This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft File: JzKpmoY71iA82RXNcle10dmH6yg.mft (raw, json) Hash identifier: VIVCmN0F3M3WAbXFW4gbZi2MW1d1h0kZIOu3C4avAco= Subject key identifier: 2D:54:41:CA:35:6B:9B:BB:18:F6:B6:C6:26:CE:DC:16:77:82:02:1A Authority key identifier: 27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 Certificate issuer: /CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Certificate serial: 2A38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft Manifest number: 2A2E Signing time: Sat 06 Dec 2025 15:22:18 +0000 Manifest this update: Sat 06 Dec 2025 15:22:18 +0000 Manifest next update: Sat 13 Dec 2025 15:22:18 +0000 Files and hashes: 1: JzKpmoY71iA82RXNcle10dmH6yg.crl (hash: nz0ohsj2CMiH6Qjvq8n5mlUL4Jp83argUaMRCUQ/Heg=) 2: 2FF7E9A600BB11EA895E5253C4F9AE02.roa (hash: mZM0zWOIX0nGEpyDG7PyWk/q1r9WRDMbkBj3OfFE2JA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10808 (0x2a38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A39, serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Validity Not Before: Dec 6 15:22:18 2025 GMT Not After : Dec 13 15:22:18 2025 GMT Subject: CN=69344a2a-1021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:18:41:b4:23:36:0c:ee:36:13:9d:e9:62: f1:dc:8a:9e:26:70:74:b6:43:bb:38:95:f4:7d:06: c0:67:05:d5:a0:cf:46:92:c4:ca:69:3d:15:67:76: c6:e6:94:fb:ec:68:47:81:45:2c:53:c1:a1:72:35: 7c:ea:dd:33:84:e5:c9:14:b4:d3:89:2f:b2:c4:ee: 75:a5:bb:49:e9:96:79:07:6e:62:10:1d:2d:a4:f1: dc:ab:3c:1b:78:40:6d:e8:41:60:bb:e0:da:e6:6b: 52:d2:43:2a:04:2c:1d:34:53:6b:d4:50:82:a4:43: e7:4f:82:87:fc:a8:21:9c:4b:70:55:58:94:93:bd: f1:07:96:19:5b:de:2a:66:1c:3a:0a:9d:5d:5b:61: 13:1d:3b:00:3d:14:e8:bd:1a:0d:31:1d:e7:2f:c2: 30:f5:c0:4d:48:cd:be:bd:bf:10:74:86:94:48:3c: 38:f5:45:b0:a6:28:9e:7f:56:7a:0d:dc:a9:f6:54: 25:93:a7:1b:80:82:73:65:de:e3:46:78:91:5d:32: e7:65:96:eb:6f:e3:78:ef:f3:69:4d:3b:69:d8:2f: 5c:fd:1e:f3:ee:b5:68:d7:d3:f9:41:d7:d8:83:8a: 11:a1:de:a3:96:56:ab:23:60:24:93:4e:e0:b5:93: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:54:41:CA:35:6B:9B:BB:18:F6:B6:C6:26:CE:DC:16:77:82:02:1A X509v3 Authority Key Identifier: keyid:27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:90:35:2a:39:65:50:d1:1c:8d:37:36:f2:f8:48:a8:25:6f: 97:27:e2:26:6d:3b:eb:f3:58:7e:a7:8f:4b:46:03:29:2b:5e: 73:de:ae:74:91:58:27:64:85:72:6a:85:0c:24:d0:52:8a:3e: 7f:91:ab:51:4e:5f:91:08:8f:77:97:f4:8e:93:ae:90:3b:56: 38:fa:ae:32:f4:e7:69:34:11:19:d4:6d:99:0b:f2:3b:74:22: 0d:26:dd:ae:f7:f5:2c:4e:5b:bf:e5:72:a2:f8:54:74:c9:fb: e5:4e:7b:f7:1c:c0:ae:18:29:0b:50:b4:bd:22:b2:d6:db:f2: 02:4a:ea:1a:95:5b:ad:e1:4a:4f:6b:c1:56:59:cf:98:05:8b: 1c:9d:d2:40:fd:e4:15:c3:77:7a:18:78:0c:6e:67:18:83:02: 88:36:c1:53:b7:56:c7:3b:ee:75:4e:fe:3d:60:d7:18:09:5f: 93:1a:42:ac:0d:2a:79:be:8d:6c:41:74:e2:7c:6c:68:7b:89: 46:c2:d4:db:97:fb:e2:ea:03:68:42:ac:1b:77:67:99:07:96: 9e:0a:2d:e0:b1:e3:b7:47:24:e1:8a:4b:af:10:07:25:e6:5d: 01:75:66:12:7e:a8:07:11:f9:67:bf:b0:7d:42:42:1f:43:44: 9d:1d:a5:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMzkxMTAvBgNVBAUTKDI3MzJBOTlBODYzQkQ2MjAzQ0Q5MTVDRDcyNTdCNUQx RDk4N0VCMjgwHhcNMjUxMjA2MTUyMjE4WhcNMjUxMjEzMTUyMjE4WjAYMRYwFAYD VQQDEw02OTM0NGEyYS0xMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLcYQbQjNgzuNhOd6WLx3IqeJnB0tkO7OJX0fQbAZwXVoM9GksTKaT0VZ3bG 5pT77GhHgUUsU8GhcjV86t0zhOXJFLTTiS+yxO51pbtJ6ZZ5B25iEB0tpPHcqzwb eEBt6EFgu+Da5mtS0kMqBCwdNFNr1FCCpEPnT4KH/KghnEtwVViUk73xB5YZW94q Zhw6Cp1dW2ETHTsAPRTovRoNMR3nL8Iw9cBNSM2+vb8QdIaUSDw49UWwpiief1Z6 Ddyp9lQlk6cbgIJzZd7jRniRXTLnZZbrb+N47/NpTTtp2C9c/R7z7rVo19P5QdfY g4oRod6jllarI2Akk07gtZMsGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1UQco1 a5u7GPa2xibO3BZ3ggIaMB8GA1UdIwQYMBaAFCcyqZqGO9YgPNkVzXJXtdHZh+so MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkEzOS9BNjU5NDlCMjNC QzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFpQTgyUlhOY2xlMTBkbUg2 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6S3Btb1k3MWlBODJSWE5jbGUxMGRtSDZ5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkEzOS9BNjU5NDlCMjNCQzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFp QTgyUlhOY2xlMTBkbUg2eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1kDUqOWVQ0RyNNzby+EioJW+XJ+ImbTvr81h+p49LRgMpK15z3q50 kVgnZIVyaoUMJNBSij5/katRTl+RCI93l/SOk66QO1Y4+q4y9OdpNBEZ1G2ZC/I7 dCINJt2u9/UsTlu/5XKi+FR0yfvlTnv3HMCuGCkLULS9IrLW2/ICSuoalVut4UpP a8FWWc+YBYscndJA/eQVw3d6GHgMbmcYgwKINsFTt1bHO+51Tv49YNcYCV+TGkKs DSp5vo1sQXTifGxoe4lGwtTbl/vi6gNoQqwbd2eZB5aeCi3gseO3RyThikuvEAcl 5l0BdWYSfqgHEflnv7B9QkIfQ0SdHaUD -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:27 2025 by rpki-client