This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft File: JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft (raw, json) Hash identifier: ZYJ+QTVByN+SEPPBypUB3hcpExuoQIfrwB4JFu93Ym0= Subject key identifier: 3C:A3:2A:59:FA:A5:CB:44:0C:14:2A:32:E6:52:D5:93:D5:DE:0B:B4 Authority key identifier: 24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F Certificate issuer: /CN=A9198F67/serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft Manifest number: 68 Signing time: Fri 05 Dec 2025 04:51:06 +0000 Manifest this update: Fri 05 Dec 2025 04:51:06 +0000 Manifest next update: Fri 12 Dec 2025 04:51:06 +0000 Files and hashes: 1: JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl (hash: aXnyz+aGKfNxPH3NaogsMxnMZstRxaMy43O5nBwvBx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F67, serialNumber=248A2ECCC70F9E3E984BB46FB19DCD3AA9AD915F Validity Not Before: Dec 5 04:51:06 2025 GMT Not After : Dec 12 04:51:06 2025 GMT Subject: CN=693264ba-e301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:51:e2:90:c8:99:66:5f:08:47:f9:fe:24: d9:e0:9d:16:4d:13:50:1e:f1:ae:21:63:60:03:94: d9:8e:3b:7d:af:84:9b:a1:85:80:d9:bf:54:50:28: 2f:20:53:ab:a8:1d:27:4f:9b:5c:6e:7c:a4:75:84: a5:ee:6b:bd:44:fe:bc:25:3c:e1:d5:c2:02:49:9a: ec:e3:88:d2:ff:8e:d0:97:c7:f5:c3:6d:4a:78:34: e1:36:e8:97:83:b4:62:a4:d2:63:16:81:95:65:7d: 47:9b:99:a9:41:d6:05:aa:6a:b2:d4:1d:eb:78:22: ff:28:75:a6:34:75:95:0f:d9:8e:31:18:fa:33:df: 2a:97:f3:07:64:e2:33:fd:9e:47:fa:93:52:15:53: 95:8e:de:c4:8c:03:92:d1:06:ca:15:95:1a:12:6e: ec:74:22:6c:40:3f:af:4d:55:a7:fa:bb:34:61:00: 77:57:62:06:5d:0a:52:42:98:05:99:46:68:ca:71: 0d:aa:68:b3:78:59:54:2f:80:f5:cc:60:cc:e8:69: d7:3b:ef:92:e3:c3:32:a2:e7:07:93:2d:94:55:48: 1a:9b:14:f5:42:91:6e:1d:a8:1b:eb:ed:80:45:3a: 9e:a8:f0:c6:41:0b:a7:d2:5c:49:99:df:ea:62:31: d7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A3:2A:59:FA:A5:CB:44:0C:14:2A:32:E6:52:D5:93:D5:DE:0B:B4 X509v3 Authority Key Identifier: keyid:24:8A:2E:CC:C7:0F:9E:3E:98:4B:B4:6F:B1:9D:CD:3A:A9:AD:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JIouzMcPnj6YS7RvsZ3NOqmtkV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F67/CA011262308911F0A03FB10AC4F9AE02/JIouzMcPnj6YS7RvsZ3NOqmtkV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:1d:ab:be:ce:1f:cb:93:ed:ec:d3:fb:a8:2e:c6:86:e6:53: 22:c8:53:f2:e0:7f:28:27:71:2a:13:d1:1b:41:be:47:6a:e7: 75:b8:64:83:e4:96:fa:7a:34:dc:cb:4c:01:b4:93:ef:f6:cf: 6e:b5:74:75:c4:56:98:0e:1a:76:0c:c6:b7:ba:a4:f2:c4:30: d6:be:ba:94:a4:c8:98:fa:24:ba:1d:21:51:11:b1:33:67:af: 2f:b0:32:06:78:77:b1:43:ab:39:95:73:c3:78:64:9a:c6:df: 5d:90:13:f9:40:b1:87:bc:9a:0d:53:99:7b:c0:e7:95:a5:d2: 3a:e3:18:12:00:22:bb:9b:8a:f2:79:2d:19:ad:8d:91:1d:31: 79:68:b0:56:4b:fe:db:ae:ef:b3:ff:1f:78:b3:05:35:14:95: bd:17:dc:2e:58:bb:f5:57:e5:f5:7c:45:b5:c3:51:cf:7a:c9: 42:76:73:7e:94:22:54:69:14:29:89:c6:b1:d1:d1:47:7e:fb: 63:71:c0:83:89:03:17:8b:35:f4:16:99:0e:fb:a7:58:44:08: ba:46:ac:7b:1d:d1:1b:8a:16:cc:78:0c:07:25:d3:90:30:67: 75:86:cb:5f:ca:5d:58:31:9d:7a:1b:e9:b7:5f:fe:50:67:ec: 60:75:94:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEY2NzExMC8GA1UEBRMoMjQ4QTJFQ0NDNzBGOUUzRTk4NEJCNDZGQjE5RENEM0FB OUFEOTE1RjAeFw0yNTEyMDUwNDUxMDZaFw0yNTEyMTIwNDUxMDZaMBgxFjAUBgNV BAMTDTY5MzI2NGJhLWUzMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCo1HikMiZZl8IR/n+JNngnRZNE1Ae8a4hY2ADlNmOO32vhJuhhYDZv1RQKC8g U6uoHSdPm1xufKR1hKXua71E/rwlPOHVwgJJmuzjiNL/jtCXx/XDbUp4NOE26JeD tGKk0mMWgZVlfUebmalB1gWqarLUHet4Iv8odaY0dZUP2Y4xGPoz3yqX8wdk4jP9 nkf6k1IVU5WO3sSMA5LRBsoVlRoSbux0ImxAP69NVaf6uzRhAHdXYgZdClJCmAWZ RmjKcQ2qaLN4WVQvgPXMYMzoadc775LjwzKi5weTLZRVSBqbFPVCkW4dqBvr7YBF Op6o8MZBC6fSXEmZ3+piMdcfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPKMqWfql y0QMFCoy5lLVk9XeC7QwHwYDVR0jBBgwFoAUJIouzMcPnj6YS7RvsZ3NOqmtkV8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4RjY3L0NBMDExMjYyMzA4 OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2WVM3UnZzWjNOT3FtdGtW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSklvdXpNY1BuajZZUzdSdnNaM05PcW10a1Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 RjY3L0NBMDExMjYyMzA4OTExRjBBMDNGQjEwQUM0RjlBRTAyL0pJb3V6TWNQbmo2 WVM3UnZzWjNOT3FtdGtWOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMMdq77OH8uT7ezT+6guxobmUyLIU/LgfygncSoT0RtBvkdq53W4ZIPk lvp6NNzLTAG0k+/2z261dHXEVpgOGnYMxre6pPLEMNa+upSkyJj6JLodIVERsTNn ry+wMgZ4d7FDqzmVc8N4ZJrG312QE/lAsYe8mg1TmXvA55Wl0jrjGBIAIrubivJ5 LRmtjZEdMXlosFZL/tuu77P/H3izBTUUlb0X3C5Yu/VX5fV8RbXDUc96yUJ2c36U IlRpFCmJxrHR0Ud++2NxwIOJAxeLNfQWmQ77p1hECLpGrHsd0RuKFsx4DAcl05Aw Z3WGy1/KXVgxnXob6bdf/lBn7GB1lPU= -----END CERTIFICATE-----Generated at Sat Dec 6 22:10:44 2025 by rpki-client