This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: jGbQnZ14kMVcwDbu0cUovqKjntxiisG+fGadwjv8Edk= Subject key identifier: 50:31:5C:C6:F6:BA:D3:C6:BF:05:16:E7:B7:AB:54:EA:73:A9:1B:5F Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 04D4 Signing time: Thu 04 Dec 2025 22:22:24 +0000 Manifest this update: Thu 04 Dec 2025 22:22:23 +0000 Manifest next update: Thu 11 Dec 2025 22:22:23 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: Pti4ryM7UWc8TQ42D7diJ92UMWaszgY0Rr9hF5uS3U4=) 2: 120C1E6EB98111F09CB3B01CC4F9AE02.roa (hash: fLOwE+U4T9UDAZEuy7MHMCUn4PPCyIIciw8BuUakDVM=) 3: 115A612EB98111F09CB3B01CC4F9AE02.roa (hash: /w3MS95aXHN/Ghxv6d7kfpt0G4QqQoKRqf85av5z5Dc=) 4: 4CD16470A0D011EF832D061DC4F9AE02.roa (hash: srcu9GUmyWyRuUtgcgehyvRvUdi6YXCpKW/XQFJTi/U=) 5: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: ZGBWsoT6Bv8Nyt+kFqWURLeN+xADgUxdU8lp4LCmJfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Dec 4 22:22:23 2025 GMT Not After : Dec 11 22:22:23 2025 GMT Subject: CN=6932099f-6be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fb:07:43:e8:6f:f4:66:85:d0:96:7a:d3:6a: eb:93:90:45:30:98:a0:18:81:7f:44:08:a7:92:9c: 6a:29:cd:08:6e:89:e7:40:84:b0:c6:50:58:43:db: 48:ed:f5:33:5e:d1:94:c3:26:70:cd:5c:00:3e:1b: 65:f1:ef:21:e2:1b:36:e6:95:c4:82:2c:1f:7e:87: 8d:72:77:cf:08:e1:89:34:c5:c7:6c:7b:2e:78:8c: fc:29:ae:49:21:2a:d9:b8:9d:cd:7b:1e:09:29:c6: 02:d3:f7:c7:32:32:99:49:ba:14:f7:54:ec:0e:02: 40:3a:8b:02:5d:ea:d7:ca:8e:f5:3f:66:b6:06:4b: 7d:57:aa:d3:f2:50:49:2b:fe:11:ba:2c:fe:e2:79: 55:53:73:97:35:2a:eb:e5:41:ac:4a:17:0e:18:a4: 16:25:61:3c:90:65:b9:5f:81:53:f6:15:39:64:f9: 7a:86:7c:ff:f3:65:d6:d2:6c:9d:6f:f3:e3:99:76: 2a:6f:96:8f:8d:c5:b9:03:49:a0:3e:ce:c1:87:46: bb:30:b4:96:db:d0:fd:83:ef:e5:45:f5:a1:8a:27: e0:4f:5b:7c:0a:0b:51:f4:ba:79:3c:56:d8:94:b3: 74:a5:a6:55:a5:46:c5:e2:13:06:fe:c3:87:cc:e4: 5d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:31:5C:C6:F6:BA:D3:C6:BF:05:16:E7:B7:AB:54:EA:73:A9:1B:5F X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:7a:75:0b:39:5b:44:b2:5e:10:fc:db:05:56:4c:9c:15:cf: 27:d6:c0:1e:a6:b8:01:84:3d:7b:a4:4c:4b:93:4c:ed:20:b7: ca:b1:44:f0:19:eb:bc:0d:2c:44:3b:4d:24:91:b3:9e:cb:88: 45:67:6b:35:6b:17:b3:7b:d7:88:72:a9:32:12:0f:9d:2a:27: b5:34:a8:e9:f6:df:04:bb:95:cf:ce:1a:d9:1a:2c:8f:7a:94: 77:66:13:f7:f2:66:b1:b3:81:39:ac:91:83:81:18:39:fb:20: 02:38:bb:11:af:4e:57:d9:29:78:3b:46:58:86:47:5f:85:7a: 77:96:d3:b7:04:29:85:c9:76:a7:90:47:76:74:92:e2:ab:67: c7:bd:11:2d:e1:88:a0:56:21:de:52:72:0e:ee:34:5f:f0:b2: 71:27:27:c8:d7:3a:28:c1:9f:81:19:8d:5d:16:77:c0:66:e2: 6b:f2:80:ed:0f:de:4f:9b:14:98:d3:72:b8:6e:94:f7:fc:d1: 5a:56:01:b4:7b:5f:fd:27:89:03:66:c5:3e:b1:25:48:05:63: 30:b8:40:4e:e4:d6:b3:bc:06:12:ce:15:73:f4:cb:3d:51:cd: 73:12:d5:30:25:ed:60:0a:f5:dc:73:87:99:1a:5d:60:e0:4c: 22:5f:a3:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjUxMjA0MjIyMjIzWhcNMjUxMjExMjIyMjIzWjAYMRYwFAYD VQQDEw02OTMyMDk5Zi02YmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/sHQ+hv9GaF0JZ602rrk5BFMJigGIF/RAinkpxqKc0IbonnQISwxlBYQ9tI 7fUzXtGUwyZwzVwAPhtl8e8h4hs25pXEgiwffoeNcnfPCOGJNMXHbHsueIz8Ka5J ISrZuJ3Nex4JKcYC0/fHMjKZSboU91TsDgJAOosCXerXyo71P2a2Bkt9V6rT8lBJ K/4Ruiz+4nlVU3OXNSrr5UGsShcOGKQWJWE8kGW5X4FT9hU5ZPl6hnz/82XW0myd b/PjmXYqb5aPjcW5A0mgPs7Bh0a7MLSW29D9g+/lRfWhiifgT1t8CgtR9Lp5PFbY lLN0paZVpUbF4hMG/sOHzORdzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAxXMb2 utPGvwUW57erVOpzqRtfMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXenULOVtEsl4Q/NsFVkycFc8n1sAeprgBhD17pExLk0ztILfKsUTw Geu8DSxEO00kkbOey4hFZ2s1axeze9eIcqkyEg+dKie1NKjp9t8Eu5XPzhrZGiyP epR3ZhP38maxs4E5rJGDgRg5+yACOLsRr05X2Sl4O0ZYhkdfhXp3ltO3BCmFyXan kEd2dJLiq2fHvREt4YigViHeUnIO7jRf8LJxJyfI1zoowZ+BGY1dFnfAZuJr8oDt D95PmxSY03K4bpT3/NFaVgG0e1/9J4kDZsU+sSVIBWMwuEBO5NazvAYSzhVz9Ms9 Uc1zEtUwJe1gCvXcc4eZGl1g4EwiX6Of -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:55 2025 by rpki-client