This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft File: JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json) Hash identifier: C2DPdIx6Hhnlm6QQHKLzRXhU0G7/K80i1SuPXPZOucI= Subject key identifier: 87:B7:5C:D3:F9:1A:9A:4C:59:B3:D4:AC:2A:F5:A1:7D:A1:19:3C:A2 Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B Certificate issuer: /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft Manifest number: 016B Signing time: Tue 23 Dec 2025 02:56:25 +0000 Manifest this update: Tue 23 Dec 2025 02:56:25 +0000 Manifest next update: Tue 30 Dec 2025 02:56:25 +0000 Files and hashes: 1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: MLJgQhtFjvy6CzSiD+Cc/YYiPpqxKj5zRvlkRVTs7E0=) 2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: CD96z1MB6TWn9rZZ43ZACAQ8e/LAtFVDTuQ0/fNw+cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Validity Not Before: Dec 23 02:56:25 2025 GMT Not After : Dec 30 02:56:25 2025 GMT Subject: CN=694a04d9-00a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:79:92:b2:e0:31:41:c4:bf:67:cf:a0:2b: 58:f8:25:45:e6:85:b9:62:e1:d3:54:48:84:39:8c: 7e:03:4e:49:f0:4d:e8:08:f2:b7:a4:a1:3a:47:34: 7d:6c:34:71:3a:e0:60:db:5f:d0:a1:e5:17:da:29: 1a:f4:c8:e1:a5:bc:d0:ee:ea:ff:68:f0:89:b8:ab: 93:a1:d0:1b:c3:10:3b:0d:e6:d8:f3:c7:ec:08:62: 17:8f:13:e6:dc:ce:cd:1b:46:e8:13:5e:8f:00:fd: 45:29:fb:6b:c8:61:e3:9e:24:9f:40:f1:cb:a4:b4: e5:c0:1b:74:a1:a5:57:43:d6:2c:8b:6a:c4:9b:84: 32:54:02:ca:70:fa:1f:8c:64:82:86:e9:ec:c8:39: f3:02:90:e1:cf:4b:c0:0c:ff:58:1e:a1:ca:29:c7: 0d:51:74:6f:65:dc:b7:b8:ad:35:8e:e5:93:f1:54: ec:b7:f3:64:59:01:a4:9d:c4:1f:59:6f:52:03:5d: 62:0f:77:a4:0b:a8:9b:c5:91:a6:76:ec:6a:af:63: ef:d9:fb:bc:a9:83:b9:e1:b5:9b:ce:f6:2b:2d:fe: a8:98:fc:0b:54:b5:e2:3d:23:10:0e:e2:5e:d7:14: 1e:4f:f6:34:e3:27:7f:e9:a8:88:d6:9a:d1:c0:b2: 44:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B7:5C:D3:F9:1A:9A:4C:59:B3:D4:AC:2A:F5:A1:7D:A1:19:3C:A2 X509v3 Authority Key Identifier: keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ef:cd:f9:12:91:0c:46:a1:9e:5e:9d:bb:e2:c2:33:7a:e8: 51:56:98:ef:39:bc:2d:99:b7:ef:28:c4:36:a3:74:33:83:9d: 37:19:0d:ba:54:db:39:25:f2:13:f8:01:be:1a:69:7b:1b:28: f6:c7:c8:1a:95:4d:70:a1:34:f1:97:aa:23:b0:87:ab:8a:b4: c6:05:b9:d4:d3:92:bf:7f:c6:0c:ac:30:a2:a0:a0:db:4b:2a: e1:86:76:44:8b:ea:4f:8e:65:f4:c2:14:01:0d:f5:2c:7e:cb: 03:61:4b:94:e1:5d:e5:74:fa:9a:a0:4f:d5:9f:77:3b:73:f0: b5:f1:f1:bf:d2:f3:1f:8e:fd:5d:0f:f2:51:d8:d8:09:8a:f8: 61:4e:e1:97:21:ca:e4:e8:50:73:41:9c:90:ee:b7:7a:f0:31: 2e:81:45:d9:0b:71:64:3c:1b:42:73:7b:2d:66:b6:9f:bf:eb: bd:72:c1:eb:6d:39:83:cb:d9:23:27:f2:c5:e3:61:ab:3e:46: 9c:3d:65:c1:18:00:99:00:7d:16:fc:7f:f7:ba:c4:93:4c:64: b3:8a:bc:05:f5:79:7c:80:18:e2:e4:8c:bc:2c:1f:1b:b3:9c: d6:33:07:47:10:da:84:d9:fe:f9:da:18:ea:08:ae:a6:85:c9: d4:56:81:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEQUYxMTAvBgNVBAUTKDI0QkEyNDQ0NDk0MjczMEY2QUYyQjA5Q0I3MjNFNUM5 NjM3MEZCOEIwHhcNMjUxMjIzMDI1NjI1WhcNMjUxMjMwMDI1NjI1WjAYMRYwFAYD VQQDDA02OTRhMDRkOS0wMGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2p5krLgMUHEv2fPoCtY+CVF5oW5YuHTVEiEOYx+A05J8E3oCPK3pKE6RzR9 bDRxOuBg21/QoeUX2ika9MjhpbzQ7ur/aPCJuKuTodAbwxA7DebY88fsCGIXjxPm 3M7NG0boE16PAP1FKftryGHjniSfQPHLpLTlwBt0oaVXQ9Ysi2rEm4QyVALKcPof jGSChunsyDnzApDhz0vADP9YHqHKKccNUXRvZdy3uK01juWT8VTst/NkWQGkncQf WW9SA11iD3ekC6ibxZGmduxqr2Pv2fu8qYO54bWbzvYrLf6omPwLVLXiPSMQDuJe 1xQeT/Y04yd/6aiI1prRwLJE+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIe3XNP5 GppMWbPUrCr1oX2hGTyiMB8GA1UdIwQYMBaAFCS6JERJQnMPavKwnLcj5cljcPuL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERBRi9DMkRFNkFFNEI1 MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3OXE4ckNjdHlQbHlXTnct NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERBRi9DMkRFNkFFNEI1MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3 OXE4ckNjdHlQbHlXTnctNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE7835EpEMRqGeXp274sIzeuhRVpjvObwtmbfvKMQ2o3Qzg503GQ26 VNs5JfIT+AG+Gml7Gyj2x8galU1woTTxl6ojsIerirTGBbnU05K/f8YMrDCioKDb SyrhhnZEi+pPjmX0whQBDfUsfssDYUuU4V3ldPqaoE/Vn3c7c/C18fG/0vMfjv1d D/JR2NgJivhhTuGXIcrk6FBzQZyQ7rd68DEugUXZC3FkPBtCc3stZrafv+u9csHr bTmDy9kjJ/LF42GrPkacPWXBGACZAH0W/H/3usSTTGSzirwF9Xl8gBji5Iy8LB8b s5zWMwdHENqE2f752hjqCK6mhcnUVoHV -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:24 2025 by rpki-client