This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft File: ICB51sn-B78YYiHRqZgny_axIq4.mft (raw, json) Hash identifier: oMqIiKmBFd5cMZ5g5ZTutKC3+i41+7kGEdC2jCp6sSQ= Subject key identifier: 2C:7D:52:8F:F1:F3:47:EF:1F:0F:31:53:2F:4B:82:64:02:5A:00:1C Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Certificate serial: 0BC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft Manifest number: 0BA3 Signing time: Thu 18 Dec 2025 18:41:40 +0000 Manifest this update: Thu 18 Dec 2025 18:41:40 +0000 Manifest next update: Thu 25 Dec 2025 18:41:40 +0000 Files and hashes: 1: ICB51sn-B78YYiHRqZgny_axIq4.crl (hash: GkY3HU85HydwpsqQz05AfMIcDen7825gXzk4sw65OJQ=) 2: 5E8E480C335B11ED92E25960C4F9AE02.roa (hash: 6SPV2FX7Tph5ZmideN5WrWfiO8/8Sir95YP17tl87tY=) 3: FB4D7A105BC611EFA9919382C4F9AE02.roa (hash: eddZTpWlG2T9ATgQlQm2WB6FlpB3ZUxT2iZNYIcetK0=) 4: 390D5400B3F611F0A01DFD0AC4F9AE02.roa (hash: 9/vsBgZN7XUMB0FwbC8U2AbPlxviAttp/GCpXk5Ccgc=) 5: 5103E4B6B3F611F0B4911A0BC4F9AE02.roa (hash: aYVxYlefMzWSklvVE7ejL8LQCyo0uoBkp7yy2+ne9nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3010 (0xbc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE Validity Not Before: Dec 18 18:41:40 2025 GMT Not After : Dec 25 18:41:40 2025 GMT Subject: CN=69444ae4-ecf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:95:6c:c5:da:97:b3:d1:49:43:e7:0f:1e: c9:be:d4:44:2a:5a:70:19:a7:7d:45:b8:0e:5b:a4: f7:ca:59:1a:76:16:81:d1:26:89:c2:f9:82:36:a9: ca:b9:54:e0:ee:af:97:0e:ff:96:6b:8c:b7:1f:b1: c0:bd:6e:69:bb:0a:32:f2:6a:7e:cf:d8:00:df:1c: 1f:87:03:7f:79:e6:9b:59:c8:5e:7b:20:25:f9:95: f1:b2:2e:b9:09:bb:41:5a:95:65:8b:ac:9b:c4:07: 76:4f:c5:4d:76:bd:88:50:2d:cd:c1:20:bb:c2:e2: ff:c8:ef:10:74:bb:e1:08:b2:c9:15:aa:ff:d5:10: 05:d9:ef:7c:3d:bc:6d:94:73:89:90:8d:f2:02:b3: ad:11:a8:08:b4:13:7b:d1:35:9b:0e:4b:ec:9f:d3: e9:ab:f6:93:28:2e:71:45:89:2b:c5:27:77:4c:64: 8a:34:e4:ad:b4:cf:dd:8e:20:dc:94:eb:6a:e3:3a: 04:8f:12:c6:af:2f:03:f2:07:5c:12:4f:c5:94:4e: 53:79:ec:92:d9:17:06:96:4b:94:21:ed:bc:ce:71: 69:e9:39:32:16:4b:de:b9:ee:96:ec:e1:30:87:6f: 76:50:83:40:e9:77:b3:60:a1:f8:af:20:1d:96:6b: 5d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7D:52:8F:F1:F3:47:EF:1F:0F:31:53:2F:4B:82:64:02:5A:00:1C X509v3 Authority Key Identifier: keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:1c:ae:74:09:f9:bb:ad:89:e7:b2:ef:25:c7:2e:fc:9e:b4: e1:5c:ab:3a:60:a8:fa:24:9a:3a:47:78:46:57:60:ae:37:28: 35:75:b6:bd:10:7a:53:59:c5:c5:ea:3f:27:2b:71:00:cd:b0: cf:cd:5d:c9:03:6c:d5:9f:0e:63:05:f0:4c:dd:87:ec:75:e0: f3:a4:ca:d5:aa:a4:aa:cd:dc:c0:64:ba:99:f8:8b:eb:fd:cc: 68:3a:c1:3d:36:33:fc:aa:de:cb:84:c4:06:eb:a0:ce:43:85: 6a:d8:f6:96:7c:03:01:93:61:51:6c:c9:15:40:4e:b0:e5:b9: ba:91:1b:ca:4a:ec:bc:c8:1f:92:bd:c3:76:79:42:11:b9:eb: 32:76:e9:1c:b6:aa:bf:9f:92:97:df:d1:06:d2:73:58:af:35: e0:50:4e:77:a7:56:01:d7:84:35:6b:9f:d4:69:58:c0:ce:41: 49:de:18:b8:63:78:8b:d0:e0:6d:48:90:fa:27:94:70:d8:5e: cc:1f:3e:8b:10:a8:28:ed:44:bd:7a:88:6a:87:12:4e:72:06: a2:96:30:0f:51:a4:ed:bc:16:2e:02:bc:ad:ab:14:dd:55:01: 88:df:be:d5:38:86:a5:68:80:39:af:3d:9f:ba:2e:b8:2d:89: 7c:29:df:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC RjZCMTIyQUUwHhcNMjUxMjE4MTg0MTQwWhcNMjUxMjI1MTg0MTQwWjAYMRYwFAYD VQQDDA02OTQ0NGFlNC1lY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAmVbMXal7PRSUPnDx7JvtREKlpwGad9RbgOW6T3ylkadhaB0SaJwvmCNqnK uVTg7q+XDv+Wa4y3H7HAvW5puwoy8mp+z9gA3xwfhwN/eeabWcheeyAl+ZXxsi65 CbtBWpVli6ybxAd2T8VNdr2IUC3NwSC7wuL/yO8QdLvhCLLJFar/1RAF2e98Pbxt lHOJkI3yArOtEagItBN70TWbDkvsn9Ppq/aTKC5xRYkrxSd3TGSKNOSttM/djiDc lOtq4zoEjxLGry8D8gdcEk/FlE5TeeyS2RcGlkuUIe28znFp6TkyFkveue6W7OEw h292UINA6XezYKH4ryAdlmtdjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCx9Uo/x 80fvHw8xUy9LgmQCWgAcMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEIyQi9CRkREMjIyRTNDNDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3 OFlZaUhScVpnbnlfYXhJcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1HK50Cfm7rYnnsu8lxy78nrThXKs6YKj6JJo6R3hGV2CuNyg1dba9 EHpTWcXF6j8nK3EAzbDPzV3JA2zVnw5jBfBM3YfsdeDzpMrVqqSqzdzAZLqZ+Ivr /cxoOsE9NjP8qt7LhMQG66DOQ4Vq2PaWfAMBk2FRbMkVQE6w5bm6kRvKSuy8yB+S vcN2eUIRuesydukctqq/n5KX39EG0nNYrzXgUE53p1YB14Q1a5/UaVjAzkFJ3hi4 Y3iL0OBtSJD6J5Rw2F7MHz6LEKgo7US9eohqhxJOcgailjAPUaTtvBYuArytqxTd VQGI377VOIalaIA5rz2fui64LYl8Kd+8 -----END CERTIFICATE-----Generated at Fri Dec 19 19:25:33 2025 by rpki-client