This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: uCwxiPDtq4+1Fy4bX49SzucpAcyOjbgz6a+jfsmX4/M= Subject key identifier: 4D:18:51:3D:B0:67:0B:A4:48:79:A3:83:BB:34:18:65:3B:A6:39:6E Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 04D5 Signing time: Sat 06 Dec 2025 22:33:01 +0000 Manifest this update: Sat 06 Dec 2025 22:33:01 +0000 Manifest next update: Sat 13 Dec 2025 22:33:01 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: 3uCHMJOeh31uIFvER/uEpvy8DY3dlgD7poJm81datGc=) 2: 120C1E6EB98111F09CB3B01CC4F9AE02.roa (hash: fLOwE+U4T9UDAZEuy7MHMCUn4PPCyIIciw8BuUakDVM=) 3: 115A612EB98111F09CB3B01CC4F9AE02.roa (hash: /w3MS95aXHN/Ghxv6d7kfpt0G4QqQoKRqf85av5z5Dc=) 4: 4CD16470A0D011EF832D061DC4F9AE02.roa (hash: srcu9GUmyWyRuUtgcgehyvRvUdi6YXCpKW/XQFJTi/U=) 5: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: ZGBWsoT6Bv8Nyt+kFqWURLeN+xADgUxdU8lp4LCmJfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Dec 6 22:33:01 2025 GMT Not After : Dec 13 22:33:01 2025 GMT Subject: CN=6934af1d-7232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:cf:d9:ab:98:65:c6:ba:da:2d:f2:ca:35: e3:b4:17:26:a8:1a:9b:ab:0e:c1:af:84:a8:a5:a1: 20:4d:7c:e0:c6:85:02:80:d2:41:53:58:1e:d8:a6: d4:b6:93:b6:3e:95:73:f6:55:0c:22:fe:b3:3d:93: 20:4d:72:04:00:bf:24:40:97:1f:bf:c7:a6:dd:29: a2:ea:33:dc:ea:81:27:71:1e:3a:2b:6d:a0:ba:9e: 29:19:35:01:99:58:50:43:ae:fe:75:ce:ef:c2:bf: 90:e9:35:6f:20:80:94:a3:b8:43:62:ca:fd:ef:32: 5d:f8:a8:69:12:83:0c:32:d0:01:2b:bc:ca:b5:86: 4a:25:49:18:ec:3e:a5:7a:c6:93:cb:29:67:d6:b5: ee:cc:52:d9:3d:d5:5d:ee:bf:b8:30:81:c2:98:78: 0c:eb:14:e4:ec:70:ab:2d:a4:c5:e2:e4:ed:53:23: 2d:0a:3c:13:57:8f:7a:fc:92:51:15:03:68:2e:6b: 42:93:60:4b:32:9f:ff:36:35:ba:1c:93:fe:3f:90: 80:e7:4a:6c:d8:01:3b:77:57:ab:fc:1d:85:b0:ff: bd:e6:44:73:8e:1d:b1:51:c2:7b:d4:8f:05:a2:ae: 3c:3b:ab:b0:83:26:0a:fd:6a:f9:2c:e3:99:6d:0e: 51:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:18:51:3D:B0:67:0B:A4:48:79:A3:83:BB:34:18:65:3B:A6:39:6E X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:fd:38:88:b3:e8:4b:2c:d8:c0:f7:80:10:0e:34:cc:e8:71: 0b:51:29:08:9d:f5:c2:d2:2a:51:27:d3:e7:3c:c4:6f:5a:39: 34:fb:67:64:4a:53:47:27:17:56:13:75:bd:81:70:25:7c:0b: 32:f9:b8:9d:34:23:ce:81:73:66:22:e0:83:93:3d:71:4a:42: 9b:6c:da:c5:e4:e9:d5:49:49:90:22:1c:86:ba:f6:cb:79:82: 32:98:1e:57:c2:91:9a:c3:81:34:e2:5e:42:c6:81:cd:b0:78: 86:89:66:d2:a1:01:57:0a:b2:33:7d:68:15:ef:70:3c:d5:2a: 6a:45:82:df:bd:14:87:02:93:3f:c1:03:69:68:56:c7:23:50: 17:52:d1:4a:20:10:f2:7c:f9:b4:21:af:8b:1e:31:bc:88:a1: 11:84:5b:02:7b:df:e2:f3:82:9c:f0:c2:4a:1b:c2:7e:26:cf: 55:df:de:b0:88:b2:e7:df:24:00:99:52:3b:44:30:78:30:9c: 5d:1d:d3:87:bd:7b:11:ed:a6:c6:e7:4c:1c:ae:80:5d:1b:12: e6:45:81:4f:e7:1c:7b:92:80:d4:9f:ef:1b:fa:36:3f:30:b7: a8:4b:2a:37:10:3f:a8:90:db:61:82:33:17:78:3e:f4:35:dc: 86:03:ef:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjUxMjA2MjIzMzAxWhcNMjUxMjEzMjIzMzAxWjAYMRYwFAYD VQQDEw02OTM0YWYxZC03MjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lLP2auYZca62i3yyjXjtBcmqBqbqw7Br4SopaEgTXzgxoUCgNJBU1ge2KbU tpO2PpVz9lUMIv6zPZMgTXIEAL8kQJcfv8em3Smi6jPc6oEncR46K22gup4pGTUB mVhQQ67+dc7vwr+Q6TVvIICUo7hDYsr97zJd+KhpEoMMMtABK7zKtYZKJUkY7D6l esaTyyln1rXuzFLZPdVd7r+4MIHCmHgM6xTk7HCrLaTF4uTtUyMtCjwTV496/JJR FQNoLmtCk2BLMp//NjW6HJP+P5CA50ps2AE7d1er/B2FsP+95kRzjh2xUcJ71I8F oq48O6uwgyYK/Wr5LOOZbQ5R6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0YUT2w ZwukSHmjg7s0GGU7pjluMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW/TiIs+hLLNjA94AQDjTM6HELUSkInfXC0ipRJ9PnPMRvWjk0+2dk SlNHJxdWE3W9gXAlfAsy+bidNCPOgXNmIuCDkz1xSkKbbNrF5OnVSUmQIhyGuvbL eYIymB5XwpGaw4E04l5CxoHNsHiGiWbSoQFXCrIzfWgV73A81SpqRYLfvRSHApM/ wQNpaFbHI1AXUtFKIBDyfPm0Ia+LHjG8iKERhFsCe9/i84Kc8MJKG8J+Js9V396w iLLn3yQAmVI7RDB4MJxdHdOHvXsR7abG50wcroBdGxLmRYFP5xx7koDUn+8b+jY/ MLeoSyo3ED+okNthgjMXeD70NdyGA+/9 -----END CERTIFICATE-----Generated at Sun Dec 7 05:09:16 2025 by rpki-client