This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft File: iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json) Hash identifier: zg8pG44NuMn4SaiyWKDnXyxrxXeAG+UyXaTrXc/pV9c= Subject key identifier: 68:1C:54:52:B1:72:49:D2:60:AE:8C:67:BE:A4:A5:F3:2D:55:B9:25 Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft Manifest number: 0253 Signing time: Tue 23 Dec 2025 00:45:28 +0000 Manifest this update: Tue 23 Dec 2025 00:45:27 +0000 Manifest next update: Tue 30 Dec 2025 00:45:27 +0000 Files and hashes: 1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: MCFd2DmBsEmQF4rD9aNQR3wnKw1nYJEGPVXuJzuXp7g=) 2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: RK5tPBygONDShLt3IeKagZkrWMr91hP51vzRoPslud0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Validity Not Before: Dec 23 00:45:27 2025 GMT Not After : Dec 30 00:45:27 2025 GMT Subject: CN=6949e628-eec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:aa:52:92:58:14:3d:e7:5f:fe:5c:35:f8: 94:04:f1:42:09:f6:fb:12:6d:53:17:cf:5b:18:5e: e8:06:bd:fa:ca:b0:a4:34:83:57:3e:c2:f4:bd:00: 89:91:2a:4a:8f:7e:d7:a3:3f:17:d2:17:fa:b0:f9: 09:af:e1:a8:29:88:df:a5:c4:82:b6:94:73:29:d6: 34:bd:b2:00:f8:42:2b:cc:90:b6:8c:1b:93:cb:9b: 24:3e:49:af:3c:9c:da:b9:82:32:ae:a4:e5:8e:07: 8f:37:59:33:cf:f1:54:e1:b0:1b:f0:c8:93:99:44: ab:42:84:89:b5:65:da:7f:b5:12:3e:57:13:65:af: 64:fc:5b:59:c0:e8:17:26:03:2a:48:05:c3:c1:7e: 54:f2:f7:7e:a8:9a:b9:f4:c3:b7:4c:e2:d8:c3:5d: 15:e7:ee:70:db:67:ae:0c:6d:07:4d:c5:ef:87:2b: a3:57:b7:16:5f:d6:e1:bd:a5:f8:c1:5c:7a:bd:77: 83:5f:86:d2:86:4c:d8:f3:0d:c8:6d:47:0f:53:56: c9:e2:f4:9b:39:d6:24:56:93:f9:43:a0:e3:b4:28: 7c:7e:7d:4b:31:52:3b:26:69:0c:d2:99:f2:a7:89: cc:50:43:b9:b8:6e:45:3a:6a:ee:bc:85:61:9b:e0: 8e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1C:54:52:B1:72:49:D2:60:AE:8C:67:BE:A4:A5:F3:2D:55:B9:25 X509v3 Authority Key Identifier: keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f8:a0:73:cc:6c:53:32:6d:81:00:86:38:e0:8a:f2:ae:94: 2f:26:af:31:e0:71:79:c6:89:4b:33:f1:9c:6a:1f:ca:b3:a5: dc:40:95:13:7d:1d:e5:d8:91:2c:2d:63:5c:76:cb:46:b4:64: 07:7d:54:a6:54:4a:42:41:78:dc:83:94:1f:95:a3:6d:fc:8f: 6d:90:34:6e:7f:40:56:87:bc:34:32:c3:db:e6:12:5a:ba:4e: ba:cc:67:cd:64:70:3e:4b:a0:d1:b1:bb:be:b9:4c:c7:d2:a0: d2:6a:7c:ae:0f:d2:7b:ac:fb:b7:3a:4e:b1:7a:37:50:7b:f6: a8:9c:d5:73:64:e3:62:bb:cd:bb:df:12:a5:7a:3b:4b:a5:39: 65:d6:dc:f7:9f:0d:d8:36:e3:30:09:b6:ac:91:d8:a2:ae:52: 9d:0e:91:e8:1a:25:b5:53:e6:78:94:ba:b4:e7:c3:5f:01:20: 5b:24:98:e3:d5:1a:63:d9:f9:95:a7:a3:a1:4d:15:2e:7e:30: 7f:58:3e:5f:fa:02:a0:d0:b8:01:bd:2b:5c:c4:34:e4:41:a3: 78:23:85:51:ef:02:81:b2:8d:92:df:c5:28:3c:87:a8:56:0a: f9:ea:b2:e1:9e:b8:e0:3d:1b:33:1b:e8:bb:cc:f4:02:d8:f9: 26:72:32:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QjcxMTAvBgNVBAUTKDg4MjI0Nzg1NTc0QzFGMjNDQTlDNDM5RUQ4RjU1Mzg4 RjZBNjhDRTIwHhcNMjUxMjIzMDA0NTI3WhcNMjUxMjMwMDA0NTI3WjAYMRYwFAYD VQQDDA02OTQ5ZTYyOC1lZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumKqUpJYFD3nX/5cNfiUBPFCCfb7Em1TF89bGF7oBr36yrCkNINXPsL0vQCJ kSpKj37Xoz8X0hf6sPkJr+GoKYjfpcSCtpRzKdY0vbIA+EIrzJC2jBuTy5skPkmv PJzauYIyrqTljgePN1kzz/FU4bAb8MiTmUSrQoSJtWXaf7USPlcTZa9k/FtZwOgX JgMqSAXDwX5U8vd+qJq59MO3TOLYw10V5+5w22euDG0HTcXvhyujV7cWX9bhvaX4 wVx6vXeDX4bShkzY8w3IbUcPU1bJ4vSbOdYkVpP5Q6DjtCh8fn1LMVI7JmkM0pny p4nMUEO5uG5FOmruvIVhm+CO9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgcVFKx cknSYK6MZ76kpfMtVbklMB8GA1UdIwQYMBaAFIgiR4VXTB8jypxDntj1U4j2pozi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlCNy9CMUU1NEFCODU2 QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5UEtuRU9lMlBWVGlQYW1q T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDSkhoVmRNSHlQS25FT2UyUFZUaVBhbWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlCNy9CMUU1NEFCODU2QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5 UEtuRU9lMlBWVGlQYW1qT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF+KBzzGxTMm2BAIY44IryrpQvJq8x4HF5xolLM/Gcah/Ks6XcQJUT fR3l2JEsLWNcdstGtGQHfVSmVEpCQXjcg5QflaNt/I9tkDRuf0BWh7w0MsPb5hJa uk66zGfNZHA+S6DRsbu+uUzH0qDSanyuD9J7rPu3Ok6xejdQe/aonNVzZONiu827 3xKlejtLpTll1tz3nw3YNuMwCbaskdiirlKdDpHoGiW1U+Z4lLq058NfASBbJJjj 1Rpj2fmVp6OhTRUufjB/WD5f+gKg0LgBvStcxDTkQaN4I4VR7wKBso2S38UoPIeo Vgr56rLhnrjgPRszG+i7zPQC2PkmcjI2 -----END CERTIFICATE-----Generated at Tue Dec 23 09:11:59 2025 by rpki-client