This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: I++931eu7Dotc/rHMjkNQA9BwX3BWj3QdjvW3cEV8Kg= Subject key identifier: 9B:18:4F:22:62:8C:DC:8F:39:B2:DF:0C:1D:ED:69:A8:6B:6D:3B:DC Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 0519 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 050E Signing time: Thu 04 Dec 2025 22:12:23 +0000 Manifest this update: Thu 04 Dec 2025 22:12:22 +0000 Manifest next update: Thu 11 Dec 2025 22:12:22 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: Mm9pf0Cw+g9oaP/yZu8vLAKkkyC/6E9V9/xKuo4Jo8Y=) 2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=) 3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1305 (0x519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: Dec 4 22:12:22 2025 GMT Not After : Dec 11 22:12:22 2025 GMT Subject: CN=69320747-1e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ef:a2:aa:84:9d:22:59:4d:44:df:83:89:54: 51:74:a6:5a:ee:4c:a9:c5:41:01:24:e0:0f:4e:0b: f0:31:32:cb:24:ec:c4:ff:ec:87:4b:e9:f1:36:18: 6e:47:fa:32:3f:bf:f0:c8:2b:93:9b:8c:2c:8f:c1: 0a:a9:4d:b3:b9:3b:3f:de:73:79:70:8d:1c:b0:ca: a0:33:23:ec:b6:26:87:54:d3:fa:4d:34:57:6a:cc: 5e:64:24:ce:dd:ca:90:a4:67:b8:fd:a3:d7:78:ba: 75:dd:4c:46:bb:01:81:7f:e3:db:78:ea:7d:91:98: 8c:22:08:87:f5:6d:a5:92:69:5b:5d:d7:3c:7e:36: ce:d8:8d:fb:61:86:2c:4b:64:35:69:50:7b:05:0c: 02:be:a5:47:15:61:f6:4f:45:b9:d3:55:85:4c:03: 31:63:9a:f1:27:8b:c9:db:7a:f2:00:a1:ca:9c:9e: 86:aa:4a:ca:84:61:e6:34:ce:4c:bb:ee:4b:95:40: ed:61:be:fa:cd:2d:a3:2a:b2:80:d7:9d:fa:db:d7: 0d:c0:4d:73:f7:b0:02:77:a7:cc:41:a4:45:39:10: 12:47:74:55:64:20:3f:ca:4b:42:53:59:ca:07:fe: 39:76:96:45:50:b6:f1:1b:92:cd:20:c9:97:11:42: dd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:18:4F:22:62:8C:DC:8F:39:B2:DF:0C:1D:ED:69:A8:6B:6D:3B:DC X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:63:9b:d6:01:fb:63:ab:d7:16:38:34:d3:9a:01:66:44:c6: 10:ae:22:bc:43:4a:77:f5:d9:a2:6e:82:7a:89:b5:d2:df:ad: ce:df:a2:cd:5c:15:2f:b9:7d:c7:a3:06:75:c8:fb:64:38:02: 73:5d:af:bf:73:9d:f0:12:0e:f9:9c:76:fa:cb:7d:ea:f6:08: 4b:bc:7a:b4:7e:bc:47:5c:cf:b6:4f:68:6b:3c:ea:a0:03:c8: 5b:2e:8c:d7:e5:ea:31:63:8e:12:3f:b7:89:1b:d0:90:76:1c: 52:b3:a7:7c:0e:a7:1e:a1:3d:2f:72:c7:2a:f1:21:0b:a1:2e: d7:a3:0f:a4:d3:23:1a:e5:9f:fa:7c:dc:41:3b:d9:85:5d:18: 6b:0e:e7:05:6f:41:45:b5:7b:e6:81:e5:b1:7d:b4:83:be:4a: eb:cb:44:52:cf:8e:dd:48:cb:b7:51:6c:3a:b9:3a:ad:2d:f4: bf:2a:58:da:f6:7b:f6:2f:a9:0c:fe:6a:af:8b:fa:87:2a:d3: b7:47:60:cf:ac:6d:de:d4:1a:48:b8:e4:79:50:51:36:5c:4f: ad:14:99:bc:a8:d9:f7:3e:df:65:05:e4:a4:e7:8d:3e:12:cc: b7:2c:00:eb:ea:49:9a:5c:f4:27:e9:c9:23:11:2f:76:fe:69: 5f:f0:4b:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjUxMjA0MjIxMjIyWhcNMjUxMjExMjIxMjIyWjAYMRYwFAYD VQQDEw02OTMyMDc0Ny0xZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1e+iqoSdIllNRN+DiVRRdKZa7kypxUEBJOAPTgvwMTLLJOzE/+yHS+nxNhhu R/oyP7/wyCuTm4wsj8EKqU2zuTs/3nN5cI0csMqgMyPstiaHVNP6TTRXasxeZCTO 3cqQpGe4/aPXeLp13UxGuwGBf+PbeOp9kZiMIgiH9W2lkmlbXdc8fjbO2I37YYYs S2Q1aVB7BQwCvqVHFWH2T0W501WFTAMxY5rxJ4vJ23ryAKHKnJ6GqkrKhGHmNM5M u+5LlUDtYb76zS2jKrKA153629cNwE1z97ACd6fMQaRFORASR3RVZCA/yktCU1nK B/45dpZFULbxG5LNIMmXEULdWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsYTyJi jNyPObLfDB3taahrbTvcMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALY5vWAftjq9cWODTTmgFmRMYQriK8Q0p39dmiboJ6ibXS363O36LN XBUvuX3HowZ1yPtkOAJzXa+/c53wEg75nHb6y33q9ghLvHq0frxHXM+2T2hrPOqg A8hbLozX5eoxY44SP7eJG9CQdhxSs6d8DqceoT0vcscq8SELoS7Xow+k0yMa5Z/6 fNxBO9mFXRhrDucFb0FFtXvmgeWxfbSDvkrry0RSz47dSMu3UWw6uTqtLfS/Klja 9nv2L6kM/mqvi/qHKtO3R2DPrG3e1BpIuOR5UFE2XE+tFJm8qNn3Pt9lBeSk540+ Esy3LADr6kmaXPQn6ckjES92/mlf8Eut -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:20 2025 by rpki-client