This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json) Hash identifier: VWuoGi9Bmt62/TVXYihzohe+AEftJ1QWGr373L+dGUA= Subject key identifier: 43:8C:BE:33:AF:02:C5:08:04:CD:86:65:5D:4F:6A:81:0A:A7:73:F2 Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft Manifest number: EA Signing time: Fri 05 Dec 2025 03:30:03 +0000 Manifest this update: Fri 05 Dec 2025 03:30:03 +0000 Manifest next update: Fri 12 Dec 2025 03:30:03 +0000 Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: tfVYigOAM6JlUqBZQA02v8q58OT1i9vhAUIkw/G1ZUU=) 2: 00E00D025BC711F0886C5B59C4F9AE02.roa (hash: 4/6lX4NZ27z+xN3FhA2YCKR5609eVbF1fWeCrdQJGAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Validity Not Before: Dec 5 03:30:03 2025 GMT Not After : Dec 12 03:30:03 2025 GMT Subject: CN=693251bb-3bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a8:98:9b:90:66:87:7c:4b:45:16:e7:a9:e3: 83:b7:30:76:69:93:fe:eb:49:0b:df:d5:37:49:9a: e1:48:83:54:db:9d:02:d2:c2:b2:9d:97:72:bb:37: 52:85:5f:f0:e2:27:f7:0c:4e:07:e6:fc:f4:3a:2f: fe:c2:78:a1:a7:35:ad:f6:f9:77:f3:ba:60:be:9b: e7:e3:c5:f3:b0:dd:32:68:f8:0e:23:12:98:ae:bd: 25:ac:6b:f8:a5:b2:ac:b6:25:fa:b1:1b:67:33:67: 9f:9b:bb:9c:da:f1:c2:89:74:71:c2:d0:83:40:cf: d3:9c:84:f9:94:1a:49:c6:25:e4:ab:bb:a6:48:9c: 2b:5f:5e:8d:70:20:68:9b:a8:5a:76:3c:10:69:4a: 63:74:34:0d:75:c2:dd:bb:10:8f:f7:c6:e5:fd:61: d5:e8:dc:34:4c:73:48:71:6e:0d:ef:5d:ca:0e:24: 42:05:51:bb:0a:80:0b:cf:60:4a:55:8c:f4:4a:47: 5b:f4:88:d9:b8:e3:39:58:ed:dd:6e:db:c4:de:36: 3c:97:0c:a4:fb:b4:cc:27:35:0c:15:c1:c9:3c:cd: b0:05:a2:ae:03:83:1e:37:bc:f5:23:98:42:20:bd: 9f:4f:4b:e5:fa:e1:4d:1a:1f:bf:d4:4e:94:1f:11: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8C:BE:33:AF:02:C5:08:04:CD:86:65:5D:4F:6A:81:0A:A7:73:F2 X509v3 Authority Key Identifier: keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:f5:4a:69:f3:d5:a8:c2:bc:6b:14:b4:e3:af:ce:61:39:c4: 7c:03:6e:4c:86:e7:37:b0:4b:7c:14:e9:81:1f:8b:83:12:e5: 61:11:f4:20:a7:98:7f:b3:6d:f9:63:f2:82:86:df:e7:b7:f6: e1:cb:6b:7f:17:9b:d0:f5:ae:06:53:dc:75:24:a3:33:a9:ca: f3:ad:4e:2f:20:f9:5e:05:ec:26:52:36:15:21:04:57:7f:15: 9d:80:16:0a:2d:8a:8c:a8:5d:89:ba:ec:b6:38:21:56:21:b5: 02:10:fa:eb:49:7c:62:70:9a:e4:d3:bd:56:f9:67:62:e9:dd: 96:41:44:22:26:80:af:55:56:30:ae:31:b0:51:f0:54:79:05: cd:6e:37:04:4b:b6:b9:d5:66:03:9f:68:87:e0:62:35:af:be: 60:cb:18:9a:da:51:58:3c:e9:fd:ee:3f:2e:bb:c4:47:61:5f: a7:7a:8f:dc:90:53:91:7b:4d:f5:a2:13:b8:dc:ae:ed:d7:7f: 13:ef:de:12:43:2f:67:52:b8:43:be:93:ad:0b:5a:1c:c6:2f: d9:43:41:d0:99:9a:fa:53:0b:b5:cd:0e:ad:ea:6d:ab:d8:8d: 9e:19:95:64:37:95:df:01:ae:01:63:c0:8b:26:df:73:ea:24: 1d:fe:41:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2QzExMTAvBgNVBAUTKDI2RDg2NDVFRThFRTNBNUQxRUIxRDJERjk3OUI4NTQ5 Qjg3NjFFMkEwHhcNMjUxMjA1MDMzMDAzWhcNMjUxMjEyMDMzMDAzWjAYMRYwFAYD VQQDEw02OTMyNTFiYi0zYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqiYm5Bmh3xLRRbnqeODtzB2aZP+60kL39U3SZrhSINU250C0sKynZdyuzdS hV/w4if3DE4H5vz0Oi/+wnihpzWt9vl387pgvpvn48XzsN0yaPgOIxKYrr0lrGv4 pbKstiX6sRtnM2efm7uc2vHCiXRxwtCDQM/TnIT5lBpJxiXkq7umSJwrX16NcCBo m6hadjwQaUpjdDQNdcLduxCP98bl/WHV6Nw0THNIcW4N713KDiRCBVG7CoALz2BK VYz0Skdb9IjZuOM5WO3dbtvE3jY8lwyk+7TMJzUMFcHJPM2wBaKuA4MeN7z1I5hC IL2fT0vl+uFNGh+/1E6UHxHJiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOMvjOv AsUIBM2GZV1PaoEKp3PyMB8GA1UdIwQYMBaAFCbYZF7o7jpdHrHS35ebhUm4dh4q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDZDMS9EQjcwNDRFMjdB MjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9sMGVzZExmbDV1RlNiaDJI aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDZDMS9EQjcwNDRFMjdBMjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9s MGVzZExmbDV1RlNiaDJIaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI9Upp89WowrxrFLTjr85hOcR8A25Mhuc3sEt8FOmBH4uDEuVhEfQg p5h/s235Y/KCht/nt/bhy2t/F5vQ9a4GU9x1JKMzqcrzrU4vIPleBewmUjYVIQRX fxWdgBYKLYqMqF2Juuy2OCFWIbUCEPrrSXxicJrk071W+Wdi6d2WQUQiJoCvVVYw rjGwUfBUeQXNbjcES7a51WYDn2iH4GI1r75gyxia2lFYPOn97j8uu8RHYV+neo/c kFORe031ohO43K7t138T794SQy9nUrhDvpOtC1ocxi/ZQ0HQmZr6Uwu1zQ6t6m2r 2I2eGZVkN5XfAa4BY8CLJt9z6iQd/kHU -----END CERTIFICATE-----Generated at Sat Dec 6 20:17:43 2025 by rpki-client