This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: p0KwMinR12SZX0N5MIu0Bxhkbp+SzigHEBOWE2Ggm5M= Subject key identifier: E6:35:F3:E6:32:B2:7C:D4:30:9F:C5:B6:07:E5:5B:4D:AF:38:06:CE Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: FB Signing time: Fri 05 Dec 2025 03:13:18 +0000 Manifest this update: Fri 05 Dec 2025 03:13:18 +0000 Manifest next update: Fri 12 Dec 2025 03:13:18 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: iIVL7w89cNRfIe223QqDWNSjkBwjBMML+Uas3b6MVyg=) 2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: ClZn2xirzr+629EzY8UXOvPJeXz2ck5eF+NekF81TbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Dec 5 03:13:18 2025 GMT Not After : Dec 12 03:13:18 2025 GMT Subject: CN=69324dce-3912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1f:80:04:31:6d:ed:1a:3b:6b:a8:de:17:b2: 52:49:4f:6d:01:eb:75:67:ee:55:48:8a:c0:ec:73: e5:f2:f5:a6:8d:de:2f:fd:aa:fc:58:2f:26:0f:69: a7:8d:9d:0a:ac:19:00:47:6b:63:e1:86:a1:b7:0a: 95:ae:3c:a1:4e:8d:ce:26:ff:ca:cd:f5:d6:29:bc: 14:99:ed:52:5e:6e:8f:95:65:bb:6d:77:79:2e:c6: 22:1c:c1:b2:02:71:80:9c:8b:1f:83:1e:3f:ed:8c: e6:e1:a6:77:8f:4a:2a:94:50:06:12:fb:a9:1b:94: 06:57:a5:61:7c:6a:ff:dc:70:99:6a:eb:c1:bb:50: b1:e0:b3:f1:7b:d0:a3:7e:34:62:a4:47:f3:ab:c2: b8:3e:a8:67:01:d3:cd:4d:11:a1:89:d9:77:fe:42: 1f:9c:bb:9e:21:aa:85:14:ef:c8:98:ab:e3:08:ae: 11:78:66:7c:7e:cf:81:ae:7f:ec:40:a7:86:d0:44: 4a:32:67:a0:e5:02:ca:35:c3:40:9a:a4:78:4d:31: 64:a9:e6:06:91:01:db:9a:b8:fd:5e:21:8c:1b:c4: 48:30:06:a6:35:6d:50:6f:7e:18:ca:02:70:c4:86: 0d:93:79:af:9b:97:2e:f9:64:07:9e:19:ce:46:16: 82:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:35:F3:E6:32:B2:7C:D4:30:9F:C5:B6:07:E5:5B:4D:AF:38:06:CE X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:97:8a:a2:13:67:bd:7b:9f:f6:c7:fe:1d:a9:b7:fb:1c:96: 22:67:66:34:01:c6:66:75:d5:5d:6c:80:7e:65:2a:ce:e2:52: 8d:1b:11:1d:cc:a6:fc:a7:1c:80:44:90:53:27:50:6b:2c:59: f2:4c:ed:26:53:ba:8a:d0:78:80:49:93:26:32:1f:3e:89:d0: ea:2c:87:dc:20:ba:8f:5b:ce:00:fc:79:8a:95:13:8e:69:96: 07:4d:11:e8:ba:57:5b:a8:cf:71:77:65:31:e8:c6:ee:f8:ce: 30:b0:b0:ee:af:1a:30:99:8a:0b:f6:d0:66:29:2f:cc:11:96: 6a:22:c9:cf:cd:4e:63:e4:8a:87:1f:ae:2f:fb:ad:d9:59:7c: c7:52:b5:a7:58:7f:bd:0c:91:e4:94:d8:d6:d4:bc:1b:0e:b8: 82:79:b6:b2:b7:86:66:f8:cc:7a:cd:df:b6:ce:32:cf:c9:54: 28:5f:03:b8:fd:3c:ef:09:0e:c6:f9:15:84:d5:62:6b:40:35: cf:37:ca:46:04:9c:cc:e7:cf:25:21:11:96:1c:49:90:1e:ec: 2f:1e:0b:dc:d7:8f:0b:a7:b3:e6:53:ae:e7:df:71:82:8c:46: 7a:09:fb:1c:07:9e:0b:28:f9:48:d1:9c:6d:b7:43:f8:1c:42: 0d:fc:d4:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjUxMjA1MDMxMzE4WhcNMjUxMjEyMDMxMzE4WjAYMRYwFAYD VQQDEw02OTMyNGRjZS0zOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArh+ABDFt7Ro7a6jeF7JSSU9tAet1Z+5VSIrA7HPl8vWmjd4v/ar8WC8mD2mn jZ0KrBkAR2tj4YahtwqVrjyhTo3OJv/KzfXWKbwUme1SXm6PlWW7bXd5LsYiHMGy AnGAnIsfgx4/7Yzm4aZ3j0oqlFAGEvupG5QGV6VhfGr/3HCZauvBu1Cx4LPxe9Cj fjRipEfzq8K4PqhnAdPNTRGhidl3/kIfnLueIaqFFO/ImKvjCK4ReGZ8fs+Brn/s QKeG0ERKMmeg5QLKNcNAmqR4TTFkqeYGkQHbmrj9XiGMG8RIMAamNW1Qb34YygJw xIYNk3mvm5cu+WQHnhnORhaCxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOY18+Yy snzUMJ/FtgflW02vOAbOMB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZl4qiE2e9e5/2x/4dqbf7HJYiZ2Y0AcZmddVdbIB+ZSrO4lKNGxEd zKb8pxyARJBTJ1BrLFnyTO0mU7qK0HiASZMmMh8+idDqLIfcILqPW84A/HmKlROO aZYHTRHouldbqM9xd2Ux6Mbu+M4wsLDurxowmYoL9tBmKS/MEZZqIsnPzU5j5IqH H64v+63ZWXzHUrWnWH+9DJHklNjW1LwbDriCebayt4Zm+Mx6zd+2zjLPyVQoXwO4 /TzvCQ7G+RWE1WJrQDXPN8pGBJzM588lIRGWHEmQHuwvHgvc148Lp7PmU67n33GC jEZ6CfscB54LKPlI0Zxtt0P4HEIN/NRL -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:52 2025 by rpki-client