This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: qay8a12JLuWvCRT/rH+7xsznt8EnXoGQQG9bK4uuM8I= Subject key identifier: 22:1C:AF:D5:23:A6:CD:16:D0:03:56:07:C2:BC:CB:5F:EB:AA:8D:31 Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 05A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 059C Signing time: Sat 20 Dec 2025 22:28:25 +0000 Manifest this update: Sat 20 Dec 2025 22:28:25 +0000 Manifest next update: Sat 27 Dec 2025 22:28:25 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: pvjQDoPEBwLztJrxEOi16Oti1t5IWbj6um74Co9roxY=) 2: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: M0rop6u3XFd48CsMz0Ik0R+4A+HjyQyG2cdgIdeoY8E=) 3: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: xQl2oR7pAbge5iF8YPhv/hbmMFqMQxGSZC11zhknFak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: Dec 20 22:28:25 2025 GMT Not After : Dec 27 22:28:25 2025 GMT Subject: CN=69472309-52fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3f:b6:87:df:8f:22:eb:91:54:39:c8:58:ac: ee:d6:21:08:66:e6:a2:8d:87:51:fd:52:dd:b6:35: bf:20:fc:1a:6e:18:48:dd:63:49:bb:95:00:27:52: 62:09:aa:0d:d0:ac:4a:32:95:fc:cb:bb:f4:9d:90: 88:55:f1:44:ce:6e:54:af:cc:79:2b:fb:b2:61:00: f9:68:28:2e:ff:2b:b5:d9:f9:94:1f:44:5e:ab:34: 22:cc:c9:f6:da:75:ef:4f:a4:bb:aa:cd:4c:2a:20: b5:a3:d2:5e:61:2d:0f:5b:2e:aa:00:a7:07:c6:0a: 67:7e:b6:77:c6:ec:4c:e4:08:3c:90:68:8f:41:3b: 50:51:5c:c2:88:09:69:a5:46:0f:b9:0e:20:cc:59: a0:64:93:17:2e:2c:84:dc:fd:5c:16:ca:2e:38:7f: 53:35:26:98:9b:49:19:53:9e:c7:b9:f4:c4:30:79: 8b:20:3f:f5:94:36:80:ec:da:f7:cc:1c:eb:2e:f0: f1:0c:25:2c:04:41:bb:93:1d:85:2c:e1:58:79:91: 7a:3f:44:ec:fe:f6:33:55:7c:70:fd:4e:b4:fd:d7: d5:7f:e9:45:cf:37:26:1b:00:df:7b:8c:ee:bf:95: b5:05:12:45:29:2c:12:87:22:53:09:db:af:c4:0b: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1C:AF:D5:23:A6:CD:16:D0:03:56:07:C2:BC:CB:5F:EB:AA:8D:31 X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d2:03:c2:3d:37:ae:b2:04:a2:3f:2c:24:4e:68:a9:fd:b8: e7:d9:69:55:04:0f:5f:d7:74:8a:28:e2:1c:59:7f:c6:7f:70: 21:68:26:68:34:56:86:6c:73:51:0f:81:e7:4c:cd:56:73:3e: 11:61:53:53:34:6f:3a:78:dd:00:bb:72:6f:3d:40:a6:cb:7d: 91:e7:f4:da:6e:e5:b5:c2:fe:2a:30:59:5e:d2:d2:1c:4b:ee: 3b:6a:5a:da:7e:57:26:14:d4:5d:d4:28:c7:c7:a2:ff:c4:06: 66:b7:15:25:14:e9:2a:ec:1e:77:b0:c9:45:26:8c:16:6d:1c: db:77:ce:f6:e0:6d:f2:28:6c:95:22:65:be:14:45:a9:4d:e3: d9:2e:a8:8e:30:57:1f:25:4d:b0:09:2d:39:04:62:9a:78:7d: c8:7a:28:a0:44:37:a6:08:d7:31:b7:41:f0:1a:ff:c1:a5:a7: c4:7c:ba:a8:98:dd:2a:46:12:eb:0a:a2:f6:db:d2:42:63:ed: e6:84:6c:b9:83:2f:c0:51:90:06:46:22:90:8d:e4:c5:0a:00: ef:bc:df:42:83:52:f4:63:96:7b:81:d6:6e:11:4e:c3:21:3e: 9d:58:eb:7f:d6:1d:8d:8d:04:b2:98:2f:b4:bb:3a:11:a8:f4: 32:b5:b6:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUxMjIwMjIyODI1WhcNMjUxMjI3MjIyODI1WjAYMRYwFAYD VQQDDA02OTQ3MjMwOS01MmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0j+2h9+PIuuRVDnIWKzu1iEIZuaijYdR/VLdtjW/IPwabhhI3WNJu5UAJ1Ji CaoN0KxKMpX8y7v0nZCIVfFEzm5Ur8x5K/uyYQD5aCgu/yu12fmUH0ReqzQizMn2 2nXvT6S7qs1MKiC1o9JeYS0PWy6qAKcHxgpnfrZ3xuxM5Ag8kGiPQTtQUVzCiAlp pUYPuQ4gzFmgZJMXLiyE3P1cFsouOH9TNSaYm0kZU57HufTEMHmLID/1lDaA7Nr3 zBzrLvDxDCUsBEG7kx2FLOFYeZF6P0Ts/vYzVXxw/U60/dfVf+lFzzcmGwDfe4zu v5W1BRJFKSwShyJTCduvxAsx0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIcr9Uj ps0W0ANWB8K8y1/rqo0xMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv0gPCPTeusgSiPywkTmip/bjn2WlVBA9f13SKKOIcWX/Gf3AhaCZo NFaGbHNRD4HnTM1Wcz4RYVNTNG86eN0Au3JvPUCmy32R5/TabuW1wv4qMFle0tIc S+47alraflcmFNRd1CjHx6L/xAZmtxUlFOkq7B53sMlFJowWbRzbd8724G3yKGyV ImW+FEWpTePZLqiOMFcfJU2wCS05BGKaeH3IeiigRDemCNcxt0HwGv/BpafEfLqo mN0qRhLrCqL229JCY+3mhGy5gy/AUZAGRiKQjeTFCgDvvN9Cg1L0Y5Z7gdZuEU7D IT6dWOt/1h2NjQSymC+0uzoRqPQytbaM -----END CERTIFICATE-----Generated at Sun Dec 21 12:04:42 2025 by rpki-client