This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: 0iwqW0upM0fnXTKtDvhcRA0ssWJVRBk3Aov1DFEUU1w= Subject key identifier: DC:47:B8:57:4C:CD:E5:87:DF:35:CD:87:5E:31:84:61:51:3E:F5:7B Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 055A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 0553 Signing time: Mon 22 Dec 2025 22:32:11 +0000 Manifest this update: Mon 22 Dec 2025 22:32:11 +0000 Manifest next update: Mon 29 Dec 2025 22:32:11 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: PJN9d9fhKHMMzT9eTd6AjKeMRjGDLgqQpq09pW6KO7Q=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: WpqCjTjP9KCfjNLt14+mScZN2fCuV4hnCNhQMCWaA5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1370 (0x55a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Validity Not Before: Dec 22 22:32:11 2025 GMT Not After : Dec 29 22:32:11 2025 GMT Subject: CN=6949c6eb-4f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:b3:b6:9c:d3:49:73:39:2b:49:9c:c1:96: c3:7e:cb:d1:49:d6:36:7d:38:3f:e2:f6:c4:61:0a: 7c:8e:b1:9e:ec:f7:c9:b3:9f:08:fe:d6:73:54:6a: d2:85:71:ab:73:44:71:68:f1:d6:a7:2b:02:7a:d7: 17:8b:3d:a7:c4:1c:4c:28:bb:c9:0a:5e:9f:51:15: 5c:b0:0b:8f:93:0c:c2:ae:56:95:2c:48:bb:28:eb: 76:c3:f1:92:3b:b7:71:74:48:71:ba:3d:ac:47:d1: ff:58:9d:ea:9c:9a:13:67:5b:ac:d4:c1:8f:f1:7a: 79:2d:5f:77:87:c8:c7:ae:61:ff:4e:c2:63:0b:d8: 7c:d0:70:4f:19:d8:01:7c:c0:14:47:f8:92:e6:97: 34:eb:f4:d4:31:7f:68:6a:b1:f0:bc:7b:7c:c9:b5: 9e:c1:ae:9f:d6:40:b7:ff:40:98:95:0b:ae:2c:bb: bf:1c:1c:93:e8:60:39:da:bd:03:6d:1c:ea:4e:50: 5b:f2:4f:b0:5e:2e:68:40:37:a8:92:a8:39:22:30: db:de:60:e2:8c:6f:79:87:24:25:65:e2:13:4e:45: f1:eb:22:3e:74:eb:1b:b3:9c:44:48:3b:d6:ea:ce: 8c:ba:47:bd:79:00:c5:1c:46:b5:ef:78:e3:b4:e2: ed:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:47:B8:57:4C:CD:E5:87:DF:35:CD:87:5E:31:84:61:51:3E:F5:7B X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:93:7e:5c:2f:7b:09:b7:a1:89:b2:21:d7:45:cf:46:a1:8f: b1:ee:b7:f2:a9:85:da:d4:e7:f9:c1:82:90:48:42:02:77:b8: 42:24:ae:3b:8f:95:c9:b5:51:e7:0c:d7:2b:8a:ca:cf:3d:0f: b0:92:e0:fd:6e:75:9f:a8:8e:a0:e0:ce:e8:6f:4a:7b:17:5d: f8:6a:25:cb:b6:bb:80:7a:d4:e0:64:1b:f6:5a:e0:94:ad:3d: 32:cc:4a:b5:2e:73:d9:b7:5c:83:d8:2a:77:34:97:12:4e:cb: c9:a1:83:ea:d5:03:7b:04:8c:df:4e:bc:6a:ab:6d:f4:45:c5: a0:7b:18:7a:97:06:f1:e5:68:dd:3d:77:80:4d:39:82:45:55: 48:53:72:dc:e6:67:d7:af:c9:2c:67:6c:86:73:16:29:52:1d: b7:a2:f8:21:7a:48:dc:c6:87:0a:fd:d2:e3:c4:88:e3:7f:ed: ab:91:10:d2:70:b5:81:cc:85:b4:71:28:5a:e4:69:1b:cf:0a: 08:13:d3:fb:22:ec:99:1f:41:16:c0:02:3c:ec:6f:2a:57:22: c4:73:2d:b4:ce:c1:5d:61:9d:7f:9f:19:fa:b7:07:e5:0f:89: 76:a6:a5:6b:78:84:86:42:4a:a2:62:f1:ee:d7:20:39:4b:29: 1d:a2:b8:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjUxMjIyMjIzMjExWhcNMjUxMjI5MjIzMjExWjAYMRYwFAYD VQQDDA02OTQ5YzZlYi00ZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1eztpzTSXM5K0mcwZbDfsvRSdY2fTg/4vbEYQp8jrGe7PfJs58I/tZzVGrS hXGrc0RxaPHWpysCetcXiz2nxBxMKLvJCl6fURVcsAuPkwzCrlaVLEi7KOt2w/GS O7dxdEhxuj2sR9H/WJ3qnJoTZ1us1MGP8Xp5LV93h8jHrmH/TsJjC9h80HBPGdgB fMAUR/iS5pc06/TUMX9oarHwvHt8ybWewa6f1kC3/0CYlQuuLLu/HByT6GA52r0D bRzqTlBb8k+wXi5oQDeokqg5IjDb3mDijG95hyQlZeITTkXx6yI+dOsbs5xESDvW 6s6Muke9eQDFHEa173jjtOLtWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxHuFdM zeWH3zXNh14xhGFRPvV7MB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIk35cL3sJt6GJsiHXRc9GoY+x7rfyqYXa1Of5wYKQSEICd7hCJK47 j5XJtVHnDNcrisrPPQ+wkuD9bnWfqI6g4M7ob0p7F134aiXLtruAetTgZBv2WuCU rT0yzEq1LnPZt1yD2Cp3NJcSTsvJoYPq1QN7BIzfTrxqq230RcWgexh6lwbx5Wjd PXeATTmCRVVIU3Lc5mfXr8ksZ2yGcxYpUh23ovghekjcxocK/dLjxIjjf+2rkRDS cLWBzIW0cSha5GkbzwoIE9P7IuyZH0EWwAI87G8qVyLEcy20zsFdYZ1/nxn6twfl D4l2pqVreISGQkqiYvHu1yA5SykdoriS -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:49 2025 by rpki-client