This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: NJx2uaB2+PhMMVJfWVvpL8Vb8Nm1w7qxjGfo5HNZAMQ= Subject key identifier: C9:90:45:D4:5F:5D:42:BE:82:DF:C3:99:00:CB:79:E9:94:FB:DF:B3 Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1F54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1F24 Signing time: Thu 18 Dec 2025 15:56:29 +0000 Manifest this update: Thu 18 Dec 2025 15:56:28 +0000 Manifest next update: Thu 25 Dec 2025 15:56:28 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: qiAj0rm8Z6j2Je8ce4Z+MZ6GGnxgzT2LWO7lY2vf/ao=) 2: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: CjMWzQ4orDUG/TY7wjogSOeP/MIVCZP81sPmtBO9dvc=) 3: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: z6LWqtEj9AU1LHL6Pkyr2Ux5B41+S1GwphxwVqUtIEg=) 4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: hzfdO/T7dLYx6x9B0cEhqN7KXAuqulTey8E65Ho7Grk=) 5: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: Pst+EyYihHYvgrhmvznh/Qw7ABaO8rde6PoQvXSj1X0=) 6: A63484760E7511F0B651A474C4F9AE02.roa (hash: viR4skCP/MVivW71rPCLWb/HM+520HPQpRhVM95GRJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8020 (0x1f54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Dec 18 15:56:28 2025 GMT Not After : Dec 25 15:56:28 2025 GMT Subject: CN=6944242c-401e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:2c:cd:15:a1:de:56:50:e7:7f:16:de:fe: e4:a7:58:00:69:c7:7e:49:fd:2f:d7:85:c4:26:0a: 64:28:96:8e:e8:e5:ec:a8:d3:ee:d9:c1:26:14:f7: 6c:9f:8c:3e:0f:47:35:85:a7:e7:72:45:ec:d5:5b: ca:cd:54:5f:9f:26:ed:e2:09:50:e7:80:e1:eb:12: 16:c2:b2:e5:dd:9b:51:67:ca:f6:91:47:38:36:6d: b0:fc:bc:01:60:1e:88:01:01:3f:23:8d:03:28:2d: d0:0a:d6:2b:a2:bf:90:74:cf:4c:10:2f:cc:48:68: 82:ac:66:95:6d:c8:21:b5:55:b6:0a:c5:75:65:92: e3:3d:15:93:68:4a:bd:74:21:28:39:5d:46:1e:bd: 2a:57:a0:00:a0:0e:6d:ef:6f:60:a2:af:b3:53:89: b0:3d:ed:db:1c:53:d2:fc:4b:51:89:48:34:42:e1: 93:b8:6c:0f:5a:4f:58:da:fe:e1:1b:a9:60:b1:0b: 59:c7:f8:00:0f:98:3c:a8:ef:34:3e:07:24:57:70: 94:46:73:d7:a9:aa:41:da:5b:d3:41:d2:24:cb:d3: bf:bf:d1:21:d2:8b:bf:71:0b:8c:20:fc:81:62:07: 55:1c:e5:46:62:c1:08:42:37:05:f3:3e:a6:89:12: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:90:45:D4:5F:5D:42:BE:82:DF:C3:99:00:CB:79:E9:94:FB:DF:B3 X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8e:71:5b:9a:5e:3c:40:77:7a:03:c5:3b:93:95:40:f6:1b: 8f:e4:51:a3:f0:8d:14:ac:e3:0e:4f:90:72:82:3d:c0:5e:ce: d8:60:36:0e:8c:9a:14:c0:a9:c4:f3:f3:da:10:e9:c7:74:8d: 22:11:d9:25:56:b5:9c:82:94:3f:7e:f2:05:f8:4f:7f:97:47: 19:55:88:d5:42:c0:05:61:b1:6c:26:d6:9d:5b:34:2d:09:99: 38:a3:ef:f2:d4:00:e0:d8:44:bb:5d:5d:b8:2d:73:c8:6e:a9: 50:98:d2:57:ac:db:6e:6f:37:dc:5b:b2:1c:a7:4f:0d:7b:c2: fa:c4:9c:a0:cd:1a:ad:e0:1e:26:37:4f:e2:da:d6:42:8c:c6: 5a:cb:96:e6:cc:0f:d4:3a:ea:fb:b6:14:54:e1:a6:c9:90:c1: 86:76:d3:56:e2:7d:0d:6b:a7:6f:83:d2:c3:ef:5d:fd:e0:ac: 6e:ec:6d:ba:bd:d5:57:fe:4b:ee:f3:19:0a:bb:f6:5a:3e:7c: 38:09:9a:f8:4b:0f:6f:dc:93:17:e0:63:fe:da:43:85:2d:b0: ad:cb:bb:a4:d6:5f:c3:8b:fb:f9:8d:20:7f:f9:47:67:7c:9e: 48:0f:a9:b5:b7:63:8e:00:97:3f:70:4b:5e:44:c4:e6:05:5b: 5c:1c:3b:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjUxMjE4MTU1NjI4WhcNMjUxMjI1MTU1NjI4WjAYMRYwFAYD VQQDDA02OTQ0MjQyYy00MDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqG8szRWh3lZQ538W3v7kp1gAacd+Sf0v14XEJgpkKJaO6OXsqNPu2cEmFPds n4w+D0c1hafnckXs1VvKzVRfnybt4glQ54Dh6xIWwrLl3ZtRZ8r2kUc4Nm2w/LwB YB6IAQE/I40DKC3QCtYror+QdM9MEC/MSGiCrGaVbcghtVW2CsV1ZZLjPRWTaEq9 dCEoOV1GHr0qV6AAoA5t729goq+zU4mwPe3bHFPS/EtRiUg0QuGTuGwPWk9Y2v7h G6lgsQtZx/gAD5g8qO80PgckV3CURnPXqapB2lvTQdIky9O/v9Eh0ou/cQuMIPyB YgdVHOVGYsEIQjcF8z6miRIOGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmQRdRf XUK+gt/DmQDLeemU+9+zMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOjnFbml48QHd6A8U7k5VA9huP5FGj8I0UrOMOT5Bygj3AXs7YYDYO jJoUwKnE8/PaEOnHdI0iEdklVrWcgpQ/fvIF+E9/l0cZVYjVQsAFYbFsJtadWzQt CZk4o+/y1ADg2ES7XV24LXPIbqlQmNJXrNtubzfcW7Icp08Ne8L6xJygzRqt4B4m N0/i2tZCjMZay5bmzA/UOur7thRU4abJkMGGdtNW4n0Na6dvg9LD71394Kxu7G26 vdVX/kvu8xkKu/ZaPnw4CZr4Sw9v3JMX4GP+2kOFLbCty7uk1l/Di/v5jSB/+Udn fJ5ID6m1t2OOAJc/cEteRMTmBVtcHDtE -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:26 2025 by rpki-client