This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft File: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft (raw, json) Hash identifier: bm/VOql/olvTrUJFyJcd3AnLzx9+in6QgcGJqJCkJWw= Subject key identifier: A6:8F:B3:A8:C2:6B:0F:99:86:64:BB:D7:4D:22:49:E0:B4:4E:D6:9F Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD Certificate issuer: /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft Manifest number: 17 Signing time: Fri 19 Dec 2025 06:46:15 +0000 Manifest this update: Fri 19 Dec 2025 06:46:14 +0000 Manifest next update: Fri 26 Dec 2025 06:46:14 +0000 Files and hashes: 1: igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl (hash: vhbqp9BpVm968tLuAD4M1WnRwWS63Wd8CxM2GJYCY0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD Validity Not Before: Dec 19 06:46:14 2025 GMT Not After : Dec 26 06:46:14 2025 GMT Subject: CN=6944f4b6-c265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a0:06:45:17:dc:0f:76:7e:4c:b6:e7:71:3d: 68:40:95:4d:80:ff:78:eb:29:5a:08:05:ca:fb:a4: c2:da:63:b9:80:b6:70:4a:5e:8b:f6:f5:e8:04:72: e3:1b:38:f0:80:f8:76:4c:61:f4:ba:a9:45:3d:fc: fc:d9:da:7e:57:da:f9:7e:0e:12:aa:f9:98:df:8f: 4f:ae:db:96:59:3d:cf:7c:39:b0:1a:57:22:84:67: 6f:3a:e5:bb:69:fc:29:d1:4b:9f:51:30:66:b4:7d: 4e:b4:52:0e:15:43:23:2e:c8:d3:32:2b:8d:23:7b: 36:74:98:b4:50:bf:f1:0b:3b:6e:5b:a4:53:fc:dc: 8b:dd:92:c9:f6:c7:0d:f9:1e:f8:91:dd:c6:f7:5e: 80:95:ae:68:c8:27:db:ac:20:36:8c:4c:14:5d:0c: 7a:30:e1:8d:f3:08:83:0d:40:fa:70:4d:40:2a:49: 12:8e:87:cd:13:5d:2b:cb:6a:69:d4:9b:9c:e3:44: 79:04:9a:d8:4f:6c:5c:a8:6f:16:19:75:b2:c3:d7: 2a:67:b7:a3:6d:c7:f4:51:c2:4a:e9:58:d4:5c:b0: c1:af:f7:ce:54:42:a5:00:20:4a:27:cb:16:0b:a5: 2c:7d:48:49:71:e4:49:a0:5e:b4:64:12:8b:df:0f: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8F:B3:A8:C2:6B:0F:99:86:64:BB:D7:4D:22:49:E0:B4:4E:D6:9F X509v3 Authority Key Identifier: keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8a:83:31:f4:ba:8c:e1:38:96:9d:7a:fb:ae:9e:86:a5:ad: 63:b0:f1:96:99:84:a8:e8:f0:80:4d:16:c9:b0:a9:18:7b:4a: f5:4e:ba:e4:e4:4d:a8:f1:32:ac:98:b0:b3:10:c4:16:21:e6: fe:cd:74:2f:46:3f:9f:51:97:76:0f:e0:0e:da:6d:12:46:b0: 47:02:50:1d:68:de:78:91:3c:b4:64:6b:64:9c:86:30:71:ed: 75:ee:51:b7:78:fe:41:a7:c7:1d:48:e6:cb:aa:d2:86:a8:b9: 52:42:81:23:32:a0:96:a8:cf:99:f7:96:3b:c4:d1:d8:a7:42: 57:62:15:8f:b1:7d:a9:60:48:7c:02:84:09:7f:34:41:8a:eb: 0b:16:57:2c:70:5d:ab:a1:7e:b9:69:c2:6b:5d:1a:8c:f1:62: b5:17:00:98:c1:47:ce:8e:3a:8e:42:c7:b3:7c:a9:ec:85:88: ce:8a:c4:55:f1:95:cd:0b:ca:a5:42:90:60:8a:b6:ad:49:a1: c2:e7:4e:c9:d6:41:44:13:37:43:84:78:61:60:06:8a:ea:33: 49:37:4b:9d:c0:fb:4f:43:24:74:b4:bb:5c:cc:0d:cb:2b:a4: c8:70:20:34:d6:89:11:b3:f9:76:8d:a4:6d:6c:b9:0f:f0:46: 52:3a:ca:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDk2MDExMC8GA1UEBRMoOEEwMzE3NjJFMDk0MzlDMUY1Nzc2NjdFNDJGRTBDMTM3 OUFCMURGRDAeFw0yNTEyMTkwNjQ2MTRaFw0yNTEyMjYwNjQ2MTRaMBgxFjAUBgNV BAMMDTY5NDRmNGI2LWMyNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCJoAZFF9wPdn5MtudxPWhAlU2A/3jrKVoIBcr7pMLaY7mAtnBKXov29egEcuMb OPCA+HZMYfS6qUU9/PzZ2n5X2vl+DhKq+Zjfj0+u25ZZPc98ObAaVyKEZ2865btp /CnRS59RMGa0fU60Ug4VQyMuyNMyK40jezZ0mLRQv/ELO25bpFP83Ivdksn2xw35 HviR3cb3XoCVrmjIJ9usIDaMTBRdDHow4Y3zCIMNQPpwTUAqSRKOh80TXSvLamnU m5zjRHkEmthPbFyobxYZdbLD1ypnt6Ntx/RRwkrpWNRcsMGv985UQqUAIEonyxYL pSx9SElx5EmgXrRkEovfDyHTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpo+zqMJr D5mGZLvXTSJJ4LRO1p8wHwYDVR0jBBgwFoAUigMXYuCUOcH1d2Z+Qv4ME3mrHf0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwOTYwL0NCMzAyQTlDQkI5 RTExRjA4NTU4RDExOUM0RjlBRTAyL2lnTVhZdUNVT2NIMWQyWi1RdjRNRTNtckhm MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWdNWFl1Q1VPY0gxZDJaLVF2NE1FM21ySGYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw OTYwL0NCMzAyQTlDQkI5RTExRjA4NTU4RDExOUM0RjlBRTAyL2lnTVhZdUNVT2NI MWQyWi1RdjRNRTNtckhmMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC6KgzH0uozhOJadevuunoalrWOw8ZaZhKjo8IBNFsmwqRh7SvVOuuTk TajxMqyYsLMQxBYh5v7NdC9GP59Rl3YP4A7abRJGsEcCUB1o3niRPLRka2SchjBx 7XXuUbd4/kGnxx1I5suq0oaouVJCgSMyoJaoz5n3ljvE0dinQldiFY+xfalgSHwC hAl/NEGK6wsWVyxwXauhfrlpwmtdGozxYrUXAJjBR86OOo5Cx7N8qeyFiM6KxFXx lc0LyqVCkGCKtq1JocLnTsnWQUQTN0OEeGFgBorqM0k3S53A+09DJHS0u1zMDcsr pMhwIDTWiRGz+XaNpG1suQ/wRlI6ypY= -----END CERTIFICATE-----Generated at Fri Dec 19 22:03:47 2025 by rpki-client