This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: U8FGkrGJuu7kuzU4a7kFBZEBw9eCEcE3p3NA+LCERDY= Subject key identifier: 89:3D:F2:63:81:28:B8:ED:FC:BF:E1:B9:85:BF:7F:1B:B8:58:A4:AC Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 02E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 02E7 Signing time: Tue 23 Dec 2025 00:16:37 +0000 Manifest this update: Tue 23 Dec 2025 00:16:36 +0000 Manifest next update: Tue 30 Dec 2025 00:16:36 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: Q7dT8PNR47cD+BO8mVwvuJMw53cmKFkXC6kbGa0eZHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 743 (0x2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Validity Not Before: Dec 23 00:16:36 2025 GMT Not After : Dec 30 00:16:36 2025 GMT Subject: CN=6949df64-ff5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:3a:1a:1e:d3:de:f0:1d:e4:99:fc:0f:35: 5a:93:0f:b4:ee:2c:0e:22:c5:9a:a8:cc:a1:0b:32: c2:f7:2e:18:b5:e9:9f:f1:fd:bc:38:53:cc:62:31: 8b:88:33:76:09:fd:a3:26:51:c6:dc:e4:c6:22:82: 7b:90:58:5d:52:d7:cf:7d:2c:29:7e:73:7a:25:ed: 4b:b7:49:da:51:49:25:69:86:8a:fd:ad:2a:62:8a: 7a:38:25:45:fa:81:a1:17:12:db:fb:cc:92:6e:72: 7c:fb:da:13:2e:12:20:46:d0:d1:ba:be:9f:31:ac: a5:86:31:9d:cd:5d:64:d2:e9:b2:d1:d7:4a:af:0a: b3:41:d1:67:53:f7:8d:7a:37:98:c9:c2:d8:29:9b: 79:22:74:04:7b:64:f5:76:e1:f1:72:5f:73:3d:38: 0c:bd:eb:96:05:5f:62:4c:ff:94:da:7e:3c:67:4c: 5f:bf:29:cc:44:c2:e7:e8:ee:24:2b:60:5a:0c:94: 8e:ce:29:cd:bd:59:13:80:7e:4e:0a:2c:23:1c:23: 55:37:d6:00:4f:62:ad:82:30:06:20:73:a3:3c:c9: e5:4e:fb:30:78:a6:2f:86:80:f4:ea:13:eb:57:cf: 3f:a6:c4:f5:11:4d:ec:bd:c4:84:d6:f4:a9:a1:8e: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3D:F2:63:81:28:B8:ED:FC:BF:E1:B9:85:BF:7F:1B:B8:58:A4:AC X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:20:21:49:8e:f0:4c:28:c5:33:02:22:c2:d3:ae:ac:b7:4f: dd:85:ab:be:40:54:0b:b3:ed:cb:b8:3b:f8:92:bf:dc:e4:04: 4b:41:a0:a1:59:37:5a:fa:a3:76:f4:44:fe:44:f2:69:9a:b3: 76:98:ad:87:14:98:f2:5b:96:73:a9:f3:da:ce:ea:4a:f6:aa: 18:c9:a5:31:30:59:05:49:bb:36:f7:d6:f3:ed:23:9d:82:85: 87:88:57:b2:88:02:ab:be:62:d0:ab:ea:8c:c0:43:32:90:2e: cf:86:a6:7d:37:1d:3d:1d:21:a3:17:5b:c0:aa:be:37:6a:3a: 4c:77:6d:ba:05:d8:06:7d:c7:64:71:e5:a3:9e:39:ed:16:ab: e5:66:2d:ef:21:e5:e0:eb:70:3f:f4:11:05:44:1b:51:57:d6: fd:7e:0d:cc:59:0c:4d:66:53:b7:fe:6c:fc:98:40:ac:21:3a: a8:1d:29:0d:ea:18:a6:ca:a2:4f:8d:55:d5:a7:d5:24:ff:9f: 05:20:67:aa:d4:62:d7:2f:2c:72:90:92:66:76:a2:c9:f1:9c: 21:79:84:15:cc:35:f6:52:e9:79:3d:8c:07:3d:2a:cf:45:64: 63:8f:cc:f3:af:d7:ff:9d:09:52:55:43:73:64:98:30:ea:85: 30:93:a6:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjUxMjIzMDAxNjM2WhcNMjUxMjMwMDAxNjM2WjAYMRYwFAYD VQQDDA02OTQ5ZGY2NC1mZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyls6Gh7T3vAd5Jn8DzVakw+07iwOIsWaqMyhCzLC9y4Ytemf8f28OFPMYjGL iDN2Cf2jJlHG3OTGIoJ7kFhdUtfPfSwpfnN6Je1Lt0naUUklaYaK/a0qYop6OCVF +oGhFxLb+8ySbnJ8+9oTLhIgRtDRur6fMaylhjGdzV1k0umy0ddKrwqzQdFnU/eN ejeYycLYKZt5InQEe2T1duHxcl9zPTgMveuWBV9iTP+U2n48Z0xfvynMRMLn6O4k K2BaDJSOzinNvVkTgH5OCiwjHCNVN9YAT2KtgjAGIHOjPMnlTvsweKYvhoD06hPr V88/psT1EU3svcSE1vSpoY6QWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIk98mOB KLjt/L/huYW/fxu4WKSsMB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/ICFJjvBMKMUzAiLC066st0/dhau+QFQLs+3LuDv4kr/c5ARLQaCh WTda+qN29ET+RPJpmrN2mK2HFJjyW5ZzqfPazupK9qoYyaUxMFkFSbs299bz7SOd goWHiFeyiAKrvmLQq+qMwEMykC7PhqZ9Nx09HSGjF1vAqr43ajpMd226BdgGfcdk ceWjnjntFqvlZi3vIeXg63A/9BEFRBtRV9b9fg3MWQxNZlO3/mz8mECsITqoHSkN 6himyqJPjVXVp9Uk/58FIGeq1GLXLyxykJJmdqLJ8ZwheYQVzDX2Uul5PYwHPSrP RWRjj8zzr9f/nQlSVUNzZJgw6oUwk6bW -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:44 2025 by rpki-client