This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft File: JXjLyvyiaxcgV-N6t3phyBAyIi0.mft (raw, json) Hash identifier: 2c3xoHrNc1iOho1s2XGi93PqxcHc5wA8PxVznWvZZrY= Subject key identifier: 2C:1F:8F:EB:FA:CD:86:EE:A1:80:48:9C:E3:24:AE:F9:01:A2:40:3C Authority key identifier: 25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D Certificate issuer: /CN=A9137AD6/serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D Certificate serial: 03A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft Manifest number: 0398 Signing time: Wed 24 Dec 2025 23:53:56 +0000 Manifest this update: Wed 24 Dec 2025 23:53:55 +0000 Manifest next update: Wed 31 Dec 2025 23:53:55 +0000 Files and hashes: 1: JXjLyvyiaxcgV-N6t3phyBAyIi0.crl (hash: Az+ixt+TWQiFtDaLqpcpk5mTIh1pmJfB17AITOK11co=) 2: 2595D7A6063111EDB15E2E5FC4F9AE02.roa (hash: j4AbAcrSNJQt4KCCfWgLsvvoSyCYqNIdVPPppm3Zn7E=) 3: 7142AA1A062E11EDA95B3143C4F9AE02.roa (hash: sAHMyFBwbehSytK0bjkDhBpvCN1HCAvo6oyZeTkv4Hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 23:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 933 (0x3a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137AD6, serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D Validity Not Before: Dec 24 23:53:55 2025 GMT Not After : Dec 31 23:53:55 2025 GMT Subject: CN=694c7d14-1fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:e4:4a:79:db:4e:94:e2:05:a7:47:ae:84: 8c:38:18:f2:31:d7:26:65:75:0c:2c:2e:10:77:77: 92:b6:9f:ab:55:17:2f:d2:0e:39:de:6c:c1:56:f2: 91:1a:91:a4:87:52:22:ab:7f:45:1a:b1:c8:cd:1f: 84:4e:bf:6a:29:35:b8:53:d1:98:a5:ab:03:ab:48: 5f:d1:8a:42:90:04:7d:83:3d:d3:6d:6d:77:b1:a8: cb:26:ad:70:2c:60:4e:90:b4:90:a7:11:64:4d:c8: 06:c1:a7:d4:c4:f2:54:ff:b2:f5:fd:09:71:fb:a0: 68:3f:89:5e:2f:17:a8:34:12:de:ce:bd:26:47:7f: 05:d3:e8:00:04:09:d7:3e:68:2d:c7:d1:ba:4b:2f: ad:e7:06:04:75:02:ac:3b:9a:6a:a3:34:d8:ef:17: ea:4f:1f:57:82:6c:c6:83:48:96:17:c4:49:68:e2: f9:ca:9a:31:b5:6b:cf:7b:52:c4:43:15:b5:23:7f: 1c:32:53:b6:12:e0:26:ba:2b:04:3c:e5:31:b3:04: d1:29:dd:99:88:ee:a2:3d:35:96:ea:12:1d:d2:37: bb:10:31:f9:2f:89:e0:b6:0f:e2:5b:a2:69:72:c2: c6:05:00:d8:c6:81:11:1f:ac:89:bf:3f:01:5e:71: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1F:8F:EB:FA:CD:86:EE:A1:80:48:9C:E3:24:AE:F9:01:A2:40:3C X509v3 Authority Key Identifier: keyid:25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:8a:a3:99:e3:ff:2f:69:93:e3:91:70:02:d9:49:3d:1c:27: 32:e2:8a:23:ed:7a:de:60:a2:3b:90:41:16:78:0d:8a:98:a9: 12:d7:7c:f6:9b:bb:0d:94:9b:37:f3:b0:bc:b8:e8:96:44:9c: fc:74:04:ab:46:ce:f9:fd:4c:3d:4d:28:b0:a0:9b:01:9f:8f: 8f:89:7e:20:93:ea:94:53:f0:fc:77:94:2d:e1:da:91:a1:de: ba:55:39:5f:27:9d:fb:17:9a:25:dc:b5:90:1b:33:f5:79:b0: 39:ad:46:64:50:81:da:25:05:a9:af:23:10:8f:7c:8e:e8:7b: 0c:62:ac:8b:69:1a:ba:79:f7:7f:65:2c:0f:a4:9f:ee:f6:03: 65:88:fa:ae:18:80:7b:0a:d3:d6:f6:2c:6b:f8:6b:19:d2:1d: 9c:74:87:b5:f4:d1:e9:35:30:d9:bb:21:7b:51:b9:38:4a:ac: 9a:89:b8:06:43:2c:15:f2:7b:8a:fa:89:9f:fd:75:c5:bd:3b: 9a:3e:e9:7d:1f:4b:36:35:71:58:0b:9f:79:f6:05:29:5c:e3: 50:28:db:70:be:d4:df:05:79:62:69:fb:96:53:46:d9:be:28: 9a:58:fe:e3:a3:f1:b7:b0:7f:e2:8c:94:cd:65:61:a5:5a:17: ce:79:d6:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBRDYxMTAvBgNVBAUTKDI1NzhDQkNBRkNBMjZCMTcyMDU3RTM3QUI3N0E2MUM4 MTAzMjIyMkQwHhcNMjUxMjI0MjM1MzU1WhcNMjUxMjMxMjM1MzU1WjAYMRYwFAYD VQQDDA02OTRjN2QxNC0xZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoa3kSnnbTpTiBadHroSMOBjyMdcmZXUMLC4Qd3eStp+rVRcv0g453mzBVvKR GpGkh1Iiq39FGrHIzR+ETr9qKTW4U9GYpasDq0hf0YpCkAR9gz3TbW13sajLJq1w LGBOkLSQpxFkTcgGwafUxPJU/7L1/Qlx+6BoP4leLxeoNBLezr0mR38F0+gABAnX Pmgtx9G6Sy+t5wYEdQKsO5pqozTY7xfqTx9XgmzGg0iWF8RJaOL5ypoxtWvPe1LE QxW1I38cMlO2EuAmuisEPOUxswTRKd2ZiO6iPTWW6hId0je7EDH5L4ngtg/iW6Jp csLGBQDYxoERH6yJvz8BXnF0IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwfj+v6 zYbuoYBInOMkrvkBokA8MB8GA1UdIwQYMBaAFCV4y8r8omsXIFfjerd6YcgQMiIt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FENi9BMkNFNkJEOEM3 NzYxMUVDQjczQUQ1NjZDNEY5QUUwMi9KWGpMeXZ5aWF4Y2dWLU42dDNwaHlCQXlJ aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYakx5dnlpYXhjZ1YtTjZ0M3BoeUJBeUlpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0FENi9BMkNFNkJEOEM3NzYxMUVDQjczQUQ1NjZDNEY5QUUwMi9KWGpMeXZ5aWF4 Y2dWLU42dDNwaHlCQXlJaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBiqOZ4/8vaZPjkXAC2Uk9HCcy4ooj7XreYKI7kEEWeA2KmKkS13z2 m7sNlJs387C8uOiWRJz8dASrRs75/Uw9TSiwoJsBn4+PiX4gk+qUU/D8d5Qt4dqR od66VTlfJ537F5ol3LWQGzP1ebA5rUZkUIHaJQWpryMQj3yO6HsMYqyLaRq6efd/ ZSwPpJ/u9gNliPquGIB7CtPW9ixr+GsZ0h2cdIe19NHpNTDZuyF7Ubk4SqyaibgG QywV8nuK+omf/XXFvTuaPul9H0s2NXFYC5959gUpXONQKNtwvtTfBXliafuWU0bZ viiaWP7jo/G3sH/ijJTNZWGlWhfOedaa -----END CERTIFICATE-----Generated at Thu Dec 25 19:23:59 2025 by rpki-client