This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft File: JGQlARmdbB3pb6P_Lr5new4DDRA.mft (raw, json) Hash identifier: s+5dayfRj59heW+WOBPEHqXdSxtagPLBSpYHm3pl6vg= Subject key identifier: 3C:B5:A7:DF:96:D3:86:59:06:D4:72:4A:B6:26:D2:95:25:86:08:3C Authority key identifier: 24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10 Certificate issuer: /CN=A9177C3F/serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft Manifest number: 48 Signing time: Tue 23 Dec 2025 06:13:51 +0000 Manifest this update: Tue 23 Dec 2025 06:13:51 +0000 Manifest next update: Tue 30 Dec 2025 06:13:51 +0000 Files and hashes: 1: JGQlARmdbB3pb6P_Lr5new4DDRA.crl (hash: l7rNOr+PE1rqfJtCWvuyeruRNp9VHe1cth42vTwaPlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177C3F, serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10 Validity Not Before: Dec 23 06:13:51 2025 GMT Not After : Dec 30 06:13:51 2025 GMT Subject: CN=694a331f-e456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b7:0e:38:b9:b2:a4:a7:37:5b:45:8b:27:fe: c0:93:a2:f3:d7:1b:f8:cf:7d:42:42:35:03:07:82: 57:80:b6:5f:b2:6c:f7:0b:71:b1:0c:04:02:e7:2d: 2d:af:a0:04:65:c0:4d:9c:6d:5f:16:59:b1:8f:9b: d0:85:1c:33:29:d1:83:60:6f:9a:a6:1a:f1:d5:96: 15:20:cc:70:76:df:5f:83:be:3a:c3:26:09:41:e3: e5:6e:5c:04:38:e0:2c:61:4b:19:d1:cd:7e:7e:a8: ff:69:05:48:c5:6b:ac:d7:43:8e:5f:25:26:eb:03: f9:da:b6:25:a1:79:44:ba:a2:7b:c0:02:55:ae:c7: 58:c1:4f:f2:db:2d:f2:d3:3d:f3:aa:63:a5:d6:61: 19:ae:24:59:13:c3:e5:58:4d:5c:04:56:d6:7f:2e: 5d:95:e8:4e:38:d5:bc:a9:41:50:7f:58:a7:22:59: d2:1d:d1:3b:a4:d2:ff:e9:5c:64:5b:04:1a:ad:b5: d8:c0:3f:cd:df:4c:d1:d9:4d:3e:2e:35:cf:e7:c2: ed:33:4e:2b:fe:08:cc:ad:a1:be:37:ca:8b:68:e3: 44:c9:d0:ff:86:73:27:74:bd:07:40:c1:8f:23:8a: d7:eb:18:be:47:85:bb:03:2a:cd:9a:0f:a2:c8:1b: 59:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B5:A7:DF:96:D3:86:59:06:D4:72:4A:B6:26:D2:95:25:86:08:3C X509v3 Authority Key Identifier: keyid:24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:8f:e0:52:01:23:df:73:81:51:96:cf:b5:bb:aa:0f:bf:8e: 57:01:22:3f:6b:1c:55:46:e4:00:7d:b4:33:43:09:fc:3d:30: b8:96:9c:ec:31:3a:05:96:59:51:d5:47:b0:bf:a3:24:4f:d6: 8b:f0:53:51:80:ed:64:57:fb:d2:3b:eb:68:83:cf:77:2b:5a: 5e:f3:62:6b:60:38:5f:d6:8f:06:97:ce:91:b0:ac:bf:e7:c7: 5f:4c:37:3f:41:e3:51:fb:52:15:a2:ae:8a:1e:27:32:7b:6f: 24:6a:66:b9:58:5b:67:cc:e4:e1:5a:60:0c:5d:6e:4b:af:04: 0b:24:80:fe:16:09:4c:c2:c7:c3:47:74:61:71:d2:ff:37:45: 7e:76:6e:04:4b:51:7c:6b:c5:05:f2:87:48:c5:7f:f8:e0:5e: 6b:05:0a:a9:d4:59:fe:32:b2:ff:8b:ec:6d:b6:6b:3f:bd:ef: 48:2f:54:a3:28:a1:d8:db:18:d5:ae:9a:a4:aa:eb:b6:03:36: b0:59:28:71:79:de:d2:3a:b3:3d:b3:78:c8:42:56:8a:d2:0e: 28:c6:75:a3:c0:84:41:17:2e:ca:52:08:4a:76:c0:ac:3c:59: 12:41:bf:96:e9:58:ba:71:b9:9f:58:9c:49:a2:0d:97:1a:cf: ef:bc:04:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0MzRjExMC8GA1UEBRMoMjQ2NDI1MDExOTlENkMxREU5NkZBM0ZGMkVCRTY3N0Iw RTAzMEQxMDAeFw0yNTEyMjMwNjEzNTFaFw0yNTEyMzAwNjEzNTFaMBgxFjAUBgNV BAMMDTY5NGEzMzFmLWU0NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDatw44ubKkpzdbRYsn/sCTovPXG/jPfUJCNQMHgleAtl+ybPcLcbEMBALnLS2v oARlwE2cbV8WWbGPm9CFHDMp0YNgb5qmGvHVlhUgzHB231+DvjrDJglB4+VuXAQ4 4CxhSxnRzX5+qP9pBUjFa6zXQ45fJSbrA/natiWheUS6onvAAlWux1jBT/LbLfLT PfOqY6XWYRmuJFkTw+VYTVwEVtZ/Ll2V6E441bypQVB/WKciWdId0Tuk0v/pXGRb BBqttdjAP83fTNHZTT4uNc/nwu0zTiv+CMytob43yoto40TJ0P+Gcyd0vQdAwY8j itfrGL5HhbsDKs2aD6LIG1mrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPLWn35bT hlkG1HJKtibSlSWGCDwwHwYDVR0jBBgwFoAUJGQlARmdbB3pb6P/Lr5new4DDRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QzNGL0Q3Mzc0MzdFNzMz MzExRjA4MzlDREM4M0M0RjlBRTAyL0pHUWxBUm1kYkIzcGI2UF9McjVuZXc0RERS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkdRbEFSbWRiQjNwYjZQX0xyNW5ldzRERFJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 QzNGL0Q3Mzc0MzdFNzMzMzExRjA4MzlDREM4M0M0RjlBRTAyL0pHUWxBUm1kYkIz cGI2UF9McjVuZXc0RERSQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAWP4FIBI99zgVGWz7W7qg+/jlcBIj9rHFVG5AB9tDNDCfw9MLiWnOwx OgWWWVHVR7C/oyRP1ovwU1GA7WRX+9I762iDz3crWl7zYmtgOF/WjwaXzpGwrL/n x19MNz9B41H7UhWirooeJzJ7byRqZrlYW2fM5OFaYAxdbkuvBAskgP4WCUzCx8NH dGFx0v83RX52bgRLUXxrxQXyh0jFf/jgXmsFCqnUWf4ysv+L7G22az+970gvVKMo odjbGNWumqSq67YDNrBZKHF53tI6sz2zeMhCVorSDijGdaPAhEEXLspSCEp2wKw8 WRJBv5bpWLpxuZ9YnEmiDZcaz++8BFs= -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:31 2025 by rpki-client