This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft File: IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft (raw, json) Hash identifier: b3kASo5FyRrohrDxborsf5DO9hTL6uawDieLdQErkoo= Subject key identifier: D1:CF:F5:23:74:C0:08:FC:FE:8C:14:02:F9:EB:AC:C9:E1:89:9D:13 Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 Certificate issuer: /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Certificate serial: 07FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft Manifest number: 07F4 Signing time: Thu 18 Dec 2025 20:34:30 +0000 Manifest this update: Thu 18 Dec 2025 20:34:29 +0000 Manifest next update: Thu 25 Dec 2025 20:34:29 +0000 Files and hashes: 1: IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl (hash: AynztgQGdag7slCsBPB1aOPKX2WotGIVYXMizq3as4Y=) 2: 36F199B80D1311EBB2726077C4F9AE02.roa (hash: XOu+NGz3wCBtpV1QSlFKSlK/61FIlkWvOgRrc8L4ZLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BEB, serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783 Validity Not Before: Dec 18 20:34:29 2025 GMT Not After : Dec 25 20:34:29 2025 GMT Subject: CN=69446556-e8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b1:25:db:d6:38:b8:cc:1d:a3:25:27:29:48: fd:bd:80:e1:6d:18:97:6b:94:7d:73:8d:f9:6e:40: 0c:80:13:ae:84:24:9a:fc:a4:70:f6:97:89:ad:94: e9:31:45:ad:86:a4:fe:9f:1e:3d:72:24:59:58:f1: 4d:a6:24:5a:c7:ab:30:71:d6:6a:0f:53:34:ad:7c: 39:a3:d9:63:90:df:59:8d:c4:6c:dd:df:11:d3:dd: c3:d3:f7:e1:b5:b1:a0:d9:d8:80:61:60:1a:26:a0: 8f:c0:5a:f1:d8:69:1a:56:6d:2c:3b:9f:32:1e:93: b5:4d:39:b7:66:ef:35:f3:ce:63:ed:f8:68:40:b4: be:ce:16:6e:d4:64:e7:44:03:a0:93:ed:ef:4a:20: d8:63:e6:46:4a:f3:5b:d0:e2:10:fd:fe:5a:03:5d: 38:06:12:ff:61:9e:d9:fb:aa:0d:20:d3:2a:92:67: 99:2b:15:48:c4:b1:a6:87:71:34:0c:5d:0e:71:b2: 89:0b:5b:37:1a:f2:dc:b3:08:b0:ae:08:69:04:26: e8:f9:36:e9:11:4c:9a:d7:13:91:22:94:e5:9b:dc: aa:5d:81:75:cc:b1:e8:f9:6b:f5:7e:8d:1f:04:c5: ad:c1:93:40:a1:a1:fe:52:dd:bd:58:0d:f2:13:5e: 87:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CF:F5:23:74:C0:08:FC:FE:8C:14:02:F9:EB:AC:C9:E1:89:9D:13 X509v3 Authority Key Identifier: keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:63:d1:d9:09:f4:45:73:2d:c9:a5:73:de:af:fe:a8:db:25: 7c:57:6f:d6:f6:1a:68:e9:bd:c2:23:ce:82:99:73:8a:1f:8b: 34:21:24:59:71:ca:4f:3e:af:d0:33:a2:25:55:2b:03:b0:72: 4a:6d:a2:7b:65:97:6c:e3:87:1f:44:7f:1f:3e:6a:06:27:8b: 2e:dd:44:9b:b4:7e:84:67:e7:27:63:8b:55:93:db:a8:d1:ea: ab:52:7c:df:21:2e:19:ed:3d:72:41:0a:b0:38:e4:a4:06:69: 77:4c:9a:fb:4f:fc:48:91:eb:05:2e:72:cd:aa:f1:4b:44:cf: 5b:7e:ad:59:d5:11:05:18:a7:fd:6f:36:b5:d7:6c:2a:58:b6: 24:07:0e:d3:bf:83:96:92:3b:f6:3a:01:3d:4c:92:2e:4b:a1: e5:c6:29:40:9f:22:f8:a4:c4:46:ff:e4:4f:2e:2f:7f:5c:91: 3d:22:3d:91:78:67:92:4e:d0:9f:70:a1:57:b9:bc:7a:7c:b3: 48:90:fc:47:6f:74:34:0f:50:f5:e5:eb:bc:5c:93:1b:79:1e: 98:b2:d0:08:24:33:ea:8a:e6:35:b3:de:a2:7c:80:ba:18:8c: 7d:e5:7e:b6:2b:ee:01:86:49:20:df:03:4e:0f:44:fc:0d:a6: 51:03:dc:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRUIxMTAvBgNVBAUTKDIyNUNEQjBCRUVENTJGNTE1MDUxRjI2RUIyN0FEMjVE QzY3OTk3ODMwHhcNMjUxMjE4MjAzNDI5WhcNMjUxMjI1MjAzNDI5WjAYMRYwFAYD VQQDDA02OTQ0NjU1Ni1lOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLEl29Y4uMwdoyUnKUj9vYDhbRiXa5R9c435bkAMgBOuhCSa/KRw9peJrZTp MUWthqT+nx49ciRZWPFNpiRax6swcdZqD1M0rXw5o9ljkN9ZjcRs3d8R093D0/fh tbGg2diAYWAaJqCPwFrx2GkaVm0sO58yHpO1TTm3Zu81885j7fhoQLS+zhZu1GTn RAOgk+3vSiDYY+ZGSvNb0OIQ/f5aA104BhL/YZ7Z+6oNINMqkmeZKxVIxLGmh3E0 DF0OcbKJC1s3GvLcswiwrghpBCbo+TbpEUya1xORIpTlm9yqXYF1zLHo+Wv1fo0f BMWtwZNAoaH+Ut29WA3yE16HJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHP9SN0 wAj8/owUAvnrrMnhiZ0TMB8GA1UdIwQYMBaAFCJc2wvu1S9RUFHybrJ60l3GeZeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJFQi9GODA4NUMzODBE MTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03VkwxRlFVZkp1c25yU1hjWjVs NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lsemJDLTdWTDFGUVVmSnVzbnJTWGNaNWw0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJFQi9GODA4NUMzODBEMTExMUVCODZENzUzNzZDNEY5QUUwMi9JbHpiQy03Vkwx RlFVZkp1c25yU1hjWjVsNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKY9HZCfRFcy3JpXPer/6o2yV8V2/W9hpo6b3CI86CmXOKH4s0ISRZ ccpPPq/QM6IlVSsDsHJKbaJ7ZZds44cfRH8fPmoGJ4su3USbtH6EZ+cnY4tVk9uo 0eqrUnzfIS4Z7T1yQQqwOOSkBml3TJr7T/xIkesFLnLNqvFLRM9bfq1Z1REFGKf9 bza112wqWLYkBw7Tv4OWkjv2OgE9TJIuS6HlxilAnyL4pMRG/+RPLi9/XJE9Ij2R eGeSTtCfcKFXubx6fLNIkPxHb3Q0D1D15eu8XJMbeR6YstAIJDPqiuY1s96ifIC6 GIx95X62K+4Bhkkg3wNOD0T8DaZRA9wi -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:20 2025 by rpki-client