This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json) Hash identifier: NNndJbhuhvOyXupYX+8ruqYthX0mvIxO6YM7U08JvRI= Subject key identifier: 3D:46:FF:87:8C:FA:89:A4:9B:D1:15:CB:1D:8D:07:76:92:EE:06:34 Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft Manifest number: 067C Signing time: Sun 28 Dec 2025 21:47:14 +0000 Manifest this update: Sun 28 Dec 2025 21:47:14 +0000 Manifest next update: Sun 04 Jan 2026 21:47:14 +0000 Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: z47eKXnp2IjyVnRvdUUp1fFFNJCVJZd9TaQ3QciI3BU=) 2: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: oAqC82kEWq2BnUC7wyI1OnAbQ4JABjG40uWiB/vTfHk=) 3: 93E364468FC111EFA7695485C4F9AE02.roa (hash: ehyygnCRmM9eZFq5wp/iMEtE7yHHT0e0DPinhJkSnaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 21:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Validity Not Before: Dec 28 21:47:14 2025 GMT Not After : Jan 4 21:47:14 2026 GMT Subject: CN=6951a562-f134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:70:aa:d7:81:57:e4:42:0e:e9:4d:33:73: fe:14:9a:31:51:2b:01:57:b9:c9:0e:6e:53:5f:79: d5:0e:41:a1:45:16:0e:6a:2d:87:33:15:43:25:be: 20:43:dd:26:2c:2c:56:9d:e7:08:4b:3a:61:01:ef: 1d:8c:4c:05:83:8e:01:07:97:6f:32:cb:0e:5e:a9: f4:50:9e:42:b4:16:c1:6c:c9:d1:75:b7:81:54:6a: 66:03:3d:a1:85:2a:dc:5d:09:41:ba:f8:1d:51:cf: 42:db:75:b9:06:d1:90:30:c4:e1:f9:4d:28:d6:47: 6b:1b:05:b4:85:85:33:2b:a7:71:ad:82:04:02:13: 21:5f:fe:0c:a5:1a:ca:f2:ba:d1:41:09:72:37:e9: 57:91:cd:58:bb:52:17:3d:8e:ae:bf:73:4d:5d:85: a4:c1:14:78:0c:04:41:e4:b2:9c:50:1c:eb:34:e9: 65:96:ea:07:d8:51:df:8a:ae:da:0d:a5:7e:d1:9e: 87:fb:56:19:d8:3f:cd:04:c0:e3:64:82:f7:95:50: f1:78:a4:e8:97:6c:da:c5:11:21:87:7f:78:b1:ee: 87:67:b9:0b:07:39:8d:3f:d4:18:28:51:08:62:ae: d7:30:5c:9b:4b:90:fc:4a:b5:a6:99:b3:0d:b7:92: 66:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:46:FF:87:8C:FA:89:A4:9B:D1:15:CB:1D:8D:07:76:92:EE:06:34 X509v3 Authority Key Identifier: keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:be:84:43:f8:cc:4c:ea:45:4c:df:cb:d0:55:1f:68:c6:3b: 27:de:94:a3:40:74:a2:34:52:47:73:fa:28:de:bb:c8:1a:40: 72:13:3e:1f:85:74:e8:df:59:96:a3:06:fa:98:81:7c:46:52: 39:41:1b:9c:46:4f:d1:84:93:28:42:e4:4d:e5:48:49:be:ff: 8c:39:79:63:94:d6:63:d6:ec:c7:0f:fc:ec:9b:3d:bc:1c:d9: 53:00:11:f1:9a:14:bc:d6:d1:31:35:0e:35:42:31:68:77:a5: ee:13:6e:54:fc:45:e9:40:d6:a1:ab:c9:b2:3c:71:1e:9b:ba: 9a:f5:d3:a9:d3:26:b4:a6:ad:b6:52:82:51:91:65:48:53:ba: 24:11:2d:2c:02:80:7c:10:9e:d6:c0:dd:a7:ad:69:55:9f:22: 04:52:aa:48:c6:a8:74:07:ca:e7:b4:66:b0:aa:7f:a7:93:e2: 6e:83:53:60:3e:ae:07:e0:57:e4:77:3d:92:72:13:2b:5e:16: c0:3f:b2:55:14:6b:75:ed:14:d8:70:ff:88:00:f0:b2:15:2d: 2d:8a:fb:31:85:f6:95:51:75:0d:b8:42:ef:a7:3c:28:a2:c1: 48:9d:79:20:c3:ac:50:92:02:45:e7:a6:57:bf:13:d5:d5:07: 7a:18:9e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNUUxMTAvBgNVBAUTKEZBMzU2MDI5RkM3NzJBNUI0MzI2OUMzMTZBRDY4NUM0 QkI1QTY1NkQwHhcNMjUxMjI4MjE0NzE0WhcNMjYwMTA0MjE0NzE0WjAYMRYwFAYD VQQDDA02OTUxYTU2Mi1mMTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqERwqteBV+RCDulNM3P+FJoxUSsBV7nJDm5TX3nVDkGhRRYOai2HMxVDJb4g Q90mLCxWnecISzphAe8djEwFg44BB5dvMssOXqn0UJ5CtBbBbMnRdbeBVGpmAz2h hSrcXQlBuvgdUc9C23W5BtGQMMTh+U0o1kdrGwW0hYUzK6dxrYIEAhMhX/4MpRrK 8rrRQQlyN+lXkc1Yu1IXPY6uv3NNXYWkwRR4DARB5LKcUBzrNOllluoH2FHfiq7a DaV+0Z6H+1YZ2D/NBMDjZIL3lVDxeKTol2zaxREhh394se6HZ7kLBzmNP9QYKFEI Yq7XMFybS5D8SrWmmbMNt5JmpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1G/4eM +omkm9EVyx2NB3aS7gY0MB8GA1UdIwQYMBaAFPo1YCn8dypbQyacMWrWhcS7WmVt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI1RS9GNThDNTY5NEE2 RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0tsdERKcHd4YXRhRnhMdGFa VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1qVmdLZngzS2x0REpwd3hhdGFGeEx0YVpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI1RS9GNThDNTY5NEE2RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0ts dERKcHd4YXRhRnhMdGFaVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3voRD+MxM6kVM38vQVR9oxjsn3pSjQHSiNFJHc/oo3rvIGkByEz4f hXTo31mWowb6mIF8RlI5QRucRk/RhJMoQuRN5UhJvv+MOXljlNZj1uzHD/zsmz28 HNlTABHxmhS81tExNQ41QjFod6XuE25U/EXpQNahq8myPHEem7qa9dOp0ya0pq22 UoJRkWVIU7okES0sAoB8EJ7WwN2nrWlVnyIEUqpIxqh0B8rntGawqn+nk+Jug1Ng Pq4H4Ffkdz2SchMrXhbAP7JVFGt17RTYcP+IAPCyFS0tivsxhfaVUXUNuELvpzwo osFInXkgw6xQkgJF56ZXvxPV1Qd6GJ5y -----END CERTIFICATE-----Generated at Tue Dec 30 09:07:56 2025 by rpki-client