This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft File: iPsdIcuIPJfCmst31NaIhLOnpgg.mft (raw, json) Hash identifier: Yi8IBytX0nkeKpVPTiw6puhc4AJtJtELdmhs514C7Fg= Subject key identifier: 01:72:F2:36:08:A5:41:FE:A3:20:96:97:FD:0C:3A:2A:5A:BA:C3:87 Authority key identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 Certificate issuer: /CN=A91B6A04/serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft Manifest number: 0E Signing time: Fri 19 Dec 2025 06:54:39 +0000 Manifest this update: Fri 19 Dec 2025 06:54:38 +0000 Manifest next update: Fri 26 Dec 2025 06:54:38 +0000 Files and hashes: 1: iPsdIcuIPJfCmst31NaIhLOnpgg.crl (hash: TYQhobqmypCp2+jpu6dz7/SiErU7FA2MpMPpDjp40K4=) 2: 8D7D3942C9AE11F0A867D348C4F9AE02.roa (hash: f6LJ1o+/HlkVTaZ1lRAj/+eYOJXKRmJ8r7oZSOqaeL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6A04, serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Validity Not Before: Dec 19 06:54:38 2025 GMT Not After : Dec 26 06:54:38 2025 GMT Subject: CN=6944f6ae-b472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:9b:08:5e:f4:cc:80:f9:9a:e4:ba:80:21: 1f:bb:41:ac:44:8d:0a:70:6b:f9:c8:f3:57:0d:9a: f9:f4:f5:5a:62:74:52:ee:da:40:fd:3a:cf:64:05: 73:76:6b:e6:f5:4c:55:6b:07:a2:dc:a7:8e:9c:95: f8:6c:8f:48:b2:6f:fe:d4:3b:03:8c:16:92:c7:d3: 23:05:25:5b:9a:14:5b:96:11:c8:76:4b:49:b9:da: cb:72:0d:ec:83:20:5d:ce:d2:4b:cb:ff:a3:ec:42: 74:1a:bd:34:03:60:b6:f3:e6:8e:b6:7f:2e:86:a5: 41:7c:46:2f:e4:34:82:9e:0b:cb:7f:9e:07:98:fc: 36:41:a1:5a:46:d7:23:59:e7:2e:c0:35:01:40:4c: 89:e1:a9:17:6d:4c:d3:33:52:26:1b:c9:02:9f:90: 76:23:63:89:cd:25:25:dd:91:94:6c:5a:6e:24:48: 17:1f:27:ab:ac:a0:5e:04:b3:0b:36:ec:33:ef:bf: 77:70:93:e9:4b:3c:2f:c9:07:50:95:69:90:c5:02: 1e:8d:03:8e:93:c3:9b:1a:83:f0:fe:e6:84:bb:03: aa:3f:31:2c:6d:6b:c7:c8:30:24:90:78:d8:b4:cf: d2:5a:b1:fc:1a:b6:51:29:72:e4:89:ff:a8:f7:26: ad:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:72:F2:36:08:A5:41:FE:A3:20:96:97:FD:0C:3A:2A:5A:BA:C3:87 X509v3 Authority Key Identifier: keyid:88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e4:9c:5b:70:bd:60:4f:fd:24:53:e4:57:ff:e0:4d:0c:b1: cf:7c:b0:cd:7b:20:d6:42:0b:1f:23:5f:a9:d5:c2:45:86:7b: 59:2f:e6:46:bc:db:62:db:40:02:5a:82:d0:ec:9f:11:8d:17: f2:47:65:f6:83:36:8e:b6:94:fc:5f:fd:73:f0:a7:50:dd:05: 14:e0:9b:6a:3d:3b:8b:6c:01:67:23:62:42:5c:14:b9:c7:82: 05:ff:28:71:3d:04:67:aa:01:72:de:13:15:05:d9:20:24:28: 63:a4:35:5f:91:00:78:e1:b9:dd:03:3c:35:6c:58:94:52:2d: df:58:57:53:b5:e8:c4:de:a2:14:7d:e0:c8:f9:f4:7c:b7:a2: cc:6f:5f:4c:44:3a:b2:8e:25:43:12:ea:68:05:64:6f:c0:04: 50:d8:b1:d6:e3:98:2c:80:bd:f4:0f:4a:0f:58:fa:14:2f:70: 86:2d:67:5f:0f:45:cb:e0:0b:6f:fd:97:06:43:bb:0a:aa:1b: 42:e2:d0:fc:9d:ee:98:f8:f9:99:83:52:60:0c:96:bd:11:3c: bb:b5:f3:8a:4c:2b:f8:7f:6b:ef:a8:bd:ea:6a:f5:f6:d2:a1: 0e:b2:99:34:bd:d0:33:d1:39:7b:2d:af:b1:6d:01:68:5e:54: 35:f1:83:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkEwNDExMC8GA1UEBRMoODhGQjFEMjFDQjg4M0M5N0MyOUFDQjc3RDRENjg4ODRC M0E3QTYwODAeFw0yNTEyMTkwNjU0MzhaFw0yNTEyMjYwNjU0MzhaMBgxFjAUBgNV BAMMDTY5NDRmNmFlLWI0NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDByJsIXvTMgPma5LqAIR+7QaxEjQpwa/nI81cNmvn09VpidFLu2kD9Os9kBXN2 a+b1TFVrB6Lcp46clfhsj0iyb/7UOwOMFpLH0yMFJVuaFFuWEch2S0m52styDeyD IF3O0kvL/6PsQnQavTQDYLbz5o62fy6GpUF8Ri/kNIKeC8t/ngeY/DZBoVpG1yNZ 5y7ANQFATInhqRdtTNMzUiYbyQKfkHYjY4nNJSXdkZRsWm4kSBcfJ6usoF4Esws2 7DPvv3dwk+lLPC/JB1CVaZDFAh6NA46Tw5sag/D+5oS7A6o/MSxta8fIMCSQeNi0 z9JasfwatlEpcuSJ/6j3Jq3fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAXLyNgil Qf6jIJaX/Qw6Klq6w4cwHwYDVR0jBBgwFoAUiPsdIcuIPJfCmst31NaIhLOnpggw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QTA0LzI1QzUyNzdFQzlB RTExRjA5OEU5Mjc0NUM0RjlBRTAyL2lQc2RJY3VJUEpmQ21zdDMxTmFJaExPbnBn Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaVBzZEljdUlQSmZDbXN0MzFOYUloTE9ucGdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QTA0LzI1QzUyNzdFQzlBRTExRjA5OEU5Mjc0NUM0RjlBRTAyL2lQc2RJY3VJUEpm Q21zdDMxTmFJaExPbnBnZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAErknFtwvWBP/SRT5Ff/4E0Msc98sM17INZCCx8jX6nVwkWGe1kv5ka8 22LbQAJagtDsnxGNF/JHZfaDNo62lPxf/XPwp1DdBRTgm2o9O4tsAWcjYkJcFLnH ggX/KHE9BGeqAXLeExUF2SAkKGOkNV+RAHjhud0DPDVsWJRSLd9YV1O16MTeohR9 4Mj59Hy3osxvX0xEOrKOJUMS6mgFZG/ABFDYsdbjmCyAvfQPSg9Y+hQvcIYtZ18P RcvgC2/9lwZDuwqqG0Li0Pyd7pj4+ZmDUmAMlr0RPLu184pMK/h/a++ovepq9fbS oQ6ymTS90DPROXstr7FtAWheVDXxg08= -----END CERTIFICATE-----Generated at Sat Dec 20 00:28:53 2025 by rpki-client