This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft File: J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft (raw, json) Hash identifier: jUcbNnoOP4Tmqa4shwKxcwTT2G7FCFmkXW1TtDVQx8c= Subject key identifier: 5D:9A:D7:79:2A:D3:DB:64:67:FB:D0:91:94:07:B3:F1:E0:C5:97:98 Authority key identifier: 27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 Certificate issuer: /CN=A913F133/serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Certificate serial: 057A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft Manifest number: 0574 Signing time: Tue 30 Dec 2025 22:32:30 +0000 Manifest this update: Tue 30 Dec 2025 22:32:30 +0000 Manifest next update: Tue 06 Jan 2026 22:32:30 +0000 Files and hashes: 1: J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl (hash: GiMDj3MLoI8D2gwcM6RuAaQ47fbvT9Gf4mB7RiJQQ+A=) 2: 5B4D0C8C0C5111EC9CE0E859C4F9AE02.roa (hash: 9CLl3VckXKdY+8htHptItIp5TJ4KGFHvVrwInC8Y8hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 22:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1402 (0x57a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F133, serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Validity Not Before: Dec 30 22:32:30 2025 GMT Not After : Jan 6 22:32:30 2026 GMT Subject: CN=695452fe-816a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:ca:bc:8d:c5:96:e3:78:ac:dd:9c:77:e3: 1d:eb:48:6d:f1:79:02:95:b6:55:b7:2e:0d:2c:bf: 14:98:be:b4:de:c4:00:f6:73:66:9c:90:ea:d1:69: f9:20:a9:c9:1e:7a:0f:f1:7b:a6:99:4d:49:da:f3: 6d:21:5b:bf:38:ec:e0:4e:57:f8:98:6c:76:09:4d: 48:c1:49:c2:f3:cf:35:91:39:67:a9:48:1b:fd:34: 62:68:a7:e8:f8:f2:0a:93:fe:25:47:56:06:81:cf: e6:65:97:7c:d1:a5:4f:4b:c1:14:e4:6f:a4:45:79: fd:71:62:cb:9c:b8:42:b5:14:6c:6e:d9:72:e4:7e: 14:58:e0:a6:7d:82:40:a7:9d:e9:cf:4e:92:9f:51: 5d:66:48:c6:f0:b0:dc:e0:a9:bf:bd:99:d1:62:6e: e6:11:bb:b6:38:44:af:9f:c3:85:0f:6a:0a:d9:68: fd:52:ac:cb:e8:b8:f5:4e:fb:12:d1:17:3f:a9:80: 7a:02:92:c9:98:2a:14:52:b1:c9:91:f2:5b:fc:04: 6e:20:db:eb:84:34:16:52:c7:15:5a:1d:c5:e2:8e: c9:70:8b:8e:f6:c9:83:a5:9f:e5:a5:46:d0:40:c3: 5a:56:7f:71:bf:89:c8:ed:6c:61:7e:24:ac:29:cc: a5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9A:D7:79:2A:D3:DB:64:67:FB:D0:91:94:07:B3:F1:E0:C5:97:98 X509v3 Authority Key Identifier: keyid:27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cd:b0:1f:1c:56:33:be:9e:a7:90:62:af:7c:73:51:56:c8: ec:4c:08:c0:fe:b1:46:bc:27:c1:6a:68:81:58:33:ed:a7:db: b6:2c:ae:cb:2b:86:22:1e:a8:fb:6b:f4:0d:bb:0d:31:fa:5a: 68:33:7d:da:ec:e7:94:07:b2:92:7f:08:4d:09:60:6d:1d:ba: ae:09:99:56:e8:68:2f:57:9e:04:36:cd:25:9a:8f:8b:2a:0b: 2a:6c:b1:54:0d:dc:2a:40:d4:5b:bb:f4:37:aa:cf:34:ca:4e: e2:51:95:91:3c:fa:50:bb:d2:6e:7c:2d:40:ad:9e:a9:2e:47: c6:64:6c:3c:3b:e8:fa:be:e5:5a:24:cd:06:f8:4c:5e:ee:ab: e3:fb:3c:de:68:e1:83:81:fc:81:31:fa:b2:03:30:37:91:17: 86:27:f6:7a:db:81:dd:0c:88:57:fb:90:98:b4:34:da:98:dc: b6:6d:0a:de:ae:1d:ec:33:a8:69:aa:2f:67:c8:1f:d3:d0:15: 14:54:fd:44:8e:c2:e7:0f:be:f4:eb:d6:a7:da:b8:ae:ee:96: 07:3f:19:ff:6c:00:4e:54:e1:75:0f:32:09:c5:4e:dd:93:a2: cb:2b:74:ff:91:a5:0e:8d:03:25:7c:f1:bc:3b:2c:87:b2:2a: 45:ba:25:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YxMzMxMTAvBgNVBAUTKDI3RTYzNTI5NDZDNjg0QTdDQ0RBRUM3N0Y1MzhEMThG RjM1Mzc4NzMwHhcNMjUxMjMwMjIzMjMwWhcNMjYwMTA2MjIzMjMwWjAYMRYwFAYD VQQDDA02OTU0NTJmZS04MTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpjKvI3FluN4rN2cd+Md60ht8XkClbZVty4NLL8UmL603sQA9nNmnJDq0Wn5 IKnJHnoP8XummU1J2vNtIVu/OOzgTlf4mGx2CU1IwUnC8881kTlnqUgb/TRiaKfo +PIKk/4lR1YGgc/mZZd80aVPS8EU5G+kRXn9cWLLnLhCtRRsbtly5H4UWOCmfYJA p53pz06Sn1FdZkjG8LDc4Km/vZnRYm7mEbu2OESvn8OFD2oK2Wj9UqzL6Lj1TvsS 0Rc/qYB6ApLJmCoUUrHJkfJb/ARuINvrhDQWUscVWh3F4o7JcIuO9smDpZ/lpUbQ QMNaVn9xv4nI7WxhfiSsKcylUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2a13kq 09tkZ/vQkZQHs/HgxZeYMB8GA1UdIwQYMBaAFCfmNSlGxoSnzNrsd/U40Y/zU3hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzMy84MjY4NjNENjBD NEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hLZk0ydXgzOVRqUmpfTlRl SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otWTFLVWJHaEtmTTJ1eDM5VGpSal9OVGVITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjEzMy84MjY4NjNENjBDNEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hL Zk0ydXgzOVRqUmpfTlRlSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBezbAfHFYzvp6nkGKvfHNRVsjsTAjA/rFGvCfBamiBWDPtp9u2LK7L K4YiHqj7a/QNuw0x+lpoM33a7OeUB7KSfwhNCWBtHbquCZlW6GgvV54ENs0lmo+L KgsqbLFUDdwqQNRbu/Q3qs80yk7iUZWRPPpQu9JufC1ArZ6pLkfGZGw8O+j6vuVa JM0G+Exe7qvj+zzeaOGDgfyBMfqyAzA3kReGJ/Z624HdDIhX+5CYtDTamNy2bQre rh3sM6hpqi9nyB/T0BUUVP1EjsLnD77069an2riu7pYHPxn/bABOVOF1DzIJxU7d k6LLK3T/kaUOjQMlfPG8OyyHsipFuiWh -----END CERTIFICATE-----Generated at Wed Dec 31 04:18:58 2025 by rpki-client