This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft File: JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json) Hash identifier: WbF/k010mGzU7mkQOu8g6N9m5/lSZnlXpTODILOCCQk= Subject key identifier: C1:54:CF:58:FA:BF:DC:AE:23:A3:8C:21:C7:B7:94:82:12:38:98:F7 Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft Manifest number: 0118 Signing time: Sun 21 Dec 2025 04:01:18 +0000 Manifest this update: Sun 21 Dec 2025 04:01:18 +0000 Manifest next update: Sun 28 Dec 2025 04:01:18 +0000 Files and hashes: 1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: vvTuxHB061TaW9us7hSnCjRK8iPHiSv43xN9iPtdAMs=) 2: AE82DA3CCA3711F09D02C15BC4F9AE02.roa (hash: dFNn3jO43SdP+6Z3qx4suVU/JHAZ4DSHsOgrTOhwaUU=) 3: 1381259CCA3811F0B890C35CC4F9AE02.roa (hash: 2AIbsNw95CGEUCI+hzWilcZK30P6hAcxR4zxP/RQzJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0 Validity Not Before: Dec 21 04:01:18 2025 GMT Not After : Dec 28 04:01:18 2025 GMT Subject: CN=6947710e-0347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:1d:5e:d6:d9:02:ef:4b:e3:68:36:d5:c6: eb:2d:33:56:fb:86:20:14:27:04:89:54:e1:be:21: 5a:4c:90:98:88:11:8b:03:cd:14:45:3c:9d:a7:7c: 7b:a2:ee:6b:17:65:8c:c2:26:59:98:4e:8a:fc:43: a4:ab:99:8f:f2:a6:2e:c5:3d:a4:20:2f:ba:e8:7f: 6b:a1:2c:e5:20:1f:5f:7b:04:35:26:1e:a2:00:6f: 4e:d3:63:bc:8d:c0:33:f9:16:36:f7:9e:04:72:73: 72:f0:df:aa:f8:52:7a:80:ec:45:56:6f:13:ee:12: c6:65:6b:7f:37:14:d5:30:0a:ec:78:7d:f0:d8:f6: 64:0a:9e:16:f4:4f:9e:0e:a8:6e:f1:7f:2f:f2:21: 67:3c:d0:fd:1b:cb:e4:2f:b7:7c:42:3f:88:e6:43: 69:9d:85:23:35:1d:d5:71:4f:91:b0:6b:67:2a:17: cd:b4:3f:fa:a2:65:26:62:15:ce:73:bb:51:95:6c: c9:37:40:c8:8a:49:69:94:d3:16:85:b1:c2:21:16: d7:8a:80:05:3d:79:d1:99:4e:0a:a7:c7:8d:a8:18: 51:c9:2f:fd:71:20:4b:b8:62:d0:a4:07:77:d6:28: 7a:ef:83:4b:8a:7d:a2:bd:f5:c5:a8:8c:e7:f4:05: 53:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:54:CF:58:FA:BF:DC:AE:23:A3:8C:21:C7:B7:94:82:12:38:98:F7 X509v3 Authority Key Identifier: keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:4b:01:e7:4f:bb:8e:47:24:b2:a7:b2:e2:76:4b:b5:8a:f6: c9:ba:ed:80:b8:f1:e2:c7:66:4e:87:5a:37:25:ee:65:3a:92: 51:5d:78:e1:89:c3:a8:29:f4:02:b3:b8:8a:23:46:51:23:da: 06:e9:d9:0d:3c:fb:92:87:1b:4f:09:eb:b7:b4:38:7b:c8:1c: 71:c9:e0:71:89:f1:a1:a8:fe:5d:1c:3a:ca:e5:6a:a3:e5:01: 32:ae:f5:6d:74:06:fe:6e:f8:25:ab:76:03:9d:b6:f2:a7:ec: 8f:06:b1:b8:2c:32:09:73:a0:31:c1:b7:0b:2f:6e:d1:2f:a1: 21:77:c2:b4:c6:18:4d:cf:97:ab:92:bb:57:31:8f:33:c5:2c: 04:f5:2e:ff:03:2c:8a:e3:c0:89:79:fa:ab:f8:1e:06:49:23: aa:0c:4a:1c:ed:b0:76:b5:6c:6a:48:40:54:90:63:97:43:42: dc:cf:8d:e9:79:02:19:50:b4:77:06:29:a3:3e:4a:09:99:7d: 81:8b:b2:50:b7:4a:ea:85:e0:2d:37:f8:5f:87:b4:9c:16:65: 66:8a:a9:05:a0:6d:81:ff:bb:b5:41:96:69:a4:74:2c:4d:2d: 0a:01:07:fa:87:6d:ca:5e:81:86:cb:87:2e:bb:91:11:f2:20: 5a:c5:4e:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIyMkUxMTAvBgNVBAUTKDI0MkFCOTFGQTdDN0E2NEFDRTc3RDlCNEY2NjFFMjhD MEIxNUI4RTAwHhcNMjUxMjIxMDQwMTE4WhcNMjUxMjI4MDQwMTE4WjAYMRYwFAYD VQQDDA02OTQ3NzEwZS0wMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJkdXtbZAu9L42g21cbrLTNW+4YgFCcEiVThviFaTJCYiBGLA80URTydp3x7 ou5rF2WMwiZZmE6K/EOkq5mP8qYuxT2kIC+66H9roSzlIB9fewQ1Jh6iAG9O02O8 jcAz+RY2954EcnNy8N+q+FJ6gOxFVm8T7hLGZWt/NxTVMArseH3w2PZkCp4W9E+e Dqhu8X8v8iFnPND9G8vkL7d8Qj+I5kNpnYUjNR3VcU+RsGtnKhfNtD/6omUmYhXO c7tRlWzJN0DIiklplNMWhbHCIRbXioAFPXnRmU4Kp8eNqBhRyS/9cSBLuGLQpAd3 1ih674NLin2ivfXFqIzn9AVT1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFUz1j6 v9yuI6OMIce3lIISOJj3MB8GA1UdIwQYMBaAFCQquR+nx6ZKznfZtPZh4owLFbjg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjIyRS84MzQxNUIzNjM3 OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBrck9kOW0wOW1IaWpBc1Z1 T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pDcTVINmZIcGtyT2Q5bTA5bUhpakFzVnVPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjIyRS84MzQxNUIzNjM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi9KQ3E1SDZmSHBr ck9kOW0wOW1IaWpBc1Z1T0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSSwHnT7uORySyp7Lidku1ivbJuu2AuPHix2ZOh1o3Je5lOpJRXXjh icOoKfQCs7iKI0ZRI9oG6dkNPPuShxtPCeu3tDh7yBxxyeBxifGhqP5dHDrK5Wqj 5QEyrvVtdAb+bvglq3YDnbbyp+yPBrG4LDIJc6AxwbcLL27RL6Ehd8K0xhhNz5er krtXMY8zxSwE9S7/AyyK48CJefqr+B4GSSOqDEoc7bB2tWxqSEBUkGOXQ0Lcz43p eQIZULR3BimjPkoJmX2Bi7JQt0rqheAtN/hfh7ScFmVmiqkFoG2B/7u1QZZppHQs TS0KAQf6h23KXoGGy4cuu5ER8iBaxU6g -----END CERTIFICATE-----Generated at Sun Dec 21 08:44:40 2025 by rpki-client