This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: /rORQhUvcYXiVDHW5AUOyossn29cVgxPxFF+p4be6hg= Subject key identifier: DA:45:5F:96:F7:89:C4:D9:4D:0B:D3:AD:AD:55:B2:80:03:5E:6E:5B Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 0194 Signing time: Sun 21 Dec 2025 02:53:08 +0000 Manifest this update: Sun 21 Dec 2025 02:53:07 +0000 Manifest next update: Sun 28 Dec 2025 02:53:07 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: DNtU44o3gDuPPbwgAy5wFIZVUpiaZ1XNI7o2c/7t8OA=) 2: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: tag8qRB5tEUFx1QNVuAqpyg8ujg0HPWl8zfOULOO91k=) 3: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: g09cAtW7q38tkGDCJXd5RjCBSKiULHxUGiRzWgP6Rj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Dec 21 02:53:07 2025 GMT Not After : Dec 28 02:53:07 2025 GMT Subject: CN=69476114-0556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:2a:87:3a:0a:a8:ce:94:34:6e:e3:75:4a: f0:40:66:d5:05:17:e5:16:f6:e7:a2:7d:63:23:05: 5b:1c:d3:3b:c3:6f:07:24:5b:e6:8b:15:b2:be:c5: ab:62:39:a4:03:9c:29:23:5e:56:f0:3e:f4:56:ab: 36:a3:84:4e:b0:4a:f7:23:c7:e5:89:ac:14:bb:0c: ec:00:26:7c:6f:a6:55:ef:62:73:14:7b:89:9c:79: 0c:45:d1:a1:11:75:03:7f:47:02:fa:e6:ea:19:88: a2:56:e8:3f:d8:24:ea:d9:c4:a4:c7:87:5c:26:c7: 7e:46:bf:ca:de:86:ba:be:2c:73:5c:90:eb:42:01: 16:0b:6e:25:42:d9:8d:b4:42:91:f7:57:a9:60:4c: 5e:95:01:bd:f6:b4:2e:ba:fb:49:14:3b:12:77:2c: 59:0d:f9:cc:44:76:c2:f7:4f:c7:6f:5d:c1:cd:20: 85:f3:7b:a8:e5:59:29:16:41:ed:4a:82:65:4a:25: aa:fb:7f:b7:47:24:6a:41:72:0d:3e:3f:c2:ac:0d: b1:c1:e0:eb:31:d3:8d:4f:bd:a0:f4:45:4c:e1:11: a5:63:e5:ad:8c:57:37:92:2a:31:34:56:61:05:ef: 8a:34:d7:7b:ff:77:2f:2f:a1:77:79:b9:64:32:c4: bd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:45:5F:96:F7:89:C4:D9:4D:0B:D3:AD:AD:55:B2:80:03:5E:6E:5B X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:fd:70:2f:08:96:04:4c:9e:15:56:83:12:f9:d0:45:39:25: f6:f4:30:74:73:ba:8e:e8:2e:03:ac:0b:d1:02:f6:f7:f7:33: 2b:a0:96:23:c8:30:90:bd:9b:cf:ef:a4:37:33:fb:d8:7c:f4: 44:85:48:eb:a4:10:2b:e2:c1:05:1d:ea:cb:c6:ac:4d:57:3a: 9d:6b:dd:8c:17:70:d8:f2:67:8a:b3:b3:c0:fb:7e:f9:86:49: 73:6c:28:f3:8e:7e:64:c3:f2:f4:70:b4:8e:92:84:50:b9:ff: 52:33:67:be:62:67:ce:b9:a8:ed:35:b2:74:4c:29:75:39:f4: 72:85:40:96:9d:b9:77:ec:3a:75:ae:a8:fa:af:8f:70:2b:f7: c1:ad:c9:78:af:ca:50:c4:6c:d0:29:0f:45:6c:58:96:7e:33: d6:08:60:d6:8b:1d:47:ed:bd:58:2f:b0:ae:b3:c1:fd:4b:c4: b2:86:6e:54:2d:d4:8e:b9:c6:d1:c2:86:7d:89:e2:22:98:23: b5:15:b7:d8:85:26:ab:52:b0:1e:2b:1e:10:95:c5:9d:77:6a: 3b:b5:5a:4b:d3:b7:91:f5:a0:18:51:9d:fd:1f:d9:cd:df:20: 55:59:d7:58:bd:92:bc:5d:48:9d:ed:6e:ee:84:b8:12:bb:2a: cd:77:7a:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjUxMjIxMDI1MzA3WhcNMjUxMjI4MDI1MzA3WjAYMRYwFAYD VQQDDA02OTQ3NjExNC0wNTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5wqhzoKqM6UNG7jdUrwQGbVBRflFvbnon1jIwVbHNM7w28HJFvmixWyvsWr YjmkA5wpI15W8D70Vqs2o4ROsEr3I8fliawUuwzsACZ8b6ZV72JzFHuJnHkMRdGh EXUDf0cC+ubqGYiiVug/2CTq2cSkx4dcJsd+Rr/K3oa6vixzXJDrQgEWC24lQtmN tEKR91epYExelQG99rQuuvtJFDsSdyxZDfnMRHbC90/Hb13BzSCF83uo5VkpFkHt SoJlSiWq+3+3RyRqQXINPj/CrA2xweDrMdONT72g9EVM4RGlY+WtjFc3kioxNFZh Be+KNNd7/3cvL6F3eblkMsS9qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpFX5b3 icTZTQvTra1VsoADXm5bMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR/XAvCJYETJ4VVoMS+dBFOSX29DB0c7qO6C4DrAvRAvb39zMroJYj yDCQvZvP76Q3M/vYfPREhUjrpBAr4sEFHerLxqxNVzqda92MF3DY8meKs7PA+375 hklzbCjzjn5kw/L0cLSOkoRQuf9SM2e+YmfOuajtNbJ0TCl1OfRyhUCWnbl37Dp1 rqj6r49wK/fBrcl4r8pQxGzQKQ9FbFiWfjPWCGDWix1H7b1YL7Cus8H9S8Syhm5U LdSOucbRwoZ9ieIimCO1FbfYhSarUrAeKx4QlcWdd2o7tVpL07eR9aAYUZ39H9nN 3yBVWddYvZK8XUid7W7uhLgSuyrNd3qD -----END CERTIFICATE-----Generated at Sun Dec 21 14:41:14 2025 by rpki-client