This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft File: 1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json) Hash identifier: 5TZkvRSXPGdTFgtrOGthY/dH9BT3FX/40aC6NW9IJrg= Subject key identifier: 19:28:C0:CF:63:EA:27:AD:DC:E1:FB:4B:E4:50:B5:CB:CA:B4:5C:12 Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4 Certificate issuer: /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4 Certificate serial: 0458 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft Manifest number: 0451 Signing time: Fri 26 Dec 2025 23:16:40 +0000 Manifest this update: Fri 26 Dec 2025 23:16:39 +0000 Manifest next update: Fri 02 Jan 2026 23:16:39 +0000 Files and hashes: 1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: 7QLZqiNlljX7Ls3I1QABeOiEXp6dmmu1PFAJXPTD6d4=) 2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: SCsr6a/OxC+h0TbqqqQWA1WP6sx9Kte4TE8O/kgTqE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 23:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4 Validity Not Before: Dec 26 23:16:39 2025 GMT Not After : Jan 2 23:16:39 2026 GMT Subject: CN=694f1758-d949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:9d:5a:41:f0:8b:42:d7:13:2d:96:11:fe: 82:c2:1b:c3:8d:2e:73:e4:cb:74:de:1d:5e:49:60: 64:d1:86:8a:9d:07:18:1e:76:15:bf:9f:f3:ba:f2: 02:3e:5d:a3:bd:6a:be:17:48:e0:3e:4a:4a:14:7e: 62:b9:d7:fb:56:88:68:42:8c:be:1d:f9:4a:8f:7a: 48:f8:47:10:d9:b4:19:62:f7:f5:2b:30:02:68:d8: bc:a2:7e:9a:d6:ad:8e:e5:c7:51:02:7b:9c:e0:93: 8d:e1:81:f3:54:ae:b8:4a:b4:96:ec:36:69:32:57: f9:2d:14:49:96:8f:94:b2:dc:3e:e7:22:1a:b5:83: e6:40:70:98:6a:46:00:15:66:39:2a:44:87:08:14: dd:2f:50:83:aa:68:ff:7a:7f:cd:72:5f:f1:b9:70: 39:60:41:d2:8e:26:a4:8e:14:83:04:41:1f:85:29: 59:71:a6:be:2b:4a:4b:e4:4c:d1:e5:20:af:53:72: 23:cc:e3:f6:f5:32:2c:99:03:22:a9:69:26:61:9b: f8:8e:ff:35:c1:9d:8f:3b:65:fc:57:a0:09:91:7e: 88:d4:7a:ce:a9:38:1c:17:a1:cc:7a:6d:e8:f3:ca: a8:09:30:70:c2:d6:32:52:80:89:24:c4:7e:d5:e7: 78:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:28:C0:CF:63:EA:27:AD:DC:E1:FB:4B:E4:50:B5:CB:CA:B4:5C:12 X509v3 Authority Key Identifier: keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:69:c3:ab:ee:c0:bb:fa:dd:66:85:d6:5b:9d:95:33:bd:4a: 24:48:33:4f:fa:16:56:aa:83:18:00:97:49:d7:91:ef:4f:a1: c9:4e:71:aa:71:dd:bf:41:93:41:6d:c3:12:d0:e9:fa:5e:59: 86:de:e3:3d:3f:fd:88:ba:22:cb:f9:50:39:6c:8f:e4:10:3a: a8:21:d7:c7:77:33:57:b9:e3:af:41:af:1d:49:12:6a:83:8f: 5e:56:a2:18:79:26:3e:bd:1d:1d:18:ca:d1:35:d0:ca:55:aa: 0b:8b:a5:86:9b:ce:40:59:10:8a:b0:e5:47:1c:c9:3e:d3:aa: 0b:42:d6:aa:8a:37:eb:09:3f:59:5d:50:34:05:3c:db:15:73: 00:79:99:58:54:5a:54:db:9b:39:45:d1:3d:50:f7:98:22:62: e9:8f:b4:f5:fa:3f:94:3b:59:a2:d0:f4:ca:51:43:95:5f:f1: 15:a7:3e:58:35:47:8e:4b:ec:a4:f2:4f:38:b5:c2:ac:4f:1a: 53:3c:90:af:ac:36:5d:82:24:78:ef:43:04:83:93:75:a3:ba: 0b:6c:30:b0:11:88:26:21:5d:3b:ed:2c:4f:5d:2d:58:7d:18: 01:02:25:06:b1:5d:a7:07:c3:29:20:89:6a:2a:29:dc:81:f5: 4c:4e:9c:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCMUIxMTAvBgNVBAUTKEQ2MzY1MjQ1MEVBNzU1OTEzQ0YzMUFGQ0ZBOUEyOTIx QTQ4QUUxQTQwHhcNMjUxMjI2MjMxNjM5WhcNMjYwMTAyMjMxNjM5WjAYMRYwFAYD VQQDDA02OTRmMTc1OC1kOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonGdWkHwi0LXEy2WEf6CwhvDjS5z5Mt03h1eSWBk0YaKnQcYHnYVv5/zuvIC Pl2jvWq+F0jgPkpKFH5iudf7VohoQoy+HflKj3pI+EcQ2bQZYvf1KzACaNi8on6a 1q2O5cdRAnuc4JON4YHzVK64SrSW7DZpMlf5LRRJlo+Ustw+5yIatYPmQHCYakYA FWY5KkSHCBTdL1CDqmj/en/Ncl/xuXA5YEHSjiakjhSDBEEfhSlZcaa+K0pL5EzR 5SCvU3IjzOP29TIsmQMiqWkmYZv4jv81wZ2PO2X8V6AJkX6I1HrOqTgcF6HMem3o 88qoCTBwwtYyUoCJJMR+1ed42wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkowM9j 6iet3OH7S+RQtcvKtFwSMB8GA1UdIwQYMBaAFNY2UkUOp1WRPPMa/PqaKSGkiuGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkIxQi9EOUI5Qzg4QzdG MzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZaRTg4eHI4LXBvcElhU0s0 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFqWlNSUTZuVlpFODh4cjgtcG9wSWFTSzRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkIxQi9EOUI5Qzg4QzdGMzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZa RTg4eHI4LXBvcElhU0s0YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZacOr7sC7+t1mhdZbnZUzvUokSDNP+hZWqoMYAJdJ15HvT6HJTnGq cd2/QZNBbcMS0On6XlmG3uM9P/2IuiLL+VA5bI/kEDqoIdfHdzNXueOvQa8dSRJq g49eVqIYeSY+vR0dGMrRNdDKVaoLi6WGm85AWRCKsOVHHMk+06oLQtaqijfrCT9Z XVA0BTzbFXMAeZlYVFpU25s5RdE9UPeYImLpj7T1+j+UO1mi0PTKUUOVX/EVpz5Y NUeOS+yk8k84tcKsTxpTPJCvrDZdgiR470MEg5N1o7oLbDCwEYgmIV077SxPXS1Y fRgBAiUGsV2nB8MpIIlqKincgfVMTpzn -----END CERTIFICATE-----Generated at Sat Dec 27 10:50:07 2025 by rpki-client