This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json) Hash identifier: BszpyKqOO9dJu4i05tnLnNmkOVtXYi5+4kIGEVheeiw= Subject key identifier: 25:DF:E8:B5:54:8A:B8:17:D6:48:B6:6F:AD:5B:B5:48:31:50:94:3D Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft Manifest number: 0641 Signing time: Thu 18 Dec 2025 23:26:00 +0000 Manifest this update: Thu 18 Dec 2025 23:26:00 +0000 Manifest next update: Thu 25 Dec 2025 23:26:00 +0000 Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: f36FqCuoab+8cdwqH68n+VHlBM6SIfzfeQcnvKy8D9k=) 2: C5C77866584111EE85E40820C4F9AE02.roa (hash: pdM+P+02WfirDBU7ez3rFKthQlrXbj54VyWDtVJ3HCs=) 3: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: vMGnwA2xpq4QvpCNqaKRAPZGxsbB0A1fJfOxfbC2oj4=) 4: C55784DE584111EE85E40820C4F9AE02.roa (hash: x8Fnq8EKLvBxDSGqIJ7xq0nW22TsvsoXDLqk5JiiEI8=) 5: F2706122D16E11F08E21851DC4F9AE02.roa (hash: 1g/LYub57mHA3FKdRrewudn4T1lvhyuClXZ61Nv+ZNw=) 6: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: sYy/5q9YDB/cIRu+BDtkJ8+lJ/FCCk8GJXN6Q05+XyA=) 7: 8F60E314584D11EE90C6141EC4F9AE02.roa (hash: iJ4zqOfhJNhHuoAZdvWWzKmADnr0nYywfMeTT9vEa3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388 Validity Not Before: Dec 18 23:26:00 2025 GMT Not After : Dec 25 23:26:00 2025 GMT Subject: CN=69448d88-077b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:ab:75:4a:74:fd:d1:2d:18:39:8a:5d:2a: 52:2f:c0:aa:bf:0e:bb:29:19:d4:ca:ba:76:19:8c: fe:87:e4:6a:3d:8b:20:f6:db:f8:69:35:8d:0e:2b: a2:75:15:95:2f:c1:48:00:81:53:c2:1d:45:8a:fd: 8a:70:7a:24:e6:4b:68:97:b6:54:34:a3:e9:1e:7c: 57:d8:1b:f9:65:bc:ec:4b:16:f7:17:6d:0a:e1:05: 37:44:b4:58:0a:ca:68:18:eb:83:a8:62:f7:fd:31: 74:d9:cc:65:91:80:0f:8f:ed:81:59:53:db:c7:0e: cf:95:44:f0:55:d2:4a:5f:ce:6f:ca:42:d9:6c:55: cf:f7:79:7e:8e:5e:ba:82:cc:97:af:6b:2c:b0:7e: d8:b5:b6:50:8d:0d:11:86:82:c1:3f:f7:bb:97:1f: 40:74:27:89:39:46:91:28:8f:79:f5:fd:07:81:d7: c7:79:fa:68:14:a2:5e:70:0e:48:db:b5:fa:06:1c: e0:25:67:8f:de:96:64:36:f1:da:1d:df:b2:27:f4: e3:c1:a2:92:14:ce:ff:e2:51:2e:5e:3f:e8:67:b7: a6:f9:e1:a5:95:24:06:71:fe:6e:fb:87:7e:f7:ea: f1:e5:b4:78:7c:a6:1e:ac:91:e5:ee:bd:1c:dd:2c: 12:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DF:E8:B5:54:8A:B8:17:D6:48:B6:6F:AD:5B:B5:48:31:50:94:3D X509v3 Authority Key Identifier: keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ce:7f:11:f6:03:bb:09:29:64:ca:53:0a:b0:a7:ce:35:71: a8:15:c5:64:c1:38:8e:43:d5:77:90:e4:0b:f7:77:7e:23:45: 11:8f:c3:72:4e:1d:c4:1c:8e:eb:a4:62:4d:11:73:fb:2e:91: 35:00:03:9d:19:65:fa:58:4e:c7:8f:02:a2:f9:04:35:f6:ee: c1:32:43:2f:c5:fa:57:a5:cc:6f:58:24:09:87:24:1c:f4:89: f5:7c:53:06:38:f3:14:2a:ea:c8:0c:37:40:ed:c1:0c:27:b2: a7:0d:30:5d:19:7e:63:26:95:64:07:22:08:fb:36:a7:54:87: 8a:6f:68:ee:f2:4c:fb:a9:f8:a5:cc:53:7a:fb:7d:a3:49:c6: ac:d0:bd:66:1b:93:dd:35:c2:0e:bb:17:b3:41:0d:6d:04:b8: ef:a7:1f:d8:5d:29:6b:52:98:b3:f1:8a:7e:86:89:89:d6:f6: 93:ac:6d:f1:3c:f8:66:c0:35:a5:f6:2c:b6:18:94:7d:c5:3a: 3a:94:5a:3d:6b:d9:80:62:cc:48:b1:94:f9:08:df:6c:8a:01: c1:9f:15:e1:70:0b:01:81:4a:d3:37:d5:e3:8a:f6:55:b5:c3: e3:a3:bc:07:d8:01:44:18:93:a5:16:6b:0a:a5:04:73:9e:82: d6:55:cf:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEY4OTc0MjJFNTAxMDA2RDI2MDFEODVBNTAxNzk1MzI2 QkFGRTczODgwHhcNMjUxMjE4MjMyNjAwWhcNMjUxMjI1MjMyNjAwWjAYMRYwFAYD VQQDDA02OTQ0OGQ4OC0wNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsySrdUp0/dEtGDmKXSpSL8Cqvw67KRnUyrp2GYz+h+RqPYsg9tv4aTWNDiui dRWVL8FIAIFTwh1Fiv2KcHok5ktol7ZUNKPpHnxX2Bv5ZbzsSxb3F20K4QU3RLRY CspoGOuDqGL3/TF02cxlkYAPj+2BWVPbxw7PlUTwVdJKX85vykLZbFXP93l+jl66 gsyXr2sssH7YtbZQjQ0RhoLBP/e7lx9AdCeJOUaRKI959f0HgdfHefpoFKJecA5I 27X6BhzgJWeP3pZkNvHaHd+yJ/TjwaKSFM7/4lEuXj/oZ7em+eGllSQGcf5u+4d+ 9+rx5bR4fKYerJHl7r0c3SwStwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXf6LVU irgX1ki2b61btUgxUJQ9MB8GA1UdIwQYMBaAFPiXQi5QEAbSYB2FpQF5Uya6/nOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0SmdIWVdsQVhsVEpyci1j NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KZENMbEFRQnRKZ0hZV2xBWGxUSnJyLWM0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0 SmdIWVdsQVhsVEpyci1jNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1zn8R9gO7CSlkylMKsKfONXGoFcVkwTiOQ9V3kOQL93d+I0URj8Ny Th3EHI7rpGJNEXP7LpE1AAOdGWX6WE7HjwKi+QQ19u7BMkMvxfpXpcxvWCQJhyQc 9In1fFMGOPMUKurIDDdA7cEMJ7KnDTBdGX5jJpVkByII+zanVIeKb2ju8kz7qfil zFN6+32jScas0L1mG5PdNcIOuxezQQ1tBLjvpx/YXSlrUpiz8Yp+homJ1vaTrG3x PPhmwDWl9iy2GJR9xTo6lFo9a9mAYsxIsZT5CN9sigHBnxXhcAsBgUrTN9XjivZV tcPjo7wH2AFEGJOlFmsKpQRznoLWVc9m -----END CERTIFICATE-----Generated at Sat Dec 20 20:04:29 2025 by rpki-client