This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json) Hash identifier: 9FdeDUIfBv6oNlyDpfpc0bGLjdSJvdBIQaB79sgvsS8= Subject key identifier: 29:51:EB:03:0A:37:27:FF:E1:B9:F9:EF:A3:23:3F:E8:57:0F:6E:CA Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 1393 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft Manifest number: 1335 Signing time: Thu 18 Dec 2025 16:54:26 +0000 Manifest this update: Thu 18 Dec 2025 16:54:25 +0000 Manifest next update: Thu 25 Dec 2025 16:54:25 +0000 Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: SETS1A88jZL+vH9k/HnLM2tgfVSp8M4+RfmlpZBxmLs=) 2: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: 5H1pM+kreN4Oi8C8HZm8e4S8ShHr8LgmiJJ+cKgYRHo=) 3: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: 7cgMEZO8tN+1Cmn/CZonBr3at8tPmq+bBhIi3Hlmo8w=) 4: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: Wnr6Nu+wn4KpT3jxG77VWtuMf2NiqHg0vBMGp2AER8s=) 5: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: nCv8KSq1x9Ijvp8OSX/9bUAYQko+S3mPDE0oXqFbbRA=) 6: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: Yr7221/AjrFVZuk28SsMWsCKf7jgwJUz8UL6k6tO024=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5011 (0x1393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Dec 18 16:54:25 2025 GMT Not After : Dec 25 16:54:25 2025 GMT Subject: CN=694431c1-1444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6d:1e:4b:02:55:21:3d:57:96:ad:ba:d1:23: 1f:87:cd:74:b9:16:cd:d5:ce:34:60:2b:a9:ae:c2: eb:b0:9a:6a:ea:04:43:76:3e:e4:d9:33:f4:c4:9a: 5f:e6:f1:56:02:a4:c8:7f:08:5d:c9:d9:dc:dd:50: e0:1f:f8:df:89:0d:12:27:be:db:e3:80:1d:52:fd: 55:d2:9a:61:aa:21:ab:c1:b6:b6:5c:5b:26:ac:4e: b2:ff:ce:49:e5:c3:3a:b0:f5:9f:a1:b5:fa:6f:0e: 36:23:9f:de:11:81:38:93:d4:d8:7f:9d:67:c4:3a: 9a:47:b1:69:e9:2a:15:94:bf:23:58:34:f5:af:16: b6:f1:e8:4c:3c:15:2a:10:ab:7a:f0:a6:20:ef:1a: b1:a1:db:8c:c9:ef:08:85:9e:06:54:94:10:da:98: 3a:21:64:c4:a0:c9:ef:09:73:8f:03:52:b9:97:3c: 4b:15:2f:7c:7e:62:19:be:24:f9:4f:ce:fa:9f:13: 08:ba:a6:a2:3a:78:ff:ae:ef:52:f7:c3:92:93:7f: e8:cf:1d:49:dd:63:0e:80:48:d8:c8:ac:cc:30:ba: f5:c2:fb:53:89:3a:3f:b7:49:92:cd:76:60:68:1e: 8f:79:bd:cb:79:02:cf:93:5c:bb:32:76:97:72:63: 73:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:51:EB:03:0A:37:27:FF:E1:B9:F9:EF:A3:23:3F:E8:57:0F:6E:CA X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:15:dc:9c:18:e7:de:e2:ab:f5:59:06:bc:08:98:78:b6:68: 12:a2:e6:1c:44:d6:9b:07:46:23:d1:80:51:56:eb:62:63:c3: 48:8d:e6:48:89:47:38:9b:d3:17:f9:85:95:24:d3:5e:6f:56: 1c:69:84:96:dd:a8:15:ea:3d:16:d5:28:6f:31:70:ed:cc:06: 85:ea:34:cb:31:eb:6f:33:77:6d:68:69:67:8d:f2:0b:c5:47: 4e:2d:7b:5c:1f:a5:87:09:bb:c1:f7:59:9f:e5:a6:b0:20:84: f6:4e:e5:6b:06:e4:41:a6:e7:15:5b:0c:a3:ca:06:b5:e6:5e: 7b:f6:7f:3b:13:3c:1f:b4:ca:d0:a7:50:9a:38:51:f8:ad:0a: 98:1e:af:62:7d:b7:26:e0:18:b1:ec:5d:b5:83:48:10:28:6a: 73:a9:2f:a5:34:4a:b3:ce:87:52:eb:f3:88:08:59:b4:aa:e0: fa:6c:09:e4:66:07:82:2f:66:27:a8:0e:c2:08:cc:c1:c0:5e: fb:38:7a:36:b1:39:f3:86:66:af:92:9f:b8:dc:46:53:d5:10: 9d:55:8f:0a:fe:1f:f1:bd:51:92:c5:26:3e:dc:50:d3:da:8c: ab:7b:08:62:ce:e6:1c:4b:ea:b7:91:74:b9:9c:17:4a:7d:aa: d6:43:e2:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjUxMjE4MTY1NDI1WhcNMjUxMjI1MTY1NDI1WjAYMRYwFAYD VQQDDA02OTQ0MzFjMS0xNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2W0eSwJVIT1Xlq260SMfh810uRbN1c40YCuprsLrsJpq6gRDdj7k2TP0xJpf 5vFWAqTIfwhdydnc3VDgH/jfiQ0SJ77b44AdUv1V0pphqiGrwba2XFsmrE6y/85J 5cM6sPWfobX6bw42I5/eEYE4k9TYf51nxDqaR7Fp6SoVlL8jWDT1rxa28ehMPBUq EKt68KYg7xqxoduMye8IhZ4GVJQQ2pg6IWTEoMnvCXOPA1K5lzxLFS98fmIZviT5 T876nxMIuqaiOnj/ru9S98OSk3/ozx1J3WMOgEjYyKzMMLr1wvtTiTo/t0mSzXZg aB6Peb3LeQLPk1y7MnaXcmNz1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClR6wMK Nyf/4bn576MjP+hXD27KMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8wRTA4MkU3MkNEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0oz SERad1pPSUVtMmlwQThjYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4FdycGOfe4qv1WQa8CJh4tmgSouYcRNabB0Yj0YBRVutiY8NIjeZI iUc4m9MX+YWVJNNeb1YcaYSW3agV6j0W1ShvMXDtzAaF6jTLMetvM3dtaGlnjfIL xUdOLXtcH6WHCbvB91mf5aawIIT2TuVrBuRBpucVWwyjyga15l579n87EzwftMrQ p1CaOFH4rQqYHq9ifbcm4Bix7F21g0gQKGpzqS+lNEqzzodS6/OICFm0quD6bAnk ZgeCL2YnqA7CCMzBwF77OHo2sTnzhmavkp+43EZT1RCdVY8K/h/xvVGSxSY+3FDT 2oyrewhizuYcS+q3kXS5nBdKfarWQ+I4 -----END CERTIFICATE-----Generated at Fri Dec 19 23:49:14 2025 by rpki-client