This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: ZTkv7qepFIrqBTpCbKDfRmx6tgVg51rWg35WvZ7OxrM= Subject key identifier: B2:BE:1A:E1:C3:DD:54:25:15:D1:50:EA:DD:9F:75:0D:3A:42:5E:C4 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 03BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 03A8 Signing time: Thu 18 Dec 2025 23:58:06 +0000 Manifest this update: Thu 18 Dec 2025 23:58:06 +0000 Manifest next update: Thu 25 Dec 2025 23:58:06 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: ERdPjwWPkOKHGEG63RT+jsHeo2cxZRr0y/tlfASpRto=) 2: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 3: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 4: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) 5: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 6: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Dec 18 23:58:06 2025 GMT Not After : Dec 25 23:58:06 2025 GMT Subject: CN=6944950e-2ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:5d:d6:9f:52:96:aa:e0:4e:da:b7:ab:22: 9e:b2:87:de:5c:2f:f1:0a:5a:1c:da:0a:2f:81:54: 14:cd:2c:10:29:fd:66:fb:e7:22:38:fd:f5:f6:3e: 56:2b:88:b2:05:d6:92:9b:81:43:67:5c:40:6a:fc: dc:2f:2f:ff:4d:c3:a5:03:8a:8e:b4:bf:c9:2f:f6: 2f:0e:b3:76:6d:e5:8d:61:ad:4b:3c:21:68:a6:76: ab:d7:59:33:5d:eb:f8:ad:f0:ca:58:5f:ca:f2:62: 74:4e:d0:b7:de:4a:79:cc:a8:7e:0b:a4:92:9b:8c: 93:c4:3d:e6:50:13:c8:ef:94:a4:49:49:c8:0e:82: 26:b5:08:75:8c:08:25:46:71:b8:38:67:54:5c:3d: f8:5e:1a:65:5e:a8:13:78:2c:19:7c:8d:14:cb:1a: 9d:dd:24:bc:57:d4:11:83:27:f3:d9:53:27:e4:ae: d4:7f:65:1f:cc:3a:f8:ea:cb:c2:78:b3:47:13:60: 43:e8:a3:c9:2f:73:6f:a0:53:43:cc:90:5d:71:02: c1:8c:d9:10:33:d4:fe:e5:2a:3d:e6:17:80:64:5b: 43:48:aa:a8:8c:7b:f5:67:26:2d:61:71:50:18:81: f6:49:8c:16:2d:1f:17:ff:fb:6f:06:b8:cb:0a:ca: 8b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BE:1A:E1:C3:DD:54:25:15:D1:50:EA:DD:9F:75:0D:3A:42:5E:C4 X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:14:73:18:f2:f2:a8:d8:e1:ab:55:bf:eb:fa:a1:e9:6b:50: 60:7c:26:1f:a6:c4:32:85:41:2e:6c:f0:9a:f5:5f:53:81:97: b5:d0:4e:fc:39:76:31:2a:b1:05:92:13:ee:34:ae:5f:82:38: 9f:9e:bf:e1:92:a6:37:b1:ab:ab:97:6b:83:a6:78:87:ba:56: 09:bb:f8:66:26:19:f5:a8:f2:21:70:5a:92:42:9f:14:b4:12: 98:cf:cc:db:9f:9c:e3:eb:48:34:bb:1a:7c:91:af:e0:05:43: e1:18:3c:fd:04:f8:6d:46:ed:61:b7:26:2a:a8:47:ac:84:fd: 53:26:34:e5:1c:11:e2:65:02:aa:6f:14:70:2e:83:7e:11:64: 34:0c:3e:05:0b:4f:db:6d:92:df:b9:26:ce:d8:69:63:74:0a: d3:71:24:af:69:3f:75:1e:26:79:cd:b7:cb:23:1f:4d:b6:82: 00:f6:c2:e1:1c:75:4a:03:07:e9:00:33:c4:da:07:54:66:e2: 0b:d0:cb:3a:be:72:6b:7a:6b:67:f7:01:9e:cb:1f:c8:af:d5: c2:fd:ae:01:48:f1:5d:98:1c:5f:68:5b:a3:a8:38:9e:39:c4: c7:64:a5:b1:52:7f:02:64:eb:af:d4:ca:4e:4a:3b:87:88:8d: 74:22:b8:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUxMjE4MjM1ODA2WhcNMjUxMjI1MjM1ODA2WjAYMRYwFAYD VQQDDA02OTQ0OTUwZS0yYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjdd1p9SlqrgTtq3qyKesofeXC/xCloc2govgVQUzSwQKf1m++ciOP319j5W K4iyBdaSm4FDZ1xAavzcLy//TcOlA4qOtL/JL/YvDrN2beWNYa1LPCFopnar11kz Xev4rfDKWF/K8mJ0TtC33kp5zKh+C6SSm4yTxD3mUBPI75SkSUnIDoImtQh1jAgl RnG4OGdUXD34XhplXqgTeCwZfI0Uyxqd3SS8V9QRgyfz2VMn5K7Uf2UfzDr46svC eLNHE2BD6KPJL3NvoFNDzJBdcQLBjNkQM9T+5So95heAZFtDSKqojHv1ZyYtYXFQ GIH2SYwWLR8X//tvBrjLCsqLtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK+GuHD 3VQlFdFQ6t2fdQ06Ql7EMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHFHMY8vKo2OGrVb/r+qHpa1BgfCYfpsQyhUEubPCa9V9TgZe10E78 OXYxKrEFkhPuNK5fgjifnr/hkqY3saurl2uDpniHulYJu/hmJhn1qPIhcFqSQp8U tBKYz8zbn5zj60g0uxp8ka/gBUPhGDz9BPhtRu1htyYqqEeshP1TJjTlHBHiZQKq bxRwLoN+EWQ0DD4FC0/bbZLfuSbO2GljdArTcSSvaT91HiZ5zbfLIx9NtoIA9sLh HHVKAwfpADPE2gdUZuIL0Ms6vnJremtn9wGeyx/Ir9XC/a4BSPFdmBxfaFujqDie OcTHZKWxUn8CZOuv1MpOSjuHiI10Irhh -----END CERTIFICATE-----Generated at Sat Dec 20 23:58:56 2025 by rpki-client