This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: A/NA5J81xdJajyw9z2vw47orjwB70wB932E6qMrlYM0= Subject key identifier: 62:39:4B:77:13:2A:10:8B:EC:0B:8B:22:07:C7:A5:EB:76:57:52:BB Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 0421 Signing time: Wed 31 Dec 2025 23:51:24 +0000 Manifest this update: Wed 31 Dec 2025 23:51:24 +0000 Manifest next update: Wed 07 Jan 2026 23:51:24 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: 9OS2tAyr5DHCR9y6FKsNKwgfiM4jPIf6dWQhK6CvOvw=) 2: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: nBxVvzmtBqkJjIM89kDyeNDRTPleOjC1xfsXd7rUY30=) 3: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: XGuuKVGIEltroOkaLIfkXvo4+Qd8e1UxzERGE1Xa7EM=) 4: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: TEe1vP6DRB8YT8k0USYkc2bmS+7dNHehlpCLdcwXNpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 23:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Dec 31 23:51:24 2025 GMT Not After : Jan 7 23:51:24 2026 GMT Subject: CN=6955b6fc-ce7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:34:40:43:5f:72:bd:51:24:84:e8:9f:35:b5: 27:12:42:1e:5a:2f:34:ab:76:55:da:6c:94:76:12: a5:f5:d9:be:6f:9a:d7:6c:e4:d2:d2:d0:b8:f7:61: 7b:5b:f7:74:60:04:67:f2:ff:a4:0c:96:32:41:45: e7:14:f6:b9:e7:5f:eb:6d:fc:c0:f8:32:8a:6d:4a: fb:fe:31:3c:77:f5:d4:03:f0:54:ae:c4:9f:b2:27: 3b:1c:41:0d:a3:79:0a:c3:d0:8d:9a:07:30:7a:bb: 8a:94:ac:8d:5b:23:e9:4c:11:25:37:a0:1a:e3:ea: 82:4a:57:7f:c1:85:5c:82:e2:2e:fe:eb:0c:35:28: 4d:bd:9a:67:6d:c5:94:e8:a6:45:59:90:db:df:d8: 05:c0:92:d6:bf:d4:99:84:5c:d4:8d:a7:4f:85:b8: 6d:e7:13:20:d6:fb:61:c2:59:d5:c8:a9:54:ca:6c: e1:75:23:0b:3b:a2:74:23:c5:da:27:49:c6:84:07: fb:42:91:79:a7:c0:52:5a:09:7b:50:27:a7:a4:40: 20:dd:44:68:87:28:10:30:19:fe:9e:43:69:a4:6f: c5:dd:8d:64:6a:4a:5e:7b:1b:6a:55:b1:cd:3d:f9: 4d:1d:00:f8:fe:4c:31:16:95:1b:48:57:8f:c1:1d: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:39:4B:77:13:2A:10:8B:EC:0B:8B:22:07:C7:A5:EB:76:57:52:BB X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:16:8f:3e:76:01:d4:46:e2:4a:c2:23:22:25:84:12:a0:cb: 03:05:59:30:11:b1:ab:06:ca:93:d0:ed:88:63:88:cb:06:28: b1:61:ae:06:54:72:f3:d2:93:c5:cb:9a:3f:af:56:26:f7:5f: 09:67:b1:6f:d5:ec:b8:cc:88:e1:dc:5c:a5:d3:8a:57:6c:18: d4:b9:6b:2a:e2:19:82:cb:85:ed:42:aa:a7:c2:b2:53:c3:e1: c4:90:ec:76:4f:c0:1f:9d:2f:4e:b9:c0:f7:db:f7:06:d6:e7: 02:39:94:04:e3:92:d4:51:c0:6e:47:6d:1b:fe:1b:9c:48:6f: 42:29:5d:52:27:fd:6e:94:5a:67:e2:82:b1:f5:84:db:aa:eb: 10:2a:af:65:c5:04:de:19:da:0a:0e:18:6b:63:48:ba:96:27: 00:18:e7:6c:a7:45:65:ec:51:04:ae:10:be:8f:74:c2:ff:67: 78:a9:72:4d:7b:2a:3d:8d:c4:67:06:6a:57:51:4c:42:4f:d1: 36:92:10:a0:e9:57:4f:6c:61:4e:7c:f8:c2:42:1a:5a:e3:4b: 05:c0:f6:01:d5:dc:c8:aa:9f:d7:e6:13:dc:1f:39:67:5c:06: fb:d4:84:cc:b0:6f:d4:9b:f9:a1:db:e4:35:a6:1a:6c:a9:33: a0:ce:e9:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjUxMjMxMjM1MTI0WhcNMjYwMTA3MjM1MTI0WjAYMRYwFAYD VQQDDA02OTU1YjZmYy1jZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTRAQ19yvVEkhOifNbUnEkIeWi80q3ZV2myUdhKl9dm+b5rXbOTS0tC492F7 W/d0YARn8v+kDJYyQUXnFPa551/rbfzA+DKKbUr7/jE8d/XUA/BUrsSfsic7HEEN o3kKw9CNmgcweruKlKyNWyPpTBElN6Aa4+qCSld/wYVcguIu/usMNShNvZpnbcWU 6KZFWZDb39gFwJLWv9SZhFzUjadPhbht5xMg1vthwlnVyKlUymzhdSMLO6J0I8Xa J0nGhAf7QpF5p8BSWgl7UCenpEAg3URohygQMBn+nkNppG/F3Y1kakpeextqVbHN PflNHQD4/kwxFpUbSFePwR3+cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGI5S3cT KhCL7AuLIgfHpet2V1K7MB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWFo8+dgHURuJKwiMiJYQSoMsDBVkwEbGrBsqT0O2IY4jLBiixYa4G VHLz0pPFy5o/r1Ym918JZ7Fv1ey4zIjh3Fyl04pXbBjUuWsq4hmCy4XtQqqnwrJT w+HEkOx2T8AfnS9OucD32/cG1ucCOZQE45LUUcBuR20b/hucSG9CKV1SJ/1ulFpn 4oKx9YTbqusQKq9lxQTeGdoKDhhrY0i6licAGOdsp0Vl7FEErhC+j3TC/2d4qXJN eyo9jcRnBmpXUUxCT9E2khCg6VdPbGFOfPjCQhpa40sFwPYB1dzIqp/X5hPcHzln XAb71ITMsG/Um/mh2+Q1phpsqTOgzunC -----END CERTIFICATE-----Generated at Thu Jan 1 21:22:18 2026 by rpki-client