This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft File: rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json) Hash identifier: DGAb3J4h7T8GhLjb+hahA3vVC0BlrBn3bIPkMqAJfSU= Subject key identifier: 81:24:FA:C3:D4:F0:68:E0:43:49:F3:81:FB:46:9D:0E:CA:94:BB:47 Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft Manifest number: 024D Signing time: Fri 05 Dec 2025 00:10:32 +0000 Manifest this update: Fri 05 Dec 2025 00:10:32 +0000 Manifest next update: Fri 12 Dec 2025 00:10:32 +0000 Files and hashes: 1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: pjrZusHjwXCAjXToCwL+LXAL6mrdDsLNK/m+IOHXdkI=) 2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: +0GRxYO2GKHW0qvFUQkbtc7koZkiCwiB0U5TojZcsvM=) 3: 1327E728C4D611F08E87F351C4F9AE02.roa (hash: O/yg3aFI704dQ5gqO9mIGal9BMnqrltgiZFyZJ3iS0M=) 4: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: Ma1fK8A2BnEQxkntLkAUafOlFP+pb/E30IvuoC7r5bk=) 5: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: S5t27YbvUIBsEi+zxF5EsG2NIOAo49u3/IX5fyPJ2Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Validity Not Before: Dec 5 00:10:32 2025 GMT Not After : Dec 12 00:10:32 2025 GMT Subject: CN=693222f8-abba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:fd:7a:65:78:c3:f5:82:8f:39:da:a9:bd: d9:e2:b7:ac:06:dd:1e:fc:ad:88:c3:74:fb:87:28: f8:06:96:7f:5c:41:e7:c7:e2:49:f4:8a:86:49:06: fc:40:89:7d:19:f2:db:5e:1c:be:94:dd:f8:19:2f: 46:bd:3e:38:22:70:b4:d7:a3:b7:8d:ac:2d:98:6c: e6:93:4a:8b:4d:31:a5:26:32:84:0b:95:a6:c1:44: fa:56:e5:e0:dc:35:a6:5d:c4:f3:39:3c:0e:f2:c4: 58:64:71:b9:1d:46:f1:12:f8:43:30:92:68:b9:41: 43:01:9f:3c:29:0a:2e:62:09:b2:80:c6:45:f1:90: ca:ef:c2:70:80:df:59:c0:c9:56:8e:6c:d0:ef:b4: d0:e6:4a:cd:dc:f0:72:6b:2f:f1:66:4f:d2:b2:34: 3c:c5:d8:0e:00:29:54:f3:c8:8c:0c:45:13:1a:2c: 37:33:97:fc:21:d4:c7:05:f3:27:17:d2:30:1b:53: b3:d7:df:ef:10:a3:97:34:fc:75:bb:f6:33:96:7e: cc:61:4c:d4:2b:a9:ba:85:97:0c:0d:2e:33:03:7d: ee:8e:5d:81:21:17:52:8b:26:ef:57:e1:37:fe:05: 4b:af:d9:8b:09:17:cd:74:7c:36:59:9e:5c:78:65: c8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:24:FA:C3:D4:F0:68:E0:43:49:F3:81:FB:46:9D:0E:CA:94:BB:47 X509v3 Authority Key Identifier: keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:3a:aa:8d:dd:ed:20:a0:01:3b:d2:68:01:c5:67:d3:56:8f: b8:1d:f8:74:30:4e:1e:b2:78:2e:6b:8b:b1:37:30:74:4d:93: 62:b0:7a:c5:e1:a7:1a:53:3d:55:e2:9b:8d:07:21:d2:07:71: b6:6f:d4:bc:df:55:40:4c:c2:a9:c5:35:5d:42:cb:ee:68:8e: 3a:ef:2a:1a:4f:b3:a3:78:2a:d5:2a:8d:56:c6:47:09:29:df: 6b:be:65:c5:bd:83:58:32:ea:ab:8f:cc:14:29:0b:13:75:bf: e6:4f:79:25:9c:7d:7c:0f:1d:5c:43:b8:f6:21:ef:76:48:14: 75:ba:35:a1:25:0f:a3:8e:0a:4b:b9:13:25:86:9d:62:36:1f: c2:bf:a1:f1:ac:42:5b:71:93:e1:4e:f8:06:0b:8f:74:36:66: d7:c9:0f:3d:43:4e:a7:76:cb:44:ba:29:6f:1e:a0:e3:b4:68: f7:e4:26:ec:7d:e0:86:fb:1f:3f:db:87:8a:6d:13:cb:17:41: da:cb:37:ec:26:12:fc:3d:8e:6a:f2:f0:96:96:e1:9f:51:55: a8:67:c5:18:73:1d:b8:6c:56:f9:36:e9:dd:96:6a:74:21:7d: f5:0d:49:eb:80:07:ed:79:6b:fe:e8:0c:c8:8d:80:c7:e5:e3: 71:8d:4c:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4NUMxMTAvBgNVBAUTKEFDOTEyQ0VGQTc1OEExMTk5QzFCRURFMDZCMTRBOUVB Mzk4OTc1RjcwHhcNMjUxMjA1MDAxMDMyWhcNMjUxMjEyMDAxMDMyWjAYMRYwFAYD VQQDEw02OTMyMjJmOC1hYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18b9emV4w/WCjznaqb3Z4resBt0e/K2Iw3T7hyj4BpZ/XEHnx+JJ9IqGSQb8 QIl9GfLbXhy+lN34GS9GvT44InC016O3jawtmGzmk0qLTTGlJjKEC5WmwUT6VuXg 3DWmXcTzOTwO8sRYZHG5HUbxEvhDMJJouUFDAZ88KQouYgmygMZF8ZDK78JwgN9Z wMlWjmzQ77TQ5krN3PByay/xZk/SsjQ8xdgOAClU88iMDEUTGiw3M5f8IdTHBfMn F9IwG1Oz19/vEKOXNPx1u/Yzln7MYUzUK6m6hZcMDS4zA33ujl2BIRdSiybvV+E3 /gVLr9mLCRfNdHw2WZ5ceGXIpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEk+sPU 8GjgQ0nzgftGnQ7KlLtHMB8GA1UdIwQYMBaAFKyRLO+nWKEZnBvt4GsUqeo5iXX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjg1Qy8wQTY4QjExODYw OEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9SbWNHLTNnYXhTcDZqbUpk ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKRXM3NmRZb1JtY0ctM2dheFNwNmptSmRmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjg1Qy8wQTY4QjExODYwOEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9S bWNHLTNnYXhTcDZqbUpkZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVOqqN3e0goAE70mgBxWfTVo+4Hfh0ME4esngua4uxNzB0TZNisHrF 4acaUz1V4puNByHSB3G2b9S831VATMKpxTVdQsvuaI467yoaT7OjeCrVKo1WxkcJ Kd9rvmXFvYNYMuqrj8wUKQsTdb/mT3klnH18Dx1cQ7j2Ie92SBR1ujWhJQ+jjgpL uRMlhp1iNh/Cv6HxrEJbcZPhTvgGC490NmbXyQ89Q06ndstEuilvHqDjtGj35Cbs feCG+x8/24eKbRPLF0HayzfsJhL8PY5q8vCWluGfUVWoZ8UYcx24bFb5Nundlmp0 IX31DUnrgAfteWv+6AzIjYDH5eNxjUx6 -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:13 2025 by rpki-client