This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft File: jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json) Hash identifier: kRIueyEMtBWfvfhA8WEATuWSzLWV05cwKg9Qz6W70YQ= Subject key identifier: AB:D5:D7:46:55:34:21:7D:9F:19:79:50:40:B5:E2:DC:0C:A0:37:61 Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 Certificate issuer: /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft Manifest number: 01CE Signing time: Fri 05 Dec 2025 01:07:24 +0000 Manifest this update: Fri 05 Dec 2025 01:07:24 +0000 Manifest next update: Fri 12 Dec 2025 01:07:24 +0000 Files and hashes: 1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: nlj+V8UUqm/Q3wLKrCEBPcBp0MeYxaR31rquBl/wLr8=) 2: 4CEE00EC0A8811EEA788A750C4F9AE02.roa (hash: TJboroWTjSH5MHMWjJ273LEWmOXtmootlWn74QKDiMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A6EB, serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Validity Not Before: Dec 5 01:07:24 2025 GMT Not After : Dec 12 01:07:24 2025 GMT Subject: CN=6932304c-5810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:82:03:d9:bc:30:84:fe:8e:91:f5:76:9a:7c: 00:71:a4:0c:b9:cd:d2:b5:8e:01:f2:b9:66:02:ff: f4:90:08:71:72:99:0e:a7:37:d5:46:37:85:ca:e0: 93:b4:b7:ad:8c:7c:a4:95:11:39:80:16:e0:03:97: a0:91:51:84:a1:19:0c:93:b0:6f:1c:55:ee:db:45: 18:ae:73:84:cb:aa:a7:5a:7b:28:ef:d0:cf:32:3b: 90:ed:84:95:af:62:c2:0e:d6:b1:57:cd:5f:60:28: 6e:2f:0c:98:0a:4c:4f:88:d6:c2:29:c7:f2:0a:e6: 3e:9f:ce:2a:a2:e3:ff:fe:95:3a:99:49:c7:59:9b: 95:cd:e3:50:7c:8b:14:d3:78:b2:50:a2:bc:c2:fb: 8f:7f:aa:f6:b3:ec:20:8f:ec:98:ff:6c:d1:f4:9b: 81:86:eb:81:d3:4c:6f:e0:e3:b6:b3:61:dc:2a:77: d1:e1:94:74:03:34:94:58:e1:74:83:a1:ba:9b:69: e9:0d:e1:9b:f5:71:a7:53:91:e4:53:21:33:0b:3b: d3:b5:92:5a:aa:6b:1f:9a:9a:12:2a:6b:5c:05:c8: 62:79:ef:f4:ab:10:c3:d8:1f:9f:f9:95:ac:e3:c6: 35:c2:39:44:8f:6c:57:42:26:a9:79:8c:aa:67:d0: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D5:D7:46:55:34:21:7D:9F:19:79:50:40:B5:E2:DC:0C:A0:37:61 X509v3 Authority Key Identifier: keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:92:4e:84:32:62:88:17:a4:84:21:97:e0:d1:71:ce:d2:29: c8:9a:d4:41:df:4a:2c:40:57:37:64:1a:fd:84:52:93:89:6f: ef:31:6f:b8:50:3a:79:76:a0:24:1d:9e:b2:50:a0:36:d3:65: f1:88:e5:6a:0e:6d:29:bd:06:5e:5c:35:2e:04:04:9e:ca:e3: 18:9d:eb:de:25:fc:fa:db:de:f5:16:df:d6:b1:82:f1:0f:95: cd:de:43:c5:d5:7d:3a:c3:c1:5b:45:56:53:6e:ee:ff:eb:aa: 31:f2:c1:ce:75:c1:0b:8a:fe:ca:ce:bb:8f:df:5a:80:6f:f5: 23:18:47:33:f2:8c:15:1c:58:38:08:dc:25:8b:84:c5:34:21: 49:9c:89:1d:3d:4c:d6:77:7c:e7:00:a8:04:46:bf:28:47:aa: fe:c3:5a:bd:50:2f:47:d7:c3:04:98:05:c2:a7:f6:0a:57:2e: ab:0d:82:01:1d:8b:ed:81:f3:29:47:ac:13:2b:e3:ee:65:e3: 52:bf:97:fc:14:e2:11:c3:9e:87:1a:d5:50:c6:74:1c:b9:fa: 2b:5d:b1:06:bf:71:d2:4d:0a:b8:7a:bc:1f:bf:d7:60:b9:7a: ef:19:a0:27:0d:e1:59:4f:2f:a6:cd:77:8c:b1:8b:3f:82:a2: 91:d5:55:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE2RUIxMTAvBgNVBAUTKDhDRDY1RTQwRTJBRUNCQkM1NUI2REEzMzQ2QkYxQ0NF MzgzNUMyNzcwHhcNMjUxMjA1MDEwNzI0WhcNMjUxMjEyMDEwNzI0WjAYMRYwFAYD VQQDEw02OTMyMzA0Yy01ODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoID2bwwhP6OkfV2mnwAcaQMuc3StY4B8rlmAv/0kAhxcpkOpzfVRjeFyuCT tLetjHyklRE5gBbgA5egkVGEoRkMk7BvHFXu20UYrnOEy6qnWnso79DPMjuQ7YSV r2LCDtaxV81fYChuLwyYCkxPiNbCKcfyCuY+n84qouP//pU6mUnHWZuVzeNQfIsU 03iyUKK8wvuPf6r2s+wgj+yY/2zR9JuBhuuB00xv4OO2s2HcKnfR4ZR0AzSUWOF0 g6G6m2npDeGb9XGnU5HkUyEzCzvTtZJaqmsfmpoSKmtcBchiee/0qxDD2B+f+ZWs 48Y1wjlEj2xXQiapeYyqZ9DiEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvV10ZV NCF9nxl5UEC14twMoDdhMB8GA1UdIwQYMBaAFIzWXkDirsu8VbbaM0a/HM44NcJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTZFQi9ERDRDMUIyQTBB NUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3eFZ0dG96UnI4Y3pqZzF3 bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOWmVRT0t1eTd4VnR0b3pScjhjempnMXduYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTZFQi9ERDRDMUIyQTBBNUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3 eFZ0dG96UnI4Y3pqZzF3bmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0kk6EMmKIF6SEIZfg0XHO0inImtRB30osQFc3ZBr9hFKTiW/vMW+4 UDp5dqAkHZ6yUKA202XxiOVqDm0pvQZeXDUuBASeyuMYneveJfz62971Ft/WsYLx D5XN3kPF1X06w8FbRVZTbu7/66ox8sHOdcELiv7KzruP31qAb/UjGEcz8owVHFg4 CNwli4TFNCFJnIkdPUzWd3znAKgERr8oR6r+w1q9UC9H18MEmAXCp/YKVy6rDYIB HYvtgfMpR6wTK+PuZeNSv5f8FOIRw56HGtVQxnQcuforXbEGv3HSTQq4erwfv9dg uXrvGaAnDeFZTy+mzXeMsYs/gqKR1VV8 -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:46 2025 by rpki-client