This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft File: JSwA6X56eGlZOIzyBKTH5kVYDGg.mft (raw, json) Hash identifier: rUTDOdvPbFmFPIwp+/jmeoKDJnRrf4IfyuWzJ8pl48I= Subject key identifier: F9:78:BE:0E:85:14:63:7A:4F:4A:E6:1B:20:80:83:A8:F0:92:BB:C6 Authority key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68 Certificate issuer: /CN=A919DA26/serialNumber=252C00E97E7A786959388CF204A4C7E645580C68 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft Manifest number: D3 Signing time: Wed 31 Dec 2025 01:12:14 +0000 Manifest this update: Wed 31 Dec 2025 01:12:13 +0000 Manifest next update: Wed 07 Jan 2026 01:12:13 +0000 Files and hashes: 1: JSwA6X56eGlZOIzyBKTH5kVYDGg.crl (hash: dVSHtUeNz4wDwKKenUzcPLU/09AGJruCC+qEW+AjXOY=) 2: F17996F2B21C11EFBDB2BA25C4F9AE02.roa (hash: Ze1T47AivqwEiqsuxqeYxl8UpGN8xGhxkmK8W5sniC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 01:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA26, serialNumber=252C00E97E7A786959388CF204A4C7E645580C68 Validity Not Before: Dec 31 01:12:13 2025 GMT Not After : Jan 7 01:12:13 2026 GMT Subject: CN=6954786e-bdd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:8f:3d:d4:41:dc:93:0a:27:aa:0b:51:ec: 0a:7f:c4:9e:c0:43:b5:48:2c:04:99:10:aa:8a:ce: 5a:d7:88:0d:b0:3e:31:c9:19:bc:2b:04:99:a1:f9: f8:7b:45:04:53:d7:6f:8b:69:8c:13:9d:e8:86:c0: cf:54:4a:9b:34:78:ab:c5:d7:70:00:50:a7:50:c4: b0:b7:eb:00:93:95:e4:3f:ba:a2:27:df:25:2d:f4: 77:ef:cd:54:bc:b1:f6:84:76:58:e7:4b:d2:ca:84: 13:80:70:0d:25:aa:9d:22:a9:45:a3:f2:07:5e:d1: 8e:0e:fc:72:5c:21:fd:5f:43:4b:ad:49:65:f6:8d: 4b:eb:5a:4a:88:cf:75:7d:92:9e:c9:83:0a:48:ac: a3:57:0d:ae:0f:ad:65:fb:39:a3:69:b0:0e:00:0e: 9b:66:2e:30:9f:84:e6:f3:32:91:b1:6e:b1:dd:48: cf:e2:45:bb:97:4f:2f:72:27:f4:07:72:af:e6:cc: 1e:8c:7c:ff:fb:99:f5:a4:d8:de:13:d5:92:f7:58: 9c:d4:3c:5d:79:d2:4d:72:18:91:18:94:29:65:63: 35:ed:b6:1c:af:8c:36:54:8d:ec:3b:f2:55:a7:24: c4:65:3b:d1:8a:19:9c:4c:9e:36:5f:be:7a:cd:33: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:78:BE:0E:85:14:63:7A:4F:4A:E6:1B:20:80:83:A8:F0:92:BB:C6 X509v3 Authority Key Identifier: keyid:25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:f7:1d:08:f4:26:15:e4:60:b6:a1:f7:65:52:df:31:69:3d: 1e:75:ed:77:e8:e7:83:74:57:7a:0d:50:ca:53:b2:eb:56:f9: 41:d6:f5:f0:c9:8e:d7:0a:ad:47:57:cb:f8:d8:a7:4f:0b:df: 08:25:ad:dd:8a:96:34:75:7c:0d:b1:e5:a1:c3:d8:2c:dc:12: f9:c5:09:ca:e9:19:7f:53:da:56:99:46:25:ac:30:16:e8:4a: 38:43:9d:22:1b:f2:60:a5:8f:93:2d:43:f9:96:f8:b9:30:27: bf:55:6d:6e:40:2e:be:8c:9f:90:92:3e:3a:20:04:d9:d5:8d: e3:cc:5a:a1:dc:bd:c4:d1:b1:13:fc:ba:0d:21:dc:89:e7:b4: 1a:f4:65:32:07:68:9f:6d:85:41:da:6d:11:5d:9a:ff:44:a9: cc:d9:9c:f4:05:d3:aa:8b:7b:1f:cf:81:50:ac:ee:38:f2:07: 7d:f3:85:de:64:e5:dd:d6:d3:b6:e1:82:7f:ab:2b:93:e9:20: fe:87:e2:a9:91:c8:b7:5b:f1:35:62:ac:70:48:1b:4b:5f:aa: fe:5a:9e:10:a1:24:78:ef:7d:ed:d5:af:d2:f3:0c:1c:75:5d: 2a:0d:25:16:b5:b9:60:0a:24:6d:5a:44:61:eb:d5:97:4f:83: 0b:1d:d3:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBMjYxMTAvBgNVBAUTKDI1MkMwMEU5N0U3QTc4Njk1OTM4OENGMjA0QTRDN0U2 NDU1ODBDNjgwHhcNMjUxMjMxMDExMjEzWhcNMjYwMTA3MDExMjEzWjAYMRYwFAYD VQQDDA02OTU0Nzg2ZS1iZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOOPPdRB3JMKJ6oLUewKf8SewEO1SCwEmRCqis5a14gNsD4xyRm8KwSZofn4 e0UEU9dvi2mME53ohsDPVEqbNHirxddwAFCnUMSwt+sAk5XkP7qiJ98lLfR3781U vLH2hHZY50vSyoQTgHANJaqdIqlFo/IHXtGODvxyXCH9X0NLrUll9o1L61pKiM91 fZKeyYMKSKyjVw2uD61l+zmjabAOAA6bZi4wn4Tm8zKRsW6x3UjP4kW7l08vcif0 B3Kv5swejHz/+5n1pNjeE9WS91ic1DxdedJNchiRGJQpZWM17bYcr4w2VI3sO/JV pyTEZTvRihmcTJ42X756zTPUuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl4vg6F FGN6T0rmGyCAg6jwkrvGMB8GA1UdIwQYMBaAFCUsAOl+enhpWTiM8gSkx+ZFWAxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REEyNi9GNTEwNUU0Q0Ey RjcxMUVGQTIzNjhGNzdDNEY5QUUwMi9KU3dBNlg1NmVHbFpPSXp5QktUSDVrVllE R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pTd0E2WDU2ZUdsWk9JenlCS1RINWtWWURHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REEyNi9GNTEwNUU0Q0EyRjcxMUVGQTIzNjhGNzdDNEY5QUUwMi9KU3dBNlg1NmVH bFpPSXp5QktUSDVrVllER2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ9x0I9CYV5GC2ofdlUt8xaT0ede136OeDdFd6DVDKU7LrVvlB1vXw yY7XCq1HV8v42KdPC98IJa3dipY0dXwNseWhw9gs3BL5xQnK6Rl/U9pWmUYlrDAW 6Eo4Q50iG/JgpY+TLUP5lvi5MCe/VW1uQC6+jJ+Qkj46IATZ1Y3jzFqh3L3E0bET /LoNIdyJ57Qa9GUyB2ifbYVB2m0RXZr/RKnM2Zz0BdOqi3sfz4FQrO448gd984Xe ZOXd1tO24YJ/qyuT6SD+h+Kpkci3W/E1YqxwSBtLX6r+Wp4QoSR4733t1a/S8wwc dV0qDSUWtblgCiRtWkRh69WXT4MLHdOz -----END CERTIFICATE-----Generated at Wed Dec 31 19:35:06 2025 by rpki-client