This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft File: iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json) Hash identifier: 0/5LReJhDWXgsp6a5kzfV79/xkCygLscrbjNgQez6NI= Subject key identifier: A7:D0:96:E6:C1:EA:5F:3A:9D:05:FB:0E:02:F3:05:5E:7B:C1:B3:C0 Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft Manifest number: 49 Signing time: Sun 21 Dec 2025 06:25:45 +0000 Manifest this update: Sun 21 Dec 2025 06:25:44 +0000 Manifest next update: Sun 28 Dec 2025 06:25:44 +0000 Files and hashes: 1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: EeAJBHF0qVDYo1XCgaU//tMLtdDxIKwMQ8niH5vlwDE=) 2: 399480C4ACD011F08828DD7BC4F9AE02.roa (hash: Mnd71Ffk/psJgLiSkChk25qvX5F/utFXFDACcylb68Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Validity Not Before: Dec 21 06:25:44 2025 GMT Not After : Dec 28 06:25:44 2025 GMT Subject: CN=694792e9-f6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:e3:86:d1:8e:61:b8:2d:a9:64:45:3b:c0: 3f:36:fd:5f:a8:6f:57:c4:79:78:2a:71:09:c0:55: b2:cb:46:29:db:52:1d:d9:9a:bb:d5:39:fc:fb:8e: 07:92:ee:77:71:0b:c4:d2:98:f5:89:04:78:7a:ef: 9f:dc:e5:6e:d9:ec:42:d7:91:58:cc:f3:32:70:9e: 3d:28:ee:c7:d2:ad:86:a0:33:ab:a6:dd:95:c4:5c: 27:ad:0c:ad:b6:c4:b1:ee:f5:7c:4c:4f:18:6a:09: ac:3b:c4:e8:fe:f5:7d:df:bc:d9:6f:84:20:3d:03: 87:30:72:35:ac:f6:23:97:24:75:d2:3f:f8:90:db: 65:12:3b:ed:50:fa:75:30:93:9d:aa:62:db:d2:c6: e6:a6:4b:f2:71:9f:a1:3c:a2:1e:4b:52:16:e9:05: a3:a5:aa:01:4c:d8:17:e1:84:45:72:da:5e:09:11: 84:b3:99:ab:f9:5a:9f:0f:6b:06:b8:70:3b:88:27: ae:83:ab:cf:17:f4:87:f3:af:f0:6f:b2:a0:65:31: 0d:08:83:63:7a:1a:b6:99:88:9b:f1:db:31:13:3c: f2:a2:3b:8b:c6:ff:ba:a7:8e:80:74:8a:8f:f3:0d: 93:43:0b:e6:22:e7:9b:3b:bf:5f:df:08:8f:d4:32: 61:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D0:96:E6:C1:EA:5F:3A:9D:05:FB:0E:02:F3:05:5E:7B:C1:B3:C0 X509v3 Authority Key Identifier: keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:57:f5:5b:a3:dd:98:1c:cb:45:f0:ac:f5:d9:ee:e6:8a:34: 7b:3f:78:e2:1e:9f:a5:69:26:08:d3:6f:0c:6d:e1:e9:67:fb: 66:9f:06:a3:cc:52:32:bf:2f:50:32:62:3d:15:9c:64:f0:b3: a8:3c:96:2e:43:51:29:fb:5a:6c:06:53:8a:81:e4:97:94:de: 40:98:dc:97:e5:c1:e2:2d:65:35:79:7a:72:07:9d:30:96:c1: db:c9:25:3a:60:7f:74:cc:a0:d5:a4:2c:8b:ee:bf:22:10:62: 81:86:e3:3a:98:cb:8a:3d:da:20:0c:bd:8c:48:03:51:e1:e0: 33:f8:bf:8a:e2:c1:91:df:d3:3f:1f:9b:57:8b:b2:2f:4d:64: 20:59:a3:c8:9b:57:83:ad:b0:30:c7:7c:a6:c6:65:68:63:a4: a9:cd:e0:df:fa:b3:eb:67:b5:6f:18:81:3f:24:a2:45:3c:bc: 55:d6:62:6b:0e:ba:d3:53:cc:1d:1d:48:4a:28:80:fa:8d:c0: 16:39:e9:e2:91:f7:07:7f:32:53:42:8d:8a:93:f5:b2:7a:74: c9:e1:3d:03:76:48:76:b2:2d:a9:14:ad:27:73:76:c4:3b:8c: 17:79:f7:2d:97:b1:f5:4c:86:1f:b8:3f:92:28:4b:0a:2f:84: e3:6e:12:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDBFMDExMC8GA1UEBRMoODk3MDc3QjcxRjJDNUFFRERFNkMxREQ0OTU0N0RDQzk5 NTJDREFCRTAeFw0yNTEyMjEwNjI1NDRaFw0yNTEyMjgwNjI1NDRaMBgxFjAUBgNV BAMMDTY5NDc5MmU5LWY2YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPyeOG0Y5huC2pZEU7wD82/V+ob1fEeXgqcQnAVbLLRinbUh3ZmrvVOfz7jgeS 7ndxC8TSmPWJBHh675/c5W7Z7ELXkVjM8zJwnj0o7sfSrYagM6um3ZXEXCetDK22 xLHu9XxMTxhqCaw7xOj+9X3fvNlvhCA9A4cwcjWs9iOXJHXSP/iQ22USO+1Q+nUw k52qYtvSxuamS/Jxn6E8oh5LUhbpBaOlqgFM2BfhhEVy2l4JEYSzmav5Wp8Pawa4 cDuIJ66Dq88X9Ifzr/BvsqBlMQ0Ig2N6GraZiJvx2zETPPKiO4vG/7qnjoB0io/z DZNDC+Yi55s7v1/fCI/UMmFBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp9CW5sHq XzqdBfsOAvMFXnvBs8AwHwYDVR0jBBgwFoAUiXB3tx8sWu3ebB3UlUfcyZUs2r4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0MEUwLzNGQkI1RTA0N0I1 MzExRjA5QjU0ODQ1RkM0RjlBRTAyL2lYQjN0eDhzV3UzZWJCM1VsVWZjeVpVczJy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhCM3R4OHNXdTNlYkIzVWxVZmN5WlVzMnI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 MEUwLzNGQkI1RTA0N0I1MzExRjA5QjU0ODQ1RkM0RjlBRTAyL2lYQjN0eDhzV3Uz ZWJCM1VsVWZjeVpVczJyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRX9Vuj3Zgcy0XwrPXZ7uaKNHs/eOIen6VpJgjTbwxt4eln+2afBqPM UjK/L1AyYj0VnGTws6g8li5DUSn7WmwGU4qB5JeU3kCY3JflweItZTV5enIHnTCW wdvJJTpgf3TMoNWkLIvuvyIQYoGG4zqYy4o92iAMvYxIA1Hh4DP4v4riwZHf0z8f m1eLsi9NZCBZo8ibV4OtsDDHfKbGZWhjpKnN4N/6s+tntW8YgT8kokU8vFXWYmsO utNTzB0dSEoogPqNwBY56eKR9wd/MlNCjYqT9bJ6dMnhPQN2SHayLakUrSdzdsQ7 jBd59y2XsfVMhh+4P5IoSwovhONuEis= -----END CERTIFICATE-----Generated at Sun Dec 21 18:33:12 2025 by rpki-client