This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json) Hash identifier: UHR1JQczVkDJrF7oFNvsecFomIBT+VOEjexfQJPwU6M= Subject key identifier: D7:EA:73:38:C6:BD:D3:F6:A6:CB:BD:A6:8D:19:91:35:BB:22:60:5E Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Certificate serial: 087A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft Manifest number: 0853 Signing time: Sat 20 Dec 2025 15:46:53 +0000 Manifest this update: Sat 20 Dec 2025 15:46:53 +0000 Manifest next update: Sat 27 Dec 2025 15:46:53 +0000 Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: GTWIw8dpGIzY3KMTmx/DmpWLbkGWcDqDG7SwDaxxUqk=) 2: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: MfRtvCwn59famvfu05RMk6NPUwzQW1gti+aq8XhNzyk=) 3: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: tG1HGaU5DUimsEMDFRA50jlq68FCzHx0C3arFNqcuaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2170 (0x87a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Validity Not Before: Dec 20 15:46:53 2025 GMT Not After : Dec 27 15:46:53 2025 GMT Subject: CN=6946c4ed-c59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:7b:79:1f:27:8f:bc:93:1e:6a:4c:15:cb: 20:2d:56:38:c6:ae:e3:27:1b:45:2d:23:e8:e7:41: b1:c6:97:81:20:72:35:c8:d8:bc:4d:13:9b:93:a7: 42:92:22:70:fe:0d:a1:a3:ba:76:3d:e9:e7:eb:a4: 80:b5:88:9b:50:55:87:62:93:4c:e3:5a:6b:d1:8f: 69:94:15:9b:88:f3:40:5c:e4:72:fb:28:b6:a5:60: a8:59:d7:6a:d9:d3:ad:a6:2c:e9:7d:cb:30:0a:b9: 78:1e:c7:e1:68:48:20:ce:6b:8e:02:c7:89:e0:1a: 5d:10:2e:b7:ae:c4:3d:f6:70:2d:98:33:7b:06:48: 41:c5:7b:04:14:72:a5:a5:13:3a:e8:1c:85:cb:99: 50:f8:c0:8a:1a:92:a4:74:43:fd:da:99:86:66:8f: 20:56:8b:f6:79:36:1d:5c:d3:3d:4f:06:8e:76:6f: 54:a8:d2:86:13:14:ea:9b:40:5f:45:e6:1a:63:81: 82:6b:61:90:8d:f0:cb:f0:a4:93:43:85:ec:fe:5b: 0b:ce:d1:7d:ea:1c:3b:03:a2:98:e2:22:4c:0e:07: 50:18:a9:bc:5c:0a:0b:46:00:cf:97:d3:aa:27:22: 1a:d7:fc:70:c9:9e:68:fd:ed:28:1f:fe:95:9a:23: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EA:73:38:C6:BD:D3:F6:A6:CB:BD:A6:8D:19:91:35:BB:22:60:5E X509v3 Authority Key Identifier: keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:af:6f:b3:13:4d:29:cf:b1:5d:4b:d4:36:dc:1f:2b:02:e5: 5c:c3:75:54:bc:60:f1:dc:b0:a6:2b:e7:1e:aa:1a:4b:62:53: 09:41:2d:19:37:c4:60:ff:61:c9:c7:2d:f0:3d:af:ea:ff:1b: a5:3d:71:0e:55:75:45:99:48:8f:e8:7a:ef:8a:90:c8:08:0c: a2:72:ec:fd:9e:78:01:61:a8:14:41:19:6d:0d:55:71:dc:22: 0b:f0:a6:58:f8:93:5c:95:ce:72:19:76:98:55:f0:14:33:ec: 00:ca:0f:d9:8a:c5:d0:b8:f0:1a:07:8e:56:49:d4:2e:36:c5: df:b1:e9:af:83:ab:27:d2:9e:8c:c2:de:50:a1:35:31:9e:db: 9c:93:ee:e2:46:9d:28:2c:d1:d0:08:09:6f:0e:cf:6b:a7:18: 90:ef:d0:b6:1f:73:3a:c5:92:76:1f:df:ec:38:e9:b5:dd:c0: d5:f2:90:85:ec:c6:e7:0e:c1:8f:d5:a4:d1:1b:cd:3c:f2:ae: 0b:55:22:a1:bd:59:81:3c:60:13:26:0b:f2:f7:46:f9:e5:27: 93:7d:00:80:95:09:83:b8:89:38:5b:fb:54:62:44:b7:1f:ae: 0e:58:ce:11:cf:c1:b3:4e:6e:af:7b:fe:4e:30:2d:eb:0d:98: 99:6b:05:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDg5N0UwMkNDRDhFQjQwMzlBNzgzRDAyMzc5QzU1RkVF OUYwQ0VFNTkwHhcNMjUxMjIwMTU0NjUzWhcNMjUxMjI3MTU0NjUzWjAYMRYwFAYD VQQDDA02OTQ2YzRlZC1jNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssF7eR8nj7yTHmpMFcsgLVY4xq7jJxtFLSPo50GxxpeBIHI1yNi8TRObk6dC kiJw/g2ho7p2Penn66SAtYibUFWHYpNM41pr0Y9plBWbiPNAXORy+yi2pWCoWddq 2dOtpizpfcswCrl4HsfhaEggzmuOAseJ4BpdEC63rsQ99nAtmDN7BkhBxXsEFHKl pRM66ByFy5lQ+MCKGpKkdEP92pmGZo8gVov2eTYdXNM9TwaOdm9UqNKGExTqm0Bf ReYaY4GCa2GQjfDL8KSTQ4Xs/lsLztF96hw7A6KY4iJMDgdQGKm8XAoLRgDPl9Oq JyIa1/xwyZ5o/e0oH/6VmiPshwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfqczjG vdP2psu9po0ZkTW7ImBeMB8GA1UdIwQYMBaAFIl+AszY60A5p4PQI3nFX+6fDO5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy84QzY4QjlBMjA5 ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFEbW5nOUFqZWNWZjdwOE03 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lYNEN6TmpyUURtbmc5QWplY1ZmN3A4TTdsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy84QzY4QjlBMjA5ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFE bW5nOUFqZWNWZjdwOE03bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAr2+zE00pz7FdS9Q23B8rAuVcw3VUvGDx3LCmK+ceqhpLYlMJQS0Z N8Rg/2HJxy3wPa/q/xulPXEOVXVFmUiP6HrvipDICAyicuz9nngBYagUQRltDVVx 3CIL8KZY+JNclc5yGXaYVfAUM+wAyg/ZisXQuPAaB45WSdQuNsXfsemvg6sn0p6M wt5QoTUxntuck+7iRp0oLNHQCAlvDs9rpxiQ79C2H3M6xZJ2H9/sOOm13cDV8pCF 7MbnDsGP1aTRG8088q4LVSKhvVmBPGATJgvy90b55SeTfQCAlQmDuIk4W/tUYkS3 H64OWM4Rz8GzTm6ve/5OMC3rDZiZawV7 -----END CERTIFICATE-----Generated at Sun Dec 21 18:01:28 2025 by rpki-client