This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft File: iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json) Hash identifier: dE6yuOETevlkS9/UFIJ+2pKEQwbbmO3D66VCafROfCM= Subject key identifier: 44:7E:A1:33:68:83:E7:D5:0E:19:AD:AC:4A:F5:79:11:B7:21:6F:29 Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft Manifest number: 3D Signing time: Tue 23 Dec 2025 06:19:06 +0000 Manifest this update: Tue 23 Dec 2025 06:19:05 +0000 Manifest next update: Tue 30 Dec 2025 06:19:05 +0000 Files and hashes: 1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: nAWUFiFaPKt7WIcS+pw3Ss0CpBjii80Z2iT93vDiaSI=) 2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: Iyg31gxgmZNKpKPcyuwxT2WShJvbdC1BGcvDKYneqcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Validity Not Before: Dec 23 06:19:05 2025 GMT Not After : Dec 30 06:19:05 2025 GMT Subject: CN=694a345a-27e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:09:1e:0d:7e:7d:80:38:fa:ce:b7:b2:d1: 7f:7f:c6:20:a6:e2:fe:2f:1d:4f:d8:17:a2:57:2b: 76:c5:93:5c:10:6e:45:06:9f:02:59:2b:0e:96:e0: 02:30:a5:4a:9f:82:24:85:e5:56:5e:67:b7:23:13: 7d:4b:b9:ae:f8:d8:a4:e8:26:14:12:e1:6b:fc:0d: 3b:50:43:b5:ba:7b:2e:86:ee:ec:f6:66:08:f5:c2: da:ea:57:7c:4f:74:ae:6c:31:71:06:36:27:ae:2b: 91:03:7c:de:5b:4f:36:07:29:24:96:8a:69:45:86: 20:f7:fb:8e:86:b3:fb:bd:2d:bf:ed:9d:1b:cc:6f: d5:06:a9:6b:bb:75:18:c0:0c:78:87:37:cb:68:03: 27:b2:47:f5:4e:d8:34:ae:9f:86:be:6a:fe:75:5c: 36:3f:9d:de:a0:9c:84:9f:df:be:09:0b:8d:b6:54: bf:a8:df:e7:17:b9:be:5b:7e:61:45:1f:64:be:cb: 4e:b8:3c:31:86:d7:31:f1:9a:c5:89:4b:1c:59:8b: 34:48:43:4c:d4:7e:b7:72:0e:85:17:39:12:45:06: 0c:96:14:20:53:1c:95:cb:07:7d:51:99:79:fd:89: d7:a7:44:b8:11:95:14:38:49:a0:b2:03:72:fc:56: 3e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7E:A1:33:68:83:E7:D5:0E:19:AD:AC:4A:F5:79:11:B7:21:6F:29 X509v3 Authority Key Identifier: keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a9:a4:b0:84:66:7f:58:ce:f5:52:10:1f:8e:7e:a0:86:b6: 8d:83:b4:3e:1a:78:d7:cf:08:e5:1c:4b:aa:c8:55:9d:80:f2: a1:2b:77:c4:bf:e4:6c:87:04:8c:fe:56:e8:f5:23:f3:ac:f8: ce:e9:b7:ae:d3:ac:a0:4f:09:9f:28:8a:b9:84:34:02:de:2d: 1f:98:b8:62:9b:ec:d1:43:97:78:f1:29:f2:0f:d5:74:6c:50: f1:49:91:0d:95:68:27:4f:e3:99:65:27:cd:a0:af:80:0f:0b: 97:1a:24:51:32:61:8b:33:69:bb:63:65:db:80:bb:4b:e3:c8: b4:4d:a0:8d:ed:58:f4:2f:4b:f8:40:ea:7e:04:79:25:7a:9b: 0b:e6:ab:f4:50:4e:33:59:70:17:04:a6:75:73:5e:7c:c9:77: e3:b3:a9:2f:7e:28:1e:32:f0:29:e1:ff:09:bd:61:cb:b3:cb: bc:8a:5a:e4:b8:fa:75:9d:64:23:c7:28:4b:14:9c:55:83:cd: e8:2d:d8:0f:13:7c:3f:3a:66:e8:89:e1:20:db:ae:bf:59:4f: fd:25:ea:44:e8:2a:c9:2a:16:50:e5:58:79:48:14:42:66:86: b6:33:81:dc:f1:9d:23:fc:ec:dd:c6:55:80:e7:8c:2a:ad:70: 2e:1e:db:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE4NTExMC8GA1UEBRMoODk3ODRENkQ5MzhCMDVDQzNCN0I2NjZFNUU3QUVFOTIy M0RFNEQ3MDAeFw0yNTEyMjMwNjE5MDVaFw0yNTEyMzAwNjE5MDVaMBgxFjAUBgNV BAMMDTY5NGEzNDVhLTI3ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpvgkeDX59gDj6zrey0X9/xiCm4v4vHU/YF6JXK3bFk1wQbkUGnwJZKw6W4AIw pUqfgiSF5VZeZ7cjE31Lua742KToJhQS4Wv8DTtQQ7W6ey6G7uz2Zgj1wtrqV3xP dK5sMXEGNieuK5EDfN5bTzYHKSSWimlFhiD3+46Gs/u9Lb/tnRvMb9UGqWu7dRjA DHiHN8toAyeyR/VO2DSun4a+av51XDY/nd6gnISf374JC422VL+o3+cXub5bfmFF H2S+y064PDGG1zHxmsWJSxxZizRIQ0zUfrdyDoUXORJFBgyWFCBTHJXLB31RmXn9 idenRLgRlRQ4SaCyA3L8Vj4fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURH6hM2iD 59UOGa2sSvV5EbchbykwHwYDVR0jBBgwFoAUiXhNbZOLBcw7e2ZuXnrukiPeTXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTg1Lzg1MDExNTMyODRB QzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3N2UyWnVYbnJ1a2lQZVRY QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhoTmJaT0xCY3c3ZTJadVhucnVraVBlVFhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTg1Lzg1MDExNTMyODRBQzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3 N2UyWnVYbnJ1a2lQZVRYQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADippLCEZn9YzvVSEB+OfqCGto2DtD4aeNfPCOUcS6rIVZ2A8qErd8S/ 5GyHBIz+Vuj1I/Os+M7pt67TrKBPCZ8oirmENALeLR+YuGKb7NFDl3jxKfIP1XRs UPFJkQ2VaCdP45llJ82gr4APC5caJFEyYYszabtjZduAu0vjyLRNoI3tWPQvS/hA 6n4EeSV6mwvmq/RQTjNZcBcEpnVzXnzJd+OzqS9+KB4y8Cnh/wm9Ycuzy7yKWuS4 +nWdZCPHKEsUnFWDzegt2A8TfD86ZuiJ4SDbrr9ZT/0l6kToKskqFlDlWHlIFEJm hrYzgdzxnSP87N3GVYDnjCqtcC4e288= -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:45 2025 by rpki-client