This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json) Hash identifier: /JcHyg5u07jyKy0rvFmaqozGf2hQJIIlGbRlmodgtv8= Subject key identifier: AD:6B:68:21:E8:C9:00:93:88:88:C1:CF:2F:56:F3:5E:24:05:11:4D Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft Manifest number: 0171 Signing time: Fri 19 Dec 2025 03:10:25 +0000 Manifest this update: Fri 19 Dec 2025 03:10:24 +0000 Manifest next update: Fri 26 Dec 2025 03:10:24 +0000 Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: jT6MhJAS8HgFjCj09/sGCnZF+JFmT9Hiyy+/le1StTY=) 2: 87662556555511EF88D9F680C4F9AE02.roa (hash: k8ciaOJiovKzhjLhsMW8Olbo59H12ftecdkV4UavoKg=) 3: D7FEF354562111EFA7B3F00AC4F9AE02.roa (hash: Z74c44o/GimXrdeWvw94wRAl3MPTrcV7W0A3AuI0ILk=) 4: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: BGxl2SOPQW6C/i2r2VN80go3aEYSETpmK67AkebR/E4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Dec 19 03:10:24 2025 GMT Not After : Dec 26 03:10:24 2025 GMT Subject: CN=6944c221-5a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:84:6e:2b:73:bf:53:33:9c:ac:c2:b3:cf: 5f:ed:83:1e:f6:2e:cb:ec:cc:80:1b:88:e6:7d:bb: 57:58:8a:52:11:6b:d3:83:94:d3:97:cd:ac:5d:1a: 9b:6a:9c:1f:21:ad:a1:1c:40:7d:05:30:a3:ca:dd: 62:b0:36:41:df:e9:ee:db:32:5f:ba:13:cf:8f:f5: 5b:ac:7f:54:3c:d5:70:78:c9:20:ee:42:f9:ce:fb: 92:d0:08:a1:86:62:ae:2e:26:2c:fd:b0:56:b8:ca: 73:77:a6:fd:7d:30:ef:80:e6:3d:20:db:92:7e:f1: 24:91:ea:7f:8e:5f:08:f1:f9:14:be:f4:2d:47:ba: c6:af:12:c5:b6:c8:e1:ab:a9:c7:f4:c3:a6:a0:92: b5:ac:0f:0d:e6:bf:8b:96:a4:81:6e:87:8a:16:36: 17:e7:0e:88:b1:5e:58:85:bc:fe:70:ed:75:e7:3a: 75:be:f4:79:4a:0d:37:d5:64:1e:94:b5:46:6b:33: b7:1d:f2:24:57:7c:c6:b1:dc:a8:7a:d9:7d:a9:cf: 43:2d:a3:12:b9:6f:08:6e:aa:4b:3e:8f:a3:87:4f: 7f:7e:00:73:ec:12:42:46:77:2c:08:54:e0:c4:bb: db:24:7d:97:45:09:04:fb:ee:92:af:9d:0b:09:f1: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6B:68:21:E8:C9:00:93:88:88:C1:CF:2F:56:F3:5E:24:05:11:4D X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c0:1e:10:67:37:ec:ea:09:84:fe:f3:8d:e6:2f:93:e4:de: 57:6c:d3:f3:4f:63:1f:25:eb:dd:8f:f1:a2:b8:e8:9e:7d:53: 41:90:0c:b5:b9:99:7b:06:a7:ec:ba:4b:c0:4c:ed:e9:64:0e: f9:73:90:8a:f1:4c:92:88:a5:6a:be:5c:53:9a:26:72:c0:52: f6:c5:2f:b2:e0:be:f2:cd:10:55:4e:a2:f2:5f:e1:a0:59:77: 17:4d:b5:1f:41:27:f4:4a:72:62:f1:d9:3f:c6:21:38:21:89: 6e:35:df:75:94:a5:c5:08:1e:c3:4d:8c:15:dd:ae:32:9f:4f: f5:b3:57:89:19:5d:ab:f9:da:3a:71:63:4a:ac:fb:60:fb:5e: a0:81:44:8f:7b:74:82:f6:ff:2a:7b:2c:5e:f1:aa:b5:62:5b: 1f:01:48:c0:b6:a5:66:0b:3c:90:ec:c9:9c:e0:9c:08:5f:c8: c9:ac:5d:59:22:dc:86:fe:33:b4:ed:49:5c:98:d1:98:7a:42: 11:7a:1e:3c:41:e1:96:a1:6e:df:b7:a4:8f:2b:87:02:91:f5: b0:8a:16:2e:89:ad:2e:8b:5d:2b:69:d9:5f:0d:f3:5c:73:ce: a6:e3:11:41:d7:58:cf:0c:99:60:0a:40:8f:11:0f:73:c4:34: f2:c9:1f:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjUxMjE5MDMxMDI0WhcNMjUxMjI2MDMxMDI0WjAYMRYwFAYD VQQDDA02OTQ0YzIyMS01YTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuKEbitzv1MznKzCs89f7YMe9i7L7MyAG4jmfbtXWIpSEWvTg5TTl82sXRqb apwfIa2hHEB9BTCjyt1isDZB3+nu2zJfuhPPj/VbrH9UPNVweMkg7kL5zvuS0Aih hmKuLiYs/bBWuMpzd6b9fTDvgOY9INuSfvEkkep/jl8I8fkUvvQtR7rGrxLFtsjh q6nH9MOmoJK1rA8N5r+LlqSBboeKFjYX5w6IsV5Yhbz+cO115zp1vvR5Sg031WQe lLVGazO3HfIkV3zGsdyoetl9qc9DLaMSuW8IbqpLPo+jh09/fgBz7BJCRncsCFTg xLvbJH2XRQkE++6Sr50LCfEFTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1raCHo yQCTiIjBzy9W814kBRFNMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldS bHJ6SHRsSm94aTZHNVUxRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqwB4QZzfs6gmE/vON5i+T5N5XbNPzT2MfJevdj/GiuOiefVNBkAy1 uZl7BqfsukvATO3pZA75c5CK8UySiKVqvlxTmiZywFL2xS+y4L7yzRBVTqLyX+Gg WXcXTbUfQSf0SnJi8dk/xiE4IYluNd91lKXFCB7DTYwV3a4yn0/1s1eJGV2r+do6 cWNKrPtg+16ggUSPe3SC9v8qeyxe8aq1YlsfAUjAtqVmCzyQ7Mmc4JwIX8jJrF1Z ItyG/jO07UlcmNGYekIReh48QeGWoW7ft6SPK4cCkfWwihYuia0ui10radlfDfNc c86m4xFB11jPDJlgCkCPEQ9zxDTyyR/l -----END CERTIFICATE-----Generated at Sun Dec 21 02:30:12 2025 by rpki-client