This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json) Hash identifier: GrkMF8E9LNukgg6/+KY9+iJnHru+45DWduguuXttSCA= Subject key identifier: B8:DE:B8:FE:2C:1D:C5:66:9C:AA:1E:80:A0:A3:C7:DB:03:80:E5:FA Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 08C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft Manifest number: 08BA Signing time: Thu 18 Dec 2025 19:59:52 +0000 Manifest this update: Thu 18 Dec 2025 19:59:51 +0000 Manifest next update: Thu 25 Dec 2025 19:59:51 +0000 Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: N42XwhdHe1OV9VA6dp6YG2+kKVqyJa/MRftG5Mq9TxI=) 2: BA33C4CC638A11F090002541C4F9AE02.roa (hash: SYp3+Qw2NUOxAP2PI8VyKC4eZrJ7XxwyTmQykIlzc3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Validity Not Before: Dec 18 19:59:51 2025 GMT Not After : Dec 25 19:59:51 2025 GMT Subject: CN=69445d37-00ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:9f:33:c9:65:1f:68:42:19:6a:92:19:d0: c7:7a:82:20:aa:07:4f:d2:de:dc:36:02:f4:9d:90: d6:8e:0b:4a:60:77:2f:32:71:52:a0:f5:d0:58:c1: 63:3a:73:db:40:cd:5e:d3:c0:40:b7:b3:19:96:2f: b7:06:a4:72:af:de:29:03:ca:53:36:a6:6c:53:bd: d3:72:fc:50:fd:3c:3f:bc:b2:96:48:44:9b:dc:e4: c7:7f:05:64:ac:8a:87:d5:42:df:49:0f:a3:2d:93: d4:ed:28:e5:9c:4a:44:fb:ac:c3:86:99:8c:21:7c: a6:2e:57:14:33:92:65:ba:7b:80:d9:59:c3:25:be: b8:67:7e:71:2e:2b:7f:0e:5d:3a:10:34:86:7f:fa: 73:c1:a7:68:c1:a6:ac:b6:e8:94:d0:74:08:15:88: 42:c1:f9:6a:39:4b:f6:6c:8b:8a:68:94:4a:21:a1: 4e:6c:df:30:27:0e:1b:d3:dc:31:02:a7:e9:8a:6d: 7f:24:3b:2e:58:6a:fb:e6:1b:ba:b6:b7:5e:f9:55: 9b:8f:a2:49:12:86:3f:5e:8b:19:72:e4:96:70:31: 65:ff:0c:26:a7:e4:02:c0:a4:cf:3a:57:04:99:18: 35:cc:b8:cb:c8:d6:01:b7:3f:c8:eb:77:0c:f4:8f: ce:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DE:B8:FE:2C:1D:C5:66:9C:AA:1E:80:A0:A3:C7:DB:03:80:E5:FA X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:59:56:a1:60:12:57:28:be:7f:8a:f0:b7:9d:55:27:2f:e6: 65:3f:2b:4f:d2:39:73:b3:9a:2e:a1:d3:9a:29:dd:a3:e7:9d: 97:9a:9e:59:13:f0:4d:a1:c8:17:d6:dc:5a:d5:25:a3:e6:ba: f1:72:76:ca:2a:58:9a:68:5a:29:aa:67:14:17:05:39:be:c1: de:f5:7b:b6:48:3c:f4:5c:34:98:49:46:ea:8b:d3:dd:a7:46: 46:25:fb:4a:e2:d5:85:02:61:35:eb:07:2e:7f:d6:52:30:9c: ed:75:9c:bb:66:5e:54:89:cb:89:6a:eb:4a:64:51:ad:87:28: 7a:d2:5b:36:34:ae:7a:a1:1c:c1:36:1e:b0:9c:b0:22:ad:63: ad:d9:35:09:28:aa:d8:1e:04:80:fb:6a:8e:3e:63:08:12:29: 56:b3:6a:1c:a5:89:1f:8d:5b:08:5a:c1:1e:75:d3:a7:5f:44: 4c:58:ab:d8:d4:cd:f7:eb:18:1a:07:f3:8b:dd:b2:bb:13:1f: 9a:3b:36:11:52:36:cc:6d:ef:b4:4a:74:2c:82:7a:af:48:8b: 50:a5:64:c0:26:79:72:53:f4:05:41:1e:f5:32:ff:8c:03:02: 3f:67:14:5c:73:70:e7:95:d1:5a:5d:ad:71:0b:7c:34:99:fe: 32:4e:67:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjUxMjE4MTk1OTUxWhcNMjUxMjI1MTk1OTUxWjAYMRYwFAYD VQQDDA02OTQ0NWQzNy0wMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkOfM8llH2hCGWqSGdDHeoIgqgdP0t7cNgL0nZDWjgtKYHcvMnFSoPXQWMFj OnPbQM1e08BAt7MZli+3BqRyr94pA8pTNqZsU73TcvxQ/Tw/vLKWSESb3OTHfwVk rIqH1ULfSQ+jLZPU7SjlnEpE+6zDhpmMIXymLlcUM5JlunuA2VnDJb64Z35xLit/ Dl06EDSGf/pzwadowaastuiU0HQIFYhCwflqOUv2bIuKaJRKIaFObN8wJw4b09wx Aqfpim1/JDsuWGr75hu6trde+VWbj6JJEoY/XosZcuSWcDFl/wwmp+QCwKTPOlcE mRg1zLjLyNYBtz/I63cM9I/OTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjeuP4s HcVmnKoegKCjx9sDgOX6MB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq M1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8WVahYBJXKL5/ivC3nVUnL+ZlPytP0jlzs5ouodOaKd2j552Xmp5Z E/BNocgX1txa1SWj5rrxcnbKKliaaFopqmcUFwU5vsHe9Xu2SDz0XDSYSUbqi9Pd p0ZGJftK4tWFAmE16wcuf9ZSMJztdZy7Zl5UicuJautKZFGthyh60ls2NK56oRzB Nh6wnLAirWOt2TUJKKrYHgSA+2qOPmMIEilWs2ocpYkfjVsIWsEeddOnX0RMWKvY 1M336xgaB/OL3bK7Ex+aOzYRUjbMbe+0SnQsgnqvSItQpWTAJnlyU/QFQR71Mv+M AwI/ZxRcc3DnldFaXa1xC3w0mf4yTmf8 -----END CERTIFICATE-----Generated at Fri Dec 19 23:58:49 2025 by rpki-client