This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json) Hash identifier: R+KB2YZ8uLu80sbF04wUD1x62Q+/TWPaV1W9z/xS0SU= Subject key identifier: B9:29:D3:A6:F4:72:E4:68:23:85:1F:FE:E6:91:D0:5B:B3:F8:96:DD Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Certificate serial: 0BC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft Manifest number: 0BAA Signing time: Wed 31 Dec 2025 18:44:11 +0000 Manifest this update: Wed 31 Dec 2025 18:44:11 +0000 Manifest next update: Wed 07 Jan 2026 18:44:11 +0000 Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: xnL7IBvkT6REiFwgwP1L5BIPVCKy6pjEifs49mHEu3E=) 2: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 6SPV2FX7Tph5ZmideN5WrWfiO8/8Sir95YP17tl87tY=) 3: 5103E4B6B3F611F0B4911A0BC4F9AE02.roa (hash: aYVxYlefMzWSklvVE7ejL8LQCyo0uoBkp7yy2+ne9nw=) 4: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: eddZTpWlG2T9ATgQlQm2WB6FlpB3ZUxT2iZNYIcetK0=) 5: 390D5400B3F611F0A01DFD0AC4F9AE02.roa (hash: 9/vsBgZN7XUMB0FwbC8U2AbPlxviAttp/GCpXk5Ccgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 18:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3017 (0xbc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Validity Not Before: Dec 31 18:44:11 2025 GMT Not After : Jan 7 18:44:11 2026 GMT Subject: CN=69556efb-77a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:af:2f:a9:0f:e0:3b:2a:5e:3f:86:bc:60:29: f9:2e:58:85:0f:21:3b:ae:94:40:41:2c:2f:78:30: bd:24:b7:67:5f:a5:46:bc:80:eb:88:82:0f:77:fc: e6:73:de:fa:25:9b:d8:5f:ce:62:f7:9b:df:f7:86: e2:5e:88:06:09:f1:f7:cb:2f:0a:ba:6f:de:46:d8: 79:eb:90:b0:ea:d9:37:b2:35:8c:8d:3d:b2:b2:32: fc:2c:f4:10:4c:d6:f6:f2:33:6d:ee:de:f7:e1:9a: 65:27:96:e2:7b:86:18:a3:10:72:e2:f5:d1:06:61: 89:48:c9:64:6a:6e:e9:d6:fa:69:89:8e:be:10:64: aa:b8:ee:76:f7:0a:26:60:10:05:d8:56:f4:d5:d4: 6f:c1:33:d5:46:f7:85:32:85:7c:e0:42:51:39:75: 0d:33:99:49:09:e8:92:e6:44:5b:f4:08:7f:71:cb: 82:8d:05:f3:b0:56:95:5d:5e:e7:66:82:f2:e4:d2: 76:66:0d:b2:6c:53:b2:e4:a3:c2:41:d2:7b:68:c1: 8d:13:5e:ce:1a:13:6b:82:9f:ed:76:7d:b5:df:0a: b6:da:ae:7a:65:d4:7f:33:9c:a3:31:1a:ed:a4:18: b7:e4:d8:7b:7a:fa:7a:02:ae:bf:91:38:0e:ea:d5: 1c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:29:D3:A6:F4:72:E4:68:23:85:1F:FE:E6:91:D0:5B:B3:F8:96:DD X509v3 Authority Key Identifier: keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:37:8f:80:23:ae:05:97:e9:fb:04:73:a4:4b:f6:b3:7f:ab: e7:08:f4:9a:44:79:bc:46:c3:b7:6f:d2:c2:b3:3d:ee:1b:c9: c8:52:f7:14:3e:63:ab:1b:eb:30:1d:9b:d9:bd:c1:8b:5d:d3: 33:5a:ed:af:75:b0:00:dd:a2:e0:ec:e0:3b:d7:53:65:fb:43: 41:20:41:a5:24:d0:74:4e:b9:05:62:47:6a:71:c4:13:61:95: 39:8f:57:4c:9d:bf:54:e7:bf:dc:28:13:1b:ea:c9:13:9c:a7: f7:58:57:cd:33:18:6e:4e:95:82:ac:30:13:df:19:26:94:c9: 22:59:8a:50:9a:a8:e3:02:b4:52:b0:06:5a:e3:a0:5f:8f:40: cd:d1:bf:68:d5:72:16:b9:05:90:4c:36:22:a9:28:49:1e:51: 36:7c:b0:84:3f:f2:86:f1:bd:54:e0:de:7d:9e:49:7e:eb:63: cc:c3:a0:b3:c7:40:d9:89:da:11:48:1e:b9:9b:e4:49:8f:a2: fa:c6:0d:06:c3:1f:ee:09:80:9e:24:59:c2:41:78:74:4b:8e: 8b:0c:dd:85:9a:62:8b:7a:c7:04:1f:49:81:f2:c7:4b:2c:d1: 95:98:fe:44:17:dd:21:a9:67:da:4b:14:d9:3e:3c:5e:a0:e1: 7a:67:ac:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC RjZCMTIyQUUwHhcNMjUxMjMxMTg0NDExWhcNMjYwMTA3MTg0NDExWjAYMRYwFAYD VQQDDA02OTU1NmVmYi03N2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnq8vqQ/gOypeP4a8YCn5LliFDyE7rpRAQSwveDC9JLdnX6VGvIDriIIPd/zm c976JZvYX85i95vf94biXogGCfH3yy8Kum/eRth565Cw6tk3sjWMjT2ysjL8LPQQ TNb28jNt7t734ZplJ5bie4YYoxBy4vXRBmGJSMlkam7p1vppiY6+EGSquO529wom YBAF2Fb01dRvwTPVRveFMoV84EJROXUNM5lJCeiS5kRb9Ah/ccuCjQXzsFaVXV7n ZoLy5NJ2Zg2ybFOy5KPCQdJ7aMGNE17OGhNrgp/tdn213wq22q56ZdR/M5yjMRrt pBi35Nh7evp6Aq6/kTgO6tUcgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkp06b0 cuRoI4Uf/uaR0Fuz+JbdMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3 OFlZaUhScVpnbnlfYXhJcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBN4+AI64Fl+n7BHOkS/azf6vnCPSaRHm8RsO3b9LCsz3uG8nIUvcU PmOrG+swHZvZvcGLXdMzWu2vdbAA3aLg7OA711Nl+0NBIEGlJNB0TrkFYkdqccQT YZU5j1dMnb9U57/cKBMb6skTnKf3WFfNMxhuTpWCrDAT3xkmlMkiWYpQmqjjArRS sAZa46Bfj0DN0b9o1XIWuQWQTDYiqShJHlE2fLCEP/KG8b1U4N59nkl+62PMw6Cz x0DZidoRSB65m+RJj6L6xg0Gwx/uCYCeJFnCQXh0S46LDN2FmmKLescEH0mB8sdL LNGVmP5EF90hqWfaSxTZPjxeoOF6Z6x1 -----END CERTIFICATE-----Generated at Fri Jan 2 09:53:25 2026 by rpki-client