This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: CsGhxEJYQKiAhM3T6K7IXS+c5BhFdUPWB2twRNdk6tU= Subject key identifier: 5F:AD:9B:30:47:A4:8F:60:3B:7F:0A:53:F5:3F:FA:C0:1E:81:05:84 Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: 0107 Signing time: Mon 15 Dec 2025 04:22:41 +0000 Manifest this update: Mon 15 Dec 2025 04:22:41 +0000 Manifest next update: Mon 22 Dec 2025 04:22:41 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: nVUkOgWVpzuGLV6JnLYE635HXvy++6P0w0kNEp0iZKY=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: rttfys3xf5DGoO8xT8j9r6Q4kgJ4GnHSyal9Ka16jwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 04:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Dec 15 04:22:41 2025 GMT Not After : Dec 22 04:22:41 2025 GMT Subject: CN=693f8d11-f2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:e7:05:b5:b8:0e:c4:c1:e6:5c:9f:ac:67: 3b:c5:19:38:14:ae:2c:5b:a6:28:cb:91:e0:66:5f: d9:91:b3:a9:ff:44:8a:87:83:7d:be:91:08:13:a8: 89:19:4e:eb:76:3b:d2:f5:15:8a:d6:2c:14:a7:b8: 70:84:ea:48:a9:3f:f9:3d:c4:8b:c4:98:ed:66:f9: 85:0a:ed:e2:62:e9:be:cd:b9:a7:b2:90:98:ad:6f: 21:45:10:91:60:b0:68:32:4c:da:0c:98:e2:9e:1f: 8d:54:4f:d3:f5:fe:c9:51:b7:8b:4c:61:26:92:66: 8a:a0:0e:bc:b4:b1:47:fb:c3:ce:7a:dd:6e:36:4a: 66:a4:ab:d6:97:3e:c9:f7:25:c8:ab:5f:a8:81:67: b6:b0:75:68:2a:bb:b7:58:ba:9c:5b:03:b4:cc:b8: f7:f0:92:cb:67:8f:b6:4a:0c:44:6f:3d:54:30:87: ad:fb:8d:a1:ed:8d:99:68:bc:14:e4:ff:b5:77:a1: 7f:bf:03:e8:e7:2b:c4:df:55:c2:12:52:0d:ad:2a: 98:69:a5:37:07:8e:fc:ce:07:24:bf:24:4c:35:17: e6:fa:04:e6:7d:b3:f0:15:11:dd:df:61:59:94:1b: a6:db:8f:36:0a:4f:20:96:3c:91:43:e0:14:32:c8: 92:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AD:9B:30:47:A4:8F:60:3B:7F:0A:53:F5:3F:FA:C0:1E:81:05:84 X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4d:08:23:c7:9e:ed:4e:07:24:7a:7a:92:f3:2e:b3:bf:b2: a5:cb:ca:94:c3:7f:c0:d4:67:b9:7e:21:d7:b3:46:c4:c0:52: cb:44:43:af:23:be:47:4b:00:f3:f4:13:bf:1f:4e:8e:71:42: fd:ea:01:bf:63:e3:68:20:f6:8e:38:c3:b2:87:4a:f2:04:b1: 6e:25:7a:8f:24:b5:d9:1b:0f:4c:f7:b5:c9:09:37:9d:32:90: 7d:34:56:47:96:8c:1e:36:2b:af:72:8d:2b:70:a8:04:b1:60: e9:70:06:09:d8:4c:05:b2:bd:91:0c:49:01:7d:c0:58:93:5d: fe:bf:a1:dc:6d:2d:6d:38:a5:c8:2a:a2:68:60:3b:40:3c:15: 0e:ab:aa:34:19:05:9c:51:5c:b3:94:0e:87:6a:01:76:f6:f2: d8:23:71:06:d6:ed:79:c9:a3:d7:6f:0f:8e:23:ba:77:cb:a2: 18:2f:1e:2b:54:bf:7a:05:f2:7b:1d:43:b9:6e:85:61:d8:92: f8:16:d7:a6:5c:8c:0d:4a:ac:9a:a4:c2:8f:d9:e1:aa:71:de: 00:b6:73:ac:f9:23:2c:a4:8a:92:70:28:42:ee:92:15:ba:9e: 6e:0b:a7:31:6c:3f:3a:d3:ff:03:10:22:f8:48:ce:11:15:d6: 31:6d:f6:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjUxMjE1MDQyMjQxWhcNMjUxMjIyMDQyMjQxWjAYMRYwFAYD VQQDDA02OTNmOGQxMS1mMmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnivnBbW4DsTB5lyfrGc7xRk4FK4sW6Yoy5HgZl/ZkbOp/0SKh4N9vpEIE6iJ GU7rdjvS9RWK1iwUp7hwhOpIqT/5PcSLxJjtZvmFCu3iYum+zbmnspCYrW8hRRCR YLBoMkzaDJjinh+NVE/T9f7JUbeLTGEmkmaKoA68tLFH+8POet1uNkpmpKvWlz7J 9yXIq1+ogWe2sHVoKru3WLqcWwO0zLj38JLLZ4+2SgxEbz1UMIet+42h7Y2ZaLwU 5P+1d6F/vwPo5yvE31XCElINrSqYaaU3B478zgckvyRMNRfm+gTmfbPwFRHd32FZ lBum2482Ck8gljyRQ+AUMsiS+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+tmzBH pI9gO38KU/U/+sAegQWEMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbTQgjx57tTgckenqS8y6zv7Kly8qUw3/A1Ge5fiHXs0bEwFLLREOv I75HSwDz9BO/H06OcUL96gG/Y+NoIPaOOMOyh0ryBLFuJXqPJLXZGw9M97XJCTed MpB9NFZHloweNiuvco0rcKgEsWDpcAYJ2EwFsr2RDEkBfcBYk13+v6HcbS1tOKXI KqJoYDtAPBUOq6o0GQWcUVyzlA6HagF29vLYI3EG1u15yaPXbw+OI7p3y6IYLx4r VL96BfJ7HUO5boVh2JL4FtemXIwNSqyapMKP2eGqcd4AtnOs+SMspIqScChC7pIV up5uC6cxbD860/8DECL4SM4RFdYxbfYu -----END CERTIFICATE-----Generated at Mon Dec 15 16:50:23 2025 by rpki-client