This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft File: J_xj2GH0aU96L5UfsShH4H-qkHI.mft (raw, json) Hash identifier: LsTs7YIH8s4xb107h0EOGskTs2Hj2bn2ko74XjHfyxQ= Subject key identifier: FA:2B:A2:91:4A:74:37:82:D8:7F:2E:93:0A:52:4E:92:81:1D:B4:AC Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 Certificate issuer: /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Certificate serial: 1DEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft Manifest number: 1DE6 Signing time: Sat 20 Dec 2025 15:55:36 +0000 Manifest this update: Sat 20 Dec 2025 15:55:36 +0000 Manifest next update: Sat 27 Dec 2025 15:55:36 +0000 Files and hashes: 1: J_xj2GH0aU96L5UfsShH4H-qkHI.crl (hash: 2D1aF8AHD6lHghxlYv5xvTqvpdccXRvyY0EaN6cS05k=) 2: A17F07705FA311EAB1BB612CC4F9AE02.roa (hash: syqFyO0I3Vmcn5bJeGcao6zGLsNLne0ee+UOpu0s0a0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7663 (0x1def) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F95, serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Validity Not Before: Dec 20 15:55:36 2025 GMT Not After : Dec 27 15:55:36 2025 GMT Subject: CN=6946c6f8-5421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:c2:0f:0d:89:b3:e9:ec:65:b2:af:24:e1: fc:b1:b2:e4:ea:21:1e:4d:2b:eb:7e:98:84:80:43: c2:af:33:49:d4:b1:8f:8f:48:0a:7e:13:b1:4b:90: bb:1a:ea:f3:c3:91:da:58:10:c6:92:16:a6:f4:f5: b8:39:e3:21:51:fc:91:ec:c8:87:aa:33:70:59:67: 0f:7e:c7:dc:01:87:b5:46:51:1e:33:e6:e6:7d:bf: d9:44:db:ad:82:a8:9e:7d:b2:bb:a8:fc:d2:3e:8b: 7e:bc:e1:8e:4d:5f:e2:0b:fb:3f:fb:cc:1f:28:94: 87:4b:0c:19:b2:4b:b6:10:60:96:40:9b:de:c7:7c: 7d:63:21:8a:b2:8d:9f:77:e6:ba:ba:45:9b:42:0c: 5d:c7:ac:6b:a6:a3:89:cf:97:5e:7b:a8:c0:70:41: 45:6c:31:aa:a4:f0:54:af:f8:de:65:81:e4:55:2b: 52:47:e2:1a:70:e2:bf:a1:36:3c:ad:f2:49:b3:45: d9:67:79:76:6d:47:16:a6:c7:09:fb:1a:07:0a:cd: 0d:9b:70:4d:50:ad:08:d3:e4:53:6f:32:7b:b5:87: 83:7a:15:ef:36:2d:28:a5:0a:c4:c4:cb:09:b8:85: 53:1c:f1:6b:9a:23:23:1b:27:68:bc:e8:53:d3:12: 98:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2B:A2:91:4A:74:37:82:D8:7F:2E:93:0A:52:4E:92:81:1D:B4:AC X509v3 Authority Key Identifier: keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4b:0b:84:18:73:0a:79:7f:49:0d:4a:43:9a:22:ac:00:41: 15:da:fd:c1:e5:22:06:3f:b2:b3:b0:c9:b9:e4:98:a7:b2:d0: db:d6:19:7f:f4:a3:f0:69:78:15:82:92:a2:ac:51:ee:9f:c3: c4:9c:eb:b8:3a:af:01:0d:cb:7a:5a:21:a1:ce:8d:2c:e7:eb: ed:2d:f9:1a:30:a0:72:07:20:27:32:0b:34:bf:eb:2e:0f:24: 7f:5e:0a:7e:ec:52:b3:7d:ff:e7:0e:6b:84:7c:21:15:ce:a1: 94:9c:e1:c4:bd:90:22:a8:bc:a5:1d:bc:43:b2:ba:22:fa:eb: 4a:6e:6d:48:58:08:94:bb:35:ea:6c:47:5a:ae:c9:b0:80:e1: e8:20:07:c6:59:86:1f:20:49:95:41:2f:67:28:c6:c5:0e:8a: 2f:24:da:58:0c:03:82:f8:62:c9:d2:2e:52:ec:44:69:3a:f4: 7c:28:56:7c:08:04:bf:57:76:57:b2:6b:ef:a9:1e:38:c7:10: a0:a9:65:c4:a3:8b:7f:25:8c:e8:ca:70:91:a2:a2:15:e4:18: 05:4f:0a:29:25:be:10:c0:68:f7:10:05:d8:83:30:f3:42:b9: 9a:bc:33:39:6b:fc:b9:bb:61:96:72:92:0f:ba:f9:1b:1e:6c: ad:e0:48:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVGOTUxMTAvBgNVBAUTKDI3RkM2M0Q4NjFGNDY5NEY3QTJGOTUxRkIxMjg0N0Uw N0ZBQTkwNzIwHhcNMjUxMjIwMTU1NTM2WhcNMjUxMjI3MTU1NTM2WjAYMRYwFAYD VQQDDA02OTQ2YzZmOC01NDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTzCDw2Js+nsZbKvJOH8sbLk6iEeTSvrfpiEgEPCrzNJ1LGPj0gKfhOxS5C7 Gurzw5HaWBDGkham9PW4OeMhUfyR7MiHqjNwWWcPfsfcAYe1RlEeM+bmfb/ZRNut gqiefbK7qPzSPot+vOGOTV/iC/s/+8wfKJSHSwwZsku2EGCWQJvex3x9YyGKso2f d+a6ukWbQgxdx6xrpqOJz5dee6jAcEFFbDGqpPBUr/jeZYHkVStSR+IacOK/oTY8 rfJJs0XZZ3l2bUcWpscJ+xoHCs0Nm3BNUK0I0+RTbzJ7tYeDehXvNi0opQrExMsJ uIVTHPFrmiMjGydovOhT0xKYXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoropFK dDeC2H8ukwpSTpKBHbSsMB8GA1UdIwQYMBaAFCf8Y9hh9GlPei+VH7EoR+B/qpBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUY5NS9DRTJBRkM0NkEy NzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFVOTZMNVVmc1NoSDRILXFr SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pfeGoyR0gwYVU5Nkw1VWZzU2hINEgtcWtISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUY5NS9DRTJBRkM0NkEyNzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFV OTZMNVVmc1NoSDRILXFrSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdSwuEGHMKeX9JDUpDmiKsAEEV2v3B5SIGP7KzsMm55JinstDb1hl/ 9KPwaXgVgpKirFHun8PEnOu4Oq8BDct6WiGhzo0s5+vtLfkaMKByByAnMgs0v+su DyR/Xgp+7FKzff/nDmuEfCEVzqGUnOHEvZAiqLylHbxDsroi+utKbm1IWAiUuzXq bEdarsmwgOHoIAfGWYYfIEmVQS9nKMbFDoovJNpYDAOC+GLJ0i5S7ERpOvR8KFZ8 CAS/V3ZXsmvvqR44xxCgqWXEo4t/JYzoynCRoqIV5BgFTwopJb4QwGj3EAXYgzDz QrmavDM5a/y5u2GWcpIPuvkbHmyt4EhV -----END CERTIFICATE-----Generated at Mon Dec 22 00:23:34 2025 by rpki-client