This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: 95RFPTnFbnLLYl3I/+aSi658PGquC6d6PdiRFOJG/0I= Subject key identifier: 51:7D:FE:79:25:04:01:33:7E:47:81:8A:96:7B:42:B8:DC:D6:09:0E Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 04F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 04E0 Signing time: Thu 18 Dec 2025 23:08:24 +0000 Manifest this update: Thu 18 Dec 2025 23:08:23 +0000 Manifest next update: Thu 25 Dec 2025 23:08:23 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: A2jl1s28yTk5b774OANJxMAkVsxJ1FfHzhgWS7C7/ls=) 2: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: q6OwG8Ta12XGUTNNsJMpzMzGxPGbtxAnBFH7/JXrdgc=) 3: C7C191A0D7D911F0BE4EFACC9BD3641D.roa (hash: 40a30MQYhSi/4kDcgxKAHqwPUDpt/D12CkG2Eyby4K0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Dec 18 23:08:23 2025 GMT Not After : Dec 25 23:08:23 2025 GMT Subject: CN=69448968-4cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:38:4e:2c:ce:1e:5e:ae:ae:41:fa:e8:57: 31:56:97:82:e2:88:ca:5d:24:38:79:ae:71:cc:e0: 29:07:c9:7a:28:b8:0a:ef:46:45:ec:5c:8c:92:2b: d8:64:92:db:8a:cf:d8:52:19:92:63:6f:08:f3:04: 99:1d:97:5b:51:f2:5e:e7:21:05:2f:d9:bc:e6:c2: 4b:28:bf:52:15:95:c2:ec:1d:9f:0c:44:29:04:54: 6d:e4:e7:88:8f:7d:5c:c7:ed:7c:21:b7:e5:42:d4: 58:29:53:bf:0e:4c:39:9e:5f:30:6a:0b:4b:d7:16: 90:a3:01:71:dd:88:0c:7c:2c:32:ba:a4:33:ad:17: ce:13:3f:39:f5:69:7b:74:bf:48:9f:59:a0:fe:27: a3:3e:d7:cf:c7:a8:01:be:a8:20:b2:0f:f1:91:c8: 68:9f:dd:72:7c:1d:1c:7d:79:b1:a3:d7:b9:d8:d7: 16:f6:10:67:71:34:98:b5:3f:38:e1:b6:b6:85:00: e9:5e:71:e0:2f:6c:bd:74:f1:23:90:9c:12:12:ca: 92:58:a7:9a:86:8e:b6:82:c7:25:ce:be:14:0a:d2: 0b:52:7e:2a:e5:c8:df:ec:47:e8:43:0b:7d:b5:09: a8:48:e3:52:78:37:b0:80:6d:28:6f:80:95:5f:b3: 0e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7D:FE:79:25:04:01:33:7E:47:81:8A:96:7B:42:B8:DC:D6:09:0E X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:c3:15:08:29:3f:60:d6:26:61:80:79:4f:7b:13:b6:c1:a2: 47:bb:c9:bc:62:66:c7:0a:84:d7:c8:f5:89:06:bc:cf:24:c9: a0:7e:28:05:f8:d5:69:03:24:bb:51:57:17:5b:a5:3a:00:38: b9:ce:d0:7b:b3:df:b9:9e:d1:14:d4:40:ac:62:94:af:bb:e8: e6:39:02:bc:41:cc:1e:1e:d0:c5:08:6b:19:42:c7:e4:2f:57: 53:3a:b3:37:23:77:05:0b:21:c6:88:2c:c4:ee:c4:5f:c8:c7: 13:d9:a2:96:19:cb:68:06:be:d8:a0:2e:17:82:23:71:8a:db: a7:50:a3:b0:bd:cb:02:0f:e9:50:1a:52:e1:5e:7e:97:57:f1: 8c:0d:83:ea:35:90:96:d0:40:e2:38:11:9f:bd:89:71:d5:f1: ac:8c:f1:96:dc:7d:46:30:ba:07:5a:b7:ef:cd:6c:93:fc:24: c4:28:0c:0f:95:0e:15:e2:04:e5:ca:72:f8:6b:a0:39:64:6c: 55:e5:e0:2e:ec:f8:c9:ff:9a:1a:1a:14:d1:3a:ae:9a:61:1e: c2:cf:20:1a:0a:d2:be:4b:c3:49:22:92:54:31:26:51:ad:49: 68:7b:60:d6:7a:ca:3a:ac:b6:f7:c0:75:fb:9f:eb:ec:45:77: d1:bc:e9:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjUxMjE4MjMwODIzWhcNMjUxMjI1MjMwODIzWjAYMRYwFAYD VQQDDA02OTQ0ODk2OC00Y2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN84TizOHl6urkH66FcxVpeC4ojKXSQ4ea5xzOApB8l6KLgK70ZF7FyMkivY ZJLbis/YUhmSY28I8wSZHZdbUfJe5yEFL9m85sJLKL9SFZXC7B2fDEQpBFRt5OeI j31cx+18IbflQtRYKVO/Dkw5nl8wagtL1xaQowFx3YgMfCwyuqQzrRfOEz859Wl7 dL9In1mg/iejPtfPx6gBvqggsg/xkchon91yfB0cfXmxo9e52NcW9hBncTSYtT84 4ba2hQDpXnHgL2y9dPEjkJwSEsqSWKeaho62gsclzr4UCtILUn4q5cjf7EfoQwt9 tQmoSONSeDewgG0ob4CVX7MOzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFF9/nkl BAEzfkeBipZ7Qrjc1gkOMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjwxUIKT9g1iZhgHlPexO2waJHu8m8YmbHCoTXyPWJBrzPJMmgfigF +NVpAyS7UVcXW6U6ADi5ztB7s9+5ntEU1ECsYpSvu+jmOQK8QcweHtDFCGsZQsfk L1dTOrM3I3cFCyHGiCzE7sRfyMcT2aKWGctoBr7YoC4XgiNxitunUKOwvcsCD+lQ GlLhXn6XV/GMDYPqNZCW0EDiOBGfvYlx1fGsjPGW3H1GMLoHWrfvzWyT/CTEKAwP lQ4V4gTlynL4a6A5ZGxV5eAu7PjJ/5oaGhTROq6aYR7CzyAaCtK+S8NJIpJUMSZR rUloe2DWeso6rLb3wHX7n+vsRXfRvOkh -----END CERTIFICATE-----Generated at Sat Dec 20 22:49:04 2025 by rpki-client