This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft File: iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json) Hash identifier: k+gTpNHh5nKYXG9T800fXikc4GuiIAhuTQyZeZmMlrk= Subject key identifier: 39:AD:B8:4B:F8:CD:D9:E2:35:A2:CF:43:5E:31:81:70:02:EE:F7:DC Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft Manifest number: 022C Signing time: Fri 19 Dec 2025 01:16:35 +0000 Manifest this update: Fri 19 Dec 2025 01:16:35 +0000 Manifest next update: Fri 26 Dec 2025 01:16:35 +0000 Files and hashes: 1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: UzoNnhILAlkNVpkZfjHpitrwG3eRz6vVDPwKIldsns8=) 2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: hyVOWGrjCzsgaB5t6a964tLdF9KDC2L1JSe9IYMG8n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Validity Not Before: Dec 19 01:16:35 2025 GMT Not After : Dec 26 01:16:35 2025 GMT Subject: CN=6944a773-e517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a6:1d:ae:c4:b7:71:09:65:51:8a:a2:da:7e: 1c:4a:3c:71:4d:7e:0c:83:3f:42:34:77:5d:8c:25: c6:f8:b7:9b:b9:34:08:b4:e9:55:09:00:74:71:ff: 7c:17:8a:fa:d8:d2:12:02:1f:db:5e:54:25:a4:8a: 4f:e7:7d:04:f3:b6:d1:99:a6:60:28:09:3e:90:2e: 6c:03:c3:56:0d:8b:83:38:b6:fd:e0:88:ea:c0:5f: 79:6a:99:c9:51:cd:9a:ed:a8:0b:92:79:12:c2:a9: 98:eb:59:85:41:f0:9f:de:17:45:66:9b:b9:62:af: 2f:7d:aa:7f:98:56:e3:a6:a5:bf:4d:78:22:84:16: ca:d1:4b:54:c5:2b:a4:e6:f5:7b:c0:c4:99:d8:00: c9:73:25:96:15:4c:f5:88:6d:96:93:fa:4a:af:c4: 72:34:6f:76:55:0c:d4:cc:ad:05:a3:09:c6:04:95: 43:c9:d8:6a:74:56:5f:3b:65:6e:f7:a2:e6:a8:85: 7e:32:1b:05:83:63:2b:87:db:93:5f:dc:3c:2b:42: f5:56:fd:d7:f2:1e:90:5d:68:3e:65:1f:68:23:c9: 01:96:a2:02:c6:ab:9d:3c:2a:40:6e:96:e1:f0:35: be:1a:6e:6f:92:4d:97:a8:c5:6f:83:81:fc:09:d8: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AD:B8:4B:F8:CD:D9:E2:35:A2:CF:43:5E:31:81:70:02:EE:F7:DC X509v3 Authority Key Identifier: keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:59:b3:2a:33:2c:b4:df:18:f3:e6:e4:1c:bd:c2:78:63:2d: 59:63:ea:ff:e7:c0:7f:16:7b:23:53:61:47:5c:10:eb:dd:84: 1b:3c:5b:43:f3:b8:85:da:1f:65:ae:86:59:4e:50:f4:13:dd: bb:b3:3e:55:fe:85:5f:24:0d:cd:40:2f:3b:b1:81:af:2f:8a: 4e:8c:82:94:4b:61:3f:69:17:f2:a4:3d:a7:c7:da:67:2d:66: 6d:b3:a1:5e:a7:fb:72:d6:11:9a:79:d9:8a:ad:27:fb:fe:60: 5a:d3:e4:63:98:dc:ae:db:91:33:dd:c0:50:ea:77:18:1d:bd: 0e:60:dc:54:c8:78:10:af:f0:1c:da:74:62:fc:c2:2a:bf:f8: 09:21:39:ec:dd:d8:5a:70:53:2f:9e:28:35:4f:b4:90:c1:b7: bc:f3:9a:cb:1f:59:c5:ce:bc:8f:e1:e1:43:b6:91:ec:08:70: c9:e8:fa:85:9d:f1:78:a1:5a:92:a2:28:9a:50:73:65:ce:e9: 20:ba:2c:0c:39:27:06:1b:d9:8c:b6:16:d9:47:ed:30:a3:c8: fe:b3:30:0c:0e:bb:6c:85:23:39:95:bd:01:ed:9c:22:24:55: 3f:5e:2a:e4:6f:e6:57:56:37:cc:2c:94:98:0d:59:2e:fb:63: ee:88:87:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDMkQxMTAvBgNVBAUTKDhCM0YyM0VCNUZFMjhGNTgwNUUzRDI3Qjk1MzdCQkFG QTdDREY5NDYwHhcNMjUxMjE5MDExNjM1WhcNMjUxMjI2MDExNjM1WjAYMRYwFAYD VQQDDA02OTQ0YTc3My1lNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKYdrsS3cQllUYqi2n4cSjxxTX4Mgz9CNHddjCXG+LebuTQItOlVCQB0cf98 F4r62NISAh/bXlQlpIpP530E87bRmaZgKAk+kC5sA8NWDYuDOLb94IjqwF95apnJ Uc2a7agLknkSwqmY61mFQfCf3hdFZpu5Yq8vfap/mFbjpqW/TXgihBbK0UtUxSuk 5vV7wMSZ2ADJcyWWFUz1iG2Wk/pKr8RyNG92VQzUzK0FownGBJVDydhqdFZfO2Vu 96LmqIV+MhsFg2Mrh9uTX9w8K0L1Vv3X8h6QXWg+ZR9oI8kBlqICxqudPCpAbpbh 8DW+Gm5vkk2XqMVvg4H8CdhrCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmtuEv4 zdniNaLPQ14xgXAC7vfcMB8GA1UdIwQYMBaAFIs/I+tf4o9YBePSe5U3u6+nzflG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkMyRC9DMzcyMTMyQzhB MDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWoxZ0Y0OUo3bFRlN3I2Zk4t VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l6OGo2MV9pajFnRjQ5SjdsVGU3cjZmTi1VWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkMyRC9DMzcyMTMyQzhBMDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWox Z0Y0OUo3bFRlN3I2Zk4tVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnWbMqMyy03xjz5uQcvcJ4Yy1ZY+r/58B/FnsjU2FHXBDr3YQbPFtD 87iF2h9lroZZTlD0E927sz5V/oVfJA3NQC87sYGvL4pOjIKUS2E/aRfypD2nx9pn LWZts6Fep/ty1hGaedmKrSf7/mBa0+RjmNyu25Ez3cBQ6ncYHb0OYNxUyHgQr/Ac 2nRi/MIqv/gJITns3dhacFMvnig1T7SQwbe885rLH1nFzryP4eFDtpHsCHDJ6PqF nfF4oVqSoiiaUHNlzukguiwMOScGG9mMthbZR+0wo8j+szAMDrtshSM5lb0B7Zwi JFU/Xirkb+ZXVjfMLJSYDVku+2PuiIeX -----END CERTIFICATE-----Generated at Fri Dec 19 19:22:30 2025 by rpki-client