This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: skug1abfo9nYO8Bu5/KkAQSQiqMO8O1l1/x+yprPis8= Subject key identifier: 79:41:76:8E:5F:81:EF:BA:CD:D3:45:36:C0:5F:69:18:8E:FE:C4:36 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0F89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0F7C Signing time: Sun 28 Dec 2025 17:14:23 +0000 Manifest this update: Sun 28 Dec 2025 17:14:22 +0000 Manifest next update: Sun 04 Jan 2026 17:14:22 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: m7sQiapoa15loudSJH2HkUcExBNhMOhJYVertWLZ6CI=) 2: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: J1q9B+GvWu0EHxlM4wrZ2tzbKSLE34bYP07mlS0yo3g=) 3: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: ujwlh3xKcro8Gn6vri+ysk2OetBXOQN4CKfvRdsI/Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 17:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3977 (0xf89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Dec 28 17:14:22 2025 GMT Not After : Jan 4 17:14:22 2026 GMT Subject: CN=6951656e-35bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:42:5b:76:ce:c6:44:ca:25:7c:02:b1:c2:97: 39:6e:25:93:01:70:f4:5f:bd:94:0a:fc:70:6e:aa: 9c:31:4d:c3:aa:fc:b7:e2:80:7f:75:99:90:d1:91: df:36:03:22:67:03:a2:ed:05:3c:17:13:3b:90:54: 3e:9f:df:35:b2:43:c8:eb:56:17:73:63:93:b7:cc: ea:90:3f:08:6d:a2:b4:fd:c0:35:7f:8d:c3:d9:ce: 1c:28:74:46:fa:e2:4c:a5:6a:a0:6d:15:7c:8e:30: 43:7f:36:c6:44:9a:66:0c:63:85:04:c2:9a:3d:6e: db:e4:36:fe:85:14:cc:29:3f:60:41:76:0d:bd:5d: 7a:a8:f5:d6:e8:e1:a0:7b:d6:07:e9:ee:16:a8:c0: ed:3c:dc:72:84:55:87:4e:b6:c5:ee:b6:d8:2c:41: 0b:37:a6:c6:4a:e5:c7:d1:c9:ec:06:64:aa:35:df: 20:79:c9:4e:03:01:a4:52:0f:73:a9:e4:19:99:40: 68:8c:a9:6b:9c:44:44:a1:95:77:f4:42:dc:9e:e0: 1a:91:cb:e6:5d:8f:6c:4d:86:60:94:00:fa:d6:0f: 01:9a:7f:a5:df:de:f3:b1:ec:2d:e8:1a:21:9a:0c: 21:39:ac:fd:82:07:2e:21:f2:5a:a4:c7:e0:03:ad: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:41:76:8E:5F:81:EF:BA:CD:D3:45:36:C0:5F:69:18:8E:FE:C4:36 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:6b:96:ba:46:1d:38:30:79:92:4e:a2:0e:c8:25:ea:93:48: e1:2b:63:11:4c:c1:b9:5e:14:49:f0:68:1d:ed:fa:fb:e6:7d: dc:0f:09:90:cd:cd:e9:ff:b4:94:1e:86:ad:1a:1d:ad:40:0b: 9e:54:6d:86:c5:b3:40:fc:53:09:d7:39:bd:44:80:cc:2c:67: 10:84:6a:77:14:f7:be:66:ee:1c:91:ac:91:fa:21:46:99:4e: 1a:d9:7a:87:09:ab:27:97:0e:a7:85:47:89:e9:18:4b:d0:93: 20:09:5d:6d:5d:0c:94:96:5b:8a:58:47:70:98:df:d5:3e:76: 6b:c7:07:fc:23:ea:e7:74:5b:b5:5c:d2:8f:ce:df:00:13:bf: d4:46:62:30:98:e7:36:93:44:46:bf:54:7e:77:6d:59:24:96: a9:36:ff:e9:5f:c3:0c:6f:f0:30:9e:60:bb:0e:6d:aa:7a:89: d1:c6:ed:40:b4:e0:4a:d8:43:39:87:fd:44:78:8b:06:43:db: 97:71:4a:99:50:fe:ab:f3:60:f8:f7:b4:d2:54:55:67:40:b1: 04:34:02:b8:1b:14:86:f6:14:01:87:a6:e1:81:0c:b6:33:cb: 82:b3:d5:a2:ed:85:f8:0c:26:0f:1c:49:96:9c:fd:f6:5c:53: bf:9b:c5:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjUxMjI4MTcxNDIyWhcNMjYwMTA0MTcxNDIyWjAYMRYwFAYD VQQDDA02OTUxNjU2ZS0zNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8EJbds7GRMolfAKxwpc5biWTAXD0X72UCvxwbqqcMU3Dqvy34oB/dZmQ0ZHf NgMiZwOi7QU8FxM7kFQ+n981skPI61YXc2OTt8zqkD8IbaK0/cA1f43D2c4cKHRG +uJMpWqgbRV8jjBDfzbGRJpmDGOFBMKaPW7b5Db+hRTMKT9gQXYNvV16qPXW6OGg e9YH6e4WqMDtPNxyhFWHTrbF7rbYLEELN6bGSuXH0cnsBmSqNd8geclOAwGkUg9z qeQZmUBojKlrnEREoZV39ELcnuAakcvmXY9sTYZglAD61g8Bmn+l397zsewt6Boh mgwhOaz9ggcuIfJapMfgA6242QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlBdo5f ge+6zdNFNsBfaRiO/sQ2MB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTa5a6Rh04MHmSTqIOyCXqk0jhK2MRTMG5XhRJ8Ggd7fr75n3cDwmQ zc3p/7SUHoatGh2tQAueVG2GxbNA/FMJ1zm9RIDMLGcQhGp3FPe+Zu4ckayR+iFG mU4a2XqHCasnlw6nhUeJ6RhL0JMgCV1tXQyUlluKWEdwmN/VPnZrxwf8I+rndFu1 XNKPzt8AE7/URmIwmOc2k0RGv1R+d21ZJJapNv/pX8MMb/AwnmC7Dm2qeonRxu1A tOBK2EM5h/1EeIsGQ9uXcUqZUP6r82D497TSVFVnQLEENAK4GxSG9hQBh6bhgQy2 M8uCs9Wi7YX4DCYPHEmWnP32XFO/m8XT -----END CERTIFICATE-----Generated at Mon Dec 29 07:38:44 2025 by rpki-client