This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft File: jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json) Hash identifier: 5fbqU7CNYWQ4DpSH0Jgb8OOJg4F0A/c4BrBV5A+HV2Y= Subject key identifier: 7F:08:17:F1:48:51:2C:30:DC:56:89:86:38:DC:97:94:DD:74:B4:B9 Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 Certificate issuer: /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft Manifest number: 023C Signing time: Fri 05 Dec 2025 00:09:52 +0000 Manifest this update: Fri 05 Dec 2025 00:09:51 +0000 Manifest next update: Fri 12 Dec 2025 00:09:51 +0000 Files and hashes: 1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: AI3h8Z90RsEY+uWqbw//z6D0SFQ9i3XH8CSbya5MCX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Validity Not Before: Dec 5 00:09:51 2025 GMT Not After : Dec 12 00:09:51 2025 GMT Subject: CN=693222cf-da27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:30:ac:6b:c6:77:76:07:92:8e:06:b7:be: 7c:d4:03:2a:5e:8f:e8:9e:d2:73:51:82:0a:3e:59: f0:ee:6a:c9:93:85:ec:a0:80:85:c7:57:93:bf:2d: 05:e4:97:92:05:ff:c6:2e:a8:31:20:e3:a2:7e:05: 5f:20:e7:0a:44:e4:9a:39:41:66:55:8e:5f:b8:1f: 2b:87:f8:98:df:03:80:52:88:67:f1:74:3f:77:80: ad:47:1e:ee:40:b4:bd:a1:f5:ec:03:94:6d:3d:ce: 31:cf:cc:d6:db:13:a4:f8:bf:ad:08:46:db:22:70: a2:fb:85:35:d5:0a:ba:5d:55:73:70:d6:25:b4:ba: b1:0d:8a:2e:7b:e4:2e:5f:ec:7f:e6:27:ad:a1:ee: de:30:a4:e8:5c:13:a1:55:eb:ad:7d:78:7e:ac:07: 08:4e:7c:8d:61:03:2b:d3:19:fb:51:8c:a5:52:d9: 47:92:2a:b4:04:a6:93:db:cc:03:2c:12:d7:60:3c: c6:32:27:c5:76:b3:6d:be:1a:6f:71:b7:ad:c8:4c: 59:c7:af:b8:96:08:1d:c9:16:84:bf:04:ef:c5:27: 1d:c4:85:9e:4e:39:0d:d7:4f:ec:06:96:2c:b2:b2: 32:9a:08:bc:71:ff:b2:57:01:fc:d8:70:6e:16:85: 07:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:08:17:F1:48:51:2C:30:DC:56:89:86:38:DC:97:94:DD:74:B4:B9 X509v3 Authority Key Identifier: keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:d7:2d:5e:16:3f:c9:18:4b:8d:47:89:bb:6c:f4:da:c7:21: 98:b6:89:32:5f:57:a2:c1:48:c7:15:c6:5c:8e:17:c7:b3:29: 26:83:de:7b:ea:2a:37:65:8a:c1:a7:01:03:d1:00:55:3b:b6: 42:aa:77:3d:a2:92:6b:74:86:9b:e9:66:46:fb:3e:d6:74:e8: c9:2e:4d:d7:eb:5a:29:59:57:39:12:df:c6:68:ed:bc:d2:aa: 71:5f:ed:67:dd:0a:22:b6:53:10:1a:c7:b7:a7:7e:01:22:9f: 56:92:1c:a9:28:e8:cb:72:ec:4b:79:70:6c:1f:d4:cf:a1:31: a0:5a:a2:02:de:c2:3a:69:5f:f7:fe:86:be:65:c0:b6:f8:b7: 1b:e7:73:d5:4b:8b:f4:30:33:f8:65:c4:ca:65:da:44:60:eb: 63:29:ac:53:b3:87:bb:13:1f:87:b3:8c:2a:d1:bd:84:05:0d: 39:1d:63:38:9d:29:a3:e4:d7:20:ea:56:c3:80:c7:cd:71:37: 6a:3d:c0:14:62:fe:f6:83:dc:bf:4b:67:5e:b6:70:e8:9f:d0: 50:b4:fc:9c:38:af:32:cb:e7:51:26:45:a0:67:38:91:95:71: 4f:0a:cb:f3:ff:38:3b:96:1b:f7:00:2e:91:a0:51:ba:bd:7f: b4:7c:4b:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKDhDREEwODRFMjNENUI3NTA5QUEzQTkyREFDQTBCMUFE QzlEOUZCNDgwHhcNMjUxMjA1MDAwOTUxWhcNMjUxMjEyMDAwOTUxWjAYMRYwFAYD VQQDEw02OTMyMjJjZi1kYTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXUwrGvGd3YHko4Gt7581AMqXo/ontJzUYIKPlnw7mrJk4XsoICFx1eTvy0F 5JeSBf/GLqgxIOOifgVfIOcKROSaOUFmVY5fuB8rh/iY3wOAUohn8XQ/d4CtRx7u QLS9ofXsA5RtPc4xz8zW2xOk+L+tCEbbInCi+4U11Qq6XVVzcNYltLqxDYoue+Qu X+x/5ietoe7eMKToXBOhVeutfXh+rAcITnyNYQMr0xn7UYylUtlHkiq0BKaT28wD LBLXYDzGMifFdrNtvhpvcbetyExZx6+4lggdyRaEvwTvxScdxIWeTjkN10/sBpYs srIymgi8cf+yVwH82HBuFoUH9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8IF/FI USww3FaJhjjcl5TddLS5MB8GA1UdIwQYMBaAFIzaCE4j1bdQmqOpLaygsa3J2ftI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EQ0NENThCNjVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQxQ2FvNmt0cktDeHJjblot MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOb0lUaVBWdDFDYW82a3RyS0N4cmNuWi0wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EQ0NENThCNjVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQx Q2FvNmt0cktDeHJjblotMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA1y1eFj/JGEuNR4m7bPTaxyGYtokyX1eiwUjHFcZcjhfHsykmg957 6io3ZYrBpwED0QBVO7ZCqnc9opJrdIab6WZG+z7WdOjJLk3X61opWVc5Et/GaO28 0qpxX+1n3QoitlMQGse3p34BIp9WkhypKOjLcuxLeXBsH9TPoTGgWqIC3sI6aV/3 /oa+ZcC2+Lcb53PVS4v0MDP4ZcTKZdpEYOtjKaxTs4e7Ex+Hs4wq0b2EBQ05HWM4 nSmj5Ncg6lbDgMfNcTdqPcAUYv72g9y/S2detnDon9BQtPycOK8yy+dRJkWgZziR lXFPCsvz/zg7lhv3AC6RoFG6vX+0fEs4 -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:27 2025 by rpki-client