This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: gQX8AI3zM2zSh/qF43JW0DknUWgCrqx1zemcb+GEwdY= Subject key identifier: 10:BD:08:EF:65:AA:24:CB:10:72:1F:3B:24:65:96:44:3E:22:4D:2E Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: 0102 Signing time: Fri 05 Dec 2025 03:07:14 +0000 Manifest this update: Fri 05 Dec 2025 03:07:14 +0000 Manifest next update: Fri 12 Dec 2025 03:07:14 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: 9zzkfmqu1aliPyb1e5/6N35VXLzAf6+WVKuiBI0Y4fQ=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: rttfys3xf5DGoO8xT8j9r6Q4kgJ4GnHSyal9Ka16jwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Dec 5 03:07:14 2025 GMT Not After : Dec 12 03:07:14 2025 GMT Subject: CN=69324c62-e16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:b2:18:cf:b8:30:89:52:08:ed:d0:60:82: 24:3b:1b:f9:f8:7a:59:d2:fe:68:ef:ed:13:b6:77: 99:b9:e6:5d:d2:98:8a:71:34:8b:2d:b1:82:ed:20: 42:b2:d1:71:8e:c3:fa:8a:42:e3:c9:19:11:3b:11: 7a:04:a8:1c:df:7a:65:f7:90:db:45:c8:11:17:67: ed:27:62:9f:8f:42:cc:7b:a9:d4:5e:b8:c1:7c:fd: cb:ec:b2:ac:bb:54:95:d1:9e:87:83:49:48:10:f5: 8b:8d:17:1d:6f:c9:de:d0:8c:77:fa:b9:85:89:b5: d8:86:9b:e9:53:29:2f:09:05:26:76:49:21:bc:ac: 9c:3e:36:92:cf:49:58:25:dc:a1:14:43:f1:df:a8: 86:08:ce:21:d1:b9:4d:ce:fa:56:51:20:b8:6b:ea: 81:df:f5:11:de:7f:05:48:11:e5:4d:7f:55:96:3a: 3a:0c:4a:27:5c:b4:16:d7:6a:1d:40:49:b3:8f:fe: f5:24:36:2c:53:02:92:0c:cf:44:8b:d3:22:48:e3: e2:6f:2d:ad:2b:7e:a5:7e:0d:28:a0:90:76:2b:ef: 1c:7b:7f:1e:25:14:4f:83:0d:25:a3:ef:dc:2a:b4: 15:4d:db:60:de:8b:21:ed:92:e2:53:93:d4:53:17: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BD:08:EF:65:AA:24:CB:10:72:1F:3B:24:65:96:44:3E:22:4D:2E X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:88:79:b6:d0:78:ef:0a:30:8e:f5:ea:4d:a7:8b:90:3e:93: 8a:50:98:08:13:82:57:e2:fd:68:f9:54:35:d1:6d:77:8d:87: 75:cc:f0:c0:dc:76:cc:56:a1:a1:e9:6b:62:80:d9:51:9e:93: 91:e7:8a:53:f0:e8:59:93:61:be:97:4d:79:f0:d0:2a:16:01: 2f:0d:68:fd:fa:93:a4:fa:49:e0:6c:54:eb:0d:23:52:7b:35: 77:fe:bd:08:92:43:e1:b6:aa:db:2f:56:52:67:b7:ca:a2:40: b2:88:60:69:df:81:ba:77:89:6d:9d:97:33:3a:64:ac:7f:8c: 6d:2a:92:17:39:75:8b:d5:33:ae:b5:09:56:6e:19:f1:ff:73: 81:c4:0e:98:ff:31:b0:03:93:d3:65:c0:09:9c:36:2e:2c:95: ff:2e:9c:fc:cb:34:38:0b:41:fa:3c:37:81:1e:7a:7d:b7:6d: 2a:cd:29:5f:0f:1e:48:5e:31:9d:48:69:02:8b:13:5e:92:6a: 6e:f3:87:5d:95:8a:f1:26:38:cb:11:2c:1d:e6:9f:94:4b:bf: 37:62:0a:8b:e9:d2:ca:b9:1b:a0:9c:d1:ae:8b:76:f6:62:fd: 73:54:ab:a5:d2:c8:a5:43:1c:48:74:09:9f:be:8c:bb:3f:a0: 6d:cb:24:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjUxMjA1MDMwNzE0WhcNMjUxMjEyMDMwNzE0WjAYMRYwFAYD VQQDEw02OTMyNGM2Mi1lMTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc+yGM+4MIlSCO3QYIIkOxv5+HpZ0v5o7+0TtneZueZd0piKcTSLLbGC7SBC stFxjsP6ikLjyRkROxF6BKgc33pl95DbRcgRF2ftJ2Kfj0LMe6nUXrjBfP3L7LKs u1SV0Z6Hg0lIEPWLjRcdb8ne0Ix3+rmFibXYhpvpUykvCQUmdkkhvKycPjaSz0lY JdyhFEPx36iGCM4h0blNzvpWUSC4a+qB3/UR3n8FSBHlTX9Vljo6DEonXLQW12od QEmzj/71JDYsUwKSDM9Ei9MiSOPiby2tK36lfg0ooJB2K+8ce38eJRRPgw0lo+/c KrQVTdtg3osh7ZLiU5PUUxd0+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBC9CO9l qiTLEHIfOyRllkQ+Ik0uMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoiHm20HjvCjCO9epNp4uQPpOKUJgIE4JX4v1o+VQ10W13jYd1zPDA 3HbMVqGh6WtigNlRnpOR54pT8OhZk2G+l0158NAqFgEvDWj9+pOk+kngbFTrDSNS ezV3/r0IkkPhtqrbL1ZSZ7fKokCyiGBp34G6d4ltnZczOmSsf4xtKpIXOXWL1TOu tQlWbhnx/3OBxA6Y/zGwA5PTZcAJnDYuLJX/Lpz8yzQ4C0H6PDeBHnp9t20qzSlf Dx5IXjGdSGkCixNekmpu84ddlYrxJjjLESwd5p+US783YgqL6dLKuRugnNGui3b2 Yv1zVKul0silQxxIdAmfvoy7P6BtyySB -----END CERTIFICATE-----Generated at Sat Dec 6 23:54:16 2025 by rpki-client