This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json) Hash identifier: yHfhbZf7QeZtjAeWLkyWzO5ZwMrrcwKJln0S7wfJsjY= Subject key identifier: DE:68:7D:81:53:96:65:06:9B:DC:05:99:32:53:E4:81:26:A4:78:23 Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft Manifest number: EB Signing time: Wed 03 Dec 2025 03:48:27 +0000 Manifest this update: Wed 03 Dec 2025 03:48:26 +0000 Manifest next update: Wed 10 Dec 2025 03:48:26 +0000 Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: 1QbDKrHzH+NtZBu4HEH8pVWSHI0go3t0GgLjsjs8bto=) 2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 1z2L3hbnupa67ptFJmJyr3scDytw356F08ze+2XPBpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Validity Not Before: Dec 3 03:48:26 2025 GMT Not After : Dec 10 03:48:26 2025 GMT Subject: CN=692fb30b-bb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7f:6e:b3:e9:21:92:30:09:a4:d2:dd:71:75: bb:58:9c:39:5f:9f:2a:1e:32:e7:25:11:f2:92:af: 45:87:5e:f0:b7:27:d7:fb:71:78:aa:81:e5:14:a9: d6:9c:16:b8:60:c2:e1:8c:c7:f0:4e:8e:01:3f:5e: 0f:43:91:6b:11:67:2e:b6:ea:13:20:67:5d:5f:69: c8:38:89:a3:4f:8d:bd:66:d5:67:26:1f:be:61:8d: 09:2f:ac:1a:0e:a6:01:0c:56:f3:7c:1b:77:d6:a0: 76:7a:d4:f5:58:a1:d4:95:27:7d:e6:68:8f:14:4c: 19:8d:d8:33:ff:30:8f:6e:07:a2:ba:76:28:ff:b2: db:58:a5:17:26:1e:26:d8:f7:dc:57:31:01:2f:d8: fc:25:de:d3:f0:f3:b5:7c:44:e7:dd:6e:7e:b8:b1: 40:5e:67:a8:2a:6c:79:f8:cb:57:4a:a3:76:ea:0a: fa:e2:f3:82:d0:4d:99:d7:d7:41:12:a4:dc:ae:db: 62:e9:1f:35:12:e8:1f:0e:e6:9f:57:c2:1c:e0:8c: 23:db:03:1e:21:f4:db:ad:9f:07:87:9f:0b:a0:7d: 9a:7d:a9:f9:62:49:7a:c6:8f:b4:30:e5:32:46:7a: 0a:91:7b:79:af:50:af:3a:4a:5f:3c:ea:4c:0b:5c: ab:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:68:7D:81:53:96:65:06:9B:DC:05:99:32:53:E4:81:26:A4:78:23 X509v3 Authority Key Identifier: keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:38:27:d2:a0:47:74:bb:49:28:3b:6a:b3:ec:70:32:bc:b8: 79:d4:91:4f:d5:76:4f:35:3b:ef:58:6b:16:7f:0a:b2:3f:33: 33:96:41:5d:6e:da:d3:33:15:36:7c:e6:41:c2:af:f2:cc:75: bc:3f:27:0b:5c:fe:61:67:ac:bd:6c:77:78:db:76:c3:12:d4: 72:24:69:37:d0:d9:c5:04:f0:3f:52:13:de:14:ae:ae:bc:99: 76:2f:08:63:bc:43:a7:32:13:da:e7:f3:4c:d9:ca:6a:0e:da: b4:1b:ae:ed:9c:b4:bd:16:c0:b3:8b:fb:ab:57:35:37:f9:9d: 60:6c:18:a5:9c:7e:37:78:be:ae:53:a2:86:54:ad:86:2f:c0: f2:43:2a:96:4f:1f:f1:93:e7:b2:53:8e:a2:72:eb:be:2c:5e: cc:94:58:60:63:1b:5a:63:37:b9:aa:a2:f6:57:e5:64:19:44: 9d:05:e7:d4:30:5f:9f:85:f0:11:6b:d5:75:c7:7a:d3:dd:02: 56:16:29:0d:b7:51:7a:a8:69:ad:a9:83:bd:54:ee:3f:41:91: cb:4f:09:f3:d5:90:a0:0e:42:ee:0b:c7:6a:0c:b2:b9:39:22: af:34:93:b8:60:04:a0:1f:55:01:50:69:11:be:17:85:3a:2f: 14:7e:81:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCODkxMTAvBgNVBAUTKDIyNTlGODcwOTZFNDBBREIzQzg0MTgwRTI4QjU2QzNF ODgyMkY2NTEwHhcNMjUxMjAzMDM0ODI2WhcNMjUxMjEwMDM0ODI2WjAYMRYwFAYD VQQDEw02OTJmYjMwYi1iYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4H9us+khkjAJpNLdcXW7WJw5X58qHjLnJRHykq9Fh17wtyfX+3F4qoHlFKnW nBa4YMLhjMfwTo4BP14PQ5FrEWcutuoTIGddX2nIOImjT429ZtVnJh++YY0JL6wa DqYBDFbzfBt31qB2etT1WKHUlSd95miPFEwZjdgz/zCPbgeiunYo/7LbWKUXJh4m 2PfcVzEBL9j8Jd7T8PO1fETn3W5+uLFAXmeoKmx5+MtXSqN26gr64vOC0E2Z19dB EqTcrtti6R81EugfDuafV8Ic4Iwj2wMeIfTbrZ8Hh58LoH2afan5Ykl6xo+0MOUy RnoKkXt5r1CvOkpfPOpMC1yr6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5ofYFT lmUGm9wFmTJT5IEmpHgjMB8GA1UdIwQYMBaAFCJZ+HCW5ArbPIQYDii1bD6IIvZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUI4OS8zQTlDOEE1NjZD MTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0czhoQmdPS0xWc1BvZ2k5 bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lsbjRjSmJrQ3RzOGhCZ09LTFZzUG9naTlsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUI4OS8zQTlDOEE1NjZDMTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0 czhoQmdPS0xWc1BvZ2k5bEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvOCfSoEd0u0koO2qz7HAyvLh51JFP1XZPNTvvWGsWfwqyPzMzlkFd btrTMxU2fOZBwq/yzHW8PycLXP5hZ6y9bHd423bDEtRyJGk30NnFBPA/UhPeFK6u vJl2LwhjvEOnMhPa5/NM2cpqDtq0G67tnLS9FsCzi/urVzU3+Z1gbBilnH43eL6u U6KGVK2GL8DyQyqWTx/xk+eyU46icuu+LF7MlFhgYxtaYze5qqL2V+VkGUSdBefU MF+fhfARa9V1x3rT3QJWFikNt1F6qGmtqYO9VO4/QZHLTwnz1ZCgDkLuC8dqDLK5 OSKvNJO4YASgH1UBUGkRvheFOi8UfoH3 -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:27 2025 by rpki-client