This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft File: JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft (raw, json) Hash identifier: jCS0npCU3gBIrfujzR8pg1Ms0mD3Zh2laJME46yvxOI= Subject key identifier: BE:EB:3E:59:36:81:48:C4:4B:5A:0F:3A:96:F9:E6:DD:B8:C5:DA:33 Authority key identifier: 24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F Certificate issuer: /CN=A9198F67/serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft Manifest number: 6F Signing time: Fri 19 Dec 2025 05:52:43 +0000 Manifest this update: Fri 19 Dec 2025 05:52:43 +0000 Manifest next update: Fri 26 Dec 2025 05:52:43 +0000 Files and hashes: 1: JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl (hash: ACHDer5RkPEwaBF0V97hsu+C6w3H+VopzC/khBOe+Bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F67, serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Validity Not Before: Dec 19 05:52:43 2025 GMT Not After : Dec 26 05:52:43 2025 GMT Subject: CN=6944e82b-65b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:70:cc:89:8a:fc:e0:06:ac:71:bc:81:8e:d2: bc:b9:58:1b:e4:1f:6b:cb:e4:d9:ea:08:e2:4a:ca: 78:78:d0:ac:ea:91:78:b0:c5:23:72:6c:65:4c:ef: 28:cb:78:3f:0e:fc:77:0b:9d:ab:6b:b4:c5:84:2f: 3e:fa:15:b1:f4:94:70:cb:e3:0e:9c:93:da:ab:10: b8:1e:d1:86:61:12:27:bc:38:f7:48:fb:69:fe:81: 15:45:cd:04:e6:36:b9:12:dd:1b:8e:e5:a9:0b:f0: 83:ec:a6:37:b3:00:0e:fe:40:8b:c2:cb:94:30:ec: b6:5f:78:c5:13:4d:6e:d6:95:02:04:c8:ea:cb:95: 63:1b:34:40:53:10:73:db:5c:8a:3f:8a:b1:89:5e: ad:e2:95:e5:dd:51:f7:d7:d1:2f:6a:b3:68:14:ec: 5c:4f:63:8b:51:5f:b9:47:f1:7a:64:ff:e1:24:9d: 2a:77:c6:dc:df:5f:f8:27:5c:16:05:6c:40:24:c8: 75:a5:d4:8a:9a:f7:62:fc:34:b8:f0:2d:e3:56:fb: ea:ba:00:99:2d:5c:f7:d3:02:0c:5a:3a:aa:ca:c3: 6c:ff:c0:02:4f:88:10:18:78:29:1f:5b:8a:5d:c9: d3:00:d3:00:5e:e9:8a:5d:e7:19:8a:af:ee:42:24: ea:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EB:3E:59:36:81:48:C4:4B:5A:0F:3A:96:F9:E6:DD:B8:C5:DA:33 X509v3 Authority Key Identifier: keyid:24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:af:df:63:7e:c2:0a:f1:db:b7:7c:6d:79:9d:cc:a9:b9:eb: 37:c5:d1:0f:07:f7:cf:7d:7f:a9:8a:9f:28:eb:2d:44:02:6c: 4b:5b:5d:5e:11:dc:a3:8e:6d:c0:09:57:78:22:7b:86:c9:2c: e2:2e:15:f8:bb:6e:f2:78:4f:f6:7f:de:1c:33:2b:ae:82:f0: e9:38:45:73:11:a4:74:d1:03:47:b5:5f:be:68:4e:75:e1:4d: fb:d9:87:01:b2:e1:29:fe:1f:99:20:d6:68:dd:d4:68:2d:56: ce:4a:db:17:f6:56:20:0c:06:57:5d:2a:a9:a3:e5:6e:d2:88: d6:cf:c8:6c:ae:db:84:26:cf:51:a0:01:1e:4b:53:63:a0:9f: 35:3f:bc:87:d9:46:7f:60:fd:dd:fe:b5:21:0a:69:f8:cc:4a: 5f:ef:56:3d:6f:59:bf:4e:20:33:aa:74:40:4e:42:e7:71:78: 30:ba:fa:28:5a:36:46:74:a1:7b:ca:29:82:cb:3e:34:84:2a: b4:ec:7e:fe:cd:62:a1:68:1b:9f:dc:21:7d:de:d4:cb:64:ba: c0:f9:3a:33:c4:ed:7e:29:3a:fc:ad:0a:6a:c7:5d:4a:ce:cc: 1d:2f:f6:80:eb:ea:9f:a1:f6:eb:e3:4a:e8:47:06:1a:80:d7: ad:a3:53:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEY2NzExMC8GA1UEBRMoMjQ4QTJFQ0NDNzBGOUUzRTk4NEJCNDZGQjE5RENEM0FB OUFEOTE1RjAeFw0yNTEyMTkwNTUyNDNaFw0yNTEyMjYwNTUyNDNaMBgxFjAUBgNV BAMMDTY5NDRlODJiLTY1YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCcMyJivzgBqxxvIGO0ry5WBvkH2vL5NnqCOJKynh40KzqkXiwxSNybGVM7yjL eD8O/HcLnatrtMWELz76FbH0lHDL4w6ck9qrELge0YZhEie8OPdI+2n+gRVFzQTm NrkS3RuO5akL8IPspjezAA7+QIvCy5Qw7LZfeMUTTW7WlQIEyOrLlWMbNEBTEHPb XIo/irGJXq3ileXdUffX0S9qs2gU7FxPY4tRX7lH8Xpk/+EknSp3xtzfX/gnXBYF bEAkyHWl1Iqa92L8NLjwLeNW++q6AJktXPfTAgxaOqrKw2z/wAJPiBAYeCkfW4pd ydMA0wBe6Ypd5xmKr+5CJOpjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvus+WTaB SMRLWg86lvnm3bjF2jMwHwYDVR0jBBgwFoAUJIouzMcPnj6YS7RvsZ3NOqmtkV8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4RjY3L0NBMDExMjYyMzA4 OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2WVM3UnZzWjNOT3FtdGtW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSklvdXpNY1BuajZZUzdSdnNaM05PcW10a1Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 RjY3L0NBMDExMjYyMzA4OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2 WVM3UnZzWjNOT3FtdGtWOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACev32N+wgrx27d8bXmdzKm56zfF0Q8H9899f6mKnyjrLUQCbEtbXV4R 3KOObcAJV3gie4bJLOIuFfi7bvJ4T/Z/3hwzK66C8Ok4RXMRpHTRA0e1X75oTnXh TfvZhwGy4Sn+H5kg1mjd1GgtVs5K2xf2ViAMBlddKqmj5W7SiNbPyGyu24Qmz1Gg AR5LU2OgnzU/vIfZRn9g/d3+tSEKafjMSl/vVj1vWb9OIDOqdEBOQudxeDC6+iha NkZ0oXvKKYLLPjSEKrTsfv7NYqFoG5/cIX3e1MtkusD5OjPE7X4pOvytCmrHXUrO zB0v9oDr6p+h9uvjSuhHBhqA162jU4g= -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:22 2025 by rpki-client