This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json) Hash identifier: X98JWxZAgrg1mqU6VP8Qg1xc3mt/knTH3Ss7cT29PZw= Subject key identifier: 49:74:11:F3:93:A9:17:02:EB:B7:CB:C5:9D:3B:D0:63:AA:E7:E9:2C Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft Manifest number: 0486 Signing time: Thu 18 Dec 2025 23:36:20 +0000 Manifest this update: Thu 18 Dec 2025 23:36:19 +0000 Manifest next update: Thu 25 Dec 2025 23:36:19 +0000 Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: qbZ3dyZ18y2qv7ztH3Tde0UIN765a0RsqIpcuSirJ5w=) 2: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: jyQmQuKWMrWFivOkwu2cRS9J3e3CFqHg+uuwbKI9XeE=) 3: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: P/gd5ogaMLRm6x7eKVq37vdyn0rcHoT75P+S2vnsqkQ=) 4: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: 7dMYBh5Kias3dynE3RyF2gF6pXmk7AknkGd9fyD3NyM=) 5: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: Fh2Am2j7U9RrgdFXomlyNwcsWnidXxkcXn7XnXDFM7E=) 6: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: EY9KwkGQCsbs1MqQbJgggG8QXozMeXajqta7rUD1mjY=) 7: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: s4fCKmAzfLfiyPtpMm1I7YInFjR2uqzY8ys3Fd5Sz5o=) 8: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: KZUF8BssowgeDDElrmfBd3Wi1MTanQLIgwgvTwUCAKk=) 9: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: l8HZr/1K5iTql38w4D2ptDQ0JXfBGGoepbsVMHkB3ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Dec 18 23:36:19 2025 GMT Not After : Dec 25 23:36:19 2025 GMT Subject: CN=69448ff3-faab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:6d:a9:55:31:5e:42:e7:1d:cd:7a:2f:68: a1:2c:5f:5d:b6:fe:1b:34:0e:96:81:a5:95:6d:2b: 25:d9:f7:10:a7:d1:f7:d9:60:a8:8d:af:8b:f1:ea: 20:d3:09:b7:0b:75:f3:b3:b0:13:5a:e6:fd:d2:f2: 59:a0:32:b8:a6:69:19:1d:26:fc:bc:50:72:98:79: 45:c5:24:e2:a4:0f:06:60:f3:a5:a9:fb:00:0f:72: 1d:9e:93:45:ec:ad:35:5e:a0:d9:b9:04:36:bf:f1: f2:4d:64:63:2d:bb:a4:68:78:00:2b:a8:be:f4:94: 4f:07:32:9f:ed:22:23:c4:a8:5f:52:de:08:73:16: 1d:e3:00:0e:28:31:73:7b:23:69:dd:14:22:6c:ce: 16:b9:f0:93:26:17:e8:fe:a8:51:28:46:25:3f:31: 6b:9d:0d:72:e0:f0:00:97:80:2b:28:41:38:28:52: 97:8a:aa:83:72:7b:fd:00:c6:7d:9b:b4:f6:c8:7e: 45:a6:da:a2:da:89:85:ce:6e:e4:eb:77:00:2d:bd: 6e:8b:c6:aa:57:d3:d5:f1:41:60:3d:67:94:de:a9: 32:61:6c:f8:91:de:ca:6b:28:51:fe:46:f6:b8:04: 9f:aa:53:fc:3e:e2:8c:2c:2d:25:fa:31:10:a4:54: b4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:74:11:F3:93:A9:17:02:EB:B7:CB:C5:9D:3B:D0:63:AA:E7:E9:2C X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:9a:b6:de:e8:08:b6:f1:cc:35:c9:fa:9f:be:82:c4:48:d3: 95:32:36:7e:d0:41:70:07:c1:10:35:8f:1d:79:b9:9b:36:70: 53:f2:53:11:04:68:a8:2a:0f:3c:a8:03:fb:7d:39:3e:28:6d: d7:8f:a4:79:82:5e:e2:38:73:cf:4f:19:24:29:7a:c6:8a:25: 06:46:57:9e:c6:75:99:1b:14:cf:f9:c2:b4:91:cd:77:fb:43: 20:18:77:ae:73:d2:cb:cb:51:74:34:f1:df:28:74:21:a6:54: d4:4e:8b:00:67:82:b2:23:a5:1f:84:cb:2d:b5:7d:74:64:66: ab:d2:69:b5:11:04:3e:0b:85:42:f2:c4:2d:65:d0:b5:7b:67: 3e:b4:7c:32:c4:62:e5:58:3f:77:c5:92:b9:68:48:1b:b9:70: da:31:d3:58:8f:c5:f5:f9:0e:5b:31:02:96:be:bd:18:9a:b7: 6d:e1:c8:3e:37:d5:ed:af:df:fc:8e:4d:a3:c3:a4:44:b8:92: f2:39:7a:8e:d3:9c:e9:e4:76:0e:4b:a6:33:2d:77:aa:b4:a0: 98:38:75:24:8f:f5:23:12:9d:ce:d5:dd:55:9b:df:82:fe:90: f4:c4:ad:cc:aa:db:b8:17:5b:fb:11:88:b1:2a:95:e9:07:53: 13:33:b5:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUxMjE4MjMzNjE5WhcNMjUxMjI1MjMzNjE5WjAYMRYwFAYD VQQDDA02OTQ0OGZmMy1mYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoixtqVUxXkLnHc16L2ihLF9dtv4bNA6WgaWVbSsl2fcQp9H32WCoja+L8eog 0wm3C3Xzs7ATWub90vJZoDK4pmkZHSb8vFBymHlFxSTipA8GYPOlqfsAD3IdnpNF 7K01XqDZuQQ2v/HyTWRjLbukaHgAK6i+9JRPBzKf7SIjxKhfUt4IcxYd4wAOKDFz eyNp3RQibM4WufCTJhfo/qhRKEYlPzFrnQ1y4PAAl4ArKEE4KFKXiqqDcnv9AMZ9 m7T2yH5Fptqi2omFzm7k63cALb1ui8aqV9PV8UFgPWeU3qkyYWz4kd7KayhR/kb2 uASfqlP8PuKMLC0l+jEQpFS0zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEl0EfOT qRcC67fLxZ070GOq5+ksMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRCMS8zRkE2OTIwMDgzQzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5 RHBnWHJuTnNBRG5SaUFpTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4mrbe6Ai28cw1yfqfvoLESNOVMjZ+0EFwB8EQNY8debmbNnBT8lMR BGioKg88qAP7fTk+KG3Xj6R5gl7iOHPPTxkkKXrGiiUGRleexnWZGxTP+cK0kc13 +0MgGHeuc9LLy1F0NPHfKHQhplTUTosAZ4KyI6UfhMsttX10ZGar0mm1EQQ+C4VC 8sQtZdC1e2c+tHwyxGLlWD93xZK5aEgbuXDaMdNYj8X1+Q5bMQKWvr0Ymrdt4cg+ N9Xtr9/8jk2jw6REuJLyOXqO05zp5HYOS6YzLXeqtKCYOHUkj/UjEp3O1d1Vm9+C /pD0xK3Mqtu4F1v7EYixKpXpB1MTM7XK -----END CERTIFICATE-----Generated at Sat Dec 20 21:07:54 2025 by rpki-client