This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft File: JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft (raw, json) Hash identifier: HWfocrhtu5mHkBwrVnzc191bTnKu+0ExD0wwKR7/btA= Subject key identifier: 85:81:4E:B3:95:9F:29:71:FE:44:97:DC:B2:09:C4:1E:C4:A7:F3:D5 Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Certificate serial: 175D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft Manifest number: 174D Signing time: Sat 20 Dec 2025 16:23:35 +0000 Manifest this update: Sat 20 Dec 2025 16:23:35 +0000 Manifest next update: Sat 27 Dec 2025 16:23:35 +0000 Files and hashes: 1: JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl (hash: aiVE7Oe8r1HYf1SkuO5269jQaOXEGlGUGaEEr2Yf+yU=) 2: C96DCB80D00A11F0BC76FE15C4F9AE02.roa (hash: ABhiaFztmIhxXQtVe6zkji6y6Wrv2VQGPWZOStLtBEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5981 (0x175d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Validity Not Before: Dec 20 16:23:35 2025 GMT Not After : Dec 27 16:23:35 2025 GMT Subject: CN=6946cd87-8a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:03:92:9f:08:b7:71:a6:b1:e8:89:ae:5a:cb: 0a:a4:c5:15:06:25:03:9f:0e:5a:e6:38:7d:17:bb: 9f:02:12:d0:fb:f7:53:78:1c:c1:7e:0e:ee:e9:bd: ca:ab:ab:e2:6d:d2:af:89:a2:4d:08:ab:81:0a:d6: 0d:87:e4:e7:b8:f3:c9:eb:0d:5c:62:54:46:cb:27: 8e:ef:9b:4e:a1:06:a1:b7:cb:03:e0:0f:7a:2b:f5: 5f:de:2a:18:2e:6b:a6:fb:bb:54:aa:bf:f6:b5:ff: bf:b7:73:8a:74:95:75:a7:1b:d5:01:ee:d2:64:67: df:01:91:ed:12:75:d0:d4:5b:c9:c9:f3:ce:8c:60: 91:5a:0a:b9:93:d2:fd:fa:b6:d8:b1:1f:c5:41:ca: be:bf:1c:c8:b5:14:3d:59:7c:7b:28:9d:52:7a:52: 74:54:e5:da:0e:d2:1c:4c:07:44:dd:92:d4:fe:88: 1a:75:cc:15:00:26:bc:b2:37:71:a8:8a:73:ef:07: 6f:f2:54:ef:14:c9:10:89:a4:39:86:d3:76:3e:d8: e8:fd:89:f1:42:fc:91:d5:e9:c0:42:dc:e8:49:44: 6c:4e:81:b5:ec:c5:22:a4:7e:c5:6e:62:b6:ae:77: c2:de:cb:a7:83:d1:35:41:70:b7:3e:f7:cf:3c:02: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:81:4E:B3:95:9F:29:71:FE:44:97:DC:B2:09:C4:1E:C4:A7:F3:D5 X509v3 Authority Key Identifier: keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:54:95:85:df:3f:ca:5e:bd:2b:62:aa:5f:e1:0a:b6:23:1c: 0b:09:fc:54:13:ed:68:3a:60:56:6a:97:1f:f7:2d:ee:88:60: f4:76:b6:48:a3:bd:31:f1:e8:5c:ad:34:1d:63:84:ae:ac:76: fa:bb:5b:b1:8d:a7:94:72:18:a8:37:90:9c:3e:83:37:8c:e0: ac:7e:a2:af:ab:23:f9:63:87:6d:f2:b3:19:c2:0d:29:50:b3: dc:fc:5e:be:f8:6e:89:64:33:3e:7f:a0:72:28:01:7d:54:5a: 18:3a:75:f0:fc:bc:15:4c:be:43:73:fb:c0:3e:fd:53:70:8f: 82:ec:2a:bc:d1:26:e2:69:17:6c:4b:ee:17:ff:8c:fc:cc:6a: b8:2a:65:36:73:70:49:e8:9f:d0:a4:a1:b2:cc:70:3b:bf:16: e8:de:1b:48:c4:f4:71:38:8b:55:b2:85:52:b3:de:27:14:43: b9:ce:32:40:12:5a:16:ab:18:9c:93:1b:98:fd:90:23:76:0e: ac:4b:82:21:aa:77:2f:b2:33:ba:33:84:40:19:7c:3f:c9:d1: 92:a9:d3:4f:08:7e:45:54:13:ff:ef:8b:f5:26:22:2e:ad:bc: 12:2e:c5:c3:38:90:2e:32:66:5c:aa:ed:2a:28:3c:d7:20:a9: 5a:13:ba:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwMDgxMTAvBgNVBAUTKDI0OEY1NTg4RUE4RkM3REQwQTNCNERBMUUxNTU4MDMx QzBEOTI3RTQwHhcNMjUxMjIwMTYyMzM1WhcNMjUxMjI3MTYyMzM1WjAYMRYwFAYD VQQDDA02OTQ2Y2Q4Ny04YTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gOSnwi3caax6ImuWssKpMUVBiUDnw5a5jh9F7ufAhLQ+/dTeBzBfg7u6b3K q6vibdKviaJNCKuBCtYNh+TnuPPJ6w1cYlRGyyeO75tOoQaht8sD4A96K/Vf3ioY Lmum+7tUqr/2tf+/t3OKdJV1pxvVAe7SZGffAZHtEnXQ1FvJyfPOjGCRWgq5k9L9 +rbYsR/FQcq+vxzItRQ9WXx7KJ1SelJ0VOXaDtIcTAdE3ZLU/ogadcwVACa8sjdx qIpz7wdv8lTvFMkQiaQ5htN2Ptjo/YnxQvyR1enAQtzoSURsToG17MUipH7FbmK2 rnfC3sung9E1QXC3PvfPPAJ4YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWBTrOV nylx/kSX3LIJxB7Ep/PVMB8GA1UdIwQYMBaAFCSPVYjqj8fdCjtNoeFVgDHA2Sfk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTAwOC9ERDg4QzNBRUYx RDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5MEtPMDJoNFZXQU1jRFpK LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJOVZpT3FQeDkwS08wMmg0VldBTWNEWkotUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTAwOC9ERDg4QzNBRUYxRDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5 MEtPMDJoNFZXQU1jRFpKLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxVJWF3z/KXr0rYqpf4Qq2IxwLCfxUE+1oOmBWapcf9y3uiGD0drZI o70x8ehcrTQdY4SurHb6u1uxjaeUchioN5CcPoM3jOCsfqKvqyP5Y4dt8rMZwg0p ULPc/F6++G6JZDM+f6ByKAF9VFoYOnXw/LwVTL5Dc/vAPv1TcI+C7Cq80SbiaRds S+4X/4z8zGq4KmU2c3BJ6J/QpKGyzHA7vxbo3htIxPRxOItVsoVSs94nFEO5zjJA EloWqxickxuY/ZAjdg6sS4IhqncvsjO6M4RAGXw/ydGSqdNPCH5FVBP/74v1JiIu rbwSLsXDOJAuMmZcqu0qKDzXIKlaE7ox -----END CERTIFICATE-----Generated at Mon Dec 22 15:59:58 2025 by rpki-client