This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft File: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft (raw, json) Hash identifier: luPoqVx/GKM33XTC/Lm+H2Dqdsz7F8eLQFZa7Nx8x9U= Subject key identifier: 74:CB:31:22:60:97:5C:2E:21:DC:36:AD:ED:C0:B0:84:1D:C9:0A:82 Authority key identifier: 24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65 Certificate issuer: /CN=A9119A40/serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465 Certificate serial: 0CD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft Manifest number: 10F0 Signing time: Sat 06 Dec 2025 17:36:14 +0000 Manifest this update: Sat 06 Dec 2025 17:36:13 +0000 Manifest next update: Sat 13 Dec 2025 17:36:13 +0000 Files and hashes: 1: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl (hash: qqrD/7aYPmJAP1vTy1XthXPi9vdafacrni+hYPHgIHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3281 (0xcd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119A40, serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465 Validity Not Before: Dec 6 17:36:13 2025 GMT Not After : Dec 13 17:36:13 2025 GMT Subject: CN=6934698d-4768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:86:ba:05:71:d0:d0:dd:c5:16:67:39:eb: 27:c0:a1:7d:97:3d:93:51:eb:cd:dd:0c:27:1a:04: cd:43:3b:1e:87:c7:11:e4:a7:74:19:86:40:56:99: ec:19:57:0f:ee:b5:d3:10:1e:e7:0b:05:4e:9d:84: 70:df:ad:16:14:8c:4b:fb:47:24:6a:09:f0:87:b6: 09:de:1f:ce:9b:00:6c:ce:bd:98:12:3b:1d:41:d0: c7:8b:87:14:d5:db:11:24:73:0b:fb:6d:92:0b:1f: ec:8b:e5:a0:4e:4e:94:56:0c:ab:10:7c:44:51:28: ed:8a:52:37:3c:6a:1b:1f:c9:82:bc:04:1b:2d:88: a9:33:98:14:5d:60:70:9d:4d:c9:d5:97:35:5e:6b: 25:41:5d:96:9f:0e:4a:81:ef:ae:4f:0e:37:86:ca: 40:89:75:de:0d:d5:7e:0d:83:f0:32:b0:2f:22:f4: c4:50:39:d7:ec:85:fb:5b:8a:8b:2e:f6:1e:8e:a9: 02:c6:5b:a1:ca:b4:32:b8:62:5c:6b:e8:d4:7b:5c: d8:e6:92:bd:25:a5:f0:d2:7e:e1:ab:c5:70:d2:43: 08:71:7e:25:72:f6:53:27:07:81:de:0f:48:03:e6: f7:1f:af:ba:26:3d:f9:49:37:22:eb:98:e3:4d:a6: d5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CB:31:22:60:97:5C:2E:21:DC:36:AD:ED:C0:B0:84:1D:C9:0A:82 X509v3 Authority Key Identifier: keyid:24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:78:ee:34:64:65:8b:57:ce:78:83:6d:2b:99:5a:54:63:fd: ac:d8:eb:ae:a3:80:40:8e:76:6f:d5:04:a1:82:0f:ea:90:4d: 78:9c:b5:47:ca:b0:1c:f1:0f:9a:f6:13:5a:ac:38:c5:d1:8f: ff:51:b7:4b:5f:2c:83:e4:63:34:66:6e:2c:73:26:03:9b:dd: 02:df:f9:08:4f:90:04:0f:42:7b:b8:2b:a9:b5:36:fd:a4:a9: 92:ac:64:f5:2b:e2:e5:4f:b4:7a:d8:16:6c:5c:85:55:9e:24: ba:55:d3:46:b4:8f:3a:20:ca:2a:34:36:07:1c:bf:ce:f7:b1: b4:ab:89:dd:2b:66:bf:03:3a:6a:ff:0c:55:f9:c8:22:4e:2d: a7:78:61:81:70:28:db:e4:44:2b:71:0f:9e:4c:ad:10:30:ce: ce:14:97:15:ed:2d:8a:ac:a4:0a:9d:18:04:14:6a:ac:de:f2: 74:45:9f:6e:a0:72:03:e1:6d:c4:e4:7c:ce:c0:b8:e7:8d:06: ce:3c:b8:4a:7f:cd:02:58:1d:b3:e9:39:a4:ca:da:00:5e:03: 73:43:fa:04:e1:06:fe:4c:e4:f7:7e:04:1c:ca:81:39:28:c9: 69:45:86:69:e2:ef:3e:79:9c:9f:fd:21:8e:bf:d5:0f:02:68: 1f:76:6a:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBNDAxMTAvBgNVBAUTKDI0REFBN0E5QkFDNjU0OEQ4QUM2Q0QxMDU4MUM0QjdC RkQwNzY0NjUwHhcNMjUxMjA2MTczNjEzWhcNMjUxMjEzMTczNjEzWjAYMRYwFAYD VQQDEw02OTM0Njk4ZC00NzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuqGugVx0NDdxRZnOesnwKF9lz2TUevN3QwnGgTNQzseh8cR5Kd0GYZAVpns GVcP7rXTEB7nCwVOnYRw360WFIxL+0ckagnwh7YJ3h/OmwBszr2YEjsdQdDHi4cU 1dsRJHML+22SCx/si+WgTk6UVgyrEHxEUSjtilI3PGobH8mCvAQbLYipM5gUXWBw nU3J1Zc1XmslQV2Wnw5Kge+uTw43hspAiXXeDdV+DYPwMrAvIvTEUDnX7IX7W4qL LvYejqkCxluhyrQyuGJca+jUe1zY5pK9JaXw0n7hq8Vw0kMIcX4lcvZTJweB3g9I A+b3H6+6Jj35STci65jjTabVowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTLMSJg l1wuIdw2re3AsIQdyQqCMB8GA1UdIwQYMBaAFCTap6m6xlSNisbNEFgcS3v9B2Rl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi9KTnFucWJyR1ZJMkt4czBRV0J4TGVfMEha R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcW5xYnJHVkkyS3hzMFFXQnhMZV8wSFpHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUE0MC8wQkQ0NTYyMjAwN0ExMUVBQjhCMzFCMTBDNEY5QUUwMi9KTnFucWJyR1ZJ Mkt4czBRV0J4TGVfMEhaR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCeO40ZGWLV854g20rmVpUY/2s2Ouuo4BAjnZv1QShgg/qkE14nLVH yrAc8Q+a9hNarDjF0Y//UbdLXyyD5GM0Zm4scyYDm90C3/kIT5AED0J7uCuptTb9 pKmSrGT1K+LlT7R62BZsXIVVniS6VdNGtI86IMoqNDYHHL/O97G0q4ndK2a/Azpq /wxV+cgiTi2neGGBcCjb5EQrcQ+eTK0QMM7OFJcV7S2KrKQKnRgEFGqs3vJ0RZ9u oHID4W3E5HzOwLjnjQbOPLhKf80CWB2z6TmkytoAXgNzQ/oE4Qb+TOT3fgQcyoE5 KMlpRYZp4u8+eZyf/SGOv9UPAmgfdmqj -----END CERTIFICATE-----Generated at Sun Dec 7 03:10:39 2025 by rpki-client