This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft File: JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json) Hash identifier: 6jQ3E1W7YoWFuJj6c2FOsVIougPgulxpWokug6CDmZA= Subject key identifier: E5:26:94:92:CC:B1:D5:6D:BC:33:BF:AC:C1:27:2B:44:66:12:7C:1C Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Certificate serial: 1732 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft Manifest number: 170F Signing time: Sat 06 Dec 2025 16:14:21 +0000 Manifest this update: Sat 06 Dec 2025 16:14:20 +0000 Manifest next update: Sat 13 Dec 2025 16:14:20 +0000 Files and hashes: 1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: K073aCaRyRJo09M50zah8kEUuuOyvGnBcMffJPuLVTU=) 2: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: i/Bdlwtsw60KlWyTtnZoHMYWyMWkX8rBZXwz4SUYdDY=) 3: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: x5fSlx3nNKz6ifMgnnFr+DL48Yd9QT9h8VtP+zrrY4c=) 4: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: 9PGVW+39KLlj0WI9eJ5OovuG1UvnRDi3eMzS7oZFC4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5938 (0x1732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Validity Not Before: Dec 6 16:14:20 2025 GMT Not After : Dec 13 16:14:20 2025 GMT Subject: CN=6934565c-15e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:20:cd:02:1d:0e:b1:be:21:cb:b5:04:0a: 2e:56:16:24:55:93:59:f4:0d:7c:e0:83:41:60:de: 92:22:51:6a:bd:f9:37:5b:ae:65:47:6e:59:ac:72: dc:d4:85:0e:5c:cb:9a:fb:75:c0:6f:a7:21:74:da: 02:e3:b0:f2:62:dc:c2:f6:40:c7:19:0c:83:a0:ae: a7:f0:db:42:27:0e:0c:f4:17:07:3f:6d:be:8a:d5: c4:03:ca:1d:9f:4c:fe:36:3b:6f:ca:a3:ae:60:2f: da:25:f3:13:de:eb:86:f4:7d:94:d8:56:76:e5:76: c7:60:cd:74:40:cf:37:51:6f:30:19:9d:67:87:b4: 33:fb:4f:16:2c:2b:aa:b3:50:32:cc:e8:d2:39:65: 51:2e:5c:ca:33:0d:78:1b:35:dc:b7:ed:3d:52:6a: 9b:ab:e7:bf:f6:df:cb:2f:4c:4c:6f:98:5e:c9:e7: 33:15:e8:5d:8b:e6:44:b8:43:23:ae:7c:a6:27:9a: 1a:36:66:8e:81:ae:1c:65:45:1c:91:b8:b3:87:2e: c4:11:ca:93:dc:fa:10:17:d5:79:e9:ea:7a:7f:1b: f0:24:42:47:4e:67:41:c0:73:71:a4:0d:1f:a4:54: 10:8b:9e:bc:35:09:18:37:ec:18:3d:dc:1f:5f:ba: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:26:94:92:CC:B1:D5:6D:BC:33:BF:AC:C1:27:2B:44:66:12:7C:1C X509v3 Authority Key Identifier: keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:63:99:fc:22:1e:56:5c:0a:bb:62:d0:e1:4b:34:99:75:f3: 18:08:18:6d:40:98:29:1e:9c:ee:c3:3e:9e:ae:2b:c7:57:be: 6a:45:44:0d:e4:73:9c:72:4b:36:b0:1b:39:fd:a2:c0:a5:6d: b9:a0:91:72:85:62:d8:cb:32:70:fb:07:0b:40:4e:4f:a2:9c: 10:69:81:69:7b:de:83:90:b5:ab:19:5d:4e:24:e0:b9:6c:a6: 8c:90:80:1e:79:d7:02:1e:03:24:67:fa:f6:2f:b7:0a:4b:fa: 94:e6:c8:e3:9f:c6:53:b3:95:4f:ce:27:14:e7:04:b2:03:e1: cb:00:22:4e:17:d8:81:03:63:c1:bc:7d:c8:ca:92:bd:7f:d6: 68:bf:9e:f5:99:1e:44:d3:3f:36:be:b7:6a:6c:1e:f1:25:07: 74:9f:d8:da:fe:a9:a0:c2:da:e7:8f:be:c3:2d:3c:f1:fe:e5: a5:5c:80:c6:8f:d3:32:4b:46:ba:81:dc:6f:24:34:4d:95:0b: 59:6d:9e:9c:7d:c9:08:82:e8:10:2b:47:c0:eb:df:c5:2a:65: 08:18:f2:f2:68:f9:ed:4f:25:87:32:31:b9:24:09:4b:14:e4: fe:dd:7c:4a:53:46:4e:1b:11:e9:3f:e7:65:e3:21:91:c6:41: 83:03:12:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey Mzc2ODhERjIwHhcNMjUxMjA2MTYxNDIwWhcNMjUxMjEzMTYxNDIwWjAYMRYwFAYD VQQDEw02OTM0NTY1Yy0xNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwEgzQIdDrG+Icu1BAouVhYkVZNZ9A184INBYN6SIlFqvfk3W65lR25ZrHLc 1IUOXMua+3XAb6chdNoC47DyYtzC9kDHGQyDoK6n8NtCJw4M9BcHP22+itXEA8od n0z+NjtvyqOuYC/aJfMT3uuG9H2U2FZ25XbHYM10QM83UW8wGZ1nh7Qz+08WLCuq s1AyzOjSOWVRLlzKMw14GzXct+09Umqbq+e/9t/LL0xMb5heyeczFehdi+ZEuEMj rnymJ5oaNmaOga4cZUUckbizhy7EEcqT3PoQF9V56ep6fxvwJEJHTmdBwHNxpA0f pFQQi568NQkYN+wYPdwfX7rsTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUmlJLM sdVtvDO/rMEnK0RmEnwcMB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80NEE2RkY2NDAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tL R2JKQXdKTnBlY29qZG9qZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTY5n8Ih5WXAq7YtDhSzSZdfMYCBhtQJgpHpzuwz6erivHV75qRUQN 5HOccks2sBs5/aLApW25oJFyhWLYyzJw+wcLQE5PopwQaYFpe96DkLWrGV1OJOC5 bKaMkIAeedcCHgMkZ/r2L7cKS/qU5sjjn8ZTs5VPzicU5wSyA+HLACJOF9iBA2PB vH3IypK9f9Zov571mR5E0z82vrdqbB7xJQd0n9ja/qmgwtrnj77DLTzx/uWlXIDG j9MyS0a6gdxvJDRNlQtZbZ6cfckIgugQK0fA69/FKmUIGPLyaPntTyWHMjG5JAlL FOT+3XxKU0ZOGxHpP+dl4yGRxkGDAxKy -----END CERTIFICATE-----Generated at Sun Dec 7 23:03:33 2025 by rpki-client