This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json) Hash identifier: gwciWwLckJJB+oPdWcGdUEy9tuiySBBxW3WzwDt1cHg= Subject key identifier: 0F:68:9D:ED:53:E3:22:68:73:AD:9A:EB:57:08:B5:60:00:01:03:85 Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 27F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft Manifest number: 279E Signing time: Mon 22 Dec 2025 15:30:00 +0000 Manifest this update: Mon 22 Dec 2025 15:30:00 +0000 Manifest next update: Mon 29 Dec 2025 15:30:00 +0000 Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: 3yUDgVSVTgK2DEtOfP36Mj5oKGI0XjtSb1Rn2Gj4b3w=) 2: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: 2jCysRc/ncxmWEacRP7Buw4ItBzXogCKyOpUtSSf4Ks=) 3: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: H54eXqaAth/AANz7/DMFwtH0FIhN3UXJcrmsK7fhMXQ=) 4: AE887848662211E7BC7E2636C4F9AE02.roa (hash: 4dAtwCU1fi5Bo6SCfNalDzxKHkBj/DREl9uromRy6Rs=) 5: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: SILTusquGoHpNsMBJynofIsPOUuJK+mXoArSIu6+szM=) 6: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: oG5ygd/penwWyXmZZkzYKDAIiWuJVz9Qy2pJuzyaYxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10228 (0x27f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Dec 22 15:30:00 2025 GMT Not After : Dec 29 15:30:00 2025 GMT Subject: CN=694963f8-ca66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:60:77:d5:10:14:cf:d3:0e:a2:ef:34:e4: 6c:95:07:70:e8:cd:4c:ef:94:0c:ba:07:d6:ec:43: 21:c6:34:b6:10:e0:68:df:f3:80:05:7f:0f:7a:4c: 44:ed:73:89:48:65:32:ca:4a:13:69:a1:78:00:79: 49:03:6b:f7:e4:12:14:86:9e:a7:1b:22:9a:51:f3: 20:6c:7b:ad:77:a4:28:83:80:2d:17:0e:99:71:1f: a0:d3:c4:71:04:93:b9:fb:9d:ec:61:74:52:3c:ab: 6b:08:0e:29:8f:99:4d:ff:30:5b:70:c7:d9:b1:53: 32:9f:84:be:8c:94:57:16:e2:6a:05:a5:9a:31:99: 63:80:9b:f0:63:3d:bb:a4:43:de:43:eb:b3:23:4b: c4:52:ee:23:6d:49:1c:0e:a7:74:5c:70:cc:a2:74: a9:b3:7e:5f:eb:1f:d9:81:d1:8c:f7:2e:21:4b:d6: 14:7e:16:04:22:0e:0f:3d:f5:44:d3:13:23:fc:e3: 3d:20:f6:df:2f:4c:38:cb:f7:60:e2:25:de:cc:8e: f5:e0:20:f5:f7:f5:b1:68:8e:6c:4d:c5:79:61:47: 0c:96:72:8f:fe:90:33:0b:cd:30:04:91:1c:c1:c7: e1:cb:75:68:dd:a6:ac:69:cd:e4:4d:bd:2a:22:b5: ee:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:68:9D:ED:53:E3:22:68:73:AD:9A:EB:57:08:B5:60:00:01:03:85 X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:84:51:5c:89:4a:4c:37:69:c6:a4:46:53:94:60:8c:b6:d6: 41:9c:b4:43:45:cd:65:86:7b:4c:c5:c9:ba:98:13:df:12:3e: a7:da:13:ca:b3:08:cb:b9:9a:91:2e:66:75:86:c2:c9:52:38: 79:b9:cb:24:e9:d7:47:fd:3b:af:2d:ac:29:81:35:85:b5:1e: 3c:6d:b7:45:a7:32:b7:90:2e:b5:7d:78:74:08:d9:8f:f9:57: 92:28:dc:ce:29:fc:4e:14:81:08:ae:95:72:c9:3a:f0:21:ed: 16:58:c7:c1:3e:d3:ad:83:9c:1e:cf:e9:be:92:b3:51:e5:37: 24:a0:54:cd:38:b7:04:81:fa:01:7f:c4:7e:0c:b3:e0:9d:d9: 49:c1:db:ed:06:7d:2b:1b:bd:10:a5:83:62:3d:dd:0c:e1:86: 56:e4:c3:ea:4f:69:c4:ba:74:49:22:15:8f:89:5e:9b:82:4b: 5e:6e:bc:1f:0c:0e:f2:3e:59:39:8a:ff:76:1e:03:dd:92:22: 63:06:0d:f9:f1:65:d2:c3:8f:35:d9:25:83:16:85:79:d5:0f: 4e:e9:c7:bd:47:1b:31:55:f4:46:7a:aa:67:ff:a9:4b:67:80: 92:eb:5c:25:c9:6f:4d:c6:6e:71:ac:88:bb:64:9d:12:b7:9c: 5e:42:f0:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUxMjIyMTUzMDAwWhcNMjUxMjI5MTUzMDAwWjAYMRYwFAYD VQQDDA02OTQ5NjNmOC1jYTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdFgd9UQFM/TDqLvNORslQdw6M1M75QMugfW7EMhxjS2EOBo3/OABX8PekxE 7XOJSGUyykoTaaF4AHlJA2v35BIUhp6nGyKaUfMgbHutd6Qog4AtFw6ZcR+g08Rx BJO5+53sYXRSPKtrCA4pj5lN/zBbcMfZsVMyn4S+jJRXFuJqBaWaMZljgJvwYz27 pEPeQ+uzI0vEUu4jbUkcDqd0XHDMonSps35f6x/ZgdGM9y4hS9YUfhYEIg4PPfVE 0xMj/OM9IPbfL0w4y/dg4iXezI714CD19/WxaI5sTcV5YUcMlnKP/pAzC80wBJEc wcfhy3Vo3aasac3kTb0qIrXueQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9one1T 4yJoc62a61cItWAAAQOFMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG Y25WWXhNZFcyeURmZ0h6WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAohFFciUpMN2nGpEZTlGCMttZBnLRDRc1lhntMxcm6mBPfEj6n2hPK swjLuZqRLmZ1hsLJUjh5ucsk6ddH/TuvLawpgTWFtR48bbdFpzK3kC61fXh0CNmP +VeSKNzOKfxOFIEIrpVyyTrwIe0WWMfBPtOtg5wez+m+krNR5TckoFTNOLcEgfoB f8R+DLPgndlJwdvtBn0rG70QpYNiPd0M4YZW5MPqT2nEunRJIhWPiV6bgktebrwf DA7yPlk5iv92HgPdkiJjBg358WXSw4812SWDFoV51Q9O6ce9RxsxVfRGeqpn/6lL Z4CS61wlyW9Nxm5xrIi7ZJ0St5xeQvB3 -----END CERTIFICATE-----Generated at Wed Dec 24 00:32:09 2025 by rpki-client