This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: N6rfaYHY59kN9+gIGxv186fpiQFGBj5Di0bY55HxEKs= Subject key identifier: 20:D2:3E:68:60:E1:C8:54:5C:46:39:60:52:FD:6F:E1:3A:33:2A:1F Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 07FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 07F7 Signing time: Sat 20 Dec 2025 20:29:50 +0000 Manifest this update: Sat 20 Dec 2025 20:29:49 +0000 Manifest next update: Sat 27 Dec 2025 20:29:49 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: 7QUMhaAZOLY9BEf243QDWNQDIQ0dO6vNUhsuzwb7zD4=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: pJsd3auztkAG0ZglRxVSFOGCBnUaQsBNRyP6xIkzkvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Dec 20 20:29:49 2025 GMT Not After : Dec 27 20:29:49 2025 GMT Subject: CN=6947073e-efe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:a1:a0:18:f2:1c:bd:45:93:0d:39:0d:2b: 20:10:70:15:a1:27:84:ff:a5:62:56:68:03:84:bf: a1:8b:33:93:96:4f:51:67:c4:ca:e7:8a:60:f0:94: 81:79:7e:7b:ef:13:57:44:9d:05:ec:cf:12:3c:6f: d1:99:51:34:3f:70:a6:7b:f6:f2:04:0f:e0:34:3c: aa:88:54:cb:e1:dc:ea:78:48:c7:4e:15:7c:56:49: af:dc:6f:7c:fb:8b:8e:e8:75:b4:07:84:8f:bb:d5: 50:a5:7b:6a:48:2a:e1:b9:7e:a0:df:be:60:c1:34: 3d:87:cf:e1:ae:5f:39:cb:50:0e:b7:b7:fa:55:c3: 64:2f:62:2a:fc:cf:58:41:9d:9b:50:7e:3b:62:ec: 7f:93:55:43:f4:73:6f:62:14:18:42:6c:f2:3a:64: c3:d3:7a:74:d7:aa:e9:15:5c:25:a5:c3:38:5a:be: 2d:b1:e0:5e:15:c8:19:26:c2:52:3e:e9:17:38:b8: ac:c8:f1:e8:7c:3e:1f:eb:56:90:d0:0f:98:3f:de: 25:28:27:15:f9:bf:38:31:ed:46:45:cc:b1:37:21: 35:7f:06:7b:9a:39:b9:cc:4d:23:12:71:09:35:31: e5:97:ac:7f:be:e5:74:24:50:9a:c3:ae:3a:55:36: bc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D2:3E:68:60:E1:C8:54:5C:46:39:60:52:FD:6F:E1:3A:33:2A:1F X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c0:43:32:4c:3e:35:4c:d1:0b:e0:17:c9:80:b8:f6:29:09: 84:fa:10:cf:e4:f8:84:e0:95:1a:f3:87:6e:ff:dd:3b:09:d2: 2e:34:25:6b:ab:60:8f:64:12:2f:85:8f:09:60:4a:55:53:df: 98:8b:3d:4b:5f:95:ba:f1:0e:ef:49:c1:35:9f:2d:dc:7f:41: b2:e2:ac:46:8f:9c:24:2b:61:99:ce:ad:09:5f:2d:a9:cb:a1: 61:89:9f:d3:e8:8b:d0:b7:34:f3:66:19:a5:df:da:d8:a4:6c: 2a:f5:41:3f:45:70:37:d1:53:b0:ac:8f:34:e0:54:cb:e5:f5: a2:34:57:d3:7d:36:e6:ce:91:74:f8:47:cd:91:3d:4a:f9:f4: e7:6d:bd:4d:09:0d:2a:73:25:8f:77:c2:a9:79:d9:6b:b6:9f: 68:e4:de:d3:45:8e:0f:c0:ff:e2:9a:4d:66:2f:ae:47:0e:16: 1f:3d:e2:25:d1:63:78:07:f2:ce:18:34:e8:d6:cd:56:1c:33: c3:1a:13:3f:7b:24:a4:95:4b:84:1a:25:d8:72:3a:6b:2f:78: 76:f1:f7:61:77:84:a2:7d:c8:8c:fd:9b:17:ca:42:c2:62:f5: 0e:93:5b:37:25:0e:b3:e7:75:4a:04:94:bd:ef:d2:0d:e8:e0: 27:33:d0:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjUxMjIwMjAyOTQ5WhcNMjUxMjI3MjAyOTQ5WjAYMRYwFAYD VQQDDA02OTQ3MDczZS1lZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXmhoBjyHL1Fkw05DSsgEHAVoSeE/6ViVmgDhL+hizOTlk9RZ8TK54pg8JSB eX577xNXRJ0F7M8SPG/RmVE0P3Cme/byBA/gNDyqiFTL4dzqeEjHThV8Vkmv3G98 +4uO6HW0B4SPu9VQpXtqSCrhuX6g375gwTQ9h8/hrl85y1AOt7f6VcNkL2Iq/M9Y QZ2bUH47Yux/k1VD9HNvYhQYQmzyOmTD03p016rpFVwlpcM4Wr4tseBeFcgZJsJS PukXOLisyPHofD4f61aQ0A+YP94lKCcV+b84Me1GRcyxNyE1fwZ7mjm5zE0jEnEJ NTHll6x/vuV0JFCaw646VTa8HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDSPmhg 4chUXEY5YFL9b+E6MyofMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWwEMyTD41TNEL4BfJgLj2KQmE+hDP5PiE4JUa84du/907CdIuNCVr q2CPZBIvhY8JYEpVU9+Yiz1LX5W68Q7vScE1ny3cf0Gy4qxGj5wkK2GZzq0JXy2p y6FhiZ/T6IvQtzTzZhml39rYpGwq9UE/RXA30VOwrI804FTL5fWiNFfTfTbmzpF0 +EfNkT1K+fTnbb1NCQ0qcyWPd8Kpedlrtp9o5N7TRY4PwP/imk1mL65HDhYfPeIl 0WN4B/LOGDTo1s1WHDPDGhM/eySklUuEGiXYcjprL3h28fdhd4SifciM/ZsXykLC YvUOk1s3JQ6z53VKBJS979IN6OAnM9B3 -----END CERTIFICATE-----Generated at Sun Dec 21 13:05:15 2025 by rpki-client