This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft File: JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json) Hash identifier: Xzp6t9eqJjbOso1H3NxpozFj+1/6KUu6bh+MGjdvbdQ= Subject key identifier: 58:7C:EC:5E:94:41:5B:89:DA:2D:78:BD:18:7F:39:22:26:79:AE:F7 Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44 Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft Manifest number: 0243 Signing time: Tue 23 Dec 2025 00:50:35 +0000 Manifest this update: Tue 23 Dec 2025 00:50:35 +0000 Manifest next update: Tue 30 Dec 2025 00:50:35 +0000 Files and hashes: 1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: mYAKbARwTLUq6F+7FjUg6F28BgnmR5wdy62dQ2/6HoU=) 2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: w2uLIqELPPR1aELZkAqTHG3TRXb/RNA1Es+oZGT/RK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44 Validity Not Before: Dec 23 00:50:35 2025 GMT Not After : Dec 30 00:50:35 2025 GMT Subject: CN=6949e75b-4c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:41:89:08:6f:ce:d5:0c:4d:03:5f:5d:58: 4f:b6:07:f8:f3:60:80:de:bd:c3:34:ba:49:60:56: a4:5c:aa:60:e1:aa:47:6e:84:dd:e9:86:07:02:3f: 9c:62:17:5b:0d:c3:c6:71:c3:fa:dd:03:32:03:89: fa:3c:96:3d:6d:a7:62:0d:9c:71:8b:ea:dc:7d:ae: f5:e8:af:cc:69:e1:b1:48:92:32:a8:74:33:ac:61: 9d:f2:e3:a3:bc:95:b8:f6:bb:9c:dc:7e:94:88:2b: 37:e8:69:2d:35:d7:b6:06:df:82:4c:4a:c5:04:3a: c0:17:f3:c3:cc:40:f6:78:72:d5:92:45:d8:fd:46: 6b:14:35:74:ea:aa:ac:eb:08:17:6d:a1:dd:bf:52: 7f:24:ee:5b:14:54:93:e1:01:d4:1e:27:38:83:7c: 69:ed:65:3a:4d:9f:4e:b5:d5:fa:cb:12:4d:02:c3: b3:63:f6:cd:11:46:7a:4f:37:75:fd:58:f2:35:be: b0:ed:bb:46:34:8e:a6:5f:27:f6:da:92:ac:b5:8b: 95:bb:ac:9e:3e:7d:20:75:8a:0f:23:40:b6:ef:b5: 58:1d:46:87:e5:b1:be:e4:7d:45:00:75:59:34:61: 83:68:9d:55:ec:c5:f6:2b:3d:19:21:62:c1:3b:ee: 29:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7C:EC:5E:94:41:5B:89:DA:2D:78:BD:18:7F:39:22:26:79:AE:F7 X509v3 Authority Key Identifier: keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:97:13:22:40:21:68:98:02:ec:c9:d5:01:03:d4:f2:9a:79: 83:08:04:6c:19:7a:e2:e3:08:30:fb:4e:40:e7:1e:b0:3f:81: 8c:80:28:87:31:5a:91:2f:43:41:d9:33:fe:0d:03:c6:39:47: 15:a1:f6:b6:32:a4:6b:52:ef:62:d7:d0:4b:3f:3a:4a:fe:5a: e7:96:c9:26:22:7e:29:25:6b:1f:c5:a8:2f:eb:51:64:8b:cf: e9:0e:c0:2a:be:27:0d:6e:c3:00:be:fa:e6:bd:db:42:61:dd: c9:4d:65:a7:49:a1:6c:1e:96:9c:46:e3:9a:d8:48:e1:ce:9a: 69:53:62:35:4d:de:01:49:18:80:22:cb:cc:4a:f8:96:cb:cb: 27:e3:4c:c9:67:f4:7c:18:3c:86:b2:39:39:f8:98:98:82:d3: a5:e4:7b:2b:2c:73:bd:6c:d6:46:d0:14:ff:ab:41:32:f2:2e: 3f:be:27:2a:d5:4d:d0:b4:d0:2c:93:22:7e:e4:5c:0c:a4:ff: 1b:d0:ce:de:ef:ca:b6:17:0c:38:cc:38:31:72:0c:6f:be:d7: a9:55:4d:d8:04:67:3c:8e:28:45:5d:21:6b:fa:b8:c8:8d:b7: c8:e3:e2:cc:fd:44:0a:da:63:62:1c:8e:e2:3c:a5:12:35:b3: 98:3f:12:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkwMzI0REE5NDMx QzQwOUJBNDQwHhcNMjUxMjIzMDA1MDM1WhcNMjUxMjMwMDA1MDM1WjAYMRYwFAYD VQQDDA02OTQ5ZTc1Yi00Yzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCdBiQhvztUMTQNfXVhPtgf482CA3r3DNLpJYFakXKpg4apHboTd6YYHAj+c YhdbDcPGccP63QMyA4n6PJY9badiDZxxi+rcfa716K/MaeGxSJIyqHQzrGGd8uOj vJW49ruc3H6UiCs36GktNde2Bt+CTErFBDrAF/PDzED2eHLVkkXY/UZrFDV06qqs 6wgXbaHdv1J/JO5bFFST4QHUHic4g3xp7WU6TZ9OtdX6yxJNAsOzY/bNEUZ6Tzd1 /VjyNb6w7btGNI6mXyf22pKstYuVu6yePn0gdYoPI0C277VYHUaH5bG+5H1FAHVZ NGGDaJ1V7MX2Kz0ZIWLBO+4pnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFh87F6U QVuJ2i14vRh/OSImea73MB8GA1UdIwQYMBaAFCcXMJE3aK8BOLo5AyTalDHECbpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDkxQS80MjA0MDU3RTY2 NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3RTR1amtESk5xVU1jUUp1 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p4Y3drVGRvcndFNHVqa0RKTnFVTWNRSnVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3 RTR1amtESk5xVU1jUUp1a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWlxMiQCFomALsydUBA9TymnmDCARsGXri4wgw+05A5x6wP4GMgCiH MVqRL0NB2TP+DQPGOUcVofa2MqRrUu9i19BLPzpK/lrnlskmIn4pJWsfxagv61Fk i8/pDsAqvicNbsMAvvrmvdtCYd3JTWWnSaFsHpacRuOa2EjhzpppU2I1Td4BSRiA IsvMSviWy8sn40zJZ/R8GDyGsjk5+JiYgtOl5HsrLHO9bNZG0BT/q0Ey8i4/vicq 1U3QtNAskyJ+5FwMpP8b0M7e78q2Fww4zDgxcgxvvtepVU3YBGc8jihFXSFr+rjI jbfI4+LM/UQK2mNiHI7iPKUSNbOYPxJj -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:57 2025 by rpki-client