This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft File: jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json) Hash identifier: Oxlu0UIa1pcKBKqlB23reVqyGlKaV81j7kR3iKxUoM4= Subject key identifier: 58:F0:99:40:65:AE:DE:04:DE:D7:25:F5:0C:28:2C:FC:31:43:D4:53 Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 Certificate issuer: /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft Manifest number: 0245 Signing time: Tue 23 Dec 2025 00:47:13 +0000 Manifest this update: Tue 23 Dec 2025 00:47:13 +0000 Manifest next update: Tue 30 Dec 2025 00:47:13 +0000 Files and hashes: 1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: qr2yzoJ/Yh/awA4di96FcOczmH6cqYYuvyhZ3MfqI7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Validity Not Before: Dec 23 00:47:13 2025 GMT Not After : Dec 30 00:47:13 2025 GMT Subject: CN=6949e691-3c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ac:01:8c:b2:4d:68:77:b8:ee:fc:00:57:e6: db:25:71:0a:8e:51:b7:ec:ee:b4:f7:9c:5d:58:37: e5:0b:57:82:71:31:f5:61:59:d3:42:91:7d:1e:26: a7:bc:bd:d7:0d:25:69:90:2d:bc:1e:22:0b:e1:2d: 4e:8b:76:21:3d:65:fb:66:f3:1a:7a:44:70:c9:e8: 69:89:27:f3:ad:71:0c:c3:a1:cd:22:9e:c2:73:91: e2:82:42:64:01:1a:52:b3:f0:aa:dc:15:9a:28:a3: f3:f9:91:e7:ff:ca:7c:d6:4b:72:63:f4:7b:c4:94: d0:66:58:05:d8:76:1c:d8:63:52:42:3e:d6:bd:56: fa:0e:71:3e:b7:0a:3a:8f:45:dd:23:ab:f3:dc:a3: 27:f5:2d:60:e1:a8:c9:ce:7d:dd:30:05:74:77:3f: c7:5b:02:13:bc:27:b2:34:2c:7a:19:d9:53:45:6b: 2a:a0:29:8f:13:e2:56:a4:bb:fd:ec:f6:f4:68:92: 42:ae:63:9e:ef:a4:96:f1:14:0a:17:a2:4c:99:f3: 20:aa:4e:55:77:39:47:12:45:55:c1:90:78:14:a6: 65:7b:4c:fe:9d:32:d1:b5:f5:fd:77:cb:dd:79:34: cf:54:76:90:2e:51:2c:37:b8:ac:59:4f:f6:52:f2: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F0:99:40:65:AE:DE:04:DE:D7:25:F5:0C:28:2C:FC:31:43:D4:53 X509v3 Authority Key Identifier: keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:17:1e:03:e4:dc:99:fa:16:bf:9d:40:1c:3a:e9:70:8c:ba: 10:34:e6:5d:92:42:f8:67:b8:ab:bf:b9:ce:62:9f:61:5d:b1: 84:b7:b7:a1:1a:53:3b:fb:aa:d3:02:6a:27:dd:43:89:eb:09: 52:43:2f:a9:93:25:8e:8c:cb:51:02:69:19:02:ac:4e:61:8a: 09:bb:eb:f1:32:85:f9:fe:a9:9c:3a:45:ea:3c:f0:d6:96:ba: d5:44:f0:e5:2b:86:b4:25:07:1d:33:94:01:85:e4:c9:c6:15: 58:89:40:86:b7:82:8c:6a:27:70:1b:7c:a4:60:0d:cb:56:c6: e0:15:65:99:4f:78:2e:b5:7f:49:21:52:58:fb:c6:92:ac:8c: bf:55:e4:d2:f9:68:58:b2:dd:16:07:08:70:76:19:9f:05:35: f0:9a:89:1d:6b:70:bc:56:67:37:9d:87:c5:df:9d:d0:fc:51: 00:67:32:b9:b2:dd:a8:45:c0:d1:b6:2c:d3:d5:39:8d:b7:25: 8f:f6:7d:ba:e4:d6:77:c9:91:e6:12:91:38:09:c8:96:ca:ee: 4f:cf:43:bf:d3:72:4d:75:a2:55:e8:00:cf:00:4b:49:98:df: 1e:bf:72:66:7c:14:06:59:38:07:9c:01:4e:0c:e3:ae:25:c8: 43:21:e3:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKDhDREEwODRFMjNENUI3NTA5QUEzQTkyREFDQTBCMUFE QzlEOUZCNDgwHhcNMjUxMjIzMDA0NzEzWhcNMjUxMjMwMDA0NzEzWjAYMRYwFAYD VQQDDA02OTQ5ZTY5MS0zYzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyawBjLJNaHe47vwAV+bbJXEKjlG37O6095xdWDflC1eCcTH1YVnTQpF9Hian vL3XDSVpkC28HiIL4S1Oi3YhPWX7ZvMaekRwyehpiSfzrXEMw6HNIp7Cc5HigkJk ARpSs/Cq3BWaKKPz+ZHn/8p81ktyY/R7xJTQZlgF2HYc2GNSQj7WvVb6DnE+two6 j0XdI6vz3KMn9S1g4ajJzn3dMAV0dz/HWwITvCeyNCx6GdlTRWsqoCmPE+JWpLv9 7Pb0aJJCrmOe76SW8RQKF6JMmfMgqk5VdzlHEkVVwZB4FKZle0z+nTLRtfX9d8vd eTTPVHaQLlEsN7isWU/2UvJSfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjwmUBl rt4E3tcl9QwoLPwxQ9RTMB8GA1UdIwQYMBaAFIzaCE4j1bdQmqOpLaygsa3J2ftI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EQ0NENThCNjVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQxQ2FvNmt0cktDeHJjblot MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOb0lUaVBWdDFDYW82a3RyS0N4cmNuWi0wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EQ0NENThCNjVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQx Q2FvNmt0cktDeHJjblotMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Fx4D5NyZ+ha/nUAcOulwjLoQNOZdkkL4Z7irv7nOYp9hXbGEt7eh GlM7+6rTAmon3UOJ6wlSQy+pkyWOjMtRAmkZAqxOYYoJu+vxMoX5/qmcOkXqPPDW lrrVRPDlK4a0JQcdM5QBheTJxhVYiUCGt4KMaidwG3ykYA3LVsbgFWWZT3gutX9J IVJY+8aSrIy/VeTS+WhYst0WBwhwdhmfBTXwmokda3C8Vmc3nYfF353Q/FEAZzK5 st2oRcDRtizT1TmNtyWP9n265NZ3yZHmEpE4CciWyu5Pz0O/03JNdaJV6ADPAEtJ mN8ev3JmfBQGWTgHnAFODOOuJchDIePO -----END CERTIFICATE-----Generated at Wed Dec 24 19:30:41 2025 by rpki-client