This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft File: jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json) Hash identifier: mcFCJAO3M/Y6vAg29Zi5zGG5i9Y21MPUUgp0R+vXz88= Subject key identifier: 22:D8:63:47:48:32:B6:17:1C:29:7C:3B:7C:D1:1D:CE:9C:57:24:58 Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA Certificate issuer: /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft Manifest number: 018A Signing time: Sun 07 Dec 2025 02:00:23 +0000 Manifest this update: Sun 07 Dec 2025 02:00:22 +0000 Manifest next update: Sun 14 Dec 2025 02:00:22 +0000 Files and hashes: 1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: I/CHfCXgHpSLStiN7s4//91urGmNTlNmvT0NEwfEWLM=) 2: DB6928E4635411EF8B6D364BC4F9AE02.roa (hash: hIfGEZpVGRuqTYaqcdzSTwoH6LvOfzrGbr0BYVenTJE=) 3: DB0532B2635411EF8B6D364BC4F9AE02.roa (hash: xpU4YvMsifPhb0IGkIRTwpNd6P9gbkGB+l0mAvn3/+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 02:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2A5, serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Validity Not Before: Dec 7 02:00:22 2025 GMT Not After : Dec 14 02:00:22 2025 GMT Subject: CN=6934dfb6-98e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:bc:b8:6d:09:4e:75:8e:48:c9:72:91:42: 5c:0f:22:a6:a6:69:2b:37:47:4a:a4:72:7b:9e:54: 7b:2b:5d:1b:2b:2a:b1:d1:71:11:2a:b9:94:8b:7c: b8:68:fb:95:1f:c4:11:7c:fe:bf:50:80:33:27:bd: b6:63:f7:a6:bf:5f:55:c5:30:3c:1c:ae:cd:7c:09: 5e:3d:27:90:ea:e6:7b:a6:97:f7:fb:ec:00:c8:19: 82:43:fb:33:f1:cd:e6:94:c8:c2:d0:53:a5:89:7c: ad:8a:34:e4:06:18:a0:fc:7a:63:ce:3f:fb:b9:d3: c8:6a:02:33:b6:40:63:db:c2:cd:8e:10:18:82:e6: 02:f4:25:9a:1b:22:4f:ef:5e:71:e2:b2:e0:09:f1: 16:46:05:91:49:38:5a:bd:19:53:15:8b:01:d6:4f: d0:c1:7f:5f:d2:5e:e2:f9:fb:4d:17:30:04:8b:20: f3:ce:29:9d:65:18:39:3c:56:b8:8c:3c:c1:de:1b: 4c:69:13:da:5e:c8:c9:bf:bb:08:35:c4:11:02:48: ab:04:e4:f7:bd:7e:1c:2e:1f:a3:1f:80:ef:97:fd: 40:0a:c7:d9:e7:63:32:d7:e8:67:dd:6f:5c:b3:fd: cf:1c:c1:82:60:9b:62:92:8c:db:ee:48:b4:e7:8a: 22:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D8:63:47:48:32:B6:17:1C:29:7C:3B:7C:D1:1D:CE:9C:57:24:58 X509v3 Authority Key Identifier: keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b2:6b:27:90:cc:4c:d7:c2:05:3a:52:75:19:7f:31:cb:c4: 94:31:c8:df:c1:68:4f:6a:4e:f8:7a:48:85:ff:23:3f:0d:1d: e9:89:81:2b:37:66:16:96:83:a3:d0:27:d1:46:9f:e0:31:04: 66:83:6b:df:17:1f:ed:a2:5e:1e:ea:d8:83:7c:ee:de:9d:68: 31:77:bc:f7:6c:21:be:12:3f:2e:ba:7a:44:9a:fa:71:81:ea: 5d:fd:82:d6:db:25:7d:66:8d:56:1a:c7:2f:6a:05:d0:18:4d: 43:19:28:40:ae:f7:91:4b:cf:3d:0e:8f:60:ab:71:6e:2a:c0: ea:71:d8:00:6e:d9:08:43:ca:7c:73:d8:02:5c:d8:86:a1:4e: 50:44:6b:9b:af:f5:7e:0d:20:d7:20:8f:8a:73:8b:3c:83:16: 23:e4:04:d0:48:02:81:77:78:11:63:ad:1d:48:78:a5:39:5d: f0:53:88:5e:10:d4:9c:47:2a:fe:25:da:44:df:82:6e:81:94: 4f:dd:07:b5:42:88:e8:b0:79:ed:60:4b:14:0a:dd:27:dc:21: e1:33:15:06:e9:1d:88:51:fc:a9:0b:a6:7e:fe:73:a8:ab:40: ed:3d:76:9b:e0:64:62:67:8c:66:4f:09:c0:34:54:45:46:e0: e6:07:80:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyQTUxMTAvBgNVBAUTKDhDRENFNTc4QTIzOUU1OENFN0ZFNzY4M0JCNDc2OUY5 REM1NTIyQkEwHhcNMjUxMjA3MDIwMDIyWhcNMjUxMjE0MDIwMDIyWjAYMRYwFAYD VQQDEw02OTM0ZGZiNi05OGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzp28uG0JTnWOSMlykUJcDyKmpmkrN0dKpHJ7nlR7K10bKyqx0XERKrmUi3y4 aPuVH8QRfP6/UIAzJ722Y/emv19VxTA8HK7NfAlePSeQ6uZ7ppf3++wAyBmCQ/sz 8c3mlMjC0FOliXytijTkBhig/Hpjzj/7udPIagIztkBj28LNjhAYguYC9CWaGyJP 715x4rLgCfEWRgWRSThavRlTFYsB1k/QwX9f0l7i+ftNFzAEiyDzzimdZRg5PFa4 jDzB3htMaRPaXsjJv7sINcQRAkirBOT3vX4cLh+jH4Dvl/1ACsfZ52My1+hn3W9c s/3PHMGCYJtikozb7ki054oiOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLYY0dI MrYXHCl8O3zRHc6cVyRYMB8GA1UdIwQYMBaAFIzc5XiiOeWM5/52g7tHafncVSK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBNS9BMUMwNEQwQTc2 Q0IxMUVFOTNGNTg3NDdDNEY5QUUwMi9qTnpsZUtJNTVZem5fbmFEdTBkcC1keFZJ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOemxlS0k1NVl6bl9uYUR1MGRwLWR4Vklyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTJBNS9BMUMwNEQwQTc2Q0IxMUVFOTNGNTg3NDdDNEY5QUUwMi9qTnpsZUtJNTVZ em5fbmFEdTBkcC1keFZJcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfsmsnkMxM18IFOlJ1GX8xy8SUMcjfwWhPak74ekiF/yM/DR3piYEr N2YWloOj0CfRRp/gMQRmg2vfFx/tol4e6tiDfO7enWgxd7z3bCG+Ej8uunpEmvpx gepd/YLW2yV9Zo1WGscvagXQGE1DGShArveRS889Do9gq3FuKsDqcdgAbtkIQ8p8 c9gCXNiGoU5QRGubr/V+DSDXII+Kc4s8gxYj5ATQSAKBd3gRY60dSHilOV3wU4he ENScRyr+JdpE34JugZRP3Qe1QojosHntYEsUCt0n3CHhMxUG6R2IUfypC6Z+/nOo q0DtPXab4GRiZ4xmTwnANFRFRuDmB4C6 -----END CERTIFICATE-----Generated at Sun Dec 7 07:52:22 2025 by rpki-client