This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft File: 81Jo-XbornH--mbKRRY2HFiuHZE.mft (raw, json) Hash identifier: TSpGoi64+MPtZxCX3v4TsV+JBx1h7uRXi/jwfH+V2pM= Subject key identifier: D8:F7:E8:65:6B:4C:41:EF:F2:78:87:CA:C4:A0:B2:4D:03:C4:B5:7D Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Certificate serial: 0CD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft Manifest number: 0CBF Signing time: Sat 20 Dec 2025 17:57:35 +0000 Manifest this update: Sat 20 Dec 2025 17:57:35 +0000 Manifest next update: Sat 27 Dec 2025 17:57:35 +0000 Files and hashes: 1: 81Jo-XbornH--mbKRRY2HFiuHZE.crl (hash: QVF6rtDoE5Z6JNr2dk6NRrSUI3p0630//CZoCEH8mwc=) 2: 68979DAE337B11EA9A024941C4F9AE02.roa (hash: 8+Ymqe/569V8FlYV76TmLK19yyKhwgBdmhVdUs4TFXU=) 3: 9D4131DE13D511EF883BC527C4F9AE02.roa (hash: olmc/o09ErYiChJbWXMyIgbGCNghcLiwj8HQmo8o9wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3281 (0xcd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Validity Not Before: Dec 20 17:57:35 2025 GMT Not After : Dec 27 17:57:35 2025 GMT Subject: CN=6946e38f-009f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:8a:66:81:22:1e:fe:9d:b9:47:eb:51:1a: 45:a9:c9:65:f9:14:6d:37:83:a3:9e:22:27:3b:82: 36:79:42:25:9a:dc:7e:a2:1e:44:4f:e2:e5:2d:42: c2:05:6d:44:7b:00:9a:39:c7:74:a6:2b:a6:de:59: cc:d1:e6:31:26:9f:3e:1e:c8:49:63:9c:e3:41:42: 3e:26:a4:24:f3:fc:bb:27:4a:6b:b8:e7:81:0c:2e: 0f:26:00:cc:3b:2c:0a:04:c5:02:3b:de:04:9e:d7: 45:4a:e6:98:14:a4:5d:6f:4f:5c:3c:d0:30:80:f8: fc:3f:01:06:bc:18:03:bc:8f:fa:6a:dd:3b:b2:52: e1:cf:67:aa:d8:0c:fb:8e:10:b4:7a:03:e0:50:53: 06:c7:e3:6e:29:c4:ad:2b:a9:4f:82:be:68:d2:c6: e6:4a:8b:06:d0:8f:e5:f7:29:4a:e6:7e:f1:44:de: 7a:46:d8:90:31:a5:9c:c1:b2:de:92:28:6e:13:05: 04:20:1b:f8:79:6b:63:dd:94:51:10:37:af:72:43: 41:b1:3b:d3:84:b0:eb:59:a1:e8:77:29:5e:2a:2e: 79:24:b3:3c:8c:1d:06:e7:d2:c1:0e:bb:85:87:73: f8:0d:b3:fc:a6:e1:49:6f:5b:6c:47:54:1c:bf:95: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F7:E8:65:6B:4C:41:EF:F2:78:87:CA:C4:A0:B2:4D:03:C4:B5:7D X509v3 Authority Key Identifier: keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7b:b7:7b:2c:09:87:9a:72:a7:bd:a1:06:f3:4b:07:29:cf: 14:51:62:83:3b:0a:fa:f6:30:21:45:de:98:10:4f:24:3b:bf: 86:7f:a4:96:73:cf:22:bd:11:6b:ea:d7:4d:e2:10:98:05:e8: 69:3d:f3:f6:65:cb:2d:33:36:bb:86:09:d1:05:1e:f9:41:e6: ba:71:23:1b:d1:64:15:00:b7:4f:af:d3:d7:8e:0e:b7:e1:f5: 38:a2:98:39:95:e5:27:a1:50:dd:c4:18:e1:6f:38:c4:85:2d: c4:0c:e1:88:dc:88:5d:1e:cf:6d:ed:3d:15:81:8a:34:5e:0c: 49:73:d5:9e:ff:1e:f1:31:88:0e:83:ff:04:83:e5:79:34:43: 60:aa:73:11:24:d4:9b:01:ef:20:3d:e1:ff:9d:57:58:ff:00: 61:39:25:05:10:03:99:09:b8:29:48:95:95:56:77:fc:8f:3e: 2e:b6:4b:23:3f:68:06:02:d4:ed:f5:cd:c8:7c:1f:7b:8f:27: b2:c8:34:80:f3:a2:31:a6:08:c6:df:9d:99:f9:b4:42:62:ac: d6:5d:74:5e:f8:68:d0:5d:ca:48:b7:b4:8b:16:3f:9e:82:f5: 8b:66:11:75:1e:12:c1:1e:e2:3d:9a:bd:83:3f:1f:c2:3a:6e: 9a:72:e2:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRTExMTAvBgNVBAUTKEYzNTI2OEY5NzZFOEFFNzFGRUZBNjZDQTQ1MTYzNjFD NThBRTFEOTEwHhcNMjUxMjIwMTc1NzM1WhcNMjUxMjI3MTc1NzM1WjAYMRYwFAYD VQQDDA02OTQ2ZTM4Zi0wMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4uKZoEiHv6duUfrURpFqcll+RRtN4OjniInO4I2eUIlmtx+oh5ET+LlLULC BW1EewCaOcd0pium3lnM0eYxJp8+HshJY5zjQUI+JqQk8/y7J0pruOeBDC4PJgDM OywKBMUCO94EntdFSuaYFKRdb09cPNAwgPj8PwEGvBgDvI/6at07slLhz2eq2Az7 jhC0egPgUFMGx+NuKcStK6lPgr5o0sbmSosG0I/l9ylK5n7xRN56RtiQMaWcwbLe kihuEwUEIBv4eWtj3ZRREDevckNBsTvThLDrWaHodyleKi55JLM8jB0G59LBDruF h3P4DbP8puFJb1tsR1Qcv5WgwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNj36GVr TEHv8niHysSgsk0DxLV9MB8GA1UdIwQYMBaAFPNSaPl26K5x/vpmykUWNhxYrh2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNFMS85RkQ1OERBNjA1 QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3JuSC0tbWJLUlJZMkhGaXVI WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxSm8tWGJvcm5ILS1tYktSUlkySEZpdUhaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNFMS85RkQ1OERBNjA1QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3Ju SC0tbWJLUlJZMkhGaXVIWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqe7d7LAmHmnKnvaEG80sHKc8UUWKDOwr69jAhRd6YEE8kO7+Gf6SW c88ivRFr6tdN4hCYBehpPfP2ZcstMza7hgnRBR75Qea6cSMb0WQVALdPr9PXjg63 4fU4opg5leUnoVDdxBjhbzjEhS3EDOGI3IhdHs9t7T0VgYo0XgxJc9We/x7xMYgO g/8Eg+V5NENgqnMRJNSbAe8gPeH/nVdY/wBhOSUFEAOZCbgpSJWVVnf8jz4utksj P2gGAtTt9c3IfB97jyeyyDSA86IxpgjG352Z+bRCYqzWXXRe+GjQXcpIt7SLFj+e gvWLZhF1HhLBHuI9mr2DPx/COm6acuJc -----END CERTIFICATE-----Generated at Mon Dec 22 14:31:06 2025 by rpki-client