This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json) Hash identifier: le2yWwYAZLDqDKf/pvv2YiYXHLQMp2P+M+XKw0UxE/w= Subject key identifier: 86:77:E8:ED:11:73:26:3F:C0:39:B9:1E:1E:E6:A7:2C:E9:94:66:37 Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Certificate serial: 0A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft Manifest number: 0A7D Signing time: Thu 04 Dec 2025 18:55:12 +0000 Manifest this update: Thu 04 Dec 2025 18:55:11 +0000 Manifest next update: Thu 11 Dec 2025 18:55:11 +0000 Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: S9Ot4qJhKAov5W2tKqWOYaZbI/XFSjg68uDQBuAxtcE=) 2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: NYdc2f4yDizOBPmg8EBE/rQVPUKcax5Hh13GoWVtgRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2699 (0xa8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Validity Not Before: Dec 4 18:55:11 2025 GMT Not After : Dec 11 18:55:11 2025 GMT Subject: CN=6931d90f-1790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:11:ed:d5:e2:92:d0:13:5a:69:01:c9:ad: a6:0b:d1:3a:2a:2a:de:13:cd:78:c5:1c:af:6a:80: 1b:46:73:27:9c:05:87:25:28:ae:61:5b:e7:93:50: d2:95:6a:bb:9f:2b:d1:35:be:d6:e3:8b:82:42:94: 7f:4c:d6:23:c9:83:e5:8a:d8:fe:01:36:bf:72:d0: d8:f2:3b:d2:90:d3:58:d0:25:2a:39:2c:e2:b8:11: e9:6d:d6:70:69:4f:9a:e0:2c:cb:a5:47:fa:95:00: c8:f3:d4:bf:be:e3:58:66:62:77:14:72:d7:f0:8b: 5a:1e:e0:95:90:28:d7:1a:e2:8c:40:a9:a5:60:d2: e4:ae:ca:cd:db:f3:6d:05:50:cf:c5:ad:d1:0a:23: 14:5e:4c:67:d9:7a:52:67:c9:72:1e:7b:b3:1d:27: da:27:0e:b7:06:63:2b:be:6f:38:c1:8a:04:84:d8: 79:4f:d7:04:d4:43:47:9f:34:26:7b:f4:f5:e3:b8: 4a:1e:01:ec:04:88:b4:e0:b3:1b:fa:25:28:9e:e5: bd:b9:48:c3:6a:f4:44:e8:14:b9:12:6e:1e:4e:a5: 7c:ed:5b:9d:58:bd:ed:fc:a0:dd:ee:66:42:71:1b: 36:d4:cc:23:45:8c:32:c8:87:da:5d:33:4b:13:24: d9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:77:E8:ED:11:73:26:3F:C0:39:B9:1E:1E:E6:A7:2C:E9:94:66:37 X509v3 Authority Key Identifier: keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:49:46:57:db:e8:ee:63:df:58:fa:53:ea:5a:9a:8d:a4:bc: 38:75:66:2c:57:43:e1:23:c5:81:98:2e:e4:5d:b5:59:ea:59: bf:d3:2d:2a:a1:9c:b9:d9:34:aa:bf:ea:2a:61:2c:4e:a4:05: ab:05:09:0e:3d:fc:ff:3d:8f:da:db:62:e0:10:b5:ce:d2:de: 67:e7:c8:07:fb:58:20:cc:ed:7e:20:c2:c5:36:07:4f:d8:a5: d0:2d:64:7e:b1:fc:58:92:2b:40:dc:61:13:8a:e3:62:2d:c9: b3:65:4c:21:70:4f:e6:c9:86:a2:aa:4d:a0:4f:b0:be:7e:ce: 27:31:51:3a:fc:a6:f4:1f:66:c7:68:6b:ad:a4:12:86:ab:04: 74:20:09:b8:c0:9c:fc:e3:88:ab:67:96:ef:5d:97:bf:87:b8: 06:3d:61:6a:b4:8e:bf:94:62:2d:3b:21:0d:4e:e4:1f:e5:a3: 4c:db:3e:62:bf:8e:ed:8c:a7:ec:b3:a9:8d:e8:4f:c2:c7:68: ef:77:c7:de:32:d0:6e:3f:88:4d:ba:97:07:68:ce:53:3a:6e: 01:28:25:68:74:0d:76:ca:23:2b:95:16:c2:eb:6b:0b:18:f3: ea:87:ef:e5:9e:25:1c:12:22:da:a4:ec:1d:af:8a:cd:ef:02: d0:88:7e:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD RDYwRDQ1ODcwHhcNMjUxMjA0MTg1NTExWhcNMjUxMjExMTg1NTExWjAYMRYwFAYD VQQDEw02OTMxZDkwZi0xNzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKYR7dXiktATWmkBya2mC9E6KireE814xRyvaoAbRnMnnAWHJSiuYVvnk1DS lWq7nyvRNb7W44uCQpR/TNYjyYPlitj+ATa/ctDY8jvSkNNY0CUqOSziuBHpbdZw aU+a4CzLpUf6lQDI89S/vuNYZmJ3FHLX8ItaHuCVkCjXGuKMQKmlYNLkrsrN2/Nt BVDPxa3RCiMUXkxn2XpSZ8lyHnuzHSfaJw63BmMrvm84wYoEhNh5T9cE1ENHnzQm e/T147hKHgHsBIi04LMb+iUonuW9uUjDavRE6BS5Em4eTqV87VudWL3t/KDd7mZC cRs21MwjRYwyyIfaXTNLEyTZ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZ36O0R cyY/wDm5Hh7mpyzplGY3MB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjdFQi83OTFGNEU3NjczRTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xE NFgxQkt4bktLdkxOWU5SWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHSUZX2+juY99Y+lPqWpqNpLw4dWYsV0PhI8WBmC7kXbVZ6lm/0y0q oZy52TSqv+oqYSxOpAWrBQkOPfz/PY/a22LgELXO0t5n58gH+1ggzO1+IMLFNgdP 2KXQLWR+sfxYkitA3GETiuNiLcmzZUwhcE/myYaiqk2gT7C+fs4nMVE6/Kb0H2bH aGutpBKGqwR0IAm4wJz844irZ5bvXZe/h7gGPWFqtI6/lGItOyENTuQf5aNM2z5i v47tjKfss6mN6E/Cx2jvd8feMtBuP4hNupcHaM5TOm4BKCVodA12yiMrlRbC62sL GPPqh+/lniUcEiLapOwdr4rN7wLQiH6z -----END CERTIFICATE-----Generated at Sat Dec 6 19:08:10 2025 by rpki-client