This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json) Hash identifier: fCQqyJmuDAaYWaeaIG0oJKJykB3cmv/dcQISw79RLSE= Subject key identifier: 70:40:9E:5B:DA:6A:49:A3:2D:D7:F9:65:BC:2A:DE:15:8B:E6:71:80 Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft Manifest number: 4C Signing time: Fri 19 Dec 2025 06:17:52 +0000 Manifest this update: Fri 19 Dec 2025 06:17:52 +0000 Manifest next update: Fri 26 Dec 2025 06:17:52 +0000 Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: IlBFK0a5zk92UHdfdv7LigtjpLhgWMkZG0pxRV2p22A=) 2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: WDMb5z1Oep3KObXAq9yk+eELcjcBrGqtQZEb/aGlqi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Validity Not Before: Dec 19 06:17:52 2025 GMT Not After : Dec 26 06:17:52 2025 GMT Subject: CN=6944ee10-61c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0a:ad:12:ec:91:e2:37:fc:d7:6d:b0:03:99: ff:71:fd:83:5a:50:41:27:e9:4f:08:a8:77:2d:a2: 5a:18:12:c5:88:88:b8:49:19:ad:c8:37:ab:86:8c: b8:52:6a:f2:2a:05:df:00:64:c0:aa:2a:b6:ee:4b: cb:fa:00:eb:c5:56:d4:92:4a:54:24:46:52:0c:38: a3:82:e7:ba:a4:d7:2a:a2:9b:5b:30:7b:99:43:af: 80:77:b4:1b:54:e4:b1:ac:16:68:19:2e:5a:c4:91: 00:9e:f0:02:31:18:3c:c1:81:1f:b3:55:61:46:5e: b0:76:3f:23:54:70:23:a1:10:1a:df:7b:75:3a:a3: 45:b9:8a:c8:c0:28:c7:98:60:58:47:4b:0d:fd:0f: f3:4e:dc:71:f4:8f:33:af:2b:44:3a:9d:4d:58:26: 35:da:21:75:04:62:77:84:3c:ef:9e:35:8f:d0:91: 0c:3b:3e:22:4c:2b:1e:07:c5:d8:de:2b:58:94:fa: a9:bb:bb:c4:2e:b8:dc:77:98:08:f1:61:fe:67:f6: 5a:e1:9c:10:92:5d:56:9a:da:fa:a6:7b:46:5b:d7: 84:62:a6:87:4a:5f:57:e7:f2:ba:42:09:7a:72:9d: de:82:b8:58:8a:0f:96:91:22:88:f4:ab:b6:e2:43: 34:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:40:9E:5B:DA:6A:49:A3:2D:D7:F9:65:BC:2A:DE:15:8B:E6:71:80 X509v3 Authority Key Identifier: keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:50:cb:64:26:21:f3:3c:ad:55:35:1f:81:a2:7a:7f:6e:b2: 3c:36:97:32:43:d0:03:c2:5e:97:2f:32:de:92:a2:84:94:cb: 95:a1:e6:c8:89:a6:55:cf:76:7e:65:6c:7b:d2:ce:72:db:70: 62:f9:96:12:68:b8:16:6d:a1:f4:cd:3b:20:0b:9d:0a:ab:21: 24:ee:de:90:da:dc:84:a3:bf:4c:1d:5c:5c:1e:8b:d7:1f:75: 96:ae:12:1b:aa:65:92:1c:76:38:6f:25:c5:fd:f6:89:1c:8b: e5:1a:6f:3b:01:2c:21:ff:8e:3e:a1:a1:ad:e7:20:1f:33:0d: b8:5d:3c:f9:8c:91:f9:4c:a4:ff:ac:dd:5b:2c:aa:58:51:4b: 95:99:a3:ea:da:8b:c8:e4:51:75:1c:33:7e:c8:06:f3:73:9b: e5:9e:eb:ae:d4:3b:9b:13:73:87:cf:09:32:eb:9b:6b:35:17: c1:1f:7f:56:61:03:d5:27:09:6a:40:43:57:7c:be:12:b1:11: e5:fc:28:f1:d5:5b:ca:e8:b1:4a:51:94:8d:47:cd:a3:83:c1: 93:5d:19:8d:d1:6b:68:cf:b8:95:b9:a6:80:50:37:90:01:60: 96:5c:e4:e6:a9:75:ec:d5:4f:1a:85:df:90:d1:d3:4d:d4:32: e9:9f:b3:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUM2MjExMC8GA1UEBRMoMjFDOEYyQjZFMDFEMEE4MkQxM0MzNTE4OEMzQzkzRTZG NTE0QkE5NDAeFw0yNTEyMTkwNjE3NTJaFw0yNTEyMjYwNjE3NTJaMBgxFjAUBgNV BAMMDTY5NDRlZTEwLTYxYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCNCq0S7JHiN/zXbbADmf9x/YNaUEEn6U8IqHctoloYEsWIiLhJGa3IN6uGjLhS avIqBd8AZMCqKrbuS8v6AOvFVtSSSlQkRlIMOKOC57qk1yqim1swe5lDr4B3tBtU 5LGsFmgZLlrEkQCe8AIxGDzBgR+zVWFGXrB2PyNUcCOhEBrfe3U6o0W5isjAKMeY YFhHSw39D/NO3HH0jzOvK0Q6nU1YJjXaIXUEYneEPO+eNY/QkQw7PiJMKx4Hxdje K1iU+qm7u8QuuNx3mAjxYf5n9lrhnBCSXVaa2vqme0Zb14RipodKX1fn8rpCCXpy nd6CuFiKD5aRIoj0q7biQzTpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcECeW9pq SaMt1/llvCreFYvmcYAwHwYDVR0jBBgwFoAUIcjytuAdCoLRPDUYjDyT5vUUupQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5QzYyLzBBRUFBQ0Q2NkI2 NjExRjBCN0Y4RUI0MEM0RjlBRTAyL0ljanl0dUFkQ29MUlBEVVlqRHlUNXZVVXVw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWNqeXR1QWRDb0xSUERVWWpEeVQ1dlVVdXBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 QzYyLzBBRUFBQ0Q2NkI2NjExRjBCN0Y4RUI0MEM0RjlBRTAyL0ljanl0dUFkQ29M UlBEVVlqRHlUNXZVVXVwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL9Qy2QmIfM8rVU1H4Gien9usjw2lzJD0APCXpcvMt6SooSUy5Wh5siJ plXPdn5lbHvSznLbcGL5lhJouBZtofTNOyALnQqrISTu3pDa3ISjv0wdXFwei9cf dZauEhuqZZIcdjhvJcX99okci+UabzsBLCH/jj6hoa3nIB8zDbhdPPmMkflMpP+s 3VssqlhRS5WZo+rai8jkUXUcM37IBvNzm+We667UO5sTc4fPCTLrm2s1F8Eff1Zh A9UnCWpAQ1d8vhKxEeX8KPHVW8rosUpRlI1HzaODwZNdGY3Ra2jPuJW5poBQN5AB YJZc5OapdezVTxqF35DR003UMumfs4I= -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:42 2025 by rpki-client