This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json) Hash identifier: 3Pmmd48VDyqS5DAZXMHw04nBlVtg/TXbqpmJS/mKHMk= Subject key identifier: F9:8B:D7:4B:78:4A:4B:D9:4E:F5:CA:0D:D8:3D:0C:C3:08:9F:0A:68 Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Certificate serial: 0BA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft Manifest number: 0B99 Signing time: Thu 18 Dec 2025 18:41:07 +0000 Manifest this update: Thu 18 Dec 2025 18:41:07 +0000 Manifest next update: Thu 25 Dec 2025 18:41:07 +0000 Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: 0auB487I5HFpMIrcmwMCtzMQs9KRTJ/FvBWtZwFTe8Q=) 2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: Qsy4TKaFv40VH7rqRhiymRYP7EU8I6x9tTe3ND6Wurc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Validity Not Before: Dec 18 18:41:07 2025 GMT Not After : Dec 25 18:41:07 2025 GMT Subject: CN=69444ac3-f079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:fa:ca:df:ba:53:0c:2f:42:4b:71:aa:b4: 65:16:ee:d6:5c:f8:ca:d5:53:0a:d4:2d:70:08:a5: e7:86:cc:39:3a:6f:8b:16:54:11:3a:a8:80:b4:96: 2b:0a:21:55:fd:d6:59:ae:f6:97:6d:28:4f:0e:ab: 4c:c3:87:3b:c3:a4:a9:49:b9:bd:d1:dc:f5:f0:d5: 8d:90:d6:a8:1f:4c:60:5b:15:b4:b0:94:87:1b:81: 94:8a:a8:ff:ff:ef:b3:50:9a:48:14:0d:5c:69:27: 2a:4f:96:ad:53:58:9b:4e:c4:c2:56:04:db:dd:dc: 15:56:21:aa:5b:4c:94:66:a8:1d:34:93:55:5e:06: eb:bd:ec:bf:bd:63:00:bf:dd:97:90:79:db:d9:4e: 86:64:7c:44:29:bd:c9:d3:fd:b9:2b:ca:06:4f:f5: 81:f9:c7:0e:4b:85:da:9d:10:b6:81:24:67:44:62: 7f:93:28:fe:c5:d8:65:5d:a8:86:e6:fa:55:50:e7: 11:d8:a0:93:3b:45:be:55:37:4b:c7:f6:8d:3a:6b: 8f:e9:b1:ea:e9:e9:a9:59:3f:07:16:0d:34:f2:1b: 5e:db:e7:be:e6:3c:bb:83:39:00:bc:32:13:7d:47: 94:9a:a5:29:77:b9:00:d4:74:49:7d:01:43:7b:d6: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8B:D7:4B:78:4A:4B:D9:4E:F5:CA:0D:D8:3D:0C:C3:08:9F:0A:68 X509v3 Authority Key Identifier: keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:83:cc:90:e8:7a:64:cd:00:8c:4d:cd:45:4f:3d:dd:e7:be: da:a1:f1:98:83:75:b8:86:88:d9:d9:81:a0:71:4f:0c:fd:c8: 85:e2:5b:70:a5:5e:70:a1:cf:d9:a5:fb:50:26:2d:a0:59:5a: 05:be:83:9d:0c:ca:d6:1d:95:2e:61:5e:30:c9:82:3a:12:95: 81:8c:63:71:54:a7:ed:9c:ae:4e:46:a0:34:1f:e4:e4:d3:d4: 73:be:dc:26:db:2a:a4:3b:b2:1b:39:f7:73:3c:69:ce:dc:14: 25:e6:89:5e:8a:22:6e:a0:c5:a2:4a:43:a0:7c:6f:1a:f4:a9: 43:bc:cb:fa:4d:4d:b4:20:8a:2e:40:7e:19:3b:ec:9d:29:51: cc:c4:f8:4e:4f:66:10:7a:9c:f3:e2:6a:08:ee:8d:0b:af:0e: cd:de:a9:99:32:e4:53:df:46:72:93:03:90:83:57:c5:bc:11: 42:be:61:37:61:dd:1a:bc:ed:09:c2:e3:b3:72:7f:06:9a:f6: 07:ac:cc:b8:c5:7e:15:24:43:2f:c7:bd:19:07:74:95:63:23: f5:1d:3e:f5:0e:08:da:0f:12:8e:72:bd:51:e2:ba:0b:64:9f: eb:03:da:0a:5c:f1:6e:7a:bf:99:05:94:19:f3:fa:c6:59:9e: b5:90:55:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzOEYxMTAvBgNVBAUTKDIyMjQwRkI3ODcyQUE2MThEM0UwRDQ5MzQ1REJGNDI0 NzNBRDA0QzcwHhcNMjUxMjE4MTg0MTA3WhcNMjUxMjI1MTg0MTA3WjAYMRYwFAYD VQQDDA02OTQ0NGFjMy1mMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT/6yt+6UwwvQktxqrRlFu7WXPjK1VMK1C1wCKXnhsw5Om+LFlQROqiAtJYr CiFV/dZZrvaXbShPDqtMw4c7w6SpSbm90dz18NWNkNaoH0xgWxW0sJSHG4GUiqj/ /++zUJpIFA1caScqT5atU1ibTsTCVgTb3dwVViGqW0yUZqgdNJNVXgbrvey/vWMA v92XkHnb2U6GZHxEKb3J0/25K8oGT/WB+ccOS4XanRC2gSRnRGJ/kyj+xdhlXaiG 5vpVUOcR2KCTO0W+VTdLx/aNOmuP6bHq6empWT8HFg008hte2+e+5jy7gzkAvDIT fUeUmqUpd7kA1HRJfQFDe9bXXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmL10t4 SkvZTvXKDdg9DMMInwpoMB8GA1UdIwQYMBaAFCIkD7eHKqYY0+DUk0Xb9CRzrQTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzM4Ri82OUU5OUI4RTNB QUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBoalQ0TlNUUmR2MEpIT3RC TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpUVB0NGNxcGhqVDROU1RSZHYwSkhPdEJNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzM4Ri82OUU5OUI4RTNBQUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBo alQ0TlNUUmR2MEpIT3RCTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApg8yQ6HpkzQCMTc1FTz3d577aofGYg3W4hojZ2YGgcU8M/ciF4ltw pV5woc/ZpftQJi2gWVoFvoOdDMrWHZUuYV4wyYI6EpWBjGNxVKftnK5ORqA0H+Tk 09Rzvtwm2yqkO7IbOfdzPGnO3BQl5oleiiJuoMWiSkOgfG8a9KlDvMv6TU20IIou QH4ZO+ydKVHMxPhOT2YQepzz4moI7o0Lrw7N3qmZMuRT30ZykwOQg1fFvBFCvmE3 Yd0avO0JwuOzcn8GmvYHrMy4xX4VJEMvx70ZB3SVYyP1HT71DgjaDxKOcr1R4roL ZJ/rA9oKXPFuer+ZBZQZ8/rGWZ61kFWi -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:38 2025 by rpki-client