This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json) Hash identifier: 2CB80WbdKZdE2AFd94gdxLNdXqvxPGhuw8i+oWn6TTQ= Subject key identifier: 44:3F:45:86:A9:0A:C2:63:3D:4A:43:98:95:25:40:A8:49:A5:2E:95 Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft Manifest number: 0743 Signing time: Mon 22 Dec 2025 20:58:53 +0000 Manifest this update: Mon 22 Dec 2025 20:58:53 +0000 Manifest next update: Mon 29 Dec 2025 20:58:53 +0000 Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: BWLcIU1jwPBj/3qv8FvPdof1tB20p8em62Ct7zl1Qq0=) 2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: W1YtTgfcUQgVCMN18bivEJ+sBWqdB/GL1VhO0Gs0eBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Validity Not Before: Dec 22 20:58:53 2025 GMT Not After : Dec 29 20:58:53 2025 GMT Subject: CN=6949b10d-88ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:77:1e:77:ad:e4:20:45:aa:76:d7:41:27:10: cf:f9:b4:76:c4:09:6b:c5:39:5c:7a:e2:c1:b1:2c: b3:94:19:e4:5d:d8:9c:1b:a4:ca:2b:dd:5b:7d:b9: 97:9f:32:71:f3:0a:87:9f:09:c8:34:66:ce:01:6c: e2:e8:31:be:6d:3f:4a:b4:18:2b:e0:a6:75:3d:7d: a7:d4:a8:53:7b:96:cd:f2:b2:fa:d3:17:14:ae:5c: ea:53:ba:9d:3c:a5:dd:f0:d0:d7:79:20:26:9f:2f: 6f:e9:67:0a:95:66:65:15:9e:16:c5:1e:ab:32:88: 5b:da:68:ff:69:30:d0:7e:b9:54:e0:e0:3c:99:e8: 12:c3:f9:6f:0d:f6:cb:00:30:e3:f6:5f:10:07:b8: a0:cf:33:28:91:71:d7:92:db:8c:52:ba:b6:d0:98: c9:3a:24:c5:81:05:c4:5e:ed:59:e6:0d:f1:b6:9b: 4a:ee:2d:04:cf:13:fc:1c:f3:d9:77:ca:31:65:04: 85:95:43:8b:ee:fb:2e:1d:35:3e:dc:26:66:5e:9d: c5:f0:f9:ad:60:6c:d6:15:3d:7b:1f:38:30:c2:c6: b7:a7:11:47:b0:43:33:bd:db:e0:cf:f7:82:ff:0d: 24:d3:3b:74:f2:7d:8d:3d:d4:b5:5f:74:65:d6:e4: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3F:45:86:A9:0A:C2:63:3D:4A:43:98:95:25:40:A8:49:A5:2E:95 X509v3 Authority Key Identifier: keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:74:0c:7d:f0:a7:08:7e:4c:79:96:8f:54:2f:f7:21:2a:d3: 87:5d:65:d0:2d:c5:68:d2:30:6c:1a:26:2b:1d:00:55:64:83: 33:fb:33:74:6a:88:01:63:94:91:b2:26:6b:db:26:f9:9d:4a: 5c:2c:48:fb:7d:a7:35:e1:1a:b2:46:82:ee:6d:13:32:af:b7: f5:81:da:b0:10:bb:7d:a0:93:3d:57:ef:64:b6:27:5c:d9:59: 8e:28:57:6a:36:80:58:19:ae:02:72:64:55:7c:cc:c2:ad:71: 56:8d:3c:ae:25:b0:8f:5e:63:65:18:56:97:dc:1a:00:38:8c: 11:7b:a0:73:07:1e:b3:02:d3:9a:cc:10:60:ff:57:80:a6:97: a3:11:41:22:48:d1:55:9f:8d:9b:10:1c:0c:b2:c1:88:56:98: 3d:b3:19:93:8b:c4:75:7a:8e:53:5f:a5:17:80:03:93:a4:8f: 75:29:50:d8:ec:4e:a3:da:37:02:52:16:a3:02:3a:1d:0c:ca: ff:03:2f:f6:61:e4:8c:b9:37:a8:fe:3e:f4:75:0c:49:0c:9a: 96:d2:5f:38:44:5a:e5:7e:37:96:57:4d:86:fd:48:9d:e6:ff: bf:58:70:1c:25:4a:ca:5a:7f:cd:16:12:f9:4b:9f:b0:87:4b: 11:2c:2d:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBNkMxMTAvBgNVBAUTKDhEMTZGRDBFMjVGQjg5NkUyNkZBNzM0QUJDOTg0Q0U0 QjQ2OThERDMwHhcNMjUxMjIyMjA1ODUzWhcNMjUxMjI5MjA1ODUzWjAYMRYwFAYD VQQDDA02OTQ5YjEwZC04OGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3ced63kIEWqdtdBJxDP+bR2xAlrxTlceuLBsSyzlBnkXdicG6TKK91bfbmX nzJx8wqHnwnINGbOAWzi6DG+bT9KtBgr4KZ1PX2n1KhTe5bN8rL60xcUrlzqU7qd PKXd8NDXeSAmny9v6WcKlWZlFZ4WxR6rMohb2mj/aTDQfrlU4OA8megSw/lvDfbL ADDj9l8QB7igzzMokXHXktuMUrq20JjJOiTFgQXEXu1Z5g3xtptK7i0EzxP8HPPZ d8oxZQSFlUOL7vsuHTU+3CZmXp3F8PmtYGzWFT17Hzgwwsa3pxFHsEMzvdvgz/eC /w0k0zt08n2NPdS1X3Rl1uSv6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQ/RYap CsJjPUpDmJUlQKhJpS6VMB8GA1UdIwQYMBaAFI0W/Q4l+4luJvpzSryYTOS0aY3T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUE2Qy8zQjg0OTNCNDUx QTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lXNG0tbk5LdkpoTTVMUnBq ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSYjlEaVg3aVc0bS1uTkt2SmhNNUxScGpkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUE2Qy8zQjg0OTNCNDUxQTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lX NG0tbk5LdkpoTTVMUnBqZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAudAx98KcIfkx5lo9UL/chKtOHXWXQLcVo0jBsGiYrHQBVZIMz+zN0 aogBY5SRsiZr2yb5nUpcLEj7fac14RqyRoLubRMyr7f1gdqwELt9oJM9V+9ktidc 2VmOKFdqNoBYGa4CcmRVfMzCrXFWjTyuJbCPXmNlGFaX3BoAOIwRe6BzBx6zAtOa zBBg/1eAppejEUEiSNFVn42bEBwMssGIVpg9sxmTi8R1eo5TX6UXgAOTpI91KVDY 7E6j2jcCUhajAjodDMr/Ay/2YeSMuTeo/j70dQxJDJqW0l84RFrlfjeWV02G/Uid 5v+/WHAcJUrKWn/NFhL5S5+wh0sRLC3T -----END CERTIFICATE-----Generated at Tue Dec 23 13:03:48 2025 by rpki-client