This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json) Hash identifier: PB+wgrT89xnZSoefPdlL+/oGsS8cdJIqNoSpKLDa8Lc= Subject key identifier: C5:F8:76:C9:D4:D1:8C:45:8A:B6:E4:9E:40:E3:C3:E6:72:37:40:A0 Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Certificate serial: 0C8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft Manifest number: 0C78 Signing time: Sun 28 Dec 2025 18:10:42 +0000 Manifest this update: Sun 28 Dec 2025 18:10:42 +0000 Manifest next update: Sun 04 Jan 2026 18:10:42 +0000 Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: 5xwCG4nLGzQsJbANBCJFHbK8/02NM1JkB5bSZVrMrOk=) 2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: 71wtlkFspbYtUock+BFXzeZYBB331wF/cr+DbtyBMzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 18:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3215 (0xc8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Validity Not Before: Dec 28 18:10:42 2025 GMT Not After : Jan 4 18:10:42 2026 GMT Subject: CN=695172a2-4552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:92:a1:82:b5:d0:70:22:5c:a5:b6:ca:20: 1e:eb:8b:21:9e:83:ac:7f:57:2e:8d:8b:57:76:1e: 5c:f7:aa:92:34:13:ea:82:cb:14:7f:54:68:f4:03: 4d:4a:58:f2:99:86:16:11:50:a2:94:34:90:a4:07: 5d:80:32:28:3e:76:5f:f5:33:ab:e2:85:22:92:15: f1:7d:58:18:59:c5:b1:9e:b2:ae:25:b4:c8:3b:c2: 5e:da:de:11:2e:ef:13:0a:6a:0c:be:21:0e:ca:87: 3e:29:c9:e4:b8:db:b9:bb:5f:e7:54:87:2e:8a:30: 19:a9:11:37:19:f9:37:bd:68:ff:48:54:eb:c8:f5: 03:08:72:67:0b:ce:1e:23:0b:1a:a9:7c:64:e9:13: cc:bc:db:97:9c:f4:c9:78:5b:9d:68:48:23:72:68: e2:44:1a:74:c3:27:b9:38:2f:ea:e6:eb:ad:72:02: cb:1b:ba:bb:3e:79:65:e6:af:99:4a:cd:31:51:ec: 36:d5:2c:3f:5b:d8:ee:05:b5:99:2e:ad:7e:22:1d: dd:1f:e9:c1:95:31:9f:40:6d:ba:93:c3:c9:7b:3d: 7c:ec:49:d6:89:87:ee:e9:4c:b3:71:2a:f1:32:25: 1b:24:68:bb:41:06:a9:e5:28:17:1f:22:cd:df:70: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F8:76:C9:D4:D1:8C:45:8A:B6:E4:9E:40:E3:C3:E6:72:37:40:A0 X509v3 Authority Key Identifier: keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:70:21:9f:01:aa:c8:0d:62:a7:ed:85:47:ce:ba:23:6c:fb: a8:72:b2:97:4a:f0:36:2a:39:67:02:78:ec:fd:cc:9b:6c:d8: fb:8b:5a:37:d8:11:87:6d:34:06:4a:90:a4:23:16:a6:c3:48: 6d:4d:65:a4:28:21:4e:18:dd:4d:81:f4:93:79:c3:d5:d7:cf: 6d:3e:13:d4:af:38:87:82:a2:dd:37:f8:c5:63:7f:a4:d1:ea: 2d:50:a7:8b:3d:97:32:10:42:87:a5:2f:b5:79:8f:bc:f5:bb: 9d:3a:78:68:3c:e2:7c:20:6e:89:54:e3:76:06:cb:e0:c6:35: c3:80:46:26:2e:86:a0:1c:70:12:a2:66:85:ef:9e:20:e7:48: 01:26:0b:5c:30:81:67:5f:b3:19:ce:12:ee:18:e1:34:54:37: 78:60:44:2f:bf:27:18:a4:98:91:9e:b7:09:aa:a5:2c:00:27: 10:7f:e8:dc:6e:e0:31:4d:6f:5a:55:91:b9:eb:a9:fc:ea:d6: 77:66:fe:8d:5f:b3:36:41:b8:cf:04:50:c8:93:b9:bb:9f:91: e7:6c:57:84:56:4d:35:60:ba:07:7d:76:3d:eb:a5:7f:c5:cc: dc:7a:c4:4e:17:05:23:ca:cc:ea:e8:c4:ca:45:3d:27:f7:09: 3b:1c:26:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5 OTI1RkJENEYwHhcNMjUxMjI4MTgxMDQyWhcNMjYwMTA0MTgxMDQyWjAYMRYwFAYD VQQDDA02OTUxNzJhMi00NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXeSoYK10HAiXKW2yiAe64shnoOsf1cujYtXdh5c96qSNBPqgssUf1Ro9ANN SljymYYWEVCilDSQpAddgDIoPnZf9TOr4oUikhXxfVgYWcWxnrKuJbTIO8Je2t4R Lu8TCmoMviEOyoc+KcnkuNu5u1/nVIcuijAZqRE3Gfk3vWj/SFTryPUDCHJnC84e IwsaqXxk6RPMvNuXnPTJeFudaEgjcmjiRBp0wye5OC/q5uutcgLLG7q7Pnll5q+Z Ss0xUew21Sw/W9juBbWZLq1+Ih3dH+nBlTGfQG26k8PJez187EnWiYfu6UyzcSrx MiUbJGi7QQap5SgXHyLN33ArPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMX4dsnU 0YxFirbknkDjw+ZyN0CgMB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0 MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2 VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBucCGfAarIDWKn7YVHzrojbPuocrKXSvA2KjlnAnjs/cybbNj7i1o3 2BGHbTQGSpCkIxamw0htTWWkKCFOGN1NgfSTecPV189tPhPUrziHgqLdN/jFY3+k 0eotUKeLPZcyEEKHpS+1eY+89budOnhoPOJ8IG6JVON2BsvgxjXDgEYmLoagHHAS omaF754g50gBJgtcMIFnX7MZzhLuGOE0VDd4YEQvvycYpJiRnrcJqqUsACcQf+jc buAxTW9aVZG566n86tZ3Zv6NX7M2QbjPBFDIk7m7n5HnbFeEVk01YLoHfXY966V/ xczcesROFwUjyszq6MTKRT0n9wk7HCa+ -----END CERTIFICATE-----Generated at Mon Dec 29 15:02:13 2025 by rpki-client