This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: BwmVHdfYB1RU2zdW+fVcueU9gZQuP9qSa7Rk4cd69Tc= Subject key identifier: 5E:CE:F7:27:2C:44:BB:07:5A:51:36:A4:E6:8C:B7:B9:9C:54:41:C7 Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: 6B Signing time: Mon 29 Dec 2025 05:59:03 +0000 Manifest this update: Mon 29 Dec 2025 05:59:03 +0000 Manifest next update: Mon 05 Jan 2026 05:59:03 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: kR+KxZmKrjeEK2UMl46UcgRSuOO7X7obWjR1PwvfUGE=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: NGudT5ffYxQaLDuPITb3DSyOtSWSbubIZoe2i4vUMeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 05:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Dec 29 05:59:03 2025 GMT Not After : Jan 5 05:59:03 2026 GMT Subject: CN=695218a7-7aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:bb:bd:6e:51:dd:2d:18:73:e1:9c:70:e9: 45:3f:97:f6:5e:5d:94:c7:72:d0:ea:e3:67:01:84: fc:d2:5b:9c:d8:be:d5:42:ba:05:9d:53:5f:c1:e4: be:8c:bb:3e:66:f1:c4:05:b5:70:03:cf:14:41:74: 54:60:a6:be:f6:31:bc:e8:75:2a:b5:fe:66:83:2d: a6:65:ea:9e:2a:6c:7e:eb:6e:6c:9b:8c:35:f7:f2: c1:2e:ad:a4:dd:6a:3c:fc:be:d0:62:0e:69:9c:e9: 7b:20:6b:9c:1a:fc:43:44:3d:65:9c:fd:6b:e1:53: 5a:07:2b:59:cb:17:9f:b4:4d:56:95:05:be:09:1f: a8:34:73:99:e1:63:13:4d:fd:79:55:4f:46:1a:19: 8d:ef:36:66:9e:93:d4:5f:71:1f:ec:0d:1d:bf:5e: 00:92:b9:19:09:5a:da:e2:b2:68:04:d0:b2:15:08: b4:f7:64:63:ad:0e:cf:24:17:93:e7:0b:4e:f0:c3: 10:b8:e5:6b:6e:e2:39:bc:02:f0:4b:0e:84:50:f1: c8:8b:89:b6:1c:b3:ec:87:57:a1:49:ed:aa:20:2a: f2:a6:3f:b6:96:30:0c:28:de:0b:4d:5a:0a:7f:6b: 28:11:b1:fb:a8:9d:f3:fd:37:5a:28:0f:26:4b:94: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CE:F7:27:2C:44:BB:07:5A:51:36:A4:E6:8C:B7:B9:9C:54:41:C7 X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e3:28:2a:c8:16:c4:82:7d:99:08:0a:e1:f9:cc:0b:b7:d0: 56:ef:fe:6d:83:bd:8c:91:47:bd:a7:0a:47:ed:8d:85:95:4b: e9:c2:86:d3:d8:37:e3:ae:21:53:e7:df:85:76:2b:4b:99:e9: 5d:fb:e0:12:fb:2d:78:fc:2c:1e:2b:a5:7c:27:86:51:36:b0: 26:44:16:cd:c7:54:0e:b4:26:37:90:9a:66:4e:aa:a2:f9:75: 4b:58:d8:c5:40:af:0d:ce:78:cd:cc:cf:e3:13:24:f1:41:66: 22:67:83:dd:14:48:5b:4b:15:f7:a8:d1:9d:72:c7:e4:61:6d: 0b:18:3e:29:eb:7b:07:f2:6c:52:1f:c4:da:21:7e:8b:73:09: e8:b4:4b:93:60:67:64:8e:a0:9e:8c:8f:c7:2e:fd:43:79:20: c9:c9:f5:71:9a:ed:cd:e9:e8:62:c6:c6:5f:64:a3:3d:1b:96: 9f:a6:81:04:18:b3:e1:8a:d5:2e:fd:3f:83:fd:a0:07:79:0e: 94:23:eb:e0:5d:8b:85:49:4e:85:cf:6b:6e:6b:13:e9:db:ac: 80:7a:b9:82:56:cb:12:74:c1:3d:9b:80:e0:92:1b:53:96:af: 9b:ef:1b:75:49:25:0f:8b:72:ac:40:9b:54:f6:e4:5a:04:cd: 26:b9:99:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkZDQjExMC8GA1UEBRMoMjIyNDI5NDQxNkI4NDY1NzA2NTU0QjUyQ0JDNTZGNDQ5 QkM0NkM4OTAeFw0yNTEyMjkwNTU5MDNaFw0yNjAxMDUwNTU5MDNaMBgxFjAUBgNV BAMMDTY5NTIxOGE3LTdhYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClQru9blHdLRhz4Zxw6UU/l/ZeXZTHctDq42cBhPzSW5zYvtVCugWdU1/B5L6M uz5m8cQFtXADzxRBdFRgpr72MbzodSq1/maDLaZl6p4qbH7rbmybjDX38sEuraTd ajz8vtBiDmmc6Xsga5wa/ENEPWWc/WvhU1oHK1nLF5+0TVaVBb4JH6g0c5nhYxNN /XlVT0YaGY3vNmaek9RfcR/sDR2/XgCSuRkJWtrismgE0LIVCLT3ZGOtDs8kF5Pn C07wwxC45Wtu4jm8AvBLDoRQ8ciLibYcs+yHV6FJ7aogKvKmP7aWMAwo3gtNWgp/ aygRsfuonfP9N1ooDyZLlDorAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXs73JyxE uwdaUTak5oy3uZxUQccwHwYDVR0jBBgwFoAUIiQpRBa4RlcGVUtSy8VvRJvEbIkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRkNCL0VEMEYxMUY0NDIw NTExRjBCRjdBODcxMUM0RjlBRTAyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWlRcFJCYTRSbGNHVlV0U3k4VnZSSnZFYklrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RkNCL0VEMEYxMUY0NDIwNTExRjBCRjdBODcxMUM0RjlBRTAyL0lpUXBSQmE0Umxj R1ZVdFN5OFZ2Ukp2RWJJay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHPjKCrIFsSCfZkICuH5zAu30Fbv/m2DvYyRR72nCkftjYWVS+nChtPY N+OuIVPn34V2K0uZ6V374BL7LXj8LB4rpXwnhlE2sCZEFs3HVA60JjeQmmZOqqL5 dUtY2MVArw3OeM3Mz+MTJPFBZiJng90USFtLFfeo0Z1yx+RhbQsYPinrewfybFIf xNohfotzCei0S5NgZ2SOoJ6Mj8cu/UN5IMnJ9XGa7c3p6GLGxl9koz0blp+mgQQY s+GK1S79P4P9oAd5DpQj6+Bdi4VJToXPa25rE+nbrIB6uYJWyxJ0wT2bgOCSG1OW r5vvG3VJJQ+LcqxAm1T25FoEzSa5maM= -----END CERTIFICATE-----Generated at Tue Dec 30 11:31:24 2025 by rpki-client