This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json) Hash identifier: Rc7771CM+SsvO1Nr9xXiXGsQ6j6DmF9JM/5qJhJhjRE= Subject key identifier: 03:29:7D:5A:82:E7:0C:02:F2:2E:C3:E5:37:BE:AE:C7:A2:CE:58:F2 Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft Manifest number: 067A Signing time: Wed 24 Dec 2025 21:49:53 +0000 Manifest this update: Wed 24 Dec 2025 21:49:52 +0000 Manifest next update: Wed 31 Dec 2025 21:49:52 +0000 Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: UbFCOzkEqKq6dJGO4bjmQebb5Hbgo9Qiray1Nt0qyrw=) 2: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: oAqC82kEWq2BnUC7wyI1OnAbQ4JABjG40uWiB/vTfHk=) 3: 93E364468FC111EFA7695485C4F9AE02.roa (hash: ehyygnCRmM9eZFq5wp/iMEtE7yHHT0e0DPinhJkSnaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 21:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B5E, serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Validity Not Before: Dec 24 21:49:52 2025 GMT Not After : Dec 31 21:49:52 2025 GMT Subject: CN=694c6001-9613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:0c:b7:e7:b6:43:3c:36:be:7d:b2:c3:20: 61:1a:01:04:60:b3:43:40:02:92:20:97:7f:64:67: 4e:b1:25:5f:f1:03:bd:d3:b2:e2:24:72:13:d8:90: bb:85:48:49:86:45:96:e0:d7:7d:61:7a:56:02:9c: f9:f0:e8:2d:28:de:98:0e:e5:eb:7b:76:cd:16:e4: f3:a0:27:09:b6:23:c8:0d:cd:d8:f0:76:3f:ad:6e: 77:3e:14:62:86:93:a2:c6:00:63:fa:09:5a:eb:cd: 31:95:a0:99:c9:af:e7:84:5d:ae:29:35:77:49:6a: e0:42:32:73:5c:45:33:c8:3d:3e:35:61:3f:4f:54: 21:30:33:b5:19:c5:55:43:52:54:a1:a7:7d:a8:1d: b3:57:c4:43:e1:53:6a:02:ae:1c:9d:c1:6b:0c:67: dc:b1:b6:60:a6:5c:eb:19:ae:29:c8:3b:e7:f9:50: 64:30:72:36:88:4f:f1:e6:14:51:7f:43:fd:5a:78: 8b:d4:0c:98:f4:b0:8b:18:85:f2:5c:d8:98:14:f2: 9e:1d:14:23:e7:bb:b7:9d:7b:ce:63:e9:e2:26:d1: 48:86:16:69:2b:a1:1a:5d:1c:0b:3e:c9:59:9a:ab: e3:c8:e4:20:5e:21:a9:7c:88:67:a7:db:13:7c:4c: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:29:7D:5A:82:E7:0C:02:F2:2E:C3:E5:37:BE:AE:C7:A2:CE:58:F2 X509v3 Authority Key Identifier: keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:97:f3:17:33:bf:4c:7a:fc:9b:04:a0:93:3b:62:c8:78:cc: a6:99:85:72:4d:1c:4d:a9:d2:80:f9:2e:b7:af:28:c2:4b:cb: 27:54:03:3a:05:c2:70:78:7b:f1:85:54:40:89:52:3e:0c:93: cd:2f:6c:4e:d5:46:62:52:c6:e4:2f:3e:34:10:73:65:b6:17: 64:cf:99:b1:68:31:c5:52:42:38:35:a5:30:37:30:c5:38:c8: b8:e2:06:b0:f9:27:43:01:b6:02:37:bc:c5:d2:1a:7a:89:60: 56:46:47:d8:0e:f2:fd:27:6b:5e:9a:85:a2:8d:88:45:13:27: 01:01:ef:9a:9b:7c:90:70:31:01:bb:f2:81:4f:78:6c:09:de: 27:40:b7:b3:61:05:05:e2:13:eb:80:cc:a7:f8:cd:66:59:fd: f8:08:7c:5b:5a:ed:a8:66:a0:d5:52:32:33:69:30:5a:c6:9d: 6c:b9:86:3a:ef:8f:25:69:ab:db:82:27:ce:65:9a:40:3c:09: b1:eb:73:2f:19:95:cc:4a:bb:28:83:d7:1d:5c:b6:48:b6:ae: 8b:f4:f0:e9:1d:30:52:00:3f:95:b2:21:52:2b:12:80:6b:ec: bc:07:01:2f:fe:d7:05:2b:e4:55:ea:0a:76:45:01:ca:ad:9a: 5e:7f:78:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNUUxMTAvBgNVBAUTKEZBMzU2MDI5RkM3NzJBNUI0MzI2OUMzMTZBRDY4NUM0 QkI1QTY1NkQwHhcNMjUxMjI0MjE0OTUyWhcNMjUxMjMxMjE0OTUyWjAYMRYwFAYD VQQDDA02OTRjNjAwMS05NjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZ4Mt+e2Qzw2vn2ywyBhGgEEYLNDQAKSIJd/ZGdOsSVf8QO907LiJHIT2JC7 hUhJhkWW4Nd9YXpWApz58OgtKN6YDuXre3bNFuTzoCcJtiPIDc3Y8HY/rW53PhRi hpOixgBj+gla680xlaCZya/nhF2uKTV3SWrgQjJzXEUzyD0+NWE/T1QhMDO1GcVV Q1JUoad9qB2zV8RD4VNqAq4cncFrDGfcsbZgplzrGa4pyDvn+VBkMHI2iE/x5hRR f0P9WniL1AyY9LCLGIXyXNiYFPKeHRQj57u3nXvOY+niJtFIhhZpK6EaXRwLPslZ mqvjyOQgXiGpfIhnp9sTfEyg3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMpfVqC 5wwC8i7D5Te+rseizljyMB8GA1UdIwQYMBaAFPo1YCn8dypbQyacMWrWhcS7WmVt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI1RS9GNThDNTY5NEE2 RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0tsdERKcHd4YXRhRnhMdGFa VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1qVmdLZngzS2x0REpwd3hhdGFGeEx0YVpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI1RS9GNThDNTY5NEE2RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0ts dERKcHd4YXRhRnhMdGFaVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvl/MXM79MevybBKCTO2LIeMymmYVyTRxNqdKA+S63ryjCS8snVAM6 BcJweHvxhVRAiVI+DJPNL2xO1UZiUsbkLz40EHNlthdkz5mxaDHFUkI4NaUwNzDF OMi44gaw+SdDAbYCN7zF0hp6iWBWRkfYDvL9J2temoWijYhFEycBAe+am3yQcDEB u/KBT3hsCd4nQLezYQUF4hPrgMyn+M1mWf34CHxbWu2oZqDVUjIzaTBaxp1suYY6 748laavbgifOZZpAPAmx63MvGZXMSrsog9cdXLZItq6L9PDpHTBSAD+VsiFSKxKA a+y8BwEv/tcFK+RV6gp2RQHKrZpef3g8 -----END CERTIFICATE-----Generated at Thu Dec 25 11:00:52 2025 by rpki-client