This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: zkHmEQ4cP244Qsik0aIgPHEIP/s8hMAn2WtlIcCzR6g= Subject key identifier: F3:0F:79:BB:C7:FB:23:1C:5B:22:17:67:ED:1B:A2:E8:E2:7B:36:F3 Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: C5 Signing time: Wed 31 Dec 2025 17:22:53 +0000 Manifest this update: Wed 31 Dec 2025 17:22:52 +0000 Manifest next update: Wed 07 Jan 2026 17:22:52 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: pRKEajyTy+MY3J0v2RSAxiqT8x0sdAvFi/29ua0Pz8k=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: GGtGV78DXnx+758QjjUFzDYEJZn1i4ItJjSZC8rC92A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 17:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Dec 31 17:22:52 2025 GMT Not After : Jan 7 17:22:52 2026 GMT Subject: CN=69555bec-de29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:51:f4:26:ec:d0:08:3d:46:1a:b5:40:a1: 3b:58:9e:ef:8d:f7:d6:c6:77:3a:aa:11:c5:3b:56: 00:62:75:ea:98:f7:db:47:1b:57:44:7a:34:85:0a: aa:8f:56:c7:38:40:91:a0:7e:73:34:2b:5f:21:61: 54:cb:55:41:57:56:af:79:fa:be:95:81:a4:2a:db: a2:87:d9:e2:8b:fc:58:be:4d:c3:8c:a4:07:d3:b4: 75:94:bb:2d:bb:ab:20:52:a0:ef:47:23:29:62:ef: a9:04:0b:be:d6:fb:d8:8b:7c:f1:dc:20:9c:37:45: c0:03:6c:64:db:f4:e5:33:4f:32:e4:29:99:2b:e3: d3:bb:71:e8:76:69:0a:34:1a:1c:d3:be:69:df:19: db:73:3d:81:4f:64:2b:56:0a:c7:7f:f1:99:60:56: 02:c7:83:39:a4:bc:c8:23:e2:61:22:78:66:65:4b: 21:b1:aa:9c:a1:4c:b9:3e:2c:1b:12:93:61:df:ee: 9c:98:d6:82:c8:db:da:60:40:ea:bd:65:cb:35:7e: 55:17:bc:da:27:50:05:52:4a:c0:7d:89:7d:51:9b: 94:be:b2:c3:20:ba:74:1f:25:39:0d:f9:31:b8:f5: 3f:c0:95:1c:80:ee:b4:57:83:7f:d7:c8:2d:f1:b5: 76:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0F:79:BB:C7:FB:23:1C:5B:22:17:67:ED:1B:A2:E8:E2:7B:36:F3 X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:a2:6e:83:12:5d:b9:bb:72:4f:9d:b1:6b:32:b4:e1:85:c3: 11:52:4b:48:16:09:e7:34:3b:c8:8a:a2:98:5a:c3:00:3a:c1: 5b:32:3f:9c:3d:13:2a:95:94:82:fc:89:31:dc:6d:2c:60:81: a5:dc:9a:78:63:44:0f:8f:ff:0e:56:3e:32:77:02:a2:43:2b: c4:81:f0:60:12:5c:f2:cd:7e:bb:a5:0f:99:fb:83:46:4f:8f: 2e:13:d8:75:c3:05:4f:9a:93:bb:ba:81:6f:68:32:40:19:e1: ff:71:36:1a:46:26:6a:14:e7:38:f7:c4:95:a7:45:5e:8c:f3: 4f:b4:bf:1c:87:63:f7:03:98:c2:b5:f7:42:9c:cd:3e:d2:c1: a7:e5:ac:7e:6b:5f:79:ec:ee:62:80:18:9b:fa:f7:6b:b0:0e: 78:ce:2c:46:27:05:fc:7d:04:e8:f1:b6:20:4f:44:a4:8d:87: 78:3b:cf:9c:9d:54:77:0c:53:84:09:a5:de:4a:ae:9c:12:f1: 88:83:9d:22:c3:65:c0:bc:f4:4e:ed:d8:0d:36:bc:9c:af:a2: 55:41:c7:84:b6:e3:16:46:a4:e6:35:e7:08:d5:dd:74:2f:b4: e5:10:ce:8e:51:a3:9c:aa:95:3a:04:aa:1f:d1:c7:58:39:ec: 25:2b:64:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKDIyQzdFQzNDRDlFRDRDNTBFODk0QTExQkNENzBEMDMx MENENUY4NTkwHhcNMjUxMjMxMTcyMjUyWhcNMjYwMTA3MTcyMjUyWjAYMRYwFAYD VQQDDA02OTU1NWJlYy1kZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02ZR9Cbs0Ag9Rhq1QKE7WJ7vjffWxnc6qhHFO1YAYnXqmPfbRxtXRHo0hQqq j1bHOECRoH5zNCtfIWFUy1VBV1avefq+lYGkKtuih9nii/xYvk3DjKQH07R1lLst u6sgUqDvRyMpYu+pBAu+1vvYi3zx3CCcN0XAA2xk2/TlM08y5CmZK+PTu3HodmkK NBoc075p3xnbcz2BT2QrVgrHf/GZYFYCx4M5pLzII+JhInhmZUshsaqcoUy5Piwb EpNh3+6cmNaCyNvaYEDqvWXLNX5VF7zaJ1AFUkrAfYl9UZuUvrLDILp0HyU5Dfkx uPU/wJUcgO60V4N/18gt8bV2ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMPebvH +yMcWyIXZ+0boujiezbzMB8GA1UdIwQYMBaAFCLH7DzZ7UxQ6JShG81w0DEM1fhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS9DOTQ0N0ZGMEJF RjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRGRG9sS0VielhEUU1RelYt RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS9DOTQ0N0ZGMEJFRjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRG RG9sS0VielhEUU1RelYtRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlom6DEl25u3JPnbFrMrThhcMRUktIFgnnNDvIiqKYWsMAOsFbMj+c PRMqlZSC/Ikx3G0sYIGl3Jp4Y0QPj/8OVj4ydwKiQyvEgfBgElzyzX67pQ+Z+4NG T48uE9h1wwVPmpO7uoFvaDJAGeH/cTYaRiZqFOc498SVp0VejPNPtL8ch2P3A5jC tfdCnM0+0sGn5ax+a1957O5igBib+vdrsA54zixGJwX8fQTo8bYgT0SkjYd4O8+c nVR3DFOECaXeSq6cEvGIg50iw2XAvPRO7dgNNrycr6JVQceEtuMWRqTmNecI1d10 L7TlEM6OUaOcqpU6BKof0cdYOewlK2St -----END CERTIFICATE-----Generated at Thu Jan 1 19:10:01 2026 by rpki-client