This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: r62KuHW4Y14gMYArS49tp+u/U6sBKBVbgn2Fdz0zJUo= Subject key identifier: 76:37:43:03:90:97:B8:8B:3A:48:82:2C:E4:93:E9:E5:C7:4D:E6:9F Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 024B Signing time: Sun 21 Dec 2025 01:09:48 +0000 Manifest this update: Sun 21 Dec 2025 01:09:48 +0000 Manifest next update: Sun 28 Dec 2025 01:09:48 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: JjdABLZyangz+ceQiV717WtFfReK/3geBd5LpMfObr0=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: Qc3ACPBC+H3iasNyw+1g5xftexl02S0P/76vcceWhqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Dec 21 01:09:48 2025 GMT Not After : Dec 28 01:09:48 2025 GMT Subject: CN=694748dc-2b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:1a:b6:a8:d3:b3:22:75:6e:78:af:70:94: 61:99:3d:14:67:7c:59:0f:cc:af:06:64:1f:f2:9d: 74:a7:e4:5d:42:fb:94:a2:c2:54:e3:a4:a6:7a:31: 82:1c:d2:1c:ed:ba:be:43:d8:3e:86:0f:b1:83:a7: 16:d3:3a:32:e2:f6:d8:3f:9d:db:b5:ab:67:9d:b8: 0e:1e:8c:96:ec:13:ea:55:c6:53:e6:da:9f:cc:00: 87:d2:10:c2:0a:04:dd:c4:7c:19:af:5c:4f:24:14: 5b:07:bd:da:52:e4:e8:75:db:cc:d3:c6:69:8d:64: 01:89:3d:1b:05:7e:ff:74:2f:dd:69:07:4a:94:67: 98:a9:9a:2b:de:c9:cf:c1:73:79:36:fd:20:fb:39: 09:b2:a2:07:96:1a:8f:8d:48:c7:1b:bc:68:5a:3a: 31:17:e2:70:21:d1:45:87:40:e6:95:6f:6a:e5:27: 95:04:ce:63:48:47:e8:c9:86:3f:a7:6c:2e:e3:fb: 61:28:03:f4:59:a7:75:6f:66:11:d9:68:f5:a7:c9: b9:8d:3a:c7:a1:97:fb:6f:86:a8:9d:e4:5d:ae:c4: 89:7b:13:28:b9:5e:a2:22:ab:63:62:39:e7:f4:44: 15:d2:1a:69:f7:e4:c8:67:8d:2d:1d:19:9d:6d:96: 03:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:37:43:03:90:97:B8:8B:3A:48:82:2C:E4:93:E9:E5:C7:4D:E6:9F X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c7:13:34:06:42:32:8b:dc:37:26:63:64:59:9c:bb:36:2e: e2:5c:ae:ec:5e:bb:14:f5:22:e3:1e:2b:f4:bc:18:9c:ca:39: 36:f0:46:76:c8:16:b8:b0:f5:51:13:e4:ce:b6:07:b4:84:80: 62:05:56:dc:4a:3d:34:e6:30:89:8c:fe:41:2d:82:7d:b8:40: d1:aa:ee:39:a5:d3:b5:d1:b5:47:29:99:92:33:e8:e4:f3:e9: a5:e7:e9:51:68:ce:49:82:13:07:02:37:54:8a:84:f8:88:52: 44:1a:9d:d3:02:b3:be:be:7a:80:22:ee:1d:8f:25:31:81:a3: 1b:ec:21:43:5d:37:96:9d:9e:bb:6c:58:77:38:21:4a:36:ef: 75:0e:e0:ea:a8:b6:83:78:83:7f:95:d1:44:94:2f:2d:eb:95: 3f:ec:3f:78:cf:9f:8c:20:d3:5b:63:1b:6d:c0:a6:e2:ae:a2: 3b:a3:59:e1:28:ce:3d:88:4f:27:e2:db:8c:50:bc:e2:62:f3: 93:f3:6a:44:08:02:3d:cb:8a:37:72:c6:5c:62:25:45:b8:d6: 46:84:b9:e1:87:3d:ca:54:80:93:39:d4:c5:2d:bc:23:e5:c0: 1b:1b:14:1d:d0:f6:c6:90:bd:e9:56:57:1f:aa:28:91:98:90: ff:71:9f:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjUxMjIxMDEwOTQ4WhcNMjUxMjI4MDEwOTQ4WjAYMRYwFAYD VQQDDA02OTQ3NDhkYy0yYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtx8atqjTsyJ1bnivcJRhmT0UZ3xZD8yvBmQf8p10p+RdQvuUosJU46SmejGC HNIc7bq+Q9g+hg+xg6cW0zoy4vbYP53btatnnbgOHoyW7BPqVcZT5tqfzACH0hDC CgTdxHwZr1xPJBRbB73aUuToddvM08ZpjWQBiT0bBX7/dC/daQdKlGeYqZor3snP wXN5Nv0g+zkJsqIHlhqPjUjHG7xoWjoxF+JwIdFFh0DmlW9q5SeVBM5jSEfoyYY/ p2wu4/thKAP0Wad1b2YR2Wj1p8m5jTrHoZf7b4aoneRdrsSJexMouV6iIqtjYjnn 9EQV0hpp9+TIZ40tHRmdbZYD5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHY3QwOQ l7iLOkiCLOST6eXHTeafMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWxxM0BkIyi9w3JmNkWZy7Ni7iXK7sXrsU9SLjHiv0vBicyjk28EZ2 yBa4sPVRE+TOtge0hIBiBVbcSj005jCJjP5BLYJ9uEDRqu45pdO10bVHKZmSM+jk 8+ml5+lRaM5JghMHAjdUioT4iFJEGp3TArO+vnqAIu4djyUxgaMb7CFDXTeWnZ67 bFh3OCFKNu91DuDqqLaDeIN/ldFElC8t65U/7D94z5+MINNbYxttwKbirqI7o1nh KM49iE8n4tuMULziYvOT82pECAI9y4o3csZcYiVFuNZGhLnhhz3KVICTOdTFLbwj 5cAbGxQd0PbGkL3pVlcfqiiRmJD/cZ94 -----END CERTIFICATE-----Generated at Sun Dec 21 22:32:32 2025 by rpki-client