This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft File: IjvhmJLm5stAbl-plW3bzqlcu0Y.mft (raw, json) Hash identifier: mGhGW0AnGDk+Ud0DcUyUC/zSQzk5G6ICxR85I0ayopo= Subject key identifier: A7:9A:FA:97:7C:3B:9B:71:32:D0:BF:36:51:2F:FB:F8:78:CE:36:B5 Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 Certificate issuer: /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Certificate serial: 1083 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft Manifest number: 1077 Signing time: Sat 20 Dec 2025 17:05:57 +0000 Manifest this update: Sat 20 Dec 2025 17:05:56 +0000 Manifest next update: Sat 27 Dec 2025 17:05:56 +0000 Files and hashes: 1: IjvhmJLm5stAbl-plW3bzqlcu0Y.crl (hash: krEozfm13+7enhX30OO/ntVn3sVYMOFyMqhJSQPqcYY=) 2: 42CBE6BE29F111EEAECAED6FC4F9AE02.roa (hash: SSjTjiJw3UBo/Mme4Kl37l1zxjxnCDkxVmhI1OR3EOw=) 3: 608836D046B111E98B793856C4F9AE02.roa (hash: Ls4h/fmzmMgVY9fuRoj+7ux+D5fYwsPV37oBSFEiAic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4227 (0x1083) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46 Validity Not Before: Dec 20 17:05:56 2025 GMT Not After : Dec 27 17:05:56 2025 GMT Subject: CN=6946d775-a5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:62:86:d8:b2:1c:a2:67:7e:e5:63:47:d6: 49:ac:8b:a8:4b:3d:e5:c5:78:01:2f:fe:3d:dd:0e: 94:f2:99:15:a1:87:ea:08:ed:5a:96:ae:e7:78:ad: f5:98:b6:22:1a:88:f7:21:4d:84:33:dc:e5:7d:70: 13:5f:2d:a5:da:29:61:0e:1f:4b:49:bd:f5:80:b8: 76:f3:54:77:09:f6:d5:9e:ce:e9:a3:31:68:8b:99: 76:99:1d:e1:6e:a8:8d:77:e5:a1:7c:8c:af:5c:1d: 4e:b8:a4:d2:3d:ba:ec:aa:57:df:66:55:98:e5:c9: b5:0f:8d:f5:1a:c1:29:01:e5:e0:ab:25:b2:bf:93: 8b:39:94:1b:39:8b:a7:4a:ee:c4:15:9e:b5:be:8e: 20:6f:69:20:25:2d:96:db:06:44:4d:b2:cf:a4:2c: 51:e7:33:7d:1f:82:48:88:08:42:f0:fb:9c:8c:f3: b4:42:54:cc:e9:42:55:c0:2d:32:7c:d3:cb:1a:e7: bf:12:f2:36:a4:a6:a4:cc:65:b2:8e:62:a6:1d:69: 97:f9:f9:7c:f6:68:1d:e2:0a:35:39:06:b7:8b:23: 6b:85:05:63:2e:57:24:38:a5:15:a8:4e:a0:88:3a: 7d:2a:f9:ce:ea:fc:b9:d1:7f:db:f5:13:6b:8d:c2: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9A:FA:97:7C:3B:9B:71:32:D0:BF:36:51:2F:FB:F8:78:CE:36:B5 X509v3 Authority Key Identifier: keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:44:d7:88:04:1d:e8:d1:9d:eb:48:61:cf:cb:ed:0e:4c:ad: e2:c3:e3:0f:ee:74:83:85:36:97:23:c8:af:f9:31:a7:19:c8: 71:59:f0:cd:e3:e2:f2:f1:a7:b2:55:99:a6:64:f9:27:5f:d9: 8a:25:27:ce:1f:9d:af:a5:ed:5f:da:aa:d0:39:da:33:c5:2c: 81:ef:2d:a7:e0:bc:8e:59:99:95:b8:a1:73:69:af:2a:c4:0e: 81:4e:e5:2a:5f:3b:27:47:61:bf:83:d3:d8:b3:c3:74:f4:ce: 1b:10:b2:96:99:1d:6f:c0:64:9a:d8:76:d8:68:55:b3:0a:e3: 18:4c:69:0b:99:f4:05:24:ab:a1:8e:89:67:18:1d:fc:66:b8: f9:96:95:a6:32:9e:80:86:6b:e5:ef:58:00:8d:70:8a:a3:ef: 51:71:a4:af:dd:14:2c:94:63:3c:d9:01:70:c6:20:e7:c7:24: f0:fd:67:ce:a2:41:d5:42:db:31:f4:92:52:77:71:5d:b1:b8: 93:b4:f0:d9:b8:5d:87:61:0f:ae:45:e8:f0:37:ab:fc:6c:f8: 99:10:8e:2d:ef:79:f6:cb:15:ad:89:33:d6:72:9b:eb:06:a8: b7:a1:23:ad:1e:83:98:15:5f:59:38:79:ad:a3:3a:44:29:a3: a7:ba:08:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKDIyM0JFMTk4OTJFNkU2Q0I0MDZFNUZBOTk1NkREQkNF QTk1Q0JCNDYwHhcNMjUxMjIwMTcwNTU2WhcNMjUxMjI3MTcwNTU2WjAYMRYwFAYD VQQDDA02OTQ2ZDc3NS1hNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaxihtiyHKJnfuVjR9ZJrIuoSz3lxXgBL/493Q6U8pkVoYfqCO1alq7neK31 mLYiGoj3IU2EM9zlfXATXy2l2ilhDh9LSb31gLh281R3CfbVns7pozFoi5l2mR3h bqiNd+WhfIyvXB1OuKTSPbrsqlffZlWY5cm1D431GsEpAeXgqyWyv5OLOZQbOYun Su7EFZ61vo4gb2kgJS2W2wZETbLPpCxR5zN9H4JIiAhC8PucjPO0QlTM6UJVwC0y fNPLGue/EvI2pKakzGWyjmKmHWmX+fl89mgd4go1OQa3iyNrhQVjLlckOKUVqE6g iDp9KvnO6vy50X/b9RNrjcKykwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKea+pd8 O5txMtC/NlEv+/h4zja1MB8GA1UdIwQYMBaAFCI74ZiS5ubLQG5fqZVt286pXLtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9CNkE5RjI2MDQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVzdEFibC1wbFczYnpxbGN1 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lqdmhtSkxtNXN0QWJsLXBsVzNienFsY3UwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTZCNy9CNkE5RjI2MDQ2QUMxMUU5OTYwODgzNDhDNEY5QUUwMi9JanZobUpMbTVz dEFibC1wbFczYnpxbGN1MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXRNeIBB3o0Z3rSGHPy+0OTK3iw+MP7nSDhTaXI8iv+TGnGchxWfDN 4+Ly8aeyVZmmZPknX9mKJSfOH52vpe1f2qrQOdozxSyB7y2n4LyOWZmVuKFzaa8q xA6BTuUqXzsnR2G/g9PYs8N09M4bELKWmR1vwGSa2HbYaFWzCuMYTGkLmfQFJKuh jolnGB38Zrj5lpWmMp6Ahmvl71gAjXCKo+9RcaSv3RQslGM82QFwxiDnxyTw/WfO okHVQtsx9JJSd3FdsbiTtPDZuF2HYQ+uRejwN6v8bPiZEI4t73n2yxWtiTPWcpvr Bqi3oSOtHoOYFV9ZOHmtozpEKaOnugi0 -----END CERTIFICATE-----Generated at Sun Dec 21 12:17:45 2025 by rpki-client