This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: sF+JFpOUuNYUWivvtxDycu6Xh7K8nS/WNgpuJsZObr0= Subject key identifier: 49:DA:B4:75:DB:CE:22:FA:68:8D:3B:C0:BB:89:E8:81:83:68:A6:B6 Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 02DE Signing time: Thu 04 Dec 2025 23:40:50 +0000 Manifest this update: Thu 04 Dec 2025 23:40:49 +0000 Manifest next update: Thu 11 Dec 2025 23:40:49 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: yRHf5o3/iv0Ti1DlCNBeZgRy45vyWZVtfWWT+vU6Hlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Validity Not Before: Dec 4 23:40:49 2025 GMT Not After : Dec 11 23:40:49 2025 GMT Subject: CN=69321c01-b6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:67:4f:65:17:a1:db:08:98:5c:30:cb:a0: e8:6b:e9:d0:29:5c:56:87:e9:50:38:25:d0:38:c1: 24:b4:c3:28:0e:8c:bb:83:14:29:e1:86:01:2d:49: 38:0b:30:1e:a0:5f:5a:37:0e:cb:67:27:f2:6f:46: 8f:cf:d0:0b:84:cc:e6:6e:1c:eb:ad:dd:3e:0f:29: 7f:54:fb:63:e1:c2:e9:c0:94:de:2e:2a:92:17:54: c7:8a:61:1d:d2:ad:5c:e8:92:b9:eb:9d:4e:11:cc: f9:92:cf:60:06:a7:8c:3b:d3:0f:a2:44:19:15:2c: 2c:ea:b4:40:01:a5:0d:b0:14:c6:88:e2:fe:a6:0e: 6e:52:92:0f:6a:21:64:b7:27:11:f6:47:cf:d9:ff: f2:78:46:87:62:0f:9f:bd:da:1c:53:18:d0:ff:5a: 1d:53:69:d0:c6:00:76:0f:bf:f1:1d:3a:d7:af:1e: 7f:00:32:e5:5e:51:fa:97:fa:b3:81:21:c4:3b:b0: 72:77:6d:df:03:dd:1a:c9:bb:5a:5f:03:54:c1:7d: 08:f6:09:f1:dd:f4:b9:ea:33:23:a2:a3:ce:95:77: b5:59:74:44:ed:48:a5:c9:45:54:ec:f5:7f:cc:6d: d3:de:70:cf:a0:80:29:c9:7a:6a:84:09:e4:07:cd: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DA:B4:75:DB:CE:22:FA:68:8D:3B:C0:BB:89:E8:81:83:68:A6:B6 X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:18:96:f7:9a:e0:eb:85:09:24:b1:dc:46:1b:76:e1:4a:51: 67:ad:cc:4a:f3:ca:6e:cd:d6:36:f5:99:3e:40:d2:29:a8:0f: c3:85:a6:d9:c3:54:4c:1e:30:88:d8:c4:68:bc:f5:57:0f:26: 5d:e1:e4:c5:99:78:fb:88:a9:33:8a:86:87:23:29:13:3b:ab: 6e:5d:3e:ed:5a:56:a2:49:55:7a:4d:00:36:94:3d:b1:59:54: 39:39:5b:b6:8a:83:f2:5a:d9:62:94:40:2e:03:37:fb:95:42: e8:82:be:e9:ae:a5:9a:de:51:0b:6e:53:f6:e9:3c:d9:d7:f9: 4b:a1:9e:e0:e5:95:23:3c:54:08:89:dd:c9:40:cd:27:76:7f: ca:12:1b:ea:b8:4d:15:09:06:ec:c2:59:7e:37:ab:8b:53:54: 12:a9:5a:57:4d:74:e9:f1:2c:ee:a0:9a:58:77:a1:6a:8b:98: 18:1b:89:f5:b8:4e:3f:7c:8f:ed:8f:80:2f:42:59:fb:8c:ab: d5:b2:67:bd:43:22:ae:34:2c:6f:8d:df:9b:12:29:7d:56:cd: e9:0d:a1:43:16:22:d2:bc:5a:41:42:d0:ff:d8:96:32:04:f0: 52:a9:75:f6:79:93:96:bd:6b:75:04:f8:c8:3b:78:a8:cf:71: e0:dd:89:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjUxMjA0MjM0MDQ5WhcNMjUxMjExMjM0MDQ5WjAYMRYwFAYD VQQDEw02OTMyMWMwMS1iNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnl5nT2UXodsImFwwy6Doa+nQKVxWh+lQOCXQOMEktMMoDoy7gxQp4YYBLUk4 CzAeoF9aNw7LZyfyb0aPz9ALhMzmbhzrrd0+Dyl/VPtj4cLpwJTeLiqSF1THimEd 0q1c6JK5651OEcz5ks9gBqeMO9MPokQZFSws6rRAAaUNsBTGiOL+pg5uUpIPaiFk tycR9kfP2f/yeEaHYg+fvdocUxjQ/1odU2nQxgB2D7/xHTrXrx5/ADLlXlH6l/qz gSHEO7Byd23fA90aybtaXwNUwX0I9gnx3fS56jMjoqPOlXe1WXRE7UilyUVU7PV/ zG3T3nDPoIApyXpqhAnkB814EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnatHXb ziL6aI07wLuJ6IGDaKa2MB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0GJb3muDrhQkksdxGG3bhSlFnrcxK88puzdY29Zk+QNIpqA/DhabZ w1RMHjCI2MRovPVXDyZd4eTFmXj7iKkzioaHIykTO6tuXT7tWlaiSVV6TQA2lD2x WVQ5OVu2ioPyWtlilEAuAzf7lULogr7prqWa3lELblP26TzZ1/lLoZ7g5ZUjPFQI id3JQM0ndn/KEhvquE0VCQbswll+N6uLU1QSqVpXTXTp8SzuoJpYd6Fqi5gYG4n1 uE4/fI/tj4AvQln7jKvVsme9QyKuNCxvjd+bEil9Vs3pDaFDFiLSvFpBQtD/2JYy BPBSqXX2eZOWvWt1BPjIO3ioz3Hg3YnO -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:28 2025 by rpki-client