This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft File: JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json) Hash identifier: YIphMbCK7EA1DCMbBi5FHH359aFNNQgH1mww81a9bao= Subject key identifier: 88:FA:6F:61:0D:7B:51:7B:45:D7:9E:DF:E2:C9:DA:2F:B1:BF:62:F4 Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Certificate serial: 0CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft Manifest number: 0C9C Signing time: Thu 04 Dec 2025 17:53:23 +0000 Manifest this update: Thu 04 Dec 2025 17:53:22 +0000 Manifest next update: Thu 11 Dec 2025 17:53:22 +0000 Files and hashes: 1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: i277qR5yCtN6v8m/XffS6cuvu+XBm1laFv9QPo+MDkk=) 2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: 9iPRz/py3WiOljnKI7Jr3v4dx6W46Rk8EsivjaERwto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Validity Not Before: Dec 4 17:53:22 2025 GMT Not After : Dec 11 17:53:22 2025 GMT Subject: CN=6931ca92-5025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:28:71:f3:bf:3e:7c:3d:8e:73:f1:ee:89: 59:6e:7b:81:52:95:e4:72:83:c1:42:2e:f9:74:35: 69:5f:b0:c8:44:02:bd:1a:69:05:80:0b:6f:70:db: f9:5e:69:82:67:e6:d0:6e:d4:cb:46:60:04:43:e8: 34:c5:2b:dc:62:07:a6:bb:35:8d:88:3a:fb:e0:3e: 53:bf:d4:45:ed:58:e3:59:6d:9c:0f:c7:7f:fe:90: 75:dd:97:99:0c:0e:72:2f:f3:62:38:bc:2b:76:f8: c0:91:34:8d:39:39:3e:ad:42:3d:36:80:23:cf:4d: f9:53:3e:be:bf:3b:cd:06:13:64:14:8a:d4:0f:bd: f5:65:aa:8b:0e:23:42:e4:77:ed:ee:57:4b:f0:26: bf:7a:8e:f0:c6:0f:4c:ba:f2:b2:8d:5c:12:55:ff: 32:e0:3e:87:fa:ca:7a:fd:1d:9b:04:8c:9e:97:47: bc:d2:60:18:91:d6:04:b0:07:a0:77:e2:61:27:f8: f0:04:16:7f:b8:a6:a8:a0:64:a0:7d:b0:f1:d1:ec: 95:7e:e1:b0:fd:d0:a4:71:9a:71:03:05:37:10:e7: 53:b8:f1:00:9a:84:72:79:e0:55:1b:f8:56:05:83: f8:e9:51:a2:f1:f7:dc:0c:ec:2d:26:23:6b:69:95: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FA:6F:61:0D:7B:51:7B:45:D7:9E:DF:E2:C9:DA:2F:B1:BF:62:F4 X509v3 Authority Key Identifier: keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c8:a6:0c:23:a8:a8:ad:ff:37:e7:6c:4a:58:5f:fe:3a:9c: 78:ce:9e:8f:f8:a2:12:d5:0e:fb:a3:27:d4:b9:f2:c3:ed:aa: 57:c5:fd:0c:a3:f5:9c:eb:47:22:b5:53:f1:ac:25:2f:a0:24: 44:42:b4:53:d6:e5:6b:3d:a6:73:59:f6:2d:68:f7:a2:25:7f: 25:86:52:59:b1:63:2c:1e:26:42:5d:08:65:aa:a5:4a:c7:6b: ea:71:38:f0:42:36:74:bc:cb:fd:09:12:84:4c:82:21:51:4e: fa:b4:62:23:05:32:12:ea:9d:40:e5:a5:df:e6:f9:6f:72:b9: 76:64:65:24:50:a6:6e:af:54:16:63:a7:f1:17:9b:06:0e:da: 2e:a8:08:a1:42:e2:76:da:6c:78:cd:05:3f:bc:43:24:ed:06: a9:43:8a:8d:5a:86:e6:3c:11:cd:37:c9:65:85:f9:11:ac:3a: 24:58:b8:d1:7e:39:60:25:d4:1c:fc:d5:88:f6:29:7f:49:10: d1:e8:9d:69:a9:76:21:b7:f0:c0:86:ee:61:c1:8d:4b:a0:cd: 10:cb:1f:fd:c4:d6:57:8a:54:f7:26:ed:da:eb:fd:97:c8:ea: c9:b4:a1:ad:1a:e0:0c:0d:de:ee:6a:15:e2:14:9b:53:76:39: 76:70:dc:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKDI1MDk5MDQ2RUI1OUQ2NDVENDE5QTQyOEZDNzAxQTU3 MzUzRkJGMkMwHhcNMjUxMjA0MTc1MzIyWhcNMjUxMjExMTc1MzIyWjAYMRYwFAYD VQQDEw02OTMxY2E5Mi01MDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5oocfO/Pnw9jnPx7olZbnuBUpXkcoPBQi75dDVpX7DIRAK9GmkFgAtvcNv5 XmmCZ+bQbtTLRmAEQ+g0xSvcYgemuzWNiDr74D5Tv9RF7VjjWW2cD8d//pB13ZeZ DA5yL/NiOLwrdvjAkTSNOTk+rUI9NoAjz035Uz6+vzvNBhNkFIrUD731ZaqLDiNC 5Hft7ldL8Ca/eo7wxg9MuvKyjVwSVf8y4D6H+sp6/R2bBIyel0e80mAYkdYEsAeg d+JhJ/jwBBZ/uKaooGSgfbDx0eyVfuGw/dCkcZpxAwU3EOdTuPEAmoRyeeBVG/hW BYP46VGi8ffcDOwtJiNraZXzuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIj6b2EN e1F7Rdee3+LJ2i+xv2L0MB8GA1UdIwQYMBaAFCUJkEbrWdZF1BmkKPxwGlc1P78s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC83N0Q5NTBGMjA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFrWFVHYVFvX0hBYVZ6VV92 eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRbVFSdXRaMWtYVUdhUW9fSEFhVnpVX3Z5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC83N0Q5NTBGMjA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFr WFVHYVFvX0hBYVZ6VV92eXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdyKYMI6iorf8352xKWF/+Opx4zp6P+KIS1Q77oyfUufLD7apXxf0M o/Wc60citVPxrCUvoCREQrRT1uVrPaZzWfYtaPeiJX8lhlJZsWMsHiZCXQhlqqVK x2vqcTjwQjZ0vMv9CRKETIIhUU76tGIjBTIS6p1A5aXf5vlvcrl2ZGUkUKZur1QW Y6fxF5sGDtouqAihQuJ22mx4zQU/vEMk7QapQ4qNWobmPBHNN8llhfkRrDokWLjR fjlgJdQc/NWI9il/SRDR6J1pqXYht/DAhu5hwY1LoM0Qyx/9xNZXilT3Ju3a6/2X yOrJtKGtGuAMDd7uahXiFJtTdjl2cNwd -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:00 2025 by rpki-client