This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: 0rKAWSMjgo7FQFgRNezu+NH9Rbda720FtnBOFJOVpQo= Subject key identifier: 3B:33:AB:E1:E8:C5:CB:B2:54:6E:D0:43:FA:47:37:95:A2:42:6F:E9 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 08CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 088F Signing time: Thu 18 Dec 2025 20:11:58 +0000 Manifest this update: Thu 18 Dec 2025 20:11:57 +0000 Manifest next update: Thu 25 Dec 2025 20:11:57 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: cv0fkCK/Hw0vf5g7qIacYrvHDAk7cbI5tJS8aR7oGr0=) 2: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: 4dlrQ4m4GuqrlwQC8/clahOIGGqO7yOvH8v7wChtYp8=) 3: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: d+m4wtrot8DpRxhdQ6Ribq/qs/RNt/ooPnFIs7N6xZg=) 4: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: ifnttSikDir1yImvAFVipioa7skYYnhRDTcV+wTBhrA=) 5: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: YVtST4vMUYXukdvRwVNc/YgxZwNEf2C/1tkRXtme8vo=) 6: 46D8E036BED211F093382E71C4F9AE02.roa (hash: eINr8bBJLexDH0uRI9+njk6x3SxCqw4nJv16fxVj6+4=) 7: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: DYR7hTrI+N8bTdN4wmisSUlD2zvzUkj32q6n8M3PxAo=) 8: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: NIZyKmCCRM9ECKj6ukBywbK33SdgVkLHapOUhLqLTmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2254 (0x8ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Dec 18 20:11:57 2025 GMT Not After : Dec 25 20:11:57 2025 GMT Subject: CN=6944600e-3fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:53:68:c2:6a:fc:df:c9:38:ed:85:9c:b2: c2:80:58:71:26:b8:db:59:dd:67:5d:b7:8d:93:b9: a9:1f:da:dc:0c:52:78:cf:52:a3:94:ad:71:bd:34: 2d:f2:bf:d8:a1:2f:88:51:55:be:ca:e7:24:bd:75: 0c:9b:b8:11:13:61:d2:a4:91:7c:dd:30:d2:25:d0: d2:dd:4f:8a:ff:86:a0:f1:1c:50:05:e6:fe:ec:56: 69:de:12:4a:10:e8:4f:0d:bd:7d:b6:57:e7:2c:11: 79:82:ee:e9:db:6f:a4:ee:96:55:b8:3a:52:50:cd: e1:14:1e:77:79:b9:09:f4:23:34:13:c4:6d:20:af: cd:1a:e1:bf:55:a1:3e:22:33:16:99:2b:76:4e:3d: 4e:2f:4f:91:97:14:78:72:a2:4b:01:9b:04:cc:c3: 54:29:ec:83:d6:4b:bf:5e:7e:b9:7c:b4:0f:f7:66: f7:a9:b3:71:82:ec:ac:7e:1b:85:f4:0f:42:3d:85: 64:0f:4b:c3:cb:9a:42:bf:ca:1c:f0:de:98:79:f8: ae:73:43:89:fd:e0:f1:15:cd:e4:ba:ce:c4:19:1a: 1e:0f:40:7b:99:5b:75:bd:a5:20:7f:45:9d:57:b5: 25:ab:cf:88:d8:dd:c7:0b:a4:d7:13:37:4c:d3:e4: af:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:33:AB:E1:E8:C5:CB:B2:54:6E:D0:43:FA:47:37:95:A2:42:6F:E9 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:91:ac:25:bc:68:bc:29:0c:bb:90:37:b4:5c:7e:96:0c:41: 60:d2:f1:41:24:ab:7a:96:d9:4a:53:2a:8a:c2:d3:6e:0b:da: a0:ef:92:c6:3e:12:1e:4b:a1:63:e6:2d:88:87:3f:b4:b6:d8: b6:0d:29:1d:b9:09:a6:63:d6:ab:a6:ef:22:6a:12:d6:8b:ae: 76:8d:b7:59:9f:6e:2a:68:53:ae:a0:d3:ed:8a:bb:88:83:ff: f0:39:00:c3:12:c0:48:9a:2b:6b:09:18:81:6f:9f:c1:2a:ac: 1d:2c:d9:e1:57:6d:a4:d2:86:cb:4e:61:47:ac:94:92:39:ad: a5:bb:79:b9:c5:2a:1c:92:a7:b0:7a:48:df:42:1c:99:0e:85: 9f:53:ce:75:04:a8:05:23:28:97:ee:9c:9d:76:3a:de:0b:59: b0:9a:f0:33:93:9c:93:b4:cd:e7:cf:00:e6:69:40:36:23:ff: 44:46:07:89:d0:29:9b:4a:7f:00:f3:a7:f7:1e:ce:63:7b:09: 6c:5d:d3:df:d3:a2:6c:e5:c2:03:86:c2:e7:d6:24:20:05:75: 0c:b2:73:7a:07:7e:e1:7f:ed:51:3f:49:69:3b:71:26:02:56: 1c:ef:cc:dc:9f:57:6a:49:ce:20:4e:4e:20:5b:59:62:4f:ea: fe:96:86:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjUxMjE4MjAxMTU3WhcNMjUxMjI1MjAxMTU3WjAYMRYwFAYD VQQDDA02OTQ0NjAwZS0zZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09pTaMJq/N/JOO2FnLLCgFhxJrjbWd1nXbeNk7mpH9rcDFJ4z1KjlK1xvTQt 8r/YoS+IUVW+yuckvXUMm7gRE2HSpJF83TDSJdDS3U+K/4ag8RxQBeb+7FZp3hJK EOhPDb19tlfnLBF5gu7p22+k7pZVuDpSUM3hFB53ebkJ9CM0E8RtIK/NGuG/VaE+ IjMWmSt2Tj1OL0+RlxR4cqJLAZsEzMNUKeyD1ku/Xn65fLQP92b3qbNxguysfhuF 9A9CPYVkD0vDy5pCv8oc8N6Yefiuc0OJ/eDxFc3kus7EGRoeD0B7mVt1vaUgf0Wd V7Ulq8+I2N3HC6TXEzdM0+SveQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDszq+Ho xcuyVG7QQ/pHN5WiQm/pMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHkawlvGi8KQy7kDe0XH6WDEFg0vFBJKt6ltlKUyqKwtNuC9qg75LG PhIeS6Fj5i2Ihz+0tti2DSkduQmmY9arpu8iahLWi652jbdZn24qaFOuoNPtiruI g//wOQDDEsBImitrCRiBb5/BKqwdLNnhV22k0obLTmFHrJSSOa2lu3m5xSockqew ekjfQhyZDoWfU851BKgFIyiX7pyddjreC1mwmvAzk5yTtM3nzwDmaUA2I/9ERgeJ 0CmbSn8A86f3Hs5jewlsXdPf06Js5cIDhsLn1iQgBXUMsnN6B37hf+1RP0lpO3Em AlYc78zcn1dqSc4gTk4gW1liT+r+lobR -----END CERTIFICATE-----Generated at Sat Dec 20 01:55:35 2025 by rpki-client