This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft File: JqEcV_UL86H3onhKHUlNXomDYc0.mft (raw, json) Hash identifier: 7UwXwcx+lYm9hemtbzSAeRXrqTIFEcklnyb6HQmy63Q= Subject key identifier: 61:73:7B:CE:8E:74:45:CC:89:3E:8D:2E:86:64:06:75:70:FF:4F:16 Authority key identifier: 26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD Certificate issuer: /CN=A913E83E/serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft Manifest number: 5C Signing time: Tue 23 Dec 2025 05:59:51 +0000 Manifest this update: Tue 23 Dec 2025 05:59:50 +0000 Manifest next update: Tue 30 Dec 2025 05:59:50 +0000 Files and hashes: 1: JqEcV_UL86H3onhKHUlNXomDYc0.crl (hash: j6f6U1hJ2vbSGTh3j8YmwphHV2Z/KiIoaj3OfD1eLpE=) 2: 0CEE97B4563411F09FBF271BC4F9AE02.roa (hash: +5nsa0L3pEvZ7rt0LONhGmy6TtSxJKovU9i/lVSRT84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E83E, serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD Validity Not Before: Dec 23 05:59:50 2025 GMT Not After : Dec 30 05:59:50 2025 GMT Subject: CN=694a2fd6-bf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:3a:5c:ab:69:4b:aa:10:ae:fe:f9:07:17: 34:bf:9e:db:80:6f:24:67:87:76:16:ba:05:d7:76: 4e:9a:63:09:2c:05:00:25:a5:9a:72:14:32:ec:8d: ff:a8:9a:1f:8a:f2:5a:d2:9a:a2:c0:52:b1:f9:52: 88:c5:56:cf:ae:e5:02:cb:c3:0a:6f:f6:76:9e:dc: 83:7a:aa:45:1b:33:f5:08:33:0c:71:4d:b2:9d:ee: 2f:d7:ee:d8:e9:06:24:60:3f:44:5a:1e:fd:a8:65: 13:30:f7:33:01:93:35:cf:2a:1e:5d:d1:d6:21:94: 8c:2c:9b:6e:c7:ec:f9:2e:16:11:9a:99:ba:87:83: a3:13:6a:16:f1:f4:e3:72:f5:1a:43:18:c8:f7:18: eb:f9:b2:7c:61:c8:59:78:c3:c4:d8:d8:d6:49:31: 9e:bf:15:78:c5:8a:03:e7:f9:94:14:68:37:b0:80: 6c:ae:64:5e:2a:94:6e:11:9e:78:f1:1c:ec:03:20: 9f:e6:d6:bb:54:18:ea:6f:22:ec:ac:7e:a1:19:ba: 1c:13:3a:fa:78:6e:cf:42:c1:53:2f:34:8e:6b:12: 99:43:09:2f:58:34:24:ca:05:99:84:db:6f:89:48: a2:22:60:5f:a7:15:4c:4d:9c:bc:ed:a8:08:88:75: 07:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:73:7B:CE:8E:74:45:CC:89:3E:8D:2E:86:64:06:75:70:FF:4F:16 X509v3 Authority Key Identifier: keyid:26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:06:dd:7b:4a:2e:50:04:bb:28:fe:8c:75:90:b0:19:69:83: 5d:93:a5:db:c2:37:76:01:99:d7:bd:15:bf:ee:de:43:99:66: d5:01:85:7d:b6:e2:76:9a:19:1b:2f:c7:0c:f3:2d:66:37:6a: df:f4:ca:b0:6d:7f:04:a7:74:60:d2:0f:fd:e0:dd:67:72:95: e7:25:00:af:67:ad:5c:74:9f:e8:76:4a:43:69:a1:dc:c1:40: 59:fe:0f:e3:44:b8:f9:45:25:69:0b:f1:4f:b9:75:73:e7:af: 69:b1:5c:06:bd:aa:66:5c:00:fc:c1:c2:80:13:5a:fd:fc:e3: fb:8a:7c:f1:33:cd:1e:68:ad:a8:b4:fd:8f:c4:39:8f:84:db: f0:81:57:39:3a:1d:72:f5:6c:e9:38:bc:ab:ee:89:7d:7a:ba: 9e:2a:bf:a0:fa:06:03:ae:1e:fd:36:2e:10:c7:8e:c9:49:43: c8:53:67:35:d7:fc:1a:2d:42:30:0b:d4:c0:4f:76:5c:1d:0b: ee:94:fb:6c:37:e0:60:b4:b4:99:e5:12:2d:30:a2:d4:97:ca: ae:82:4b:9e:d0:0e:87:e4:ea:03:bf:eb:e8:a2:90:e6:7b:f2: 61:76:60:74:4d:b9:4c:84:d6:f7:36:23:4e:87:01:70:eb:e0: 98:78:ab:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTgzRTExMC8GA1UEBRMoMjZBMTFDNTdGNTBCRjNBMUY3QTI3ODRBMUQ0OTRENUU4 OTgzNjFDRDAeFw0yNTEyMjMwNTU5NTBaFw0yNTEyMzAwNTU5NTBaMBgxFjAUBgNV BAMMDTY5NGEyZmQ2LWJmNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXAjpcq2lLqhCu/vkHFzS/ntuAbyRnh3YWugXXdk6aYwksBQAlpZpyFDLsjf+o mh+K8lrSmqLAUrH5UojFVs+u5QLLwwpv9nae3IN6qkUbM/UIMwxxTbKd7i/X7tjp BiRgP0RaHv2oZRMw9zMBkzXPKh5d0dYhlIwsm27H7PkuFhGambqHg6MTahbx9ONy 9RpDGMj3GOv5snxhyFl4w8TY2NZJMZ6/FXjFigPn+ZQUaDewgGyuZF4qlG4Rnnjx HOwDIJ/m1rtUGOpvIuysfqEZuhwTOvp4bs9CwVMvNI5rEplDCS9YNCTKBZmE22+J SKIiYF+nFUxNnLztqAiIdQcVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYXN7zo50 RcyJPo0uhmQGdXD/TxYwHwYDVR0jBBgwFoAUJqEcV/UL86H3onhKHUlNXomDYc0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0VCMEY3NThFNTYz MTExRjBBMUFBRTI0REM0RjlBRTAyL0pxRWNWX1VMODZIM29uaEtIVWxOWG9tRFlj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSnFFY1ZfVUw4Nkgzb25oS0hVbE5Yb21EWWMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF ODNFL0VCMEY3NThFNTYzMTExRjBBMUFBRTI0REM0RjlBRTAyL0pxRWNWX1VMODZI M29uaEtIVWxOWG9tRFljMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB4G3XtKLlAEuyj+jHWQsBlpg12TpdvCN3YBmde9Fb/u3kOZZtUBhX22 4naaGRsvxwzzLWY3at/0yrBtfwSndGDSD/3g3WdyleclAK9nrVx0n+h2SkNpodzB QFn+D+NEuPlFJWkL8U+5dXPnr2mxXAa9qmZcAPzBwoATWv384/uKfPEzzR5orai0 /Y/EOY+E2/CBVzk6HXL1bOk4vKvuiX16up4qv6D6BgOuHv02LhDHjslJQ8hTZzXX /BotQjAL1MBPdlwdC+6U+2w34GC0tJnlEi0wotSXyq6CS57QDofk6gO/6+iikOZ7 8mF2YHRNuUyE1vc2I06HAXDr4Jh4q04= -----END CERTIFICATE-----Generated at Wed Dec 24 21:21:59 2025 by rpki-client