This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json) Hash identifier: uyxpYWcJB1PDUnO8m6/X2bvT8nrNydwfA0YgRQ/C6ew= Subject key identifier: 61:53:1E:9C:5B:98:AA:D2:39:32:5C:7E:4A:4D:CF:8B:A6:47:E4:BD Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0B7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft Manifest number: 0BBB Signing time: Mon 22 Dec 2025 18:39:48 +0000 Manifest this update: Mon 22 Dec 2025 18:39:48 +0000 Manifest next update: Mon 29 Dec 2025 18:39:48 +0000 Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: 88YRsrRZfnN8pCgzseqsOgI7Qd++wRDHkN2lEnOvHaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: Dec 22 18:39:48 2025 GMT Not After : Dec 29 18:39:48 2025 GMT Subject: CN=69499074-5e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:b3:99:9b:9e:50:36:a8:38:11:4c:c0:af: d9:ae:3f:5a:35:a6:d9:0b:4f:8a:00:bf:f1:ca:c7: 5b:4b:4f:d5:fd:7a:78:03:79:5a:54:7f:b4:bd:57: 79:8e:bb:53:c7:d2:c3:68:b4:2d:f6:3c:1d:5b:da: 6c:65:47:f1:91:6b:4b:04:86:ca:4c:08:47:be:ee: 8f:72:67:08:65:b9:4d:76:ed:d9:48:88:90:22:99: 08:5a:8f:ba:78:9a:ec:92:83:8c:59:96:20:02:23: 68:c7:a0:a7:d4:28:44:9d:5c:ad:47:fb:d1:55:f0: 4a:77:c1:06:58:48:ee:6b:94:8c:6a:3d:42:d2:03: f6:46:8c:0c:d5:d4:97:3f:1f:dc:33:f8:19:ca:e5: 10:a7:0a:65:68:78:be:0e:77:c9:90:00:f1:50:f9: 1f:f2:6f:6a:71:68:bc:ef:3c:78:83:45:88:b7:e2: f6:fc:23:01:6b:1a:0d:5a:fd:f8:8d:65:42:f0:ed: d5:c8:75:e8:77:76:f6:4c:ea:0b:09:5f:57:73:5a: 2b:24:6a:16:a8:20:ca:88:65:db:56:b3:1a:f1:20: f2:8d:2d:49:c4:42:c0:8f:46:ef:2e:bd:60:40:50: 30:6c:36:cb:8c:29:ea:a5:f7:d4:5b:a3:d6:f9:00: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:53:1E:9C:5B:98:AA:D2:39:32:5C:7E:4A:4D:CF:8B:A6:47:E4:BD X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:03:5b:3c:5a:54:3d:ed:ac:89:30:83:cb:08:46:e9:12:14: 85:bb:3b:da:d6:3f:0b:a5:5b:5c:3f:f0:96:d2:66:aa:86:05: 6b:2f:fc:8d:32:35:e4:0a:7f:83:ce:17:1a:9f:76:99:6e:13: 07:4d:1e:bd:9d:49:21:42:12:ca:70:52:ed:58:a7:9a:a0:4a: 5b:92:d9:fe:09:ce:48:24:40:49:56:95:19:70:c7:df:29:1f: b0:c2:39:b9:31:d8:7d:ea:73:89:1d:6f:57:4d:de:9d:0b:62: 13:c1:55:17:4b:95:e0:ea:19:fb:4e:8e:15:64:f7:8a:f0:fd: 1d:44:d5:fc:d4:41:67:77:85:43:97:09:e1:cb:c9:15:c2:b4: ca:69:68:4d:48:35:51:a0:bb:b6:5e:d8:d7:2a:11:7d:c4:b1: 2c:0c:01:b4:95:87:6f:03:93:37:a3:81:c7:b6:5b:87:18:fa: 16:31:31:0a:d8:ad:77:1a:23:ea:61:4d:59:a4:b4:cf:5a:ce: 57:5d:3a:a9:55:47:09:32:32:64:cb:ea:78:64:b6:80:27:ff: 4c:d7:de:52:56:36:0e:59:d9:d9:d6:10:b6:1d:cc:b9:98:34: 97:3f:e1:d6:94:25:a3:8f:63:fc:ed:cd:37:a9:fb:2a:c5:32: 7a:3d:19:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjUxMjIyMTgzOTQ4WhcNMjUxMjI5MTgzOTQ4WjAYMRYwFAYD VQQDDA02OTQ5OTA3NC01ZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx+zmZueUDaoOBFMwK/Zrj9aNabZC0+KAL/xysdbS0/V/Xp4A3laVH+0vVd5 jrtTx9LDaLQt9jwdW9psZUfxkWtLBIbKTAhHvu6PcmcIZblNdu3ZSIiQIpkIWo+6 eJrskoOMWZYgAiNox6Cn1ChEnVytR/vRVfBKd8EGWEjua5SMaj1C0gP2RowM1dSX Px/cM/gZyuUQpwplaHi+DnfJkADxUPkf8m9qcWi87zx4g0WIt+L2/CMBaxoNWv34 jWVC8O3VyHXod3b2TOoLCV9Xc1orJGoWqCDKiGXbVrMa8SDyjS1JxELAj0bvLr1g QFAwbDbLjCnqpffUW6PW+QBjgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFTHpxb mKrSOTJcfkpNz4umR+S9MB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ TFRWMzRTSWU2eHRxMGl3MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABA1s8WlQ97ayJMIPLCEbpEhSFuzva1j8LpVtcP/CW0maqhgVrL/yN MjXkCn+Dzhcan3aZbhMHTR69nUkhQhLKcFLtWKeaoEpbktn+Cc5IJEBJVpUZcMff KR+wwjm5Mdh96nOJHW9XTd6dC2ITwVUXS5Xg6hn7To4VZPeK8P0dRNX81EFnd4VD lwnhy8kVwrTKaWhNSDVRoLu2XtjXKhF9xLEsDAG0lYdvA5M3o4HHtluHGPoWMTEK 2K13GiPqYU1ZpLTPWs5XXTqpVUcJMjJky+p4ZLaAJ/9M195SVjYOWdnZ1hC2Hcy5 mDSXP+HWlCWjj2P87c03qfsqxTJ6PRlq -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:27 2025 by rpki-client