This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft File: jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json) Hash identifier: 6XGU0arG2GNzmjt2EwBBZpl8fkFx4wiUYtDYoO4RLds= Subject key identifier: F1:8B:66:FC:8E:D6:08:92:91:AC:06:4F:20:06:CE:0D:AA:B9:50:A0 Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 Certificate issuer: /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft Manifest number: 0242 Signing time: Wed 17 Dec 2025 01:13:22 +0000 Manifest this update: Wed 17 Dec 2025 01:13:21 +0000 Manifest next update: Wed 24 Dec 2025 01:13:21 +0000 Files and hashes: 1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: qtwVCfqJNM+y+2BOxf1h5Lt/HmK0Y4yzz637pvfWOjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 01:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Validity Not Before: Dec 17 01:13:21 2025 GMT Not After : Dec 24 01:13:21 2025 GMT Subject: CN=694203b2-fc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:64:91:38:06:80:21:93:09:41:3b:0d:84:9e: 08:48:92:ce:1b:38:ba:7c:cb:30:7b:c6:74:34:58: de:17:cd:3d:42:c3:1e:2c:ac:36:e3:d4:44:76:c3: ce:1b:50:b4:1c:03:de:d9:49:64:dd:c8:f7:fb:c7: 58:01:eb:58:7e:bb:79:0d:89:32:91:7a:39:25:42: 09:d7:64:0c:d3:76:ce:9b:21:6c:18:61:89:90:6e: 8b:b9:87:1b:d2:24:db:68:66:07:94:00:0b:f2:42: be:85:ac:4f:8d:1f:cf:ab:8b:80:3d:5c:db:fa:f3: fc:41:42:a6:c4:c5:17:e4:31:7f:c7:3d:ed:d8:2c: 64:ad:6f:b1:58:2d:15:1a:af:be:31:d3:70:1b:65: 2c:ff:2f:3f:61:c8:bd:69:30:0e:81:dc:29:5f:fe: 43:bc:83:d1:98:27:16:f2:8e:19:1b:70:8f:41:c3: f0:a3:2f:84:46:fa:a8:15:cc:df:1e:77:ac:e8:20: 40:31:aa:63:cc:ef:c9:58:e2:cc:b0:f4:ea:ef:37: 89:8e:c3:74:6b:c6:97:61:fa:81:96:d1:14:2c:ca: d8:ce:5f:44:01:9b:e2:8c:05:6a:d0:9e:bb:cf:c6: b1:a7:9e:b8:b0:b5:fd:7a:fe:e3:e1:d5:ca:bd:68: 7d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8B:66:FC:8E:D6:08:92:91:AC:06:4F:20:06:CE:0D:AA:B9:50:A0 X509v3 Authority Key Identifier: keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:85:b7:1b:89:47:86:17:a4:d8:06:dd:9b:85:d8:40:d7:31: 0b:8e:8e:27:f6:94:d1:f0:cd:a9:64:98:73:ce:be:66:60:ce: 05:29:eb:29:77:d5:20:bd:e6:3f:b3:89:02:74:90:5f:61:fc: 1f:07:c8:e1:12:02:48:f4:a4:58:24:83:0e:0b:16:01:5f:ef: e7:08:80:2c:42:2b:4a:76:84:c0:be:d2:2d:9b:75:f7:df:51: d1:6c:61:7c:8d:ec:56:e9:31:e8:18:21:a1:ee:df:cb:20:07: 0f:fe:65:e5:4b:e3:aa:ec:c7:d9:5b:c7:7d:b4:4f:27:e6:5d: 49:1b:94:3e:85:e4:91:b2:d9:54:f3:76:03:5c:f4:27:2d:08: ba:3d:3f:64:b7:fb:2f:eb:cc:c0:15:16:1e:8e:ad:1c:3b:c2: 9e:19:db:b8:b2:5d:2d:ec:b0:ba:49:0f:4b:43:70:05:51:6b: da:d0:53:74:4c:0a:44:e3:69:3b:de:2c:32:cf:e9:68:02:d3: aa:60:00:4c:55:81:94:1c:62:48:e5:b3:b2:4c:b7:84:75:0b: f0:3f:50:19:8d:1f:91:88:02:c0:bc:aa:a7:a2:c3:77:8b:04: 4c:99:8c:de:2d:da:8e:ce:53:ed:cc:25:70:12:51:d4:a9:81: b2:1d:9f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKDhDREEwODRFMjNENUI3NTA5QUEzQTkyREFDQTBCMUFE QzlEOUZCNDgwHhcNMjUxMjE3MDExMzIxWhcNMjUxMjI0MDExMzIxWjAYMRYwFAYD VQQDDA02OTQyMDNiMi1mYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WSROAaAIZMJQTsNhJ4ISJLOGzi6fMswe8Z0NFjeF809QsMeLKw249REdsPO G1C0HAPe2Ulk3cj3+8dYAetYfrt5DYkykXo5JUIJ12QM03bOmyFsGGGJkG6LuYcb 0iTbaGYHlAAL8kK+haxPjR/Pq4uAPVzb+vP8QUKmxMUX5DF/xz3t2CxkrW+xWC0V Gq++MdNwG2Us/y8/Yci9aTAOgdwpX/5DvIPRmCcW8o4ZG3CPQcPwoy+ERvqoFczf Hnes6CBAMapjzO/JWOLMsPTq7zeJjsN0a8aXYfqBltEULMrYzl9EAZvijAVq0J67 z8axp564sLX9ev7j4dXKvWh9LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGLZvyO 1giSkawGTyAGzg2quVCgMB8GA1UdIwQYMBaAFIzaCE4j1bdQmqOpLaygsa3J2ftI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EQ0NENThCNjVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQxQ2FvNmt0cktDeHJjblot MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOb0lUaVBWdDFDYW82a3RyS0N4cmNuWi0wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EQ0NENThCNjVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQx Q2FvNmt0cktDeHJjblotMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5hbcbiUeGF6TYBt2bhdhA1zELjo4n9pTR8M2pZJhzzr5mYM4FKesp d9UgveY/s4kCdJBfYfwfB8jhEgJI9KRYJIMOCxYBX+/nCIAsQitKdoTAvtItm3X3 31HRbGF8jexW6THoGCGh7t/LIAcP/mXlS+Oq7MfZW8d9tE8n5l1JG5Q+heSRstlU 83YDXPQnLQi6PT9kt/sv68zAFRYejq0cO8KeGdu4sl0t7LC6SQ9LQ3AFUWva0FN0 TApE42k73iwyz+loAtOqYABMVYGUHGJI5bOyTLeEdQvwP1AZjR+RiALAvKqnosN3 iwRMmYzeLdqOzlPtzCVwElHUqYGyHZ/w -----END CERTIFICATE-----Generated at Thu Dec 18 19:12:03 2025 by rpki-client