This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft File: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft (raw, json) Hash identifier: G19wmF9TGjlF5Kw9uCDcJjsTGF0YbbvShtQqRq/A9Yg= Subject key identifier: 32:73:4D:3A:97:45:D2:A6:EF:2E:32:B9:9A:DF:D7:49:15:F2:CA:12 Authority key identifier: 27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F Certificate issuer: /CN=A917A2E5/serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft Manifest number: 2C Signing time: Wed 03 Dec 2025 05:48:38 +0000 Manifest this update: Wed 03 Dec 2025 05:48:38 +0000 Manifest next update: Wed 10 Dec 2025 05:48:38 +0000 Files and hashes: 1: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl (hash: tEBkYqOwFZk/S702KEjrSdEHVT2N/hxRdFK4woaf0Ws=) 2: 173F9AAC8C9811F0B7F99E73C4F9AE02.roa (hash: FS6hEH/j55OHJQ+TqNcRwQCoVjVrvVyoMfAtx5CJ3gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2E5, serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F Validity Not Before: Dec 3 05:48:38 2025 GMT Not After : Dec 10 05:48:38 2025 GMT Subject: CN=692fcf36-9faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:97:cc:73:fa:64:55:bc:2c:4d:f1:17:0f: 14:33:3c:78:d4:6b:08:e2:76:9b:00:57:87:00:01: b9:c8:3a:73:30:a7:15:fa:34:08:a3:b7:a2:57:09: d1:31:47:b8:22:aa:4f:01:f1:cd:8a:3b:b6:04:1f: 7a:9f:67:9f:61:64:23:42:f3:6e:d9:31:38:d7:6f: 24:4c:42:d2:61:01:8f:09:57:ba:27:1d:82:6a:f6: 9c:c0:51:56:83:2b:8c:f5:84:56:61:a7:e3:0e:35: 37:7f:ac:11:63:77:1f:89:18:43:40:6b:02:90:02: c5:0a:99:bd:23:54:d3:5e:45:bc:40:3d:15:31:b6: 38:25:07:8e:f1:27:0f:b5:1f:49:94:1a:eb:54:0f: 54:c8:3e:df:fb:7b:c8:3c:ea:0b:e3:d2:23:26:bb: 32:cb:f3:94:80:7a:83:dd:15:44:0a:79:81:56:b7: 06:cd:04:ce:5e:76:76:7e:62:79:63:19:ea:03:fc: 77:35:79:d3:29:54:c9:37:a7:14:a0:04:48:94:6a: 31:ac:b7:a2:b1:25:9f:24:66:54:d1:b1:5f:0c:0a: af:49:e1:cf:c5:41:e2:14:7a:37:fe:f0:e0:34:0c: 27:06:62:67:2e:bc:36:79:33:f6:b4:a9:7c:69:5e: 5e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:4D:3A:97:45:D2:A6:EF:2E:32:B9:9A:DF:D7:49:15:F2:CA:12 X509v3 Authority Key Identifier: keyid:27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:54:cd:a7:20:4e:5a:bf:31:6d:c3:35:68:10:e1:cb:ee:d0: aa:1b:df:83:0c:4f:e1:4e:b1:2a:2d:e8:cb:06:57:73:fa:61: 2a:0b:72:cb:84:77:b4:74:35:76:a5:4f:f3:b5:d2:01:10:fa: 62:17:1a:fb:0b:0d:57:47:52:89:9b:8c:5d:f5:9d:c5:5e:e4: a4:86:bf:d6:9d:23:dd:d9:61:8e:45:1c:ea:61:45:e6:11:44: 0a:8a:3f:60:c4:56:13:24:13:ca:1b:67:12:fe:76:c8:6d:c4: cb:76:27:62:a6:c7:d2:7c:8c:70:d5:03:d4:6c:7c:4a:d9:81: f0:30:98:d0:a0:19:3c:6e:9b:50:e5:c0:ed:7b:7b:b9:b5:f6: 1d:64:6a:13:0d:c8:23:42:bf:73:05:53:31:0a:8d:e3:2c:84: e7:2b:a9:4e:42:4b:28:f6:5b:9f:7c:27:9b:66:9a:51:ac:89: 36:85:d3:2d:fa:0f:15:58:c7:fe:3b:c5:cf:e6:1e:a5:5f:7f: ee:1f:28:8b:9a:b1:88:e2:8b:20:36:34:f9:6c:b6:76:e6:81: be:1c:f5:5f:e1:4a:63:06:12:d5:dd:01:93:11:64:0f:dc:be: cf:ed:a4:c6:90:de:31:98:65:91:2c:ab:94:77:0d:66:22:de: cd:1e:b4:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJFNTExMC8GA1UEBRMoMjdBMEEyRERGMzVDMTk3RDRGQzI2MjkwQzI5NTdENDk2 OENGMTU4RjAeFw0yNTEyMDMwNTQ4MzhaFw0yNTEyMTAwNTQ4MzhaMBgxFjAUBgNV BAMTDTY5MmZjZjM2LTlmYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgGJfMc/pkVbwsTfEXDxQzPHjUawjidpsAV4cAAbnIOnMwpxX6NAijt6JXCdEx R7giqk8B8c2KO7YEH3qfZ59hZCNC827ZMTjXbyRMQtJhAY8JV7onHYJq9pzAUVaD K4z1hFZhp+MONTd/rBFjdx+JGENAawKQAsUKmb0jVNNeRbxAPRUxtjglB47xJw+1 H0mUGutUD1TIPt/7e8g86gvj0iMmuzLL85SAeoPdFUQKeYFWtwbNBM5ednZ+Ynlj GeoD/Hc1edMpVMk3pxSgBEiUajGst6KxJZ8kZlTRsV8MCq9J4c/FQeIUejf+8OA0 DCcGYmcuvDZ5M/a0qXxpXl4DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMnNNOpdF 0qbvLjK5mt/XSRXyyhIwHwYDVR0jBBgwFoAUJ6Ci3fNcGX1PwmKQwpV9SWjPFY8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkU1L0E2QzU0MEY2OEM5 NzExRjBBMDA5RDU3MkM0RjlBRTAyL0o2Q2kzZk5jR1gxUHdtS1F3cFY5U1dqUEZZ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSjZDaTNmTmNHWDFQd21LUXdwVjlTV2pQRlk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MkU1L0E2QzU0MEY2OEM5NzExRjBBMDA5RDU3MkM0RjlBRTAyL0o2Q2kzZk5jR1gx UHdtS1F3cFY5U1dqUEZZOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEZUzacgTlq/MW3DNWgQ4cvu0Kob34MMT+FOsSot6MsGV3P6YSoLcsuE d7R0NXalT/O10gEQ+mIXGvsLDVdHUombjF31ncVe5KSGv9adI93ZYY5FHOphReYR RAqKP2DEVhMkE8obZxL+dshtxMt2J2Kmx9J8jHDVA9RsfErZgfAwmNCgGTxum1Dl wO17e7m19h1kahMNyCNCv3MFUzEKjeMshOcrqU5CSyj2W598J5tmmlGsiTaF0y36 DxVYx/47xc/mHqVff+4fKIuasYjiiyA2NPlstnbmgb4c9V/hSmMGEtXdAZMRZA/c vs/tpMaQ3jGYZZEsq5R3DWYi3s0etOs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:37 2025 by rpki-client