This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: AUYXI8RR6Nm3xhRUP5hs66Tw5ljHBGtZC4enh6Qg0q4= Subject key identifier: C7:30:7A:9F:CD:05:F9:99:90:31:96:C6:EB:F6:14:6D:A6:EC:D2:67 Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: 016C Signing time: Mon 29 Dec 2025 03:05:15 +0000 Manifest this update: Mon 29 Dec 2025 03:05:14 +0000 Manifest next update: Mon 05 Jan 2026 03:05:14 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: 1sp4rB1K9VXmYIiB+nVSRuh47jUmefEHxpfY3tUGO4I=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: GqeiAvi13dSKvLM+fHPrB98afI5mQF/DJh5CG60rs0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 03:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: Dec 29 03:05:14 2025 GMT Not After : Jan 5 03:05:14 2026 GMT Subject: CN=6951efea-44ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:47:57:62:54:b5:31:ab:cf:66:33:bd:f5:ad: fc:ba:ae:11:8b:c9:a2:b7:84:e4:89:98:2a:0e:26: f1:47:6d:16:0f:c4:41:9a:1c:8a:bf:aa:c6:83:9e: 80:c8:b9:a9:df:d3:f1:b2:1a:55:1d:9e:73:ed:1a: 6e:69:0b:95:40:dc:9c:23:c8:83:c2:74:f5:8f:43: 5a:57:eb:80:4b:91:13:73:32:d8:df:69:5f:5e:8d: 38:89:7c:5b:31:b4:b8:cb:da:6f:0c:e9:83:2a:58: c1:3c:20:74:cf:5a:8d:c7:11:a2:e2:98:82:7c:c4: d4:b2:e7:a9:3e:8a:0b:34:57:e8:b1:28:ca:c4:85: 46:f0:e9:94:31:4e:c8:80:62:87:b0:94:7f:70:43: 62:16:d7:1f:5c:73:df:93:6f:8c:33:74:a0:82:60: 92:d2:40:6d:f4:02:7c:9d:ea:8b:5c:5a:ce:1b:0c: 9e:0c:21:73:ef:74:2c:bf:e6:0d:51:f3:6f:85:1d: f1:12:eb:d2:ec:e0:8f:a3:f6:76:09:75:18:20:07: fb:48:f9:dc:4f:88:ed:16:1c:7d:61:12:f7:2c:24: 9c:2f:9d:e2:bb:cc:6d:f5:00:f2:b5:8a:99:01:8f: e6:31:69:03:24:65:6d:07:99:f7:3a:10:8f:12:ca: a2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:30:7A:9F:CD:05:F9:99:90:31:96:C6:EB:F6:14:6D:A6:EC:D2:67 X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ee:6e:21:f3:d9:c8:b3:f9:e2:75:d9:9e:a7:fe:13:84:d3: ae:7b:62:ad:43:a2:58:74:d0:fe:05:29:43:98:58:3b:df:25: fd:b7:71:88:0b:09:a5:06:c4:1e:bd:70:19:81:78:a4:87:35: 6e:ec:e9:c4:29:26:c0:25:78:6e:81:59:d7:bb:5b:1b:a5:68: 02:02:a0:68:9a:33:cb:12:1d:72:46:54:0b:45:64:50:9d:a2: cb:74:cd:6a:bb:eb:ff:a1:fb:c5:a8:da:fa:da:a0:8b:fc:64: 29:32:18:e8:4e:f5:a5:f3:1b:a9:c8:24:de:d1:a0:76:4b:c7: ef:c6:a6:88:26:f9:72:5a:ee:c8:2d:a6:34:d8:ba:b7:d4:97: 9e:07:38:8c:47:11:39:3a:26:d7:3c:ab:f7:37:cf:cd:45:f6: ea:3a:5e:13:21:a4:12:34:4a:e4:9d:96:31:9f:0e:51:2b:b5: f0:c2:da:1f:4f:88:94:85:80:c9:f6:c5:9e:60:d1:7a:d3:ad: 6a:d0:c6:22:77:64:fa:c7:7b:8a:25:e7:33:11:22:55:75:91: 8b:9e:65:f9:ff:57:b3:40:cc:e6:31:f6:a5:74:fc:61:33:c0: 4b:16:23:d8:73:54:57:f7:1b:a7:21:64:8f:bd:38:6c:bd:45: 76:8f:62:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjUxMjI5MDMwNTE0WhcNMjYwMTA1MDMwNTE0WjAYMRYwFAYD VQQDDA02OTUxZWZlYS00NGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EdXYlS1MavPZjO99a38uq4Ri8mit4TkiZgqDibxR20WD8RBmhyKv6rGg56A yLmp39PxshpVHZ5z7RpuaQuVQNycI8iDwnT1j0NaV+uAS5ETczLY32lfXo04iXxb MbS4y9pvDOmDKljBPCB0z1qNxxGi4piCfMTUsuepPooLNFfosSjKxIVG8OmUMU7I gGKHsJR/cENiFtcfXHPfk2+MM3SggmCS0kBt9AJ8neqLXFrOGwyeDCFz73Qsv+YN UfNvhR3xEuvS7OCPo/Z2CXUYIAf7SPncT4jtFhx9YRL3LCScL53iu8xt9QDytYqZ AY/mMWkDJGVtB5n3OhCPEsqiJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcwep/N BfmZkDGWxuv2FG2m7NJnMB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV7m4h89nIs/niddmep/4ThNOue2KtQ6JYdND+BSlDmFg73yX9t3GI CwmlBsQevXAZgXikhzVu7OnEKSbAJXhugVnXu1sbpWgCAqBomjPLEh1yRlQLRWRQ naLLdM1qu+v/ofvFqNr62qCL/GQpMhjoTvWl8xupyCTe0aB2S8fvxqaIJvlyWu7I LaY02Lq31JeeBziMRxE5OibXPKv3N8/NRfbqOl4TIaQSNErknZYxnw5RK7Xwwtof T4iUhYDJ9sWeYNF6061q0MYid2T6x3uKJeczESJVdZGLnmX5/1ezQMzmMfaldPxh M8BLFiPYc1RX9xunIWSPvThsvUV2j2Id -----END CERTIFICATE-----Generated at Mon Dec 29 08:49:16 2025 by rpki-client