This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft File: JqjITCDQKn_Eru3hVcCzGwjue2c.mft (raw, json) Hash identifier: 7kbjOIUdCN3c4PGvAk0H/8spLrmxK8O0HB2Ut4ue1B8= Subject key identifier: E8:E2:1D:82:16:B4:E0:E4:70:69:A1:E0:7A:8C:69:A2:B5:17:4F:FE Authority key identifier: 26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67 Certificate issuer: /CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67 Certificate serial: 06B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft Manifest number: 06B1 Signing time: Mon 22 Dec 2025 21:30:11 +0000 Manifest this update: Mon 22 Dec 2025 21:30:10 +0000 Manifest next update: Mon 29 Dec 2025 21:30:10 +0000 Files and hashes: 1: JqjITCDQKn_Eru3hVcCzGwjue2c.crl (hash: Md61i8KtJHihwxrxSv7SuNzfzHknL/KY5HAGT/cs5ao=) 2: E562A356702F11EF9806F81FC4F9AE02.roa (hash: /aaQDKulw/fABnAamA7jEF65J1LvCjkHfFV15p+zWsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00E, serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67 Validity Not Before: Dec 22 21:30:10 2025 GMT Not After : Dec 29 21:30:10 2025 GMT Subject: CN=6949b863-7de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:42:3f:83:72:fa:f0:c1:ed:fc:ed:79:23: f4:15:20:fd:06:aa:8f:1a:f7:04:0f:14:c2:06:0e: 9b:bf:1b:9b:cf:05:1d:6d:cf:f7:ee:1e:d7:af:8c: d4:bc:75:98:fd:e3:94:06:2b:57:8a:ba:4a:ba:e3: 4b:d6:15:68:ef:ca:5f:5b:b5:1e:ba:e3:e8:ab:2d: 2d:97:5c:23:a5:1a:f8:20:cc:a0:af:c2:01:11:e4: 1b:0c:61:de:7b:74:3f:5e:d5:44:a8:ae:e5:fa:2b: ff:5a:40:d3:48:06:51:5e:18:93:a6:4e:b7:5a:3b: 98:98:ce:1d:d4:06:bc:84:78:cf:a7:48:d6:17:c3: 06:25:ec:da:61:03:e5:92:2b:64:5a:5d:68:fd:a0: 53:d3:29:d9:19:84:5d:02:2f:c3:63:59:6d:96:55: 8a:12:5e:e7:59:de:ec:65:db:84:d6:ab:0d:33:9d: 5f:ee:bd:d4:ae:f3:b8:10:bb:0a:92:a7:c1:b7:79: 1d:4f:0b:c7:8d:b1:c4:17:39:78:9a:ef:4a:bf:47: 37:57:f0:7a:a7:d7:1e:d5:c1:69:04:33:7a:f6:23: 2d:5c:89:16:f4:a8:93:5b:34:78:5d:b3:f7:c9:b7: 53:ea:3f:e9:b8:9c:64:fb:87:79:ed:cf:29:5d:f0: e3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E2:1D:82:16:B4:E0:E4:70:69:A1:E0:7A:8C:69:A2:B5:17:4F:FE X509v3 Authority Key Identifier: keyid:26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4a:7c:f0:e9:58:85:f1:1c:c1:a9:8c:bd:6b:b4:8b:a2:40: a9:95:b8:52:a2:84:c6:5b:2d:3b:81:13:30:2e:d6:9e:a3:70: d2:78:21:85:d3:0c:cc:b7:8d:70:02:60:2b:1a:e6:ed:20:36: 68:8f:d7:8e:e3:2e:b9:56:19:db:49:5c:3c:fc:94:cf:f7:5e: d6:a4:78:05:d5:2c:e7:de:9e:20:47:2a:31:5c:ee:58:f3:25: a9:12:f2:45:10:ff:9b:1f:79:1f:45:4b:05:24:51:38:2c:4d: 5e:55:8d:0e:2c:7f:e9:07:2c:ae:7c:fe:a1:ce:61:fe:fe:75: b0:e6:74:04:b2:05:67:f3:d0:36:f4:93:32:56:33:17:0b:da: e3:ba:67:1d:f6:11:51:b5:50:16:0d:94:e2:0c:8e:fd:9a:e3: bb:93:19:3d:ef:fa:0c:1b:af:ef:5c:39:77:bf:5e:87:98:84: 52:a0:de:a2:81:5d:f7:c1:6f:71:cf:94:a3:ce:38:27:b0:c1: 5e:4b:cf:0a:2f:fb:f3:f6:b8:cd:10:2e:61:58:f3:29:7e:82: af:b0:63:0b:8c:f2:83:60:96:98:ab:05:22:31:7b:31:4a:35: c8:99:02:cf:3e:3c:49:76:07:05:0b:ab:6b:88:9a:15:20:76: 95:2f:2a:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEUxMTAvBgNVBAUTKDI2QThDODRDMjBEMDJBN0ZDNEFFRURFMTU1QzBCMzFC MDhFRTdCNjcwHhcNMjUxMjIyMjEzMDEwWhcNMjUxMjI5MjEzMDEwWjAYMRYwFAYD VQQDDA02OTQ5Yjg2My03ZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtRCP4Ny+vDB7fzteSP0FSD9BqqPGvcEDxTCBg6bvxubzwUdbc/37h7Xr4zU vHWY/eOUBitXirpKuuNL1hVo78pfW7UeuuPoqy0tl1wjpRr4IMygr8IBEeQbDGHe e3Q/XtVEqK7l+iv/WkDTSAZRXhiTpk63WjuYmM4d1Aa8hHjPp0jWF8MGJezaYQPl kitkWl1o/aBT0ynZGYRdAi/DY1ltllWKEl7nWd7sZduE1qsNM51f7r3UrvO4ELsK kqfBt3kdTwvHjbHEFzl4mu9Kv0c3V/B6p9ce1cFpBDN69iMtXIkW9KiTWzR4XbP3 ybdT6j/puJxk+4d57c8pXfDjRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjiHYIW tODkcGmh4HqMaaK1F0/+MB8GA1UdIwQYMBaAFCaoyEwg0Cp/xK7t4VXAsxsI7ntn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRS9DNkI1N0M4RThD OTAxMUVCOTFERTBFN0FDNEY5QUUwMi9KcWpJVENEUUtuX0VydTNoVmNDekd3anVl MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pxaklUQ0RRS25fRXJ1M2hWY0N6R3dqdWUyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRS9DNkI1N0M4RThDOTAxMUVCOTFERTBFN0FDNEY5QUUwMi9KcWpJVENEUUtu X0VydTNoVmNDekd3anVlMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtSnzw6ViF8RzBqYy9a7SLokCplbhSooTGWy07gRMwLtaeo3DSeCGF 0wzMt41wAmArGubtIDZoj9eO4y65VhnbSVw8/JTP917WpHgF1Szn3p4gRyoxXO5Y 8yWpEvJFEP+bH3kfRUsFJFE4LE1eVY0OLH/pByyufP6hzmH+/nWw5nQEsgVn89A2 9JMyVjMXC9rjumcd9hFRtVAWDZTiDI79muO7kxk97/oMG6/vXDl3v16HmIRSoN6i gV33wW9xz5SjzjgnsMFeS88KL/vz9rjNEC5hWPMpfoKvsGMLjPKDYJaYqwUiMXsx SjXImQLPPjxJdgcFC6triJoVIHaVLyrl -----END CERTIFICATE-----Generated at Wed Dec 24 19:30:41 2025 by rpki-client