This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: JIH8Gbv2GZtQSIEzvo1roacttzV/YJ2Or/9746bZkbQ= Subject key identifier: AE:10:FA:80:A6:67:7C:CA:B4:C2:5C:72:95:D5:5B:5E:19:FE:1E:A4 Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 0766 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 0746 Signing time: Sat 06 Dec 2025 20:47:47 +0000 Manifest this update: Sat 06 Dec 2025 20:47:46 +0000 Manifest next update: Sat 13 Dec 2025 20:47:46 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: Ucv8w0D9uuRnL77IwvOKwSWHqHcDwTC2/KAV5Ng719s=) 2: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: FOUqi/Zhh8esXFcRli/yVF/Rw56vHIwH4UuHSxeTaMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1894 (0x766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Dec 6 20:47:46 2025 GMT Not After : Dec 13 20:47:46 2025 GMT Subject: CN=69349673-e0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:99:13:de:a8:f0:21:4d:30:22:2f:5f:6a: 18:35:f7:87:dc:69:42:ad:2d:9a:83:4f:2b:fa:ef: 35:27:29:9a:88:4b:6f:57:83:3b:89:5c:29:7b:03: 63:25:3e:5f:eb:ad:57:f1:08:f8:76:36:28:2e:7b: cb:d0:c4:1a:ec:48:d0:60:e1:d0:8a:c9:27:88:49: 97:31:53:b2:cc:e1:2b:2c:32:a7:f0:53:ca:6e:bd: 8f:6e:95:2f:00:65:23:fb:c6:23:21:26:c2:bd:f2: 8a:0c:46:aa:26:cf:a0:a9:3d:06:ed:c6:a3:fc:f5: ec:cb:1b:49:aa:c2:82:45:5b:0b:61:6f:c4:85:31: 11:71:fb:b9:e3:ba:00:f7:e6:8b:80:40:07:23:ad: 18:a6:ec:33:74:2c:7d:0c:e6:1e:05:b8:1b:5a:ae: 40:22:5f:c3:00:4a:62:52:81:94:06:98:d3:f6:ef: 33:c7:3a:4e:f5:47:2e:dd:0f:57:53:c6:6a:8c:17: f1:67:81:13:b2:03:da:6e:79:70:44:87:5d:96:13: c2:e5:30:bb:36:45:39:0d:30:eb:1e:1d:62:9b:14: 5b:c6:1f:8f:e5:6d:2d:55:07:94:3c:02:2f:ee:ec: da:ef:eb:48:8d:d8:1e:e6:21:4f:56:b2:f9:fe:b4: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:10:FA:80:A6:67:7C:CA:B4:C2:5C:72:95:D5:5B:5E:19:FE:1E:A4 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ef:8d:17:cb:54:df:35:79:0f:f5:00:5a:6b:bf:18:b7:cc: 6b:dc:90:12:47:87:4a:37:8b:7d:49:29:50:da:52:39:2f:a9: 41:68:1e:fb:09:13:44:ae:3b:8b:ec:a4:a6:0f:a8:e8:f5:b9: a3:14:9c:9b:60:20:69:a2:b3:0b:bd:68:d8:68:92:ca:64:37: 67:87:c9:f2:1e:4e:1e:2d:00:08:b0:f9:e4:0b:ff:6f:4a:4a: b4:93:40:3a:04:a9:55:6b:b2:70:c0:90:83:3a:12:bb:bc:f0: fb:82:ae:24:de:23:7f:8d:c3:d8:37:e1:15:8d:97:7e:85:ea: 7e:aa:6c:a5:a0:8c:40:64:df:04:a7:b8:56:63:02:db:35:0a: 47:8d:75:8a:d0:61:bc:ea:d4:4d:53:b4:91:59:6f:23:76:0d: e4:5f:75:22:12:87:67:e7:c2:22:27:b7:9a:1c:1b:8d:55:71: ac:94:fc:4e:48:3c:41:e2:9d:58:bf:ee:e7:23:b8:16:89:77: 04:e6:df:be:5c:66:77:30:24:e2:03:b7:91:15:c3:b5:30:1e: 5d:85:a1:4f:25:1d:10:28:4a:57:56:2d:c6:a4:3b:67:6d:39: bd:65:9c:a6:c5:8b:07:13:a1:29:1d:2a:26:07:d6:d5:31:3f: 69:ba:0a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjUxMjA2MjA0NzQ2WhcNMjUxMjEzMjA0NzQ2WjAYMRYwFAYD VQQDEw02OTM0OTY3My1lMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCqZE96o8CFNMCIvX2oYNfeH3GlCrS2ag08r+u81JymaiEtvV4M7iVwpewNj JT5f661X8Qj4djYoLnvL0MQa7EjQYOHQiskniEmXMVOyzOErLDKn8FPKbr2PbpUv AGUj+8YjISbCvfKKDEaqJs+gqT0G7caj/PXsyxtJqsKCRVsLYW/EhTERcfu547oA 9+aLgEAHI60YpuwzdCx9DOYeBbgbWq5AIl/DAEpiUoGUBpjT9u8zxzpO9Ucu3Q9X U8ZqjBfxZ4ETsgPabnlwRIddlhPC5TC7NkU5DTDrHh1imxRbxh+P5W0tVQeUPAIv 7uza7+tIjdge5iFPVrL5/rTj3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4Q+oCm Z3zKtMJccpXVW14Z/h6kMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI740Xy1TfNXkP9QBaa78Yt8xr3JASR4dKN4t9SSlQ2lI5L6lBaB77 CRNErjuL7KSmD6jo9bmjFJybYCBporMLvWjYaJLKZDdnh8nyHk4eLQAIsPnkC/9v Skq0k0A6BKlVa7JwwJCDOhK7vPD7gq4k3iN/jcPYN+EVjZd+hep+qmyloIxAZN8E p7hWYwLbNQpHjXWK0GG86tRNU7SRWW8jdg3kX3UiEodn58IiJ7eaHBuNVXGslPxO SDxB4p1Yv+7nI7gWiXcE5t++XGZ3MCTiA7eRFcO1MB5dhaFPJR0QKEpXVi3GpDtn bTm9ZZymxYsHE6EpHSomB9bVMT9pugph -----END CERTIFICATE-----Generated at Sun Dec 7 13:08:39 2025 by rpki-client