This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: 7tzfLAtf7tMsPrqCMB2bMw5cNhwaCb80wkPYt+/iPrM= Subject key identifier: 8D:BF:CD:9D:1C:F3:76:71:DB:D1:85:59:48:3F:E1:0C:C1:47:69:54 Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: C3 Signing time: Fri 19 Dec 2025 04:58:38 +0000 Manifest this update: Fri 19 Dec 2025 04:58:38 +0000 Manifest next update: Fri 26 Dec 2025 04:58:38 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: rJzrwn9wQFAqUUTXCHxHMjFgQiyQvXGNgwOVyV+TdOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: Dec 19 04:58:38 2025 GMT Not After : Dec 26 04:58:38 2025 GMT Subject: CN=6944db7e-3f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:65:ae:20:e0:01:07:2d:6d:33:99:85:c0:12: 5c:e9:10:25:11:1c:fd:c2:5b:f0:4e:17:72:e5:c6: b1:d9:e6:f0:5d:5a:0b:41:ec:9e:f5:1e:08:41:d4: 5e:02:81:73:3e:1e:2c:a1:9c:70:64:32:94:43:60: 4a:37:ab:86:b9:1b:c8:4e:4a:2d:06:51:b8:d1:03: e2:53:db:78:fe:b0:71:68:77:cd:c0:5f:3a:e7:af: 68:87:87:74:77:67:46:ca:1a:60:1d:17:fb:04:4e: e5:46:27:07:7b:8c:72:79:9a:16:c0:ad:30:37:19: 9e:68:00:7d:27:d1:b8:5f:29:f6:f4:be:bf:fa:21: 8e:3d:0c:7c:6a:fb:f6:f1:92:44:d5:d3:df:1b:97: b2:69:3b:21:e3:7a:94:1d:4d:b9:35:30:a4:85:d2: 65:c0:59:2a:98:a8:af:a1:45:85:1f:04:67:37:b7: 36:12:e8:68:bc:77:97:7f:f1:0f:31:05:d5:7f:a7: 7f:9b:71:15:67:fc:bd:f9:d1:6a:66:65:c5:d5:2a: b5:f8:ae:2d:7f:19:5c:43:79:09:60:be:f4:d5:7c: 28:94:06:65:42:28:23:52:bc:3e:c4:25:1b:94:0b: d2:5b:27:69:98:9d:23:b0:7a:ff:88:89:97:05:db: cf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BF:CD:9D:1C:F3:76:71:DB:D1:85:59:48:3F:E1:0C:C1:47:69:54 X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:04:aa:39:75:2b:39:4d:1b:63:d7:07:02:c1:c9:e5:d6:eb: 2e:ee:1b:f4:61:56:43:be:ba:e0:b7:df:3b:04:dc:83:30:e9: 1f:dd:f9:3c:53:96:c4:74:99:05:ac:71:4d:6a:99:84:bf:79: ff:6d:c6:c0:1b:ab:ff:3e:61:11:f2:f4:a3:04:a9:68:76:b7: 5a:e3:6f:12:5f:b1:0d:c1:7b:de:3a:1c:5f:46:8f:c3:f1:a2: 52:47:0a:ac:b1:bb:9d:27:5b:94:39:b1:78:d3:5d:f0:92:71: 10:e9:d5:d2:08:0b:10:88:ed:2a:d5:0f:ea:30:a8:27:00:71: f8:ea:db:58:73:02:d2:1c:ee:0b:67:68:4d:c5:78:c1:d7:5d: 97:3c:81:51:8c:42:e2:0e:68:6a:59:75:a5:55:88:a7:12:45: 73:a2:5d:ac:02:43:14:84:03:eb:8b:3e:96:1b:c0:02:00:c1: 91:57:f1:c6:74:e9:42:fc:dc:ed:67:bb:31:fc:85:53:80:e4: 6c:18:f0:1e:95:d1:6d:b6:bc:ff:5b:72:e9:b0:48:41:69:c1: c8:b8:fa:e8:23:0d:4f:04:e4:c5:f9:11:bc:4c:c1:da:45:34: af:15:c9:aa:c5:77:36:36:1d:5f:2f:0d:73:a3:66:d5:ef:09: 30:19:8f:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwQjQxMTAvBgNVBAUTKDIzMDM3ODE2NzcwNzlDMkZCQjQ3NDk2NDBGMDY1N0Ex Qzg4RURCNDQwHhcNMjUxMjE5MDQ1ODM4WhcNMjUxMjI2MDQ1ODM4WjAYMRYwFAYD VQQDDA02OTQ0ZGI3ZS0zZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk2WuIOABBy1tM5mFwBJc6RAlERz9wlvwThdy5cax2ebwXVoLQeye9R4IQdRe AoFzPh4soZxwZDKUQ2BKN6uGuRvITkotBlG40QPiU9t4/rBxaHfNwF86569oh4d0 d2dGyhpgHRf7BE7lRicHe4xyeZoWwK0wNxmeaAB9J9G4Xyn29L6/+iGOPQx8avv2 8ZJE1dPfG5eyaTsh43qUHU25NTCkhdJlwFkqmKivoUWFHwRnN7c2EuhovHeXf/EP MQXVf6d/m3EVZ/y9+dFqZmXF1Sq1+K4tfxlcQ3kJYL701XwolAZlQigjUrw+xCUb lAvSWydpmJ0jsHr/iImXBdvPNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2/zZ0c 83Zx29GFWUg/4QzBR2lUMB8GA1UdIwQYMBaAFCMDeBZ3B5wvu0dJZA8GV6HIjttE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9GMjIzMURFNEFG MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5DLTdSMGxrRHdaWG9jaU8y MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTBCNC9GMjIzMURFNEFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5D LTdSMGxrRHdaWG9jaU8yMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaBKo5dSs5TRtj1wcCwcnl1usu7hv0YVZDvrrgt987BNyDMOkf3fk8 U5bEdJkFrHFNapmEv3n/bcbAG6v/PmER8vSjBKlodrda428SX7ENwXveOhxfRo/D 8aJSRwqssbudJ1uUObF4013wknEQ6dXSCAsQiO0q1Q/qMKgnAHH46ttYcwLSHO4L Z2hNxXjB112XPIFRjELiDmhqWXWlVYinEkVzol2sAkMUhAPriz6WG8ACAMGRV/HG dOlC/NztZ7sx/IVTgORsGPAeldFttrz/W3LpsEhBacHIuProIw1PBOTF+RG8TMHa RTSvFcmqxXc2Nh1fLw1zo2bV7wkwGY9c -----END CERTIFICATE-----Generated at Fri Dec 19 18:58:10 2025 by rpki-client