This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft File: ihuLzV7XzXIsUwBJjkqTZdBGo04.mft (raw, json) Hash identifier: MBW8f24z1kaxlEQxYeHB6zTPSDJnZQkY6J6cz4jPqnY= Subject key identifier: 97:C0:03:93:04:31:EA:6D:A6:1F:80:0C:82:A3:5B:FB:C9:55:D0:72 Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E Certificate issuer: /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft Manifest number: 08B4 Signing time: Sat 20 Dec 2025 19:55:00 +0000 Manifest this update: Sat 20 Dec 2025 19:54:59 +0000 Manifest next update: Sat 27 Dec 2025 19:54:59 +0000 Files and hashes: 1: ihuLzV7XzXIsUwBJjkqTZdBGo04.crl (hash: z88xtHIghq+NQWjFosyTnICv/h+uqQPZX8GxnHEpQqY=) 2: 22C5D8D6B5D411F08AD0FB40C4F9AE02.roa (hash: pKtqMGKpIrqHakiwAGLWGm0afCAyap0SV9Av201+Rdc=) 3: CDC4A66EB5D311F097B6F31AC4F9AE02.roa (hash: 0U2UzSeX+8X8p0vtFdtnhJYB/u+V+ECpwF6fLjeJjJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01C6, serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Validity Not Before: Dec 20 19:54:59 2025 GMT Not After : Dec 27 19:54:59 2025 GMT Subject: CN=6946ff13-0c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:48:b0:17:9e:32:36:17:9d:5c:e2:8c:06: 6b:e3:5c:52:12:1c:42:65:ae:5f:a1:96:94:48:8d: 53:12:c9:e8:92:a3:a2:56:c0:d8:c5:cf:e9:b2:50: 55:c6:c8:69:60:b1:39:13:2b:db:d1:69:23:74:2a: 28:b9:7e:f9:95:f9:07:27:7a:f8:28:e2:83:38:20: 71:d1:a7:67:e0:75:f3:46:87:ae:d1:64:e0:ed:c3: 4b:3d:62:3a:6e:6f:08:d8:b1:bd:a7:d7:50:86:f6: eb:cd:d1:ff:e7:0b:76:53:f5:20:66:87:fe:98:b3: a9:0d:2e:84:3c:17:b5:a7:23:6a:ea:2a:d9:b9:d8: 1d:5d:ae:22:a2:57:9f:c1:59:ca:a2:10:d1:3d:28: 5d:e9:3f:53:59:23:ed:be:5e:84:e5:81:52:a2:77: 9d:9d:9b:a4:80:43:3d:6f:30:5e:fe:e5:64:f5:39: e0:37:cd:21:64:b6:e9:7c:70:99:1d:b2:27:77:ba: d9:fd:ee:5d:0b:79:11:f4:f1:fb:97:94:31:0c:9c: f9:59:49:5d:16:04:46:65:42:33:13:d6:e3:3d:6f: 1b:1b:6d:de:96:aa:95:ce:0a:76:8c:78:d1:10:f1: 9d:7f:f2:5f:7b:8d:b6:0c:3f:dc:7d:42:c6:63:78: 6d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C0:03:93:04:31:EA:6D:A6:1F:80:0C:82:A3:5B:FB:C9:55:D0:72 X509v3 Authority Key Identifier: keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:cc:38:aa:fb:bb:b0:f8:1d:38:56:a9:31:82:db:76:6b:0e: 97:f7:aa:a1:f4:a9:b0:bc:38:d6:47:73:c3:5e:04:8c:c6:35: fa:61:a7:95:04:d7:23:de:9d:58:14:85:39:2e:92:36:a6:fc: 6c:16:1f:57:56:62:bb:4b:e3:5e:f1:cb:c6:ba:4f:0c:cb:54: af:29:cc:7a:94:9b:e7:ea:b9:14:e0:da:f7:cd:cd:fa:db:b7: e6:cb:11:42:7c:20:e4:92:06:0a:36:9d:d9:50:d9:7c:c9:28: aa:6c:fe:c0:53:74:ea:ac:d0:d2:51:cd:fc:71:7e:d6:75:af: f9:f2:79:08:f7:d0:49:59:69:57:06:6a:7f:0e:37:2b:59:e4: af:2b:98:37:88:17:61:04:5a:5d:77:18:37:5f:75:37:fa:ab: 00:45:4e:a6:bc:ba:f4:f4:2c:39:aa:3d:cd:ce:89:0c:5c:b5: a6:29:0e:23:28:ac:2b:4e:3a:79:61:10:67:78:b1:b3:d8:88: 76:0f:3b:c5:25:cc:9b:88:c0:42:b8:0d:25:07:b0:f7:fe:a0: bb:dd:cb:a1:96:a1:be:33:19:c1:b9:d1:97:d3:18:0e:61:f6: 1e:fa:7b:a6:a5:69:5d:9c:db:57:e5:98:7d:0f:9f:42:3f:51: 36:26:01:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQzYxMTAvBgNVBAUTKDhBMUI4QkNENUVEN0NENzIyQzUzMDA0OThFNEE5MzY1 RDA0NkEzNEUwHhcNMjUxMjIwMTk1NDU5WhcNMjUxMjI3MTk1NDU5WjAYMRYwFAYD VQQDDA02OTQ2ZmYxMy0wYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpVIsBeeMjYXnVzijAZr41xSEhxCZa5foZaUSI1TEsnokqOiVsDYxc/pslBV xshpYLE5Eyvb0WkjdCoouX75lfkHJ3r4KOKDOCBx0adn4HXzRoeu0WTg7cNLPWI6 bm8I2LG9p9dQhvbrzdH/5wt2U/UgZof+mLOpDS6EPBe1pyNq6irZudgdXa4iolef wVnKohDRPShd6T9TWSPtvl6E5YFSonednZukgEM9bzBe/uVk9TngN80hZLbpfHCZ HbInd7rZ/e5dC3kR9PH7l5QxDJz5WUldFgRGZUIzE9bjPW8bG23elqqVzgp2jHjR EPGdf/Jfe422DD/cfULGY3htywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfAA5ME Meptph+ADIKjW/vJVdByMB8GA1UdIwQYMBaAFIobi81e181yLFMASY5Kk2XQRqNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFDNi80OTFDOENFNkND OTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpYSXNVd0JKamtxVFpkQkdv MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lodUx6VjdYelhJc1V3Qkpqa3FUWmRCR28wNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFDNi80OTFDOENFNkNDOTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpY SXNVd0JKamtxVFpkQkdvMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0zDiq+7uw+B04Vqkxgtt2aw6X96qh9KmwvDjWR3PDXgSMxjX6YaeV BNcj3p1YFIU5LpI2pvxsFh9XVmK7S+Ne8cvGuk8My1SvKcx6lJvn6rkU4Nr3zc36 27fmyxFCfCDkkgYKNp3ZUNl8ySiqbP7AU3TqrNDSUc38cX7Wda/58nkI99BJWWlX Bmp/DjcrWeSvK5g3iBdhBFpddxg3X3U3+qsARU6mvLr09Cw5qj3NzokMXLWmKQ4j KKwrTjp5YRBneLGz2Ih2DzvFJcybiMBCuA0lB7D3/qC73cuhlqG+MxnBudGX0xgO YfYe+numpWldnNtX5Zh9D59CP1E2JgHS -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:56 2025 by rpki-client