This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft File: JLnt5SwDqG4PIShpO2weCock7RU.mft (raw, json) Hash identifier: +xTE7aynlsozOtxoXrUuLr2p9ohtuorG8TNzzqDcjY8= Subject key identifier: 42:A8:2A:B6:E2:2B:28:F5:E4:62:45:35:66:2B:AE:EA:8D:29:BD:E2 Authority key identifier: 24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15 Certificate issuer: /CN=A919D2AF/serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft Manifest number: 025D Signing time: Fri 05 Dec 2025 00:40:55 +0000 Manifest this update: Fri 05 Dec 2025 00:40:54 +0000 Manifest next update: Fri 12 Dec 2025 00:40:54 +0000 Files and hashes: 1: JLnt5SwDqG4PIShpO2weCock7RU.crl (hash: INTdP7LWxmJm5qfOTIVojZY7Xjfly4Q14358qyNdQcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2AF, serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15 Validity Not Before: Dec 5 00:40:54 2025 GMT Not After : Dec 12 00:40:54 2025 GMT Subject: CN=69322a16-2796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:2a:d2:7d:4b:c5:71:47:ba:d6:f5:fb:94: 42:d3:b7:55:1d:6b:7d:82:67:2e:6d:6d:45:7d:05: ad:6c:8f:de:47:43:f7:35:b7:c9:49:52:d9:8f:3c: 82:01:19:39:e9:e6:e8:79:48:9d:72:2f:b9:e8:af: 34:da:b7:14:bb:ee:e0:62:63:50:81:c6:1c:67:e6: 30:fd:03:8c:08:d2:a8:65:24:69:99:77:24:3a:20: d8:d5:a3:5f:bd:f6:b3:41:59:ab:5b:04:cb:f8:f8: 86:9a:b9:b8:8e:e8:cf:94:59:cc:26:2c:90:47:93: 87:b4:29:d9:47:c0:49:c7:3b:83:50:ad:5d:e4:33: 9e:e7:6a:f0:2d:13:f1:84:c7:9c:9b:8a:b9:e3:2e: 1b:e8:71:0c:27:65:15:88:46:79:b4:25:16:0b:26: 25:73:84:3a:ba:0a:5b:a0:25:d6:30:f0:8e:d9:9e: 15:25:65:39:17:e6:8d:d6:0a:50:b0:08:51:3f:7e: b8:d2:22:7e:e8:38:c9:f3:1d:59:b2:d4:39:68:3e: b8:4e:ad:95:40:67:40:cb:57:8f:e6:c8:6e:21:f3: 4b:2f:94:71:60:8b:91:51:c4:2c:6d:7a:5f:4d:bc: c6:2a:8a:ee:c6:1c:dd:32:75:de:0f:a9:3c:05:bd: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A8:2A:B6:E2:2B:28:F5:E4:62:45:35:66:2B:AE:EA:8D:29:BD:E2 X509v3 Authority Key Identifier: keyid:24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:78:a8:92:c7:7e:1b:27:a3:02:f4:ac:e8:af:91:2e:1a:bb: 03:db:02:7e:a8:02:89:d0:10:2f:8e:53:dc:f3:9f:33:f9:81: 6d:fc:65:15:ed:eb:9a:3f:53:e3:b1:4e:40:a3:d2:3c:87:3e: 43:dd:80:f6:65:28:2c:bf:d2:f5:75:1a:83:d0:7f:bc:cf:8b: 1c:f9:a0:51:97:6a:06:0d:38:a3:30:5f:96:30:d2:c9:e1:bf: 4c:d5:5d:7c:ff:1d:a0:29:5d:bb:b5:63:a3:ce:01:46:25:61: 73:e7:1c:23:d1:f2:a3:a9:b4:35:13:04:2c:b9:58:f0:b0:81: eb:af:e1:37:97:41:43:63:df:75:38:c8:37:a4:39:6c:2b:5c: 46:03:73:e6:74:08:9e:07:b9:a5:d3:b9:b4:9d:d9:40:33:45: e3:fa:26:fa:4b:8e:42:4a:3c:0b:b9:6b:c2:af:ac:d0:de:d1: 73:ce:b5:75:8a:e5:e2:c5:22:33:58:0d:8c:f6:56:74:cc:09: a8:56:01:39:13:3b:ed:ba:47:63:2b:f3:91:b8:1f:0f:02:8f: 2c:4c:51:5f:f4:64:3f:b3:29:a3:01:c6:fd:ee:49:11:06:2c: 0d:d6:42:f3:5d:ff:d9:ce:cc:f6:9c:0f:98:db:0c:eb:90:ff: 6d:46:a0:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyQUYxMTAvBgNVBAUTKDI0QjlFREU1MkMwM0E4NkUwRjIxMjg2OTNCNkMxRTBB ODcyNEVEMTUwHhcNMjUxMjA1MDA0MDU0WhcNMjUxMjEyMDA0MDU0WjAYMRYwFAYD VQQDEw02OTMyMmExNi0yNzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZgq0n1LxXFHutb1+5RC07dVHWt9gmcubW1FfQWtbI/eR0P3NbfJSVLZjzyC ARk56eboeUidci+56K802rcUu+7gYmNQgcYcZ+Yw/QOMCNKoZSRpmXckOiDY1aNf vfazQVmrWwTL+PiGmrm4jujPlFnMJiyQR5OHtCnZR8BJxzuDUK1d5DOe52rwLRPx hMecm4q54y4b6HEMJ2UViEZ5tCUWCyYlc4Q6ugpboCXWMPCO2Z4VJWU5F+aN1gpQ sAhRP3640iJ+6DjJ8x1ZstQ5aD64Tq2VQGdAy1eP5shuIfNLL5RxYIuRUcQsbXpf TbzGKoruxhzdMnXeD6k8Bb0gHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKoKrbi Kyj15GJFNWYrruqNKb3iMB8GA1UdIwQYMBaAFCS57eUsA6huDyEoaTtsHgqHJO0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJBRi9GM0VGQjg5OEJD QkExMUVEOUM5QUZBMjVDNEY5QUUwMi9KTG50NVN3RHFHNFBJU2hwTzJ3ZUNvY2s3 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMbnQ1U3dEcUc0UElTaHBPMndlQ29jazdSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDJBRi9GM0VGQjg5OEJDQkExMUVEOUM5QUZBMjVDNEY5QUUwMi9KTG50NVN3RHFH NFBJU2hwTzJ3ZUNvY2s3UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJeKiSx34bJ6MC9Kzor5EuGrsD2wJ+qAKJ0BAvjlPc858z+YFt/GUV 7euaP1PjsU5Ao9I8hz5D3YD2ZSgsv9L1dRqD0H+8z4sc+aBRl2oGDTijMF+WMNLJ 4b9M1V18/x2gKV27tWOjzgFGJWFz5xwj0fKjqbQ1EwQsuVjwsIHrr+E3l0FDY991 OMg3pDlsK1xGA3PmdAieB7ml07m0ndlAM0Xj+ib6S45CSjwLuWvCr6zQ3tFzzrV1 iuXixSIzWA2M9lZ0zAmoVgE5EzvtukdjK/ORuB8PAo8sTFFf9GQ/symjAcb97kkR BiwN1kLzXf/Zzsz2nA+Y2wzrkP9tRqCQ -----END CERTIFICATE-----Generated at Sat Dec 6 22:42:57 2025 by rpki-client