This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: KEh0CFNd4qD4Sk0SavMEDRU1sho7pU8hvdpe71btBIk= Subject key identifier: BA:32:8B:DD:5B:5C:C0:17:B5:10:81:18:E1:95:21:05:AF:A7:F6:52 Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: 0169 Signing time: Tue 23 Dec 2025 03:01:10 +0000 Manifest this update: Tue 23 Dec 2025 03:01:10 +0000 Manifest next update: Tue 30 Dec 2025 03:01:10 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: ZMgpCRMBw51KSd+hMUvxuQX0Q0LIYkn7Bvuv8nDeMy8=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: GqeiAvi13dSKvLM+fHPrB98afI5mQF/DJh5CG60rs0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: Dec 23 03:01:10 2025 GMT Not After : Dec 30 03:01:10 2025 GMT Subject: CN=694a05f6-fcd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:16:f2:d9:e5:0e:5d:d4:33:89:66:41:63: ab:52:2f:43:d6:db:33:eb:00:75:f0:80:f3:2f:ab: a4:22:b4:89:c5:c6:36:12:3d:d9:f8:56:7d:41:a3: 01:ca:d5:82:f6:7f:52:92:f5:ff:41:05:d4:10:df: fc:fc:13:16:63:33:83:19:0e:5e:a9:f9:f6:c9:14: 0d:f7:69:34:60:b5:83:a9:b8:8e:ba:a8:6f:b5:42: 18:c9:ee:20:e5:a9:97:db:e1:38:ea:e1:38:98:36: 1e:91:df:ff:47:2a:4b:a5:c1:55:62:27:66:83:bf: b3:6d:49:5b:bd:b2:a8:f0:7a:0e:f1:b4:d8:67:aa: bf:fe:9b:1b:2f:a5:8b:3d:3e:2f:8c:cd:8a:3f:fe: 16:8a:a3:b6:2b:3a:93:66:28:eb:65:95:35:ec:08: ec:e6:e3:99:40:b1:f7:f6:c1:6b:9f:56:e9:e9:7c: 57:90:cd:dc:ae:23:46:ac:d8:ee:ba:f4:61:94:7c: 0a:c4:e0:8f:b9:6f:85:4e:96:0e:11:c4:48:4a:f3: 6a:35:dc:84:2f:a9:74:dd:4d:ce:90:c9:73:60:81: 33:d6:3a:50:9e:d5:78:5e:ad:6a:b0:03:85:86:db: 4e:eb:25:97:e7:e7:06:15:9a:ee:ca:ef:bc:f2:01: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:32:8B:DD:5B:5C:C0:17:B5:10:81:18:E1:95:21:05:AF:A7:F6:52 X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:19:37:8a:98:61:dd:fa:b2:1d:09:42:7b:d1:5b:20:42:6f: f7:da:00:04:7a:7f:54:27:82:b2:9e:63:82:27:c6:6c:f9:37: 0f:4d:fd:7d:01:69:5c:ca:15:91:3f:e8:c6:f9:a4:46:5a:d5: 57:93:02:c5:d0:9e:79:e3:98:06:4b:22:67:cd:4c:c2:80:36: c3:55:61:eb:ec:ba:f8:83:24:41:4c:d6:56:2a:c0:53:59:f5: 5b:de:1d:04:c7:70:3a:f3:05:b2:f7:bb:f6:1b:59:6c:39:8a: 4f:40:b1:64:c2:c9:b2:42:44:4d:79:11:48:7b:5f:3a:67:77: ba:c8:38:ba:56:0c:22:28:92:d6:39:e2:dc:44:62:70:b7:38: 29:c1:46:e1:d9:d2:08:fb:94:e7:d8:c9:0a:e8:fe:fe:b0:79: aa:04:c4:ac:42:3b:b8:5f:5c:fc:7e:90:94:c2:20:52:93:c9: fa:20:78:d6:af:d0:e3:7f:d6:66:ea:ce:82:cc:68:75:ef:30: 99:06:a0:41:0c:a8:fd:7b:78:57:89:de:df:e0:6a:62:80:2f: ba:32:e6:9b:58:a6:ca:5a:9b:38:6e:7f:88:53:b4:1c:9f:84: 27:37:db:b5:98:03:14:87:d2:cf:9b:9e:da:30:63:c4:ae:5d: 41:28:a6:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjUxMjIzMDMwMTEwWhcNMjUxMjMwMDMwMTEwWjAYMRYwFAYD VQQDDA02OTRhMDVmNi1mY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsH4W8tnlDl3UM4lmQWOrUi9D1tsz6wB18IDzL6ukIrSJxcY2Ej3Z+FZ9QaMB ytWC9n9SkvX/QQXUEN/8/BMWYzODGQ5eqfn2yRQN92k0YLWDqbiOuqhvtUIYye4g 5amX2+E46uE4mDYekd//RypLpcFVYidmg7+zbUlbvbKo8HoO8bTYZ6q//psbL6WL PT4vjM2KP/4WiqO2KzqTZijrZZU17Ajs5uOZQLH39sFrn1bp6XxXkM3criNGrNju uvRhlHwKxOCPuW+FTpYOEcRISvNqNdyEL6l03U3OkMlzYIEz1jpQntV4Xq1qsAOF httO6yWX5+cGFZruyu+88gGVewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoyi91b XMAXtRCBGOGVIQWvp/ZSMB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcGTeKmGHd+rIdCUJ70VsgQm/32gAEen9UJ4KynmOCJ8Zs+TcPTf19 AWlcyhWRP+jG+aRGWtVXkwLF0J5545gGSyJnzUzCgDbDVWHr7Lr4gyRBTNZWKsBT WfVb3h0Ex3A68wWy97v2G1lsOYpPQLFkwsmyQkRNeRFIe186Z3e6yDi6VgwiKJLW OeLcRGJwtzgpwUbh2dII+5Tn2MkK6P7+sHmqBMSsQju4X1z8fpCUwiBSk8n6IHjW r9Djf9Zm6s6CzGh17zCZBqBBDKj9e3hXid7f4GpigC+6MuabWKbKWps4bn+IU7Qc n4QnN9u1mAMUh9LPm57aMGPErl1BKKaX -----END CERTIFICATE-----Generated at Tue Dec 23 11:04:47 2025 by rpki-client