This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft File: JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json) Hash identifier: Ex5RwBez6WK/g3PUXRkda0uKr9HVi/JoSiEDjyx/PZ0= Subject key identifier: 10:5C:23:4A:E5:59:A9:3F:F7:F2:D8:CF:E7:9A:DC:AF:0C:F2:06:B7 Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft Manifest number: 011C Signing time: Mon 29 Dec 2025 03:54:45 +0000 Manifest this update: Mon 29 Dec 2025 03:54:44 +0000 Manifest next update: Mon 05 Jan 2026 03:54:44 +0000 Files and hashes: 1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: 5C9QITlqMHXl8qqDqjVxCPMOst/tGH0P5wpATPFAnRk=) 2: 1381259CCA3811F0B890C35CC4F9AE02.roa (hash: 2AIbsNw95CGEUCI+hzWilcZK30P6hAcxR4zxP/RQzJ4=) 3: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: dFNn3jO43SdP+6Z3qx4suVU/JHAZ4DSHsOgrTOhwaUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 03:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Validity Not Before: Dec 29 03:54:44 2025 GMT Not After : Jan 5 03:54:44 2026 GMT Subject: CN=6951fb85-da32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:71:0b:a0:b4:86:bd:0d:29:a3:22:f0:a9: 29:b0:a9:00:41:0b:16:5e:34:2a:61:69:d6:85:5d: a2:b3:93:4a:fb:de:17:93:7b:b0:69:9f:f6:bc:87: b9:ec:a1:6f:f6:d9:6a:4b:ca:a3:d1:a3:08:2a:f0: ce:aa:96:72:6f:86:19:1c:62:1f:a2:ca:70:3a:b6: 3c:3d:05:1b:5f:1d:0f:8e:85:77:0d:be:6c:f5:43: d6:dc:da:68:e3:91:e2:a2:ca:e7:a2:e8:72:73:56: cf:69:6f:33:bc:a4:74:2b:98:ff:0e:21:a9:a1:ee: b7:82:cf:00:77:cf:1c:3a:35:12:77:c7:cf:87:da: e2:ce:e5:15:77:d3:ae:6a:ce:4d:d0:83:ee:ec:07: 45:de:36:00:1e:36:4c:e5:c8:3f:25:03:4a:f1:e4: cb:66:ee:66:b6:8f:86:0c:c5:89:2d:36:42:90:65: 48:4e:a6:4c:95:3e:81:4e:d6:54:ac:94:55:51:cc: c8:b1:5c:ee:e3:17:46:8b:29:1d:48:fd:6a:5e:01: 0f:c3:dc:ee:40:98:3e:8d:a9:c8:88:86:42:18:82: 9e:3b:a9:c0:4f:bb:5c:12:c1:45:c7:d6:23:31:2b: 8d:88:89:8f:e8:11:25:6f:dc:3b:2b:02:61:b2:b3: 55:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5C:23:4A:E5:59:A9:3F:F7:F2:D8:CF:E7:9A:DC:AF:0C:F2:06:B7 X509v3 Authority Key Identifier: keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:2e:d7:11:b9:5a:6c:e2:cd:be:9e:eb:0b:dd:9b:8e:09:ca: 06:b3:3d:b5:2b:fa:1b:68:27:e8:01:13:1f:68:49:3c:71:8a: 4e:94:73:7d:f0:33:f1:0f:f7:e4:65:c1:62:91:e8:e0:11:ef: 75:b1:c3:75:61:6d:5f:3d:a4:6d:fc:4d:83:37:46:71:40:d1: 4b:1b:6d:7e:f7:10:8e:24:4a:74:e1:4a:98:84:1d:2a:78:c9: d6:e7:ea:2a:65:b0:0b:d8:e7:7c:47:b8:60:21:de:d2:24:e8: 75:09:be:fc:94:1f:92:35:71:96:ad:1d:8f:c2:0f:54:b0:90: 7a:f4:bf:4d:83:ea:62:34:2a:eb:54:52:a0:1c:b4:5b:30:94: 1b:4a:73:e5:06:ed:14:e8:22:78:21:cc:ae:aa:b5:1e:3e:ca: 91:68:6b:06:99:30:aa:5e:3b:9a:c9:0e:0e:80:96:23:c3:62: 7d:56:8c:f8:ae:a8:56:1e:1f:7b:3f:dd:bf:1c:c5:10:75:3e: f3:1b:e7:c1:53:01:9a:e1:c9:6c:07:bb:cb:cf:76:e6:0b:17: eb:84:f6:b7:20:85:20:6c:29:df:b6:13:31:8c:72:5b:d2:d9: d5:94:89:09:f2:a9:93:8e:30:9d:84:89:d8:fe:c6:cb:42:09: 64:d1:9c:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIyMkUxMTAvBgNVBAUTKDI0MkFCOTFGQTdDN0E2NEFDRTc3RDlCNEY2NjFFMjhD MEIxNUI4RTAwHhcNMjUxMjI5MDM1NDQ0WhcNMjYwMTA1MDM1NDQ0WjAYMRYwFAYD VQQDDA02OTUxZmI4NS1kYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1lxC6C0hr0NKaMi8KkpsKkAQQsWXjQqYWnWhV2is5NK+94Xk3uwaZ/2vIe5 7KFv9tlqS8qj0aMIKvDOqpZyb4YZHGIfospwOrY8PQUbXx0PjoV3Db5s9UPW3Npo 45Hiosrnouhyc1bPaW8zvKR0K5j/DiGpoe63gs8Ad88cOjUSd8fPh9rizuUVd9Ou as5N0IPu7AdF3jYAHjZM5cg/JQNK8eTLZu5mto+GDMWJLTZCkGVITqZMlT6BTtZU rJRVUczIsVzu4xdGiykdSP1qXgEPw9zuQJg+janIiIZCGIKeO6nAT7tcEsFFx9Yj MSuNiImP6BElb9w7KwJhsrNVIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBcI0rl Wak/9/LYz+ea3K8M8ga3MB8GA1UdIwQYMBaAFCQquR+nx6ZKznfZtPZh4owLFbjg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjIyRS84MzQxNUIzNjM3 OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBrck9kOW0wOW1IaWpBc1Z1 T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pDcTVINmZIcGtyT2Q5bTA5bUhpakFzVnVPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjIyRS84MzQxNUIzNjM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBr ck9kOW0wOW1IaWpBc1Z1T0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuLtcRuVps4s2+nusL3ZuOCcoGsz21K/obaCfoARMfaEk8cYpOlHN9 8DPxD/fkZcFikejgEe91scN1YW1fPaRt/E2DN0ZxQNFLG21+9xCOJEp04UqYhB0q eMnW5+oqZbAL2Od8R7hgId7SJOh1Cb78lB+SNXGWrR2Pwg9UsJB69L9Ng+piNCrr VFKgHLRbMJQbSnPlBu0U6CJ4IcyuqrUePsqRaGsGmTCqXjuayQ4OgJYjw2J9Voz4 rqhWHh97P92/HMUQdT7zG+fBUwGa4clsB7vLz3bmCxfrhPa3IIUgbCnfthMxjHJb 0tnVlIkJ8qmTjjCdhInY/sbLQglk0ZwZ -----END CERTIFICATE-----Generated at Tue Dec 30 01:33:49 2025 by rpki-client