This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft File: JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json) Hash identifier: AKkQF78vVBz9vabz728cA4L+dyLTFEzoXKqsVfxnihk= Subject key identifier: AE:8D:36:A9:8E:9B:72:86:7B:11:94:32:EB:32:A1:EB:22:EA:AE:B4 Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC Certificate issuer: /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft Manifest number: 01B4 Signing time: Fri 05 Dec 2025 01:26:32 +0000 Manifest this update: Fri 05 Dec 2025 01:26:32 +0000 Manifest next update: Fri 12 Dec 2025 01:26:32 +0000 Files and hashes: 1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: QIEpGq6Tc6gO4DBAGrqwb4WrjBEJo3GTGFt1ECgYa9k=) 2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: Iuws9NrVtp4Hp18jNO1d1Y0TiH8At1P1mnw1eI9JeUU=) 3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: WV1AYVH+VxYegf7IkYCFOtt6eabKoa8E7Gk8VCZklvI=) 4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: 9II8C/zPZ8Sqh/GnkvMtaceds37LRqTiNOgVoHgvhUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC Validity Not Before: Dec 5 01:26:32 2025 GMT Not After : Dec 12 01:26:32 2025 GMT Subject: CN=693234c8-b990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:f6:26:b4:44:fb:7e:53:c5:f1:b5:21:9e: 18:47:a1:c7:74:6a:e8:cd:2f:ba:80:ac:db:73:34: 92:be:9a:eb:fd:bf:be:d3:79:3a:50:6d:11:a2:b3: b3:aa:e1:57:39:90:bb:76:88:54:c1:1a:a4:3a:07: b6:ca:b1:d5:b9:e0:89:94:84:b5:07:f3:f0:b5:a6: e8:77:61:32:52:ce:5b:19:9b:26:0b:2e:5e:78:2a: c4:f4:c4:25:72:17:eb:77:20:1a:4c:75:c3:99:f4: 02:8e:0a:d0:b2:1c:92:fd:88:cd:94:91:ba:b1:be: 99:6f:e4:a8:65:58:a2:69:4e:21:ce:6f:a1:be:ab: d6:11:37:9d:ef:38:75:86:ba:53:32:f4:9c:29:44: 14:4a:fb:12:e8:84:44:9d:89:5e:90:0a:55:e5:13: e8:8b:32:9f:6b:ea:c5:56:88:f2:88:54:bf:c2:e9: bb:9d:43:e2:29:04:b9:a1:0a:af:a0:c2:ba:2b:df: ec:72:30:e8:8a:4e:4e:1c:4c:26:96:c3:8e:99:a5: ab:cd:38:7a:0e:78:46:b2:4a:68:8b:d2:32:cc:91: c6:67:88:20:6e:32:23:18:ac:71:eb:9b:07:a7:72: 9d:dc:64:14:cb:aa:48:36:43:63:8e:de:5a:6e:ad: e3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8D:36:A9:8E:9B:72:86:7B:11:94:32:EB:32:A1:EB:22:EA:AE:B4 X509v3 Authority Key Identifier: keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:43:53:f6:1b:de:ec:9f:6f:05:01:1c:08:2c:ff:16:1d:42: 9c:da:e3:09:cf:22:3d:cb:06:e2:2a:c9:52:e7:65:89:59:c0: ae:8f:a9:95:a8:51:4e:e6:ca:64:00:e0:f5:e8:46:91:50:b6: 80:82:f7:f5:8b:3f:7c:c1:aa:ed:75:73:f3:99:d5:35:f6:63: e6:6f:b1:3c:ff:58:b9:ad:02:19:c7:48:5d:d9:b8:4d:09:ac: 44:58:0d:ec:d2:22:14:c2:ae:60:d1:dd:8e:9a:8c:55:29:24: 9c:fd:97:90:2f:19:b6:9b:78:5c:26:85:8f:10:21:f5:0f:93: a4:de:ef:41:a0:31:61:d1:18:a0:ef:f8:a6:bc:c7:32:7a:95: 56:50:79:17:05:c1:b4:d4:c0:04:f9:04:a9:18:47:de:39:2c: 1a:da:44:df:4e:ee:f5:fa:a6:3d:1c:e2:e6:28:f9:49:da:18: 6c:76:fc:c4:5b:9b:23:7c:98:21:fc:93:bc:3d:ef:f1:c2:0e: 1a:ba:fd:42:8f:ce:6d:53:6e:55:38:e2:a9:4d:28:c1:5e:a1: de:23:2c:9c:1f:c3:7e:ce:90:ac:f3:c1:62:9c:79:6d:fc:24: ae:f2:0a:8d:57:3d:1e:04:18:20:a8:db:e3:61:a0:96:31:33: 8c:dd:79:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNDUxMTAvBgNVBAUTKDI0MzIwRUFGRjlBODIwQjhFREE1OUUwM0U0MDU1NUM1 RjM0RkVGQ0MwHhcNMjUxMjA1MDEyNjMyWhcNMjUxMjEyMDEyNjMyWjAYMRYwFAYD VQQDEw02OTMyMzRjOC1iOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8X2JrRE+35TxfG1IZ4YR6HHdGrozS+6gKzbczSSvprr/b++03k6UG0RorOz quFXOZC7dohUwRqkOge2yrHVueCJlIS1B/Pwtabod2EyUs5bGZsmCy5eeCrE9MQl chfrdyAaTHXDmfQCjgrQshyS/YjNlJG6sb6Zb+SoZViiaU4hzm+hvqvWETed7zh1 hrpTMvScKUQUSvsS6IREnYlekApV5RPoizKfa+rFVojyiFS/wum7nUPiKQS5oQqv oMK6K9/scjDoik5OHEwmlsOOmaWrzTh6DnhGskpoi9IyzJHGZ4ggbjIjGKxx65sH p3Kd3GQUy6pINkNjjt5abq3j7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6NNqmO m3KGexGUMusyoesi6q60MB8GA1UdIwQYMBaAFCQyDq/5qCC47aWeA+QFVcXzT+/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY0NS8zMzYxMTlDNDQy RjYxMUVFQTI1MjRENjNDNEY5QUUwMi9KRElPcl9tb0lManRwWjRENUFWVnhmTlA3 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pESU9yX21vSUxqdHBaNEQ1QVZWeGZOUDc4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEY0NS8zMzYxMTlDNDQyRjYxMUVFQTI1MjRENjNDNEY5QUUwMi9KRElPcl9tb0lM anRwWjRENUFWVnhmTlA3OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbQ1P2G97sn28FARwILP8WHUKc2uMJzyI9ywbiKslS52WJWcCuj6mV qFFO5spkAOD16EaRULaAgvf1iz98wartdXPzmdU19mPmb7E8/1i5rQIZx0hd2bhN CaxEWA3s0iIUwq5g0d2OmoxVKSSc/ZeQLxm2m3hcJoWPECH1D5Ok3u9BoDFh0Rig 7/imvMcyepVWUHkXBcG01MAE+QSpGEfeOSwa2kTfTu71+qY9HOLmKPlJ2hhsdvzE W5sjfJgh/JO8Pe/xwg4auv1Cj85tU25VOOKpTSjBXqHeIyycH8N+zpCs88FinHlt /CSu8gqNVz0eBBggqNvjYaCWMTOM3Xm6 -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:06 2025 by rpki-client