This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: OYFNHLGPJabsAjaEklHf/ccxsbd5uvgij7QgowKWtwQ= Subject key identifier: 22:0C:6B:A7:4E:2D:E4:B8:50:F0:5D:A5:3E:8C:AE:1D:60:30:78:73 Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 3511 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 480E Signing time: Tue 02 Dec 2025 14:20:26 +0000 Manifest this update: Tue 02 Dec 2025 14:20:25 +0000 Manifest next update: Tue 09 Dec 2025 14:20:25 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: 9md3TAhMDueGyRmQJryCK12LZcIa+ZHQfJbBSj4b2Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13585 (0x3511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: Dec 2 14:20:25 2025 GMT Not After : Dec 9 14:20:25 2025 GMT Subject: CN=692ef5a9-f593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:ee:6c:cc:ec:81:9f:d3:74:24:b8:87:95: cb:8b:28:a5:3f:e1:57:51:d5:49:8e:23:94:55:46: 79:8e:df:82:00:17:c5:47:0e:cc:7f:bc:dd:a3:10: 16:dd:41:79:90:2b:8e:f9:d0:70:35:70:b2:6f:15: 49:93:f7:15:df:4d:d6:d1:4c:7e:82:9e:ac:21:f7: e3:29:12:29:07:c3:80:0f:0f:71:7d:31:81:35:9a: b9:22:68:74:2e:d4:2d:78:1f:48:03:95:4f:9e:6c: 98:36:2d:a9:e2:45:aa:66:a9:07:35:fa:8b:6c:e3: 25:f0:cc:d7:f4:4c:03:d6:fc:af:3d:71:f7:eb:93: 15:e3:f8:93:9d:8e:75:f5:14:84:8f:93:36:da:6a: b1:66:56:5c:fd:7e:1d:55:0d:f3:e8:25:50:b4:0f: cb:1d:29:61:dc:0b:67:0a:5e:04:7d:c5:5f:c6:c3: a1:92:20:9b:ce:1d:d2:7e:8f:9d:79:8b:c0:44:23: 39:4d:68:36:24:41:0d:37:67:54:ac:da:a4:40:9e: 6d:70:e2:10:7b:b7:6d:c0:94:b8:83:75:c2:24:fb: 7f:3d:33:98:e9:51:1a:71:e3:0f:76:3c:1b:53:1b: 7a:ad:e3:cf:a9:af:ee:91:58:72:3c:d1:46:e9:e1: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0C:6B:A7:4E:2D:E4:B8:50:F0:5D:A5:3E:8C:AE:1D:60:30:78:73 X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c5:09:17:bb:41:8e:d7:30:75:ea:53:c4:bd:1b:f4:b0:5c: 21:4a:4d:20:f6:dd:bd:1f:e5:99:d6:c2:60:33:45:c3:13:f8: 22:52:75:17:c6:6a:4d:d6:59:af:94:d0:49:72:f0:ff:31:76: dc:fd:b4:ad:28:7e:83:6f:ad:39:77:a6:1d:b9:75:34:21:1c: f5:8b:d4:f2:ae:b9:17:19:e3:f4:64:0c:60:4b:8e:ec:fe:21: be:36:65:ec:6a:77:6c:ca:ff:41:c4:14:23:ee:82:55:66:93: 3b:0e:3c:04:05:d3:07:26:86:58:9c:be:01:31:fe:37:28:94: 12:69:1f:2c:a8:c1:f4:78:f8:5f:e0:40:ec:04:5c:94:d2:2f: 34:4c:d5:15:25:5e:19:26:79:c8:5f:19:e9:17:db:47:62:ce: 4a:aa:ac:cc:3a:a8:38:d5:5b:29:cd:7d:c3:37:5c:bf:3f:16: 19:1b:38:6c:c3:f3:31:a9:df:25:c2:89:c4:fa:8b:1c:ae:17: 59:47:23:5d:27:78:3a:0a:4e:60:b8:aa:3f:38:84:1b:8d:66: ef:74:c3:46:48:c8:48:46:78:a4:3e:e5:c2:5c:ce:26:86:25: 25:25:da:ad:f0:77:43:9f:c8:8e:6e:36:44:8f:0c:fa:63:99: 72:ef:bd:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjUxMjAyMTQyMDI1WhcNMjUxMjA5MTQyMDI1WjAYMRYwFAYD VQQDEw02OTJlZjVhOS1mNTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSDubMzsgZ/TdCS4h5XLiyilP+FXUdVJjiOUVUZ5jt+CABfFRw7Mf7zdoxAW 3UF5kCuO+dBwNXCybxVJk/cV303W0Ux+gp6sIffjKRIpB8OADw9xfTGBNZq5Imh0 LtQteB9IA5VPnmyYNi2p4kWqZqkHNfqLbOMl8MzX9EwD1vyvPXH365MV4/iTnY51 9RSEj5M22mqxZlZc/X4dVQ3z6CVQtA/LHSlh3AtnCl4EfcVfxsOhkiCbzh3Sfo+d eYvARCM5TWg2JEENN2dUrNqkQJ5tcOIQe7dtwJS4g3XCJPt/PTOY6VEaceMPdjwb Uxt6rePPqa/ukVhyPNFG6eHAywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIMa6dO LeS4UPBdpT6Mrh1gMHhzMB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTxQkXu0GO1zB16lPEvRv0sFwhSk0g9t29H+WZ1sJgM0XDE/giUnUX xmpN1lmvlNBJcvD/MXbc/bStKH6Db605d6YduXU0IRz1i9TyrrkXGeP0ZAxgS47s /iG+NmXsandsyv9BxBQj7oJVZpM7DjwEBdMHJoZYnL4BMf43KJQSaR8sqMH0ePhf 4EDsBFyU0i80TNUVJV4ZJnnIXxnpF9tHYs5KqqzMOqg41VspzX3DN1y/PxYZGzhs w/Mxqd8lwonE+oscrhdZRyNdJ3g6Ck5guKo/OIQbjWbvdMNGSMhIRnikPuXCXM4m hiUlJdqt8HdDn8iObjZEjwz6Y5ly7729 -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:24 2025 by rpki-client