This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft File: iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json) Hash identifier: S/kD6T9asOuw1HLEFVumZV5mLXE6DaKNjWZCKVl3fHk= Subject key identifier: BF:26:51:D7:F0:F2:9A:2B:25:32:CD:F2:24:0B:B4:D3:29:5D:D4:07 Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft Manifest number: 4A Signing time: Tue 23 Dec 2025 06:15:46 +0000 Manifest this update: Tue 23 Dec 2025 06:15:45 +0000 Manifest next update: Tue 30 Dec 2025 06:15:45 +0000 Files and hashes: 1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: XxGAcW9V/AVgjheLRCQexGw9ZbVLRJJWMppv0tY7hWE=) 2: 399480C4ACD011F08828DD7BC4F9AE02.roa (hash: Mnd71Ffk/psJgLiSkChk25qvX5F/utFXFDACcylb68Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Validity Not Before: Dec 23 06:15:45 2025 GMT Not After : Dec 30 06:15:45 2025 GMT Subject: CN=694a3392-c96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:ba:01:84:31:40:e9:9d:b0:0e:a8:e9:a9: 7f:c2:06:c0:b1:a7:6e:81:72:63:d7:83:d0:85:45: 35:52:52:89:44:f3:d4:f9:2b:f9:4e:8c:0e:29:2e: 77:77:f3:53:9d:3b:b7:6b:a3:b5:27:33:6e:de:a1: 58:ab:34:bd:fa:4a:84:90:c8:d9:1e:cb:f3:f0:57: d9:30:c6:fa:69:09:ef:1c:6a:26:7a:79:bc:c7:04: d3:f2:e9:e2:f3:1f:0b:85:84:5a:43:65:ec:10:5c: 02:f9:13:7f:2d:66:45:c8:04:09:b9:31:02:d6:a1: d2:de:9f:b3:48:98:af:85:8b:e0:06:e3:ad:8f:58: f1:7e:f3:75:9c:46:57:90:d9:a9:05:d6:7b:a3:5c: 73:a2:b8:82:1c:c7:4f:6f:47:e7:30:a7:b3:9f:d4: e3:c5:d7:6a:3e:b0:f2:1a:f2:38:cb:bc:77:28:22: 7d:71:ec:a7:4b:25:9c:da:87:e9:bc:dc:20:49:f4: 42:8a:e9:97:0f:f5:7b:5c:70:6f:23:96:0a:d8:cf: 01:88:75:85:c2:cf:ef:d0:67:4f:9d:df:3d:2a:50: 14:c1:6b:f4:97:6e:4f:f9:b9:9a:ca:f9:a9:fc:7f: 9f:a5:b0:24:23:6d:76:84:10:68:36:14:dd:8e:6c: 71:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:26:51:D7:F0:F2:9A:2B:25:32:CD:F2:24:0B:B4:D3:29:5D:D4:07 X509v3 Authority Key Identifier: keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4f:6c:f9:6f:0e:ae:01:20:34:9c:3e:5d:d3:12:35:d3:de: 67:f4:21:40:2c:ab:7d:ff:90:43:5b:2c:47:f7:7a:b2:42:e7: e3:ad:dd:8d:dc:85:98:48:c4:85:a3:6a:93:92:c1:40:a3:5e: e1:b8:66:1b:3c:d1:e0:a3:69:57:30:ea:8d:f4:0e:c1:6a:4e: ba:80:9a:fe:c4:df:62:68:de:0b:7c:28:80:b1:b6:d3:0a:b2: 44:07:1f:2e:b0:1e:93:96:97:60:68:64:53:e7:8f:ed:16:7c: b9:4f:5f:1d:13:9d:38:74:e6:11:de:43:84:8c:f3:9e:d9:63: 17:3f:5f:2f:0d:10:86:98:99:67:e7:71:55:d7:59:05:87:d7: ae:b1:fa:ed:fd:11:da:62:d5:27:fb:52:06:94:e8:1f:80:e1: 8c:2b:6d:1f:ed:b4:d4:1a:89:5b:18:36:5a:0f:f9:a7:0f:e5: 58:0b:0d:ee:8f:9c:f9:d1:6f:0e:65:5c:85:37:60:44:e4:0a: b3:51:ae:53:f5:10:91:59:41:15:f6:92:75:2c:d9:eb:ec:f0: 41:94:f6:e9:3e:b6:36:d8:60:68:51:b4:06:8e:67:e4:c8:b2: 8d:e6:5a:32:56:ff:c0:77:a5:90:15:76:09:66:8d:1e:46:f8: 44:c6:bb:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDBFMDExMC8GA1UEBRMoODk3MDc3QjcxRjJDNUFFRERFNkMxREQ0OTU0N0RDQzk5 NTJDREFCRTAeFw0yNTEyMjMwNjE1NDVaFw0yNTEyMzAwNjE1NDVaMBgxFjAUBgNV BAMMDTY5NGEzMzkyLWM5NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq9LoBhDFA6Z2wDqjpqX/CBsCxp26BcmPXg9CFRTVSUolE89T5K/lOjA4pLnd3 81OdO7dro7UnM27eoVirNL36SoSQyNkey/PwV9kwxvppCe8caiZ6ebzHBNPy6eLz HwuFhFpDZewQXAL5E38tZkXIBAm5MQLWodLen7NImK+Fi+AG462PWPF+83WcRleQ 2akF1nujXHOiuIIcx09vR+cwp7Of1OPF12o+sPIa8jjLvHcoIn1x7KdLJZzah+m8 3CBJ9EKK6ZcP9XtccG8jlgrYzwGIdYXCz+/QZ0+d3z0qUBTBa/SXbk/5uZrK+an8 f5+lsCQjbXaEEGg2FN2ObHH3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvyZR1/Dy mislMs3yJAu00yld1AcwHwYDVR0jBBgwFoAUiXB3tx8sWu3ebB3UlUfcyZUs2r4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0MEUwLzNGQkI1RTA0N0I1 MzExRjA5QjU0ODQ1RkM0RjlBRTAyL2lYQjN0eDhzV3UzZWJCM1VsVWZjeVpVczJy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhCM3R4OHNXdTNlYkIzVWxVZmN5WlVzMnI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 MEUwLzNGQkI1RTA0N0I1MzExRjA5QjU0ODQ1RkM0RjlBRTAyL2lYQjN0eDhzV3Uz ZWJCM1VsVWZjeVpVczJyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ9PbPlvDq4BIDScPl3TEjXT3mf0IUAsq33/kENbLEf3erJC5+Ot3Y3c hZhIxIWjapOSwUCjXuG4Zhs80eCjaVcw6o30DsFqTrqAmv7E32Jo3gt8KICxttMK skQHHy6wHpOWl2BoZFPnj+0WfLlPXx0TnTh05hHeQ4SM857ZYxc/Xy8NEIaYmWfn cVXXWQWH166x+u39Edpi1Sf7UgaU6B+A4YwrbR/ttNQaiVsYNloP+acP5VgLDe6P nPnRbw5lXIU3YETkCrNRrlP1EJFZQRX2knUs2evs8EGU9uk+tjbYYGhRtAaOZ+TI so3mWjJW/8B3pZAVdglmjR5G+ETGu2Q= -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:48 2025 by rpki-client