This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft File: IcuqoETeGlZkRp9Bi80Id7ITlzo.mft (raw, json) Hash identifier: d3M/OLsv9MJBbrppQIJyTaaJKiIj6fL17YTEf7TugJQ= Subject key identifier: 75:46:7F:77:AF:36:AC:5C:36:49:9C:C8:0E:EE:1D:02:D6:4A:F6:FD Authority key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A Certificate issuer: /CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft Manifest number: 019F Signing time: Fri 19 Dec 2025 02:32:29 +0000 Manifest this update: Fri 19 Dec 2025 02:32:28 +0000 Manifest next update: Fri 26 Dec 2025 02:32:28 +0000 Files and hashes: 1: IcuqoETeGlZkRp9Bi80Id7ITlzo.crl (hash: VAKUrGqwAHQXZS1Wcu0eTYXANnt/j2F0EqS7t7e2tA4=) 2: 6538D178628E11EEBF375134C4F9AE02.roa (hash: 5hu6VPOMwmE3voYXkmp3eUb3lVDeCA+zJokawI+UD3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911393B, serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A Validity Not Before: Dec 19 02:32:28 2025 GMT Not After : Dec 26 02:32:28 2025 GMT Subject: CN=6944b93c-0db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:52:da:ca:dd:12:82:c9:c2:f1:ca:df:13: 53:ab:99:91:c9:30:75:17:21:9d:4b:1d:38:d1:ef: 77:06:59:46:d9:17:c8:c0:59:ee:cc:6d:17:8f:5e: fc:24:27:2a:8a:75:9b:47:a0:35:a5:19:01:69:12: 3a:43:e5:11:7b:be:d5:64:a6:0f:a9:7b:5f:1a:70: d4:cc:d4:80:e4:6f:b3:24:f6:3c:87:88:de:0f:76: af:52:0b:e6:28:e1:e0:b0:35:39:a7:41:2e:36:8c: d5:2f:e6:33:d0:5c:07:60:c4:62:b8:24:04:6c:3b: f0:18:cb:ef:c6:87:ed:22:d2:26:d8:61:b4:e0:05: 73:58:97:fe:bb:ea:11:88:fa:48:57:4d:4e:49:f0: 3d:cc:1a:16:51:27:e1:92:2d:b2:95:b0:17:f9:1f: 8d:e8:11:e7:43:db:81:0b:82:fa:69:39:a5:21:2d: 7d:e3:6a:ed:e6:b5:98:fc:61:eb:dd:d9:3e:d7:a9: 1e:ad:83:20:a4:73:a2:ce:7d:c2:86:c8:34:d3:37: 9a:f1:30:73:a8:94:00:51:bb:75:bf:c0:36:79:a3: 6e:13:85:05:42:fc:4f:97:56:de:46:26:22:a4:8b: 1d:67:10:73:97:83:71:13:47:c5:fa:f6:5a:f2:97: a9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:46:7F:77:AF:36:AC:5C:36:49:9C:C8:0E:EE:1D:02:D6:4A:F6:FD X509v3 Authority Key Identifier: keyid:21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:94:80:a0:24:6e:45:56:ed:0d:4c:ea:41:2c:64:7f:1d:94: 74:30:da:81:b0:73:cb:f5:1a:2a:55:8b:fe:d8:57:cc:5a:b7: 87:f0:5b:54:6e:9b:6b:39:c8:ae:eb:c0:d3:82:be:c4:53:a7: 40:c2:b3:16:f7:73:44:ad:9a:5c:a1:f7:14:4b:fe:d8:dd:57: 56:0e:d7:ca:aa:c7:c0:ff:bd:d1:64:6e:c7:24:eb:a5:e1:b5: 57:ef:8f:30:69:a9:65:ee:70:62:58:e6:a8:80:47:37:2f:b5: d5:80:9f:9e:38:fc:a2:28:f3:a1:2f:e3:79:c6:63:b5:60:5d: aa:0f:8f:31:24:40:75:dd:be:17:4e:63:63:c0:f8:f7:e8:b4: 08:21:af:bb:85:ca:8a:a4:c9:f6:ef:1f:64:bc:74:f0:05:47: 2e:f4:3e:f5:fa:f3:3f:7f:da:4a:32:51:41:1d:08:4c:59:f3: f5:1f:8a:ff:8f:d2:b4:a8:21:37:b7:12:be:a2:c1:62:c2:1c: e8:55:f9:c4:89:94:83:2b:de:05:97:6a:45:01:a7:a0:44:60: c1:a6:30:b2:cc:ad:d2:ea:49:0b:ea:20:cf:2a:dd:43:fc:8c: b9:d6:bd:ca:f3:cd:46:7a:7f:80:a7:44:60:a4:4b:be:f5:cb: fd:da:5b:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5M0IxMTAvBgNVBAUTKDIxQ0JBQUEwNDRERTFBNTY2NDQ2OUY0MThCQ0QwODc3 QjIxMzk3M0EwHhcNMjUxMjE5MDIzMjI4WhcNMjUxMjI2MDIzMjI4WjAYMRYwFAYD VQQDDA02OTQ0YjkzYy0wZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKBS2srdEoLJwvHK3xNTq5mRyTB1FyGdSx040e93BllG2RfIwFnuzG0Xj178 JCcqinWbR6A1pRkBaRI6Q+URe77VZKYPqXtfGnDUzNSA5G+zJPY8h4jeD3avUgvm KOHgsDU5p0EuNozVL+Yz0FwHYMRiuCQEbDvwGMvvxoftItIm2GG04AVzWJf+u+oR iPpIV01OSfA9zBoWUSfhki2ylbAX+R+N6BHnQ9uBC4L6aTmlIS1942rt5rWY/GHr 3dk+16kerYMgpHOizn3Chsg00zea8TBzqJQAUbt1v8A2eaNuE4UFQvxPl1beRiYi pIsdZxBzl4NxE0fF+vZa8pepPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVGf3ev NqxcNkmcyA7uHQLWSvb9MB8GA1UdIwQYMBaAFCHLqqBE3hpWZEafQYvNCHeyE5c6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzkzQi82N0QwOEJBODYy OEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUdsWmtScDlCaTgwSWQ3SVRs em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdXFvRVRlR2xaa1JwOUJpODBJZDdJVGx6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzkzQi82N0QwOEJBODYyOEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUds WmtScDlCaTgwSWQ3SVRsem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBilICgJG5FVu0NTOpBLGR/HZR0MNqBsHPL9RoqVYv+2FfMWreH8FtU bptrOciu68DTgr7EU6dAwrMW93NErZpcofcUS/7Y3VdWDtfKqsfA/73RZG7HJOul 4bVX748waall7nBiWOaogEc3L7XVgJ+eOPyiKPOhL+N5xmO1YF2qD48xJEB13b4X TmNjwPj36LQIIa+7hcqKpMn27x9kvHTwBUcu9D71+vM/f9pKMlFBHQhMWfP1H4r/ j9K0qCE3txK+osFiwhzoVfnEiZSDK94Fl2pFAaegRGDBpjCyzK3S6kkL6iDPKt1D /Iy51r3K881Gen+Ap0RgpEu+9cv92ls8 -----END CERTIFICATE-----Generated at Fri Dec 19 23:50:46 2025 by rpki-client