This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: vqLtaCmwlGFniIZYCf4BsNs99KDN6dUPfoFVakUrFWE= Subject key identifier: 42:23:41:16:53:CA:EC:4D:F3:0C:EF:B5:98:5B:42:81:43:73:7D:FE Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: 0109 Signing time: Fri 19 Dec 2025 04:07:17 +0000 Manifest this update: Fri 19 Dec 2025 04:07:17 +0000 Manifest next update: Fri 26 Dec 2025 04:07:17 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: UA6y9G5sif3E8cX6fpMIRnr07WMSuD/yYfdVsOu/oDQ=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: rttfys3xf5DGoO8xT8j9r6Q4kgJ4GnHSyal9Ka16jwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Dec 19 04:07:17 2025 GMT Not After : Dec 26 04:07:17 2025 GMT Subject: CN=6944cf75-97f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:37:1a:ae:ef:63:f6:af:31:c2:8b:93:46: 4a:9c:20:02:ee:6a:0b:ab:60:75:1f:91:41:3f:4a: 32:d2:db:e8:b8:5d:1e:cd:57:69:e9:cc:09:bf:28: 79:8f:c4:57:28:61:f5:80:f3:a6:98:f6:49:87:14: 23:2c:f8:aa:0b:17:18:24:86:87:38:67:7c:e8:17: 72:03:0d:c7:51:70:8d:4e:c3:73:d6:65:12:d7:2d: 51:0e:29:a5:fa:0b:8e:fa:3f:f9:ee:5b:a0:a7:63: 43:af:76:21:ed:a5:bc:56:94:af:e2:62:ea:ae:b7: 89:ac:92:ea:b4:5d:99:b2:a1:db:11:6a:22:57:a4: 8d:2d:0e:af:2c:f7:7b:3a:fd:dd:fc:d3:01:bb:21: b4:47:b4:cf:ec:c9:9b:94:d5:54:72:62:90:84:91: 5a:7c:2b:9a:46:8e:da:57:4a:37:db:6e:ec:45:45: 79:68:fb:d0:75:c7:27:e8:53:bf:4e:48:1d:5a:37: 84:8e:74:1c:56:6d:36:4d:a2:46:03:6f:81:38:4c: be:e3:aa:b1:14:62:11:b0:59:d0:99:30:a3:21:18: 70:10:19:0d:0e:b2:0a:71:ad:7b:04:be:fd:05:a9: e4:10:7e:15:25:9e:85:7f:12:99:d6:c9:1a:50:7a: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:23:41:16:53:CA:EC:4D:F3:0C:EF:B5:98:5B:42:81:43:73:7D:FE X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:86:68:86:0a:d0:e9:4f:c5:4b:12:d0:93:0a:1f:88:24:9d: da:f4:3c:3d:c1:ba:02:43:28:c9:ce:8b:99:ba:50:ff:8c:46: 3d:68:2a:d9:07:1b:25:34:12:f7:e6:20:4a:19:e5:12:bf:44: d3:75:8a:54:8d:66:5e:4d:98:72:83:68:c1:56:6c:3e:57:b9: 2d:45:bd:50:6f:4b:1f:24:dc:4e:e7:59:83:02:d2:37:97:d5: a0:93:9a:c4:31:ee:c8:7e:b2:ce:e0:bd:ba:dd:ca:4c:39:d8: 7e:fd:87:5b:4f:b1:d3:eb:3e:26:6d:e9:c6:f2:85:41:89:f4: 2f:44:9c:fc:30:fd:48:87:6e:43:95:af:8d:eb:a4:fb:d2:af: 73:6d:a3:d4:22:c6:ce:72:2d:2f:43:da:19:7c:64:03:4a:69: 49:91:90:5b:12:cb:9f:83:9d:a7:a0:4d:e7:71:14:c6:78:e5: 5f:59:03:ef:d6:2e:eb:ae:60:2b:11:93:be:83:1a:9f:9d:12: 19:8d:7e:d2:69:90:4d:52:e1:8a:9c:04:86:52:6d:8d:ee:75: 4e:d3:45:7c:d2:fd:8e:39:3d:31:a8:12:31:e3:1e:2c:02:9e: c4:cc:dd:f6:29:c6:8a:8a:f8:7a:f4:72:fc:1a:4b:d0:d5:21: 52:ed:76:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjUxMjE5MDQwNzE3WhcNMjUxMjI2MDQwNzE3WjAYMRYwFAYD VQQDDA02OTQ0Y2Y3NS05N2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL43Gq7vY/avMcKLk0ZKnCAC7moLq2B1H5FBP0oy0tvouF0ezVdp6cwJvyh5 j8RXKGH1gPOmmPZJhxQjLPiqCxcYJIaHOGd86BdyAw3HUXCNTsNz1mUS1y1RDiml +guO+j/57lugp2NDr3Yh7aW8VpSv4mLqrreJrJLqtF2ZsqHbEWoiV6SNLQ6vLPd7 Ov3d/NMBuyG0R7TP7MmblNVUcmKQhJFafCuaRo7aV0o3227sRUV5aPvQdccn6FO/ TkgdWjeEjnQcVm02TaJGA2+BOEy+46qxFGIRsFnQmTCjIRhwEBkNDrIKca17BL79 BankEH4VJZ6FfxKZ1skaUHqhZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIjQRZT yuxN8wzvtZhbQoFDc33+MB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuhmiGCtDpT8VLEtCTCh+IJJ3a9Dw9wboCQyjJzouZulD/jEY9aCrZ BxslNBL35iBKGeUSv0TTdYpUjWZeTZhyg2jBVmw+V7ktRb1Qb0sfJNxO51mDAtI3 l9Wgk5rEMe7IfrLO4L263cpMOdh+/YdbT7HT6z4mbenG8oVBifQvRJz8MP1Ih25D la+N66T70q9zbaPUIsbOci0vQ9oZfGQDSmlJkZBbEsufg52noE3ncRTGeOVfWQPv 1i7rrmArEZO+gxqfnRIZjX7SaZBNUuGKnASGUm2N7nVO00V80v2OOT0xqBIx4x4s Ap7EzN32KcaKivh69HL8GkvQ1SFS7XZM -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:32 2025 by rpki-client