This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft File: JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json) Hash identifier: NlG9Zh4MZ8nualWBlVCmi+SDEafl/YoJ20fMt32NLI4= Subject key identifier: A3:80:44:76:D8:03:0E:43:A4:55:68:B0:D4:C6:4D:DE:A6:88:1F:ED Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E Certificate issuer: /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Certificate serial: 069B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft Manifest number: 0688 Signing time: Sat 20 Dec 2025 21:50:27 +0000 Manifest this update: Sat 20 Dec 2025 21:50:26 +0000 Manifest next update: Sat 27 Dec 2025 21:50:26 +0000 Files and hashes: 1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: ccJSncwzt1SWd0ibaJRr0m5S7tewiLwiGJbQBq06CgA=) 2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: R1Y6eiOJRngWNoMb/hZgB+WoPatpFv2M5OZIAKAIm84=) 3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: HVmlfUboreM+5lOMQKNuZ66xB592Xa6SyHAFupxeouM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1691 (0x69b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Validity Not Before: Dec 20 21:50:26 2025 GMT Not After : Dec 27 21:50:26 2025 GMT Subject: CN=69471a23-43e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:01:9d:b6:df:d9:9f:68:43:e0:e3:df:69: 31:5c:37:e8:7b:aa:37:9b:f5:64:a0:39:ce:96:8d: 67:43:c1:35:c0:e9:11:74:f1:dd:1a:54:9e:fe:27: bc:76:d6:7c:a1:a1:36:f9:e7:e3:c0:2e:d5:d0:9d: e4:dc:29:bf:99:2b:fc:44:73:e3:ac:51:45:cc:50: f9:23:47:79:f6:3a:80:3c:47:db:11:50:4e:45:c0: 53:af:f4:e9:c2:ab:ec:dc:49:35:9f:af:aa:8a:fd: 48:c5:22:1c:92:ad:1d:10:cb:75:ee:2f:f8:c9:79: 8d:36:dd:01:2e:49:0f:d9:67:5a:e8:65:a9:07:37: 3e:24:25:68:71:8e:3b:b2:81:46:1c:0e:e7:f2:e6: 47:5c:6a:f9:6a:2a:3b:dc:67:96:a3:2b:10:3e:6c: 02:e4:a5:e7:f1:c7:8f:d4:67:c6:e1:fb:d3:bb:c8: 71:97:2c:8e:0c:6c:c8:06:87:d5:f9:ec:07:cf:53: 7a:0e:9e:27:c4:c7:56:01:b1:f3:e1:32:41:af:7a: 53:7f:d3:ef:66:02:b1:b0:67:28:4c:91:59:f9:73: 5e:c8:14:89:3c:b3:b1:75:0a:1c:78:59:7c:a3:9a: b3:2c:ce:b8:fc:e7:36:a6:42:73:d3:79:6a:cf:a4: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:80:44:76:D8:03:0E:43:A4:55:68:B0:D4:C6:4D:DE:A6:88:1F:ED X509v3 Authority Key Identifier: keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:a5:88:ec:1e:eb:0e:4d:d1:eb:e2:2f:ef:59:f2:58:49:a1: 32:65:4d:0b:c0:28:25:73:83:c0:0c:af:6d:30:9a:bd:ad:ba: 45:14:ff:83:fc:50:4f:dd:82:87:1b:9b:a8:74:9b:6e:8b:bd: 4e:58:99:58:6b:d5:59:aa:c5:02:2a:4c:85:86:49:ca:c6:c1: a0:0b:8d:57:44:b7:81:33:62:01:eb:1d:c9:a7:03:c9:f5:85: 0d:33:0c:f9:30:d3:d6:ca:61:dd:52:d3:8a:0c:7c:b3:b7:ef: 54:31:33:53:5c:00:ba:24:1b:ed:39:df:6d:12:d7:72:4c:2f: c3:c5:ec:1d:4d:fb:04:3b:ab:bd:f7:ae:e5:70:be:3c:51:a0: 46:63:88:81:ba:0e:e8:d0:44:a6:01:05:b2:b3:5e:5a:28:21: a5:d4:fd:92:e1:a0:11:a7:34:87:c4:da:f7:07:88:88:ee:fa: da:38:2f:6f:bb:cc:bd:51:07:8b:2b:08:c6:4b:38:ca:a3:f2: c7:1f:5b:02:94:a9:33:1e:68:1d:e9:bc:b4:bb:57:34:e2:64: d0:4a:f6:70:a5:41:ce:05:4a:11:3f:22:da:3d:bb:7d:34:f1: fa:95:f1:03:16:12:60:0b:a4:c7:32:7d:a4:26:77:a4:ce:cc: da:cd:d7:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCRUYxMTAvBgNVBAUTKDI0MTI4NzY0MzBFMkFDRjRBMUE4M0U1QTU3NUM3Rjk3 QUIyQjNCMkUwHhcNMjUxMjIwMjE1MDI2WhcNMjUxMjI3MjE1MDI2WjAYMRYwFAYD VQQDDA02OTQ3MWEyMy00M2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymcBnbbf2Z9oQ+Dj32kxXDfoe6o3m/VkoDnOlo1nQ8E1wOkRdPHdGlSe/ie8 dtZ8oaE2+efjwC7V0J3k3Cm/mSv8RHPjrFFFzFD5I0d59jqAPEfbEVBORcBTr/Tp wqvs3Ek1n6+qiv1IxSIckq0dEMt17i/4yXmNNt0BLkkP2Wda6GWpBzc+JCVocY47 soFGHA7n8uZHXGr5aio73GeWoysQPmwC5KXn8ceP1GfG4fvTu8hxlyyODGzIBofV +ewHz1N6Dp4nxMdWAbHz4TJBr3pTf9PvZgKxsGcoTJFZ+XNeyBSJPLOxdQoceFl8 o5qzLM64/Oc2pkJz03lqz6QLfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOARHbY Aw5DpFVosNTGTd6miB/tMB8GA1UdIwQYMBaAFCQSh2Qw4qz0oag+Wldcf5erKzsu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJFRi9GNzkxQzM3RUEw NDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQU2hxRDVhVjF4X2w2c3JP eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pCS0haRERpclBTaHFENWFWMXhfbDZzck95NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJFRi9GNzkxQzM3RUEwNDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQ U2hxRDVhVjF4X2w2c3JPeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZpYjsHusOTdHr4i/vWfJYSaEyZU0LwCglc4PADK9tMJq9rbpFFP+D /FBP3YKHG5uodJtui71OWJlYa9VZqsUCKkyFhknKxsGgC41XRLeBM2IB6x3JpwPJ 9YUNMwz5MNPWymHdUtOKDHyzt+9UMTNTXAC6JBvtOd9tEtdyTC/DxewdTfsEO6u9 967lcL48UaBGY4iBug7o0ESmAQWys15aKCGl1P2S4aARpzSHxNr3B4iI7vraOC9v u8y9UQeLKwjGSzjKo/LHH1sClKkzHmgd6by0u1c04mTQSvZwpUHOBUoRPyLaPbt9 NPH6lfEDFhJgC6THMn2kJnekzszazdd8 -----END CERTIFICATE-----Generated at Sat Dec 20 23:40:21 2025 by rpki-client