This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft File: jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json) Hash identifier: NUvvxrcl+6NZdzinyL/7ly5Euj/19C0aMC08X1IyOTc= Subject key identifier: EB:B0:E1:D6:B6:41:5B:94:99:23:5E:C0:4F:A2:1B:C8:D7:A7:0D:5C Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Certificate serial: 3501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft Manifest number: 34F8 Signing time: Wed 24 Dec 2025 15:02:05 +0000 Manifest this update: Wed 24 Dec 2025 15:02:04 +0000 Manifest next update: Wed 31 Dec 2025 15:02:04 +0000 Files and hashes: 1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: 4P2CRlgBXGuOQjz7yFqS/Ri14eEh2WabxtC3+syt33g=) 2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: END/X8NWEnYQqU51TlQvCrkCaUczqULOOoxx1HVtbaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Validity Not Before: Dec 24 15:02:04 2025 GMT Not After : Dec 31 15:02:04 2025 GMT Subject: CN=694c006c-d6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a8:ab:8e:47:fb:dc:c2:e2:39:92:b1:dd:dd: ef:cd:a0:46:ac:26:e6:f3:72:b5:f5:f2:c6:ac:20: 02:9c:fa:44:76:c5:eb:f8:58:a8:9a:30:76:4d:43: 4b:e5:bb:71:d8:32:af:a5:65:88:7e:d0:85:04:36: 14:e0:15:f9:a9:a8:5d:ee:29:a6:a7:e8:a7:36:5b: 54:df:1c:5e:64:3c:aa:a4:32:3c:aa:32:6f:9e:7e: e7:eb:d2:58:08:99:b6:a3:46:ac:98:06:f9:b4:a7: b5:a2:90:4d:63:ca:ce:89:cb:91:7c:7f:62:8b:dc: 8f:fa:6e:1e:9e:63:04:2a:2b:3f:3f:b4:28:f9:1c: d1:24:b5:ef:3a:e1:7f:5c:26:5a:41:81:4e:98:3c: ed:40:2a:db:09:1b:d7:bc:6f:e1:6f:6b:b8:93:7e: 6e:c9:71:0f:17:77:0a:39:f8:71:ca:cd:5f:2c:d9: 41:02:6d:5d:20:2a:d5:3b:e4:79:73:15:cb:d6:99: 88:7f:88:cf:14:48:36:52:98:bc:10:93:73:69:be: d0:3d:95:50:1e:9c:7e:40:23:78:89:ea:89:67:86: 6e:5f:15:26:bd:eb:f5:80:42:57:75:02:a0:6d:50: 28:ef:ed:8b:9c:b9:44:7c:20:fb:b9:73:ba:f3:dd: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B0:E1:D6:B6:41:5B:94:99:23:5E:C0:4F:A2:1B:C8:D7:A7:0D:5C X509v3 Authority Key Identifier: keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:df:ab:09:31:51:95:8b:01:c9:6f:44:d1:06:09:d7:ef:2a: a3:bd:b2:93:13:11:8b:29:42:a7:a8:33:41:b8:89:82:64:c7: d6:e1:8b:99:18:ec:78:5e:a2:2b:98:75:d4:80:17:6a:5f:22: 61:67:bf:f3:ba:ca:95:0a:30:ac:60:ab:c9:0e:2b:a4:a6:93: eb:68:79:0e:43:cb:0c:9e:72:2b:cb:69:ed:8b:94:32:0f:bf: 83:11:9b:4e:11:32:b4:0a:e1:1a:c9:8b:84:02:2b:ce:88:f9: f6:08:11:32:4e:fb:6c:bb:d5:a3:25:55:ab:d1:7b:c6:27:b6: ac:fd:92:90:01:6d:b4:87:97:c1:56:25:df:e2:d3:40:3b:a4: 02:3a:9f:de:89:aa:a5:ee:65:cd:66:aa:f9:fc:af:3f:13:02: 8b:76:f6:4e:7c:c1:39:93:a3:2c:cf:94:e0:c6:b0:2b:24:b6: 1a:ee:65:36:10:73:ba:31:5e:05:cd:5d:7e:7a:73:36:bd:b1: 12:04:92:0f:a9:91:21:b0:66:77:1b:8c:66:af:c1:9a:2b:eb: bc:44:f5:b4:86:27:fe:3f:48:f3:5c:a7:a8:f3:51:e2:7e:5e: a7:ec:a5:89:5a:5c:b2:06:5a:a4:28:e9:0b:90:14:f8:aa:27: e2:3e:f3:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCQTMxMTAvBgNVBAUTKDhERjY5QjhDRjAyRDQ0NzJBMEUyRDJGNEVFNkU0OTMy NkQzREIwQzUwHhcNMjUxMjI0MTUwMjA0WhcNMjUxMjMxMTUwMjA0WjAYMRYwFAYD VQQDDA02OTRjMDA2Yy1kNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Kirjkf73MLiOZKx3d3vzaBGrCbm83K19fLGrCACnPpEdsXr+FiomjB2TUNL 5btx2DKvpWWIftCFBDYU4BX5qahd7immp+inNltU3xxeZDyqpDI8qjJvnn7n69JY CJm2o0asmAb5tKe1opBNY8rOicuRfH9ii9yP+m4enmMEKis/P7Qo+RzRJLXvOuF/ XCZaQYFOmDztQCrbCRvXvG/hb2u4k35uyXEPF3cKOfhxys1fLNlBAm1dICrVO+R5 cxXL1pmIf4jPFEg2Upi8EJNzab7QPZVQHpx+QCN4ieqJZ4ZuXxUmvev1gEJXdQKg bVAo7+2LnLlEfCD7uXO6890BzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuw4da2 QVuUmSNewE+iG8jXpw1cMB8GA1UdIwQYMBaAFI32m4zwLURyoOLS9O5uSTJtPbDF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JBMy83N0VBN0EyNDFE QTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJIS2c0dEwwN201Sk1tMDlz TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYWJqUEF0UkhLZzR0TDA3bTVKTW0wOXNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JBMy83N0VBN0EyNDFEQTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJI S2c0dEwwN201Sk1tMDlzTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ36sJMVGViwHJb0TRBgnX7yqjvbKTExGLKUKnqDNBuImCZMfW4YuZ GOx4XqIrmHXUgBdqXyJhZ7/zusqVCjCsYKvJDiukppPraHkOQ8sMnnIry2nti5Qy D7+DEZtOETK0CuEayYuEAivOiPn2CBEyTvtsu9WjJVWr0XvGJ7as/ZKQAW20h5fB ViXf4tNAO6QCOp/eiaql7mXNZqr5/K8/EwKLdvZOfME5k6Msz5TgxrArJLYa7mU2 EHO6MV4FzV1+enM2vbESBJIPqZEhsGZ3G4xmr8GaK+u8RPW0hif+P0jzXKeo81Hi fl6n7KWJWlyyBlqkKOkLkBT4qifiPvN6 -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:51 2025 by rpki-client