ODB5c3p4SmUydWwtSGdFR0JZSTBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz NDJBLzE3NzhCNzBDOEVDNzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6 eEplMnVsLUhnRUdCWUkway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFRnyarZImUBiFfAjxGXC8dwpES2nuNs/doDneWx5UNJimJZsqtejfbQ pnixnnYtHdpee2Wxqs5u/uk1YxnCqu5Byn/SIqTBvCnqYNY0zLByCb3iWTCOdPfo n4AJYHvE9X4abb/SN9fH8xVTZPtS6hjoi8MYVstR+8DujqAiO7xoNSAZgx5Cu2/6 hRMYDf0NS5xiEqZlSY5pZXTvuHcOufOBEXUl9sXZHREXh+Eu1GINycIMfnhnO5x9 0bo346g4CQL1BF+q+72e9p9HuJw1ta8ddbZsH0AiWxbcquCJEZqC5Je7IHMgbNzO 6hXY+sZS2Ix/6BeN3Ewz5Cj4nbn1H90= -----END CERTIFICATE-----Generated at Wed Dec 24 21:24:01 2025 by rpki-client