This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft File: iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json) Hash identifier: RUz7xr4lEBIG4kzc4hDKOctFW/Cu0Tv2rLZKE7YO4Sg= Subject key identifier: 5B:F2:1B:D5:29:F8:4D:E0:DA:C5:10:E8:15:55:90:61:3D:B7:EB:1B Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B Certificate issuer: /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft Manifest number: FD Signing time: Mon 29 Dec 2025 04:21:52 +0000 Manifest this update: Mon 29 Dec 2025 04:21:51 +0000 Manifest next update: Mon 05 Jan 2026 04:21:51 +0000 Files and hashes: 1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: 8OuYY5kCWn9c38CUOEWnQxO4JgTIV5mYguJfxw9YA1c=) 2: 10435EE8740511EF93658977C4F9AE02.roa (hash: UNDsVo30szdipukbzlDQPptsnvJEU3B7e/F2B79HvTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 04:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Validity Not Before: Dec 29 04:21:51 2025 GMT Not After : Jan 5 04:21:51 2026 GMT Subject: CN=695201e0-368d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:ba:c1:12:01:96:2f:38:d8:68:f9:a5:35: de:29:b0:da:68:44:3f:b6:27:a6:2a:2a:c2:8c:2f: 8c:fb:5e:a0:cc:00:92:d7:cb:0e:e4:55:ca:d8:d6: fd:92:42:ec:b4:62:46:25:6f:66:28:40:7f:db:20: bd:95:22:0b:85:22:eb:f7:10:96:0f:52:69:40:b9: 06:24:a1:ae:fc:d5:cf:a2:ae:9f:6b:c3:8a:86:ac: 2d:b1:71:c0:ce:6f:d8:04:66:23:1d:44:85:49:e5: 1a:8c:ec:bb:54:c0:05:99:5c:d3:cc:6f:4a:7c:a6: 75:ae:75:ae:e0:6c:db:e0:e3:2d:53:9b:84:b2:72: 6f:1f:75:21:f8:2a:a0:97:9f:c9:70:9a:7e:1f:86: d5:23:fe:18:f1:ac:c3:f6:3d:cf:bb:d8:50:3d:be: b6:32:b5:56:3d:a3:00:64:fa:ab:d9:07:b1:8b:96: 4d:4f:0d:fb:8f:49:97:ca:23:b3:52:2c:50:11:b5: 51:e0:d1:ce:b0:9a:88:be:ff:86:89:7f:ff:95:62: fd:03:f7:87:ca:ad:df:89:58:69:47:89:5f:e5:ae: b2:9e:9b:dd:df:7e:69:aa:34:ae:00:e3:d0:1a:85: 55:2a:da:f5:56:85:2d:61:22:6d:75:bf:e3:16:b2: ab:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F2:1B:D5:29:F8:4D:E0:DA:C5:10:E8:15:55:90:61:3D:B7:EB:1B X509v3 Authority Key Identifier: keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:00:0c:a4:91:ac:a3:bf:65:5c:77:a2:88:3f:39:02:03:43: 43:f7:14:89:a2:d6:ed:3d:8c:95:fb:59:46:c0:e8:ba:91:07: be:0b:ea:3a:b4:be:2c:f2:41:8f:4b:d4:db:63:19:10:72:5a: 4c:d8:21:0d:ca:25:cf:0a:a7:38:23:a5:26:8a:5b:52:0a:63: 4d:3c:7b:e1:eb:be:dd:c0:9e:6c:48:1c:7f:25:bb:37:bf:9b: 25:56:7d:65:b4:d2:0c:db:f1:9b:4b:0b:a4:75:ce:a6:ac:64: 45:c7:41:63:b5:8c:8a:e6:4b:77:e8:c8:b7:52:78:38:06:2b: f8:1c:ca:52:0c:ea:34:88:3f:e7:55:9b:a0:4e:9c:9e:ae:74: a6:17:5b:b9:b8:d0:41:6f:08:3c:89:a0:65:7e:ec:e3:b2:b9: b9:0f:6c:73:e3:18:80:6b:89:3e:2d:07:3f:f2:4b:f9:98:cf: 01:c7:df:2f:c7:24:93:e9:84:6d:fd:49:0e:46:56:ea:7f:21: 0e:f8:b7:77:0b:7b:60:74:28:99:a2:ad:ff:12:d1:ca:f4:de: b2:87:6b:a0:fe:69:9d:50:f0:79:ab:b5:d9:92:2c:ed:39:a4: 22:60:38:dd:6f:4d:f8:aa:3c:fa:f2:e5:aa:a3:6e:f9:f6:d6: 30:9a:02:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MDYxMTAvBgNVBAUTKDg4N0UxMTA3QTgzRjExNzRGRjdFM0U3ODA4ODhEQjU3 MjNCNzkyNUIwHhcNMjUxMjI5MDQyMTUxWhcNMjYwMTA1MDQyMTUxWjAYMRYwFAYD VQQDDA02OTUyMDFlMC0zNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Iq6wRIBli842Gj5pTXeKbDaaEQ/tiemKirCjC+M+16gzACS18sO5FXK2Nb9 kkLstGJGJW9mKEB/2yC9lSILhSLr9xCWD1JpQLkGJKGu/NXPoq6fa8OKhqwtsXHA zm/YBGYjHUSFSeUajOy7VMAFmVzTzG9KfKZ1rnWu4Gzb4OMtU5uEsnJvH3Uh+Cqg l5/JcJp+H4bVI/4Y8azD9j3Pu9hQPb62MrVWPaMAZPqr2Qexi5ZNTw37j0mXyiOz UixQEbVR4NHOsJqIvv+GiX//lWL9A/eHyq3fiVhpR4lf5a6ynpvd335pqjSuAOPQ GoVVKtr1VoUtYSJtdb/jFrKriQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvyG9Up +E3g2sUQ6BVVkGE9t+sbMB8GA1UdIwQYMBaAFIh+EQeoPxF0/34+eAiI21cjt5Jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9DNzM5QkFFRTZF OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VYVF9majU0Q0lqYlZ5TzNr bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lINFJCNmdfRVhUX2ZqNTRDSWpiVnlPM2tscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgwNi9DNzM5QkFFRTZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VY VF9majU0Q0lqYlZ5TzNrbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIAAykkayjv2Vcd6KIPzkCA0ND9xSJotbtPYyV+1lGwOi6kQe+C+o6 tL4s8kGPS9TbYxkQclpM2CENyiXPCqc4I6UmiltSCmNNPHvh677dwJ5sSBx/Jbs3 v5slVn1ltNIM2/GbSwukdc6mrGRFx0FjtYyK5kt36Mi3Ung4Biv4HMpSDOo0iD/n VZugTpyernSmF1u5uNBBbwg8iaBlfuzjsrm5D2xz4xiAa4k+LQc/8kv5mM8Bx98v xyST6YRt/UkORlbqfyEO+Ld3C3tgdCiZoq3/EtHK9N6yh2ug/mmdUPB5q7XZkizt OaQiYDjdb034qjz68uWqo2759tYwmgL5 -----END CERTIFICATE-----Generated at Tue Dec 30 20:20:36 2025 by rpki-client