This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json) Hash identifier: EfTrbI5TQbHXCjenULqTwt9gjHE0AVozDlOZbRUxymE= Subject key identifier: 02:80:4D:81:38:BA:1B:D0:A0:21:88:71:2E:36:1E:16:57:B5:61:64 Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft Manifest number: B3 Signing time: Fri 19 Dec 2025 05:09:07 +0000 Manifest this update: Fri 19 Dec 2025 05:09:07 +0000 Manifest next update: Fri 26 Dec 2025 05:09:07 +0000 Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: +ofOl8qCUWBhyfbmIDaFK9zxFj50q7vDZN2Zrf87B80=) 2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Validity Not Before: Dec 19 05:09:07 2025 GMT Not After : Dec 26 05:09:07 2025 GMT Subject: CN=6944ddf3-8e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:c9:99:50:fc:9d:4b:81:e5:8c:59:bb:73: 82:44:78:4d:d6:ff:d7:6a:c2:16:20:33:48:67:2e: 0b:b1:0d:d3:98:8a:69:29:2d:ed:e8:ad:64:48:17: 64:5b:b9:1d:7f:a6:31:00:03:7e:48:8a:c3:26:21: 4d:9d:be:aa:e1:c9:05:f7:67:00:81:8c:91:16:64: b7:4d:18:d8:24:51:e6:7e:87:34:cf:78:4e:95:27: d6:b1:69:0b:35:5f:05:d8:fb:0d:8b:c1:6d:46:8e: 8c:4e:cc:2d:65:cb:ed:d3:b0:ce:17:74:40:ce:de: 7e:ed:a7:09:07:5c:3a:8b:e0:a8:05:cf:74:82:a3: f3:b2:10:f0:42:10:7e:e7:66:ca:51:04:f6:5f:bb: ed:2a:bd:be:6f:31:0f:a7:e3:31:91:53:ef:62:fd: 29:2a:e4:45:42:c1:81:d3:07:f9:bf:7f:cf:1e:44: 30:5d:c4:c8:f3:f6:19:8f:71:b4:11:b1:f7:51:e8: bf:dc:05:69:81:61:db:cb:a4:a9:e4:5e:07:ed:32: 63:2a:aa:73:7b:45:6e:5a:2c:b2:b3:8f:d0:80:b5: 29:5b:44:c0:bb:04:92:42:d7:73:58:a6:f8:35:a8: 99:f6:01:f6:6a:d0:3e:3e:04:d8:a4:77:e9:e2:8c: 9a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:80:4D:81:38:BA:1B:D0:A0:21:88:71:2E:36:1E:16:57:B5:61:64 X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c7:e2:f5:f2:08:33:aa:00:9e:cf:7f:9f:f7:43:4a:ce:f6: 63:24:0c:83:d5:cb:75:9a:d6:cf:32:85:43:a4:ea:59:31:ef: a1:d8:6c:cf:b1:a6:d7:e7:fc:a5:ac:3a:59:a1:d1:12:b4:24: 1f:bf:ab:02:2b:44:a6:bc:f2:4a:e9:c2:82:b6:90:37:07:5e: 8e:5f:34:1a:69:2b:69:a2:c0:17:66:5c:fe:7c:4d:40:e5:71: 98:b4:29:62:53:09:f6:1a:de:6e:9b:e2:4e:91:5c:f9:45:e9: a0:af:52:0b:bd:59:16:d3:c5:0d:ec:1c:70:65:0d:ae:c5:7c: 96:70:46:98:54:0a:1c:86:45:59:23:61:78:f8:93:60:34:1d: 43:c9:01:d1:6e:20:e6:13:fa:6e:ad:0f:3c:12:0d:72:5f:8d: 23:eb:1b:d8:12:a9:ae:34:a4:9c:34:57:37:78:8e:b8:ab:39: e3:b2:1f:40:b8:e9:94:ed:e2:3d:6b:26:7d:01:48:04:bf:06: 85:13:bb:7b:50:86:9a:18:81:f5:f7:7c:93:fa:88:6e:d0:0b: 2b:b1:ea:5b:36:79:09:fc:a7:e8:ae:1b:3c:5e:96:4f:86:4c: 51:c3:4d:b5:dc:43:80:8d:75:7e:06:8b:9a:af:76:e8:67:0c: 7d:8c:4a:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4NTQxMTAvBgNVBAUTKDhCMzQ3MUI5MEI3QTVCQzc2Q0UzRkMwOUFDQUM4OTI4 RUI0RDgxNzkwHhcNMjUxMjE5MDUwOTA3WhcNMjUxMjI2MDUwOTA3WjAYMRYwFAYD VQQDDA02OTQ0ZGRmMy04ZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6HJmVD8nUuB5YxZu3OCRHhN1v/XasIWIDNIZy4LsQ3TmIppKS3t6K1kSBdk W7kdf6YxAAN+SIrDJiFNnb6q4ckF92cAgYyRFmS3TRjYJFHmfoc0z3hOlSfWsWkL NV8F2PsNi8FtRo6MTswtZcvt07DOF3RAzt5+7acJB1w6i+CoBc90gqPzshDwQhB+ 52bKUQT2X7vtKr2+bzEPp+MxkVPvYv0pKuRFQsGB0wf5v3/PHkQwXcTI8/YZj3G0 EbH3Uei/3AVpgWHby6Sp5F4H7TJjKqpze0VuWiyys4/QgLUpW0TAuwSSQtdzWKb4 NaiZ9gH2atA+PgTYpHfp4oyaKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKATYE4 uhvQoCGIcS42HhZXtWFkMB8GA1UdIwQYMBaAFIs0cbkLelvHbOP8CaysiSjrTYF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njg1NC9ENTNFMUI2RUNC MjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9pelJ4dVF0Nlc4ZHM0X3dKckt5SktPdE5n WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njg1NC9ENTNFMUI2RUNCMjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9pelJ4dVF0Nlc4 ZHM0X3dKckt5SktPdE5nWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBax+L18ggzqgCez3+f90NKzvZjJAyD1ct1mtbPMoVDpOpZMe+h2GzP sabX5/ylrDpZodEStCQfv6sCK0SmvPJK6cKCtpA3B16OXzQaaStposAXZlz+fE1A 5XGYtCliUwn2Gt5um+JOkVz5Remgr1ILvVkW08UN7BxwZQ2uxXyWcEaYVAochkVZ I2F4+JNgNB1DyQHRbiDmE/purQ88Eg1yX40j6xvYEqmuNKScNFc3eI64qznjsh9A uOmU7eI9ayZ9AUgEvwaFE7t7UIaaGIH193yT+ohu0AsrsepbNnkJ/Kforhs8XpZP hkxRw0213EOAjXV+Bouar3boZwx9jErL -----END CERTIFICATE-----Generated at Sun Dec 21 05:54:37 2025 by rpki-client