This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json) Hash identifier: 0E3ZlP2ZdeI8CEcLTiKCQj1VZ4oEcNNrLYSmGzUKgdo= Subject key identifier: 8B:D7:25:11:3E:15:B6:87:02:83:85:CC:F8:BD:07:92:D7:4F:1E:F0 Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Certificate serial: 1D43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft Manifest number: 1D2E Signing time: Thu 18 Dec 2025 16:03:05 +0000 Manifest this update: Thu 18 Dec 2025 16:03:05 +0000 Manifest next update: Thu 25 Dec 2025 16:03:05 +0000 Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: BrRmFq47RRH01UFKcWLETqmmzdIuIwHNvd/qM5lHKBE=) 2: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: dyKQZQJFWOlaLCos4pICmePW3GQtvzVk28wWqQnX6xA=) 3: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: 2aGejYYAILu+vq+h9Ds1ItJ4A2WEADfQRUwQnuAzQp4=) 4: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: RrfRQiaJQ/K/F0pEWCxhmnA6Eh04yX02RfUKJUyZudE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7491 (0x1d43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Validity Not Before: Dec 18 16:03:05 2025 GMT Not After : Dec 25 16:03:05 2025 GMT Subject: CN=694425b9-247e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d9:58:cc:89:28:ee:ce:85:47:05:c2:16:64: 67:70:63:a3:17:10:5f:97:2b:44:e8:a6:9d:f9:de: f2:c1:e1:47:40:84:67:2c:96:28:51:86:d2:2a:12: d3:34:ad:c5:47:eb:74:c3:02:69:59:07:05:07:66: 95:9b:d8:b2:e7:f3:c6:38:a5:e4:e0:b5:63:5c:da: 40:68:5b:98:35:9c:05:fb:1a:d2:44:cc:40:80:af: 65:9b:c7:f3:3d:aa:ba:05:7e:01:26:e1:4b:05:0c: f2:ea:13:8e:72:a2:9a:5c:06:f4:b5:bc:bb:dc:25: 5b:02:b6:f9:9f:f2:e7:af:f7:80:a9:37:d5:d8:f4: c2:e0:1b:28:8a:ce:52:ed:54:28:37:f3:46:af:11: 8e:27:21:5a:9a:57:8d:ea:ee:3f:79:5b:40:bf:9c: aa:66:30:00:21:2d:3c:53:f1:67:9a:b9:f2:40:e5: 3e:17:e6:46:35:53:cc:a2:d4:2d:98:21:d6:41:4a: a6:00:16:3a:53:52:57:90:d5:8c:34:8e:e2:71:aa: 88:15:b5:e0:d1:de:09:66:54:4f:be:21:46:ea:64: 1a:a0:42:94:0b:21:a0:9d:c9:da:26:72:0c:f7:15: 37:bf:19:02:e9:84:09:4d:a3:72:07:82:48:c4:37: 94:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D7:25:11:3E:15:B6:87:02:83:85:CC:F8:BD:07:92:D7:4F:1E:F0 X509v3 Authority Key Identifier: keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:b9:6c:5f:53:76:f1:61:f6:1c:40:6b:92:3d:07:16:c9:f2: 33:b0:25:52:72:fc:e7:9b:06:c7:cb:c2:0c:47:05:c3:5d:d9: e7:96:f6:06:2d:cb:18:8e:a8:29:2f:ab:59:27:d4:87:45:f3: 1f:f8:64:53:56:0e:44:a4:b3:0f:44:d6:19:ce:93:f6:7e:b5: 66:ad:e9:e5:f7:eb:fc:8a:3c:3e:ba:ec:cc:e0:8e:49:bf:77: ab:8c:8a:d1:20:d2:e3:cb:0e:70:a8:57:09:16:c1:b4:1f:c6: 3d:c8:33:7e:de:6b:dd:2e:7d:24:84:24:36:72:5e:bd:5e:e1: dc:33:57:da:1a:70:d2:b8:78:04:eb:ed:77:f2:45:90:36:3e: 6b:bd:4a:45:14:e5:4b:dd:39:12:7d:9e:66:2c:cd:13:16:f4: 40:b8:65:64:53:69:ad:33:d4:d1:04:35:9f:3c:93:07:60:65: d2:ec:25:f8:94:b8:30:ee:6a:c1:cf:db:f7:37:12:ed:51:96: 6a:e9:e1:c1:de:0e:a5:e1:d2:5b:c0:bf:22:0c:75:69:a4:42: 0b:f7:43:1a:90:2e:bc:35:79:32:69:af:b3:aa:03:1b:44:55: 82:23:33:71:0f:3b:9b:2d:28:6d:5b:32:e1:ec:31:e8:62:19: 8e:8d:48:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3 MzQyRDY2MUYwHhcNMjUxMjE4MTYwMzA1WhcNMjUxMjI1MTYwMzA1WjAYMRYwFAYD VQQDDA02OTQ0MjViOS0yNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAidlYzIko7s6FRwXCFmRncGOjFxBflytE6Kad+d7yweFHQIRnLJYoUYbSKhLT NK3FR+t0wwJpWQcFB2aVm9iy5/PGOKXk4LVjXNpAaFuYNZwF+xrSRMxAgK9lm8fz Paq6BX4BJuFLBQzy6hOOcqKaXAb0tby73CVbArb5n/Lnr/eAqTfV2PTC4Bsois5S 7VQoN/NGrxGOJyFamleN6u4/eVtAv5yqZjAAIS08U/FnmrnyQOU+F+ZGNVPMotQt mCHWQUqmABY6U1JXkNWMNI7icaqIFbXg0d4JZlRPviFG6mQaoEKUCyGgncnaJnIM 9xU3vxkC6YQJTaNyB4JIxDeUUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvXJRE+ FbaHAoOFzPi9B5LXTx7wMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4 NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC cTRMbHZyY052aTV6UXRaaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUuWxfU3bxYfYcQGuSPQcWyfIzsCVScvznmwbHy8IMRwXDXdnnlvYG LcsYjqgpL6tZJ9SHRfMf+GRTVg5EpLMPRNYZzpP2frVmrenl9+v8ijw+uuzM4I5J v3erjIrRINLjyw5wqFcJFsG0H8Y9yDN+3mvdLn0khCQ2cl69XuHcM1faGnDSuHgE 6+138kWQNj5rvUpFFOVL3TkSfZ5mLM0TFvRAuGVkU2mtM9TRBDWfPJMHYGXS7CX4 lLgw7mrBz9v3NxLtUZZq6eHB3g6l4dJbwL8iDHVppEIL90MakC68NXkyaa+zqgMb RFWCIzNxDzubLShtWzLh7DHoYhmOjUi4 -----END CERTIFICATE-----Generated at Fri Dec 19 17:27:26 2025 by rpki-client