This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json) Hash identifier: 51I12utaeK5A6+Lp5MkJu9EmSniyBd3RiXbmlAgyt2U= Subject key identifier: EC:C6:AC:F5:41:F8:85:AD:75:75:2E:74:B2:14:6B:6E:C2:F9:B1:FA Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft Manifest number: F5 Signing time: Sat 27 Dec 2025 04:17:38 +0000 Manifest this update: Sat 27 Dec 2025 04:17:38 +0000 Manifest next update: Sat 03 Jan 2026 04:17:38 +0000 Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: WKIKc/+pgUEpgvbu6NRmfy6DqgBgiyO9XI2tY3cSy0k=) 2: 00E00D025BC711F0886C5B59C4F9AE02.roa (hash: 4/6lX4NZ27z+xN3FhA2YCKR5609eVbF1fWeCrdQJGAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 04:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Validity Not Before: Dec 27 04:17:38 2025 GMT Not After : Jan 3 04:17:38 2026 GMT Subject: CN=694f5de2-1eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:04:b0:1c:34:de:5b:72:39:a3:34:11:b7:59: c2:c4:46:f3:ca:8e:18:cc:34:0e:f9:a0:33:81:32: 65:98:da:7b:30:8e:bc:f7:d8:cf:0b:a2:a9:da:8d: 02:e3:c1:f6:d1:7e:2a:b8:9a:7a:80:94:14:24:cf: 98:52:28:49:ef:79:dd:0a:0f:47:66:c4:4b:e4:bb: 69:2a:a7:c6:1a:75:0f:f5:c0:06:ac:e0:f4:1b:37: d8:f8:fa:bb:0f:db:22:91:69:18:3b:5a:06:fd:48: 6e:fb:de:dc:61:71:64:18:c2:72:7e:56:62:31:05: bb:ea:dd:37:7d:a9:3f:76:f4:08:49:ae:df:0b:5a: 6a:cc:c8:7a:c6:6e:a4:a6:36:b4:c1:c4:8e:d7:70: fe:e8:3c:5d:36:ca:e4:4b:e2:e3:42:0e:ea:25:82: 8f:fc:cd:9d:0c:74:10:07:53:1b:50:8f:f6:f4:dd: 5a:4e:de:da:08:4d:20:5f:1f:58:77:4a:4a:bf:cd: 52:c5:00:0a:42:3b:6d:16:8c:c9:86:2e:61:0f:94: 63:39:28:b4:ba:84:66:e2:22:ef:bb:cc:97:b9:3a: e2:1a:b5:dd:18:80:9b:32:6d:41:4e:14:55:e2:08: 02:9f:af:76:12:bd:3d:2d:40:39:ff:2f:53:1c:0a: 87:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C6:AC:F5:41:F8:85:AD:75:75:2E:74:B2:14:6B:6E:C2:F9:B1:FA X509v3 Authority Key Identifier: keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:15:73:ab:00:bb:1d:3f:21:79:3d:dd:3e:a8:33:03:fa:d8: 74:cb:2d:97:c0:b3:5c:a2:83:9b:fb:f4:39:cb:9b:13:ee:a7: b5:13:bf:b5:22:11:d7:d5:95:92:da:74:07:80:4f:38:07:db: 1d:96:df:c9:1c:06:bb:3f:82:c5:71:90:b7:a6:73:e7:3d:67: 79:0b:ca:ed:1c:68:d0:f7:5a:0d:c9:33:8c:5f:66:c2:97:c7: 77:dc:29:66:8b:39:96:25:8e:76:50:ab:7f:04:ac:9d:39:1c: a6:88:42:52:e2:0c:f4:19:34:75:58:f2:fe:c4:a5:38:99:1f: c3:c7:33:8b:43:f0:1f:dc:e1:dc:3e:05:e9:9d:c8:da:41:9e: 61:fc:4a:23:f0:38:27:cf:45:f4:d5:88:9e:2a:04:a0:6b:84: 40:a6:79:e0:87:b3:75:ee:ca:a6:37:9a:c5:95:cc:a8:60:82: f4:a8:b7:03:3c:e9:0a:a4:ea:aa:5e:d6:44:e8:fb:0b:c9:ed: cf:9a:12:19:76:a7:a5:27:b9:17:20:a5:18:22:38:69:c5:a6: ed:d1:a9:3b:9e:61:82:9e:38:35:a2:9e:e8:28:e0:d7:4f:71: 53:f3:b5:02:56:5d:79:82:2d:f6:c8:e8:50:0f:ca:40:f4:41: ab:c1:2a:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2QzExMTAvBgNVBAUTKDI2RDg2NDVFRThFRTNBNUQxRUIxRDJERjk3OUI4NTQ5 Qjg3NjFFMkEwHhcNMjUxMjI3MDQxNzM4WhcNMjYwMTAzMDQxNzM4WjAYMRYwFAYD VQQDDA02OTRmNWRlMi0xZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wSwHDTeW3I5ozQRt1nCxEbzyo4YzDQO+aAzgTJlmNp7MI6899jPC6Kp2o0C 48H20X4quJp6gJQUJM+YUihJ73ndCg9HZsRL5LtpKqfGGnUP9cAGrOD0GzfY+Pq7 D9sikWkYO1oG/Uhu+97cYXFkGMJyflZiMQW76t03fak/dvQISa7fC1pqzMh6xm6k pja0wcSO13D+6DxdNsrkS+LjQg7qJYKP/M2dDHQQB1MbUI/29N1aTt7aCE0gXx9Y d0pKv81SxQAKQjttFozJhi5hD5RjOSi0uoRm4iLvu8yXuTriGrXdGICbMm1BThRV 4ggCn692Er09LUA5/y9THAqHGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzGrPVB +IWtdXUudLIUa27C+bH6MB8GA1UdIwQYMBaAFCbYZF7o7jpdHrHS35ebhUm4dh4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDZDMS9EQjcwNDRFMjdB MjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9sMGVzZExmbDV1RlNiaDJI aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDZDMS9EQjcwNDRFMjdBMjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9s MGVzZExmbDV1RlNiaDJIaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArFXOrALsdPyF5Pd0+qDMD+th0yy2XwLNcooOb+/Q5y5sT7qe1E7+1 IhHX1ZWS2nQHgE84B9sdlt/JHAa7P4LFcZC3pnPnPWd5C8rtHGjQ91oNyTOMX2bC l8d33ClmizmWJY52UKt/BKydORymiEJS4gz0GTR1WPL+xKU4mR/DxzOLQ/Af3OHc PgXpncjaQZ5h/Eoj8Dgnz0X01YieKgSga4RApnngh7N17sqmN5rFlcyoYIL0qLcD POkKpOqqXtZE6PsLye3PmhIZdqelJ7kXIKUYIjhpxabt0ak7nmGCnjg1op7oKODX T3FT87UCVl15gi32yOhQD8pA9EGrwSoA -----END CERTIFICATE-----Generated at Sun Dec 28 23:22:51 2025 by rpki-client