This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft File: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json) Hash identifier: Ugc5zpKJoWyQmaKccS5sOS6LD+ryqu5Q3yjAp/a4Bx8= Subject key identifier: 99:F4:00:89:F8:24:3A:39:A8:54:E1:81:7A:0F:45:A2:1D:5F:F1:91 Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A Certificate issuer: /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft Manifest number: 0122 Signing time: Fri 19 Dec 2025 03:53:42 +0000 Manifest this update: Fri 19 Dec 2025 03:53:42 +0000 Manifest next update: Fri 26 Dec 2025 03:53:42 +0000 Files and hashes: 1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: 8uQz6jL5FHBAm8LAr06DxP3G2vjKYT682V6APeo8G+w=) 2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: Ha/cGz3EuqzsAq4mNf1LJHzYtP6EU2XABOfv8TEGk30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Validity Not Before: Dec 19 03:53:42 2025 GMT Not After : Dec 26 03:53:42 2025 GMT Subject: CN=6944cc46-b00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:78:24:d5:e2:d8:6d:e1:df:84:52:89:d8:8d: d5:84:08:3a:f6:90:0a:97:52:ef:d7:a4:6b:2a:fb: 49:bf:09:88:e8:5a:9d:fc:e1:b8:f4:12:2f:72:30: 97:82:f3:21:86:44:0c:3f:10:e3:a9:25:b4:ab:d8: 41:3b:dc:a2:ce:49:8e:b5:7c:ae:21:23:49:25:a9: 37:30:8e:c5:b2:eb:ce:72:fb:58:13:97:6e:3c:e1: 12:8c:45:cf:bc:4b:95:3c:7a:40:3c:9c:33:21:fc: 68:41:04:76:77:b6:86:4e:bf:e3:8b:99:59:4c:5d: 03:79:d9:52:41:63:f9:54:9d:82:e1:d6:04:95:17: 7a:24:f8:a2:8c:0a:18:90:0a:f0:1e:6f:32:8f:11: b4:42:56:63:e8:91:ea:9f:2c:1b:98:ec:83:06:43: af:ac:55:a8:1e:cc:e8:eb:3d:84:4b:07:a2:e2:58: dd:a2:9b:4c:d0:e4:23:75:b0:98:4e:b7:a3:31:dc: b8:f2:84:ef:b8:e8:33:17:9b:5b:4d:41:b6:28:f5: 57:65:4b:9c:40:99:ad:1b:81:1c:41:cf:9c:c2:a4: a7:5b:4c:f9:cb:60:9b:32:5a:67:30:91:0a:95:f4: 1a:f5:9f:8c:55:33:ad:6d:5b:a2:61:b9:98:54:6b: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F4:00:89:F8:24:3A:39:A8:54:E1:81:7A:0F:45:A2:1D:5F:F1:91 X509v3 Authority Key Identifier: keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:73:91:75:4a:f5:b2:28:ef:79:e7:30:8e:a7:4c:65:1c:ea: af:ec:0d:ee:08:65:fa:bd:aa:7f:dd:0b:fb:9d:06:5c:e1:b6: 6c:6a:d2:6b:ba:5f:1b:2d:97:bf:05:16:ff:38:fb:03:84:4f: 75:cc:9e:f4:31:4f:57:ee:37:b9:df:6d:74:9f:77:f2:02:55: e0:57:8a:b2:be:ef:64:47:34:e0:c1:8f:66:df:70:62:b4:22: 54:13:c4:94:17:9e:98:a4:0a:a5:03:18:36:80:9a:3e:35:d4: 89:ec:ad:e5:a1:a0:3a:7b:4a:58:65:67:ca:63:51:f2:a2:34: d3:00:fb:6e:f7:08:32:70:67:cc:e1:0b:52:12:5f:f1:f5:29: f4:7f:06:ee:35:02:e9:2c:a6:0a:5b:ad:b0:e5:2a:89:58:5c: 00:9e:ae:57:68:2f:84:2c:d5:6a:77:a1:a0:f0:65:97:99:f0: 79:e9:35:d6:f6:91:11:10:b7:78:ba:2c:a4:50:6a:da:8b:00: e9:34:dc:c5:5c:f1:ec:08:39:f6:78:ce:68:d5:30:45:57:0f: 8f:a2:06:94:3a:c7:be:65:9f:54:bc:bb:88:86:b8:14:f4:bf: 48:c2:64:93:a4:c2:66:20:8e:63:e7:ab:a7:24:d9:91:d1:e8: e9:a4:92:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDIyNEU2NjhGNDA1NjAxQ0FEQzMzOTEzODNGQ0E5NkRG OTQ2OEQ5NUEwHhcNMjUxMjE5MDM1MzQyWhcNMjUxMjI2MDM1MzQyWjAYMRYwFAYD VQQDDA02OTQ0Y2M0Ni1iMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXgk1eLYbeHfhFKJ2I3VhAg69pAKl1Lv16RrKvtJvwmI6Fqd/OG49BIvcjCX gvMhhkQMPxDjqSW0q9hBO9yizkmOtXyuISNJJak3MI7FsuvOcvtYE5duPOESjEXP vEuVPHpAPJwzIfxoQQR2d7aGTr/ji5lZTF0DedlSQWP5VJ2C4dYElRd6JPiijAoY kArwHm8yjxG0QlZj6JHqnywbmOyDBkOvrFWoHszo6z2ESwei4ljdoptM0OQjdbCY TrejMdy48oTvuOgzF5tbTUG2KPVXZUucQJmtG4EcQc+cwqSnW0z5y2CbMlpnMJEK lfQa9Z+MVTOtbVuiYbmYVGv8dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJn0AIn4 JDo5qFThgXoPRaIdX/GRMB8GA1UdIwQYMBaAFCJOZo9AVgHK3DOROD/Klt+UaNla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy85OUM3NDg4ODI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0FjcmNNNUU0UDhxVzM1Um8y Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy85OUM3NDg4ODI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0Fj cmNNNUU0UDhxVzM1Um8yVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1c5F1SvWyKO955zCOp0xlHOqv7A3uCGX6vap/3Qv7nQZc4bZsatJr ul8bLZe/BRb/OPsDhE91zJ70MU9X7je53210n3fyAlXgV4qyvu9kRzTgwY9m33Bi tCJUE8SUF56YpAqlAxg2gJo+NdSJ7K3loaA6e0pYZWfKY1HyojTTAPtu9wgycGfM 4QtSEl/x9Sn0fwbuNQLpLKYKW62w5SqJWFwAnq5XaC+ELNVqd6Gg8GWXmfB56TXW 9pERELd4uiykUGraiwDpNNzFXPHsCDn2eM5o1TBFVw+PogaUOse+ZZ9UvLuIhrgU 9L9IwmSTpMJmII5j56unJNmR0ejppJIs -----END CERTIFICATE-----Generated at Sat Dec 20 18:39:14 2025 by rpki-client