This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: 4Uw+l5Kwo1tZFrZROclxzOeK5dqN9f/WbBo3sxhGwWM= Subject key identifier: 16:88:D3:98:0C:EE:CA:1A:F2:7A:92:2E:F4:1E:A8:88:30:BC:7B:EE Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 01A6 Signing time: Tue 23 Dec 2025 02:23:38 +0000 Manifest this update: Tue 23 Dec 2025 02:23:38 +0000 Manifest next update: Tue 30 Dec 2025 02:23:38 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: Fke6tfqcXae6ZQOm2Q9EcpyfFpUANCGW8hQlfjNjcks=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: cTob+zKp5ftZnMPxIu39FTUVOIdO3knmMZZAbwhjm6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: Dec 23 02:23:38 2025 GMT Not After : Dec 30 02:23:38 2025 GMT Subject: CN=6949fd2a-7ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:83:38:33:cb:05:b1:cb:db:fc:8c:69:73: 8d:3f:b2:7a:75:bd:da:67:d2:c5:79:63:c8:29:09: 54:99:8e:34:28:a8:d6:ee:9d:05:a2:c6:42:83:41: f2:6b:14:17:a5:fc:83:64:9d:ee:68:af:37:89:07: 83:bc:f3:09:1f:30:30:91:89:b0:15:c1:f8:38:d8: 9d:e7:48:9f:66:9d:73:ff:dc:a0:5d:d4:e2:c1:89: 09:62:0f:61:84:04:e5:56:dc:9e:4e:5a:7a:ec:35: 90:56:e1:3e:94:3c:9e:04:68:1d:9e:97:65:bd:90: 47:07:96:ce:fd:ac:45:2f:3e:18:ae:ad:98:1f:a3: 4f:d5:6c:33:6d:8b:93:51:1d:0a:5d:46:30:79:e3: 2b:0d:4f:60:34:39:18:df:e6:d8:c3:ef:9f:19:26: ab:68:1c:59:71:13:63:53:d8:a0:e9:b9:31:a7:90: 40:f6:bd:fa:51:96:90:9a:e0:33:1b:e8:91:92:1b: ac:a7:c1:2b:a9:c7:0b:ae:5f:dd:60:e6:bf:55:1e: c3:bd:ab:0e:f8:27:3a:58:6c:d9:19:f2:01:21:51: 03:a5:32:e8:62:dc:f4:9d:ec:8b:2d:fd:d3:7a:a1: e5:0f:bb:a3:a8:d9:ef:b2:e0:af:b5:ca:e1:8d:c4: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:88:D3:98:0C:EE:CA:1A:F2:7A:92:2E:F4:1E:A8:88:30:BC:7B:EE X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:de:06:47:d4:a9:0f:29:aa:d4:4f:0f:b2:96:9e:5d:31:95: 9c:97:11:05:d0:e2:e6:e0:97:3d:a1:f3:29:64:eb:7a:4c:2d: 40:b8:4a:1a:1d:07:01:aa:6d:e8:27:4e:22:2a:89:4f:fa:90: dd:f6:62:cf:13:23:d5:61:0c:52:97:ec:a1:d5:bd:7f:29:38: f3:9e:a8:bc:be:1d:17:91:7b:4c:fe:39:3b:83:54:0c:6d:47: 97:63:d7:4a:0c:d9:84:36:22:4d:cc:1f:2a:64:fa:a5:45:d3: 0e:af:b4:57:44:f1:b8:4e:ac:e7:46:51:05:c1:ba:82:48:92: 6f:e3:91:51:b2:df:d5:f5:0b:fe:bc:64:5d:ae:08:eb:8a:61: 2b:dd:4a:e5:e7:b3:86:6b:8e:26:7c:cd:3d:56:90:a6:df:35: 9f:0e:58:a2:97:cc:a2:ff:11:eb:96:07:d1:1d:9d:84:ee:8f: 8c:37:08:7b:66:16:63:d2:89:45:d4:ac:e6:86:9b:40:c4:55: 29:df:26:dc:f2:6b:81:04:a4:d9:4e:9a:8c:96:72:11:11:1b: bf:8d:7b:c0:50:55:09:48:a7:b7:5a:f5:88:6b:33:23:ef:e0: 52:dd:d9:fb:dd:42:d0:13:ac:fe:f0:e0:70:69:24:a1:76:f1: 3a:26:52:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjUxMjIzMDIyMzM4WhcNMjUxMjMwMDIyMzM4WjAYMRYwFAYD VQQDDA02OTQ5ZmQyYS03ZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhCDODPLBbHL2/yMaXONP7J6db3aZ9LFeWPIKQlUmY40KKjW7p0FosZCg0Hy axQXpfyDZJ3uaK83iQeDvPMJHzAwkYmwFcH4ONid50ifZp1z/9ygXdTiwYkJYg9h hATlVtyeTlp67DWQVuE+lDyeBGgdnpdlvZBHB5bO/axFLz4Yrq2YH6NP1WwzbYuT UR0KXUYweeMrDU9gNDkY3+bYw++fGSaraBxZcRNjU9ig6bkxp5BA9r36UZaQmuAz G+iRkhusp8ErqccLrl/dYOa/VR7DvasO+Cc6WGzZGfIBIVEDpTLoYtz0neyLLf3T eqHlD7ujqNnvsuCvtcrhjcRuewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaI05gM 7soa8nqSLvQeqIgwvHvuMB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW3gZH1KkPKarUTw+ylp5dMZWclxEF0OLm4Jc9ofMpZOt6TC1AuEoa HQcBqm3oJ04iKolP+pDd9mLPEyPVYQxSl+yh1b1/KTjznqi8vh0XkXtM/jk7g1QM bUeXY9dKDNmENiJNzB8qZPqlRdMOr7RXRPG4TqznRlEFwbqCSJJv45FRst/V9Qv+ vGRdrgjrimEr3Url57OGa44mfM09VpCm3zWfDliil8yi/xHrlgfRHZ2E7o+MNwh7 ZhZj0olF1KzmhptAxFUp3ybc8muBBKTZTpqMlnIRERu/jXvAUFUJSKe3WvWIazMj 7+BS3dn73ULQE6z+8OBwaSShdvE6JlIg -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:07 2025 by rpki-client