This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft File: tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json) Hash identifier: 1ybyLrQSdtt3rju5kN7hOrEVJ/jKxvYjaFFS2KqbpC0= Subject key identifier: C9:53:8C:51:9C:35:A7:1E:9B:CB:7C:B1:45:EF:B0:5C:9F:FA:9D:67 Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Certificate serial: 0930 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft Manifest number: 0927 Signing time: Mon 22 Dec 2025 19:37:27 +0000 Manifest this update: Mon 22 Dec 2025 19:37:27 +0000 Manifest next update: Mon 29 Dec 2025 19:37:27 +0000 Files and hashes: 1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: fTold5Z99dX5VqGPjNKD3vgsXqU5rk5xLNOV9xbkDHA=) 2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: ifSxbXnY7sYMQ8euk4GLmU7jgSJs5yw2GtjSeYMB3Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2352 (0x930) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Validity Not Before: Dec 22 19:37:27 2025 GMT Not After : Dec 29 19:37:27 2025 GMT Subject: CN=69499df7-a0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:15:62:22:2b:c6:00:fb:16:29:e5:14:df:d6: 00:ad:88:07:fd:8b:76:11:98:5c:af:b1:91:44:da: 29:18:ef:ff:b5:de:de:5c:56:7f:85:91:86:11:c1: f5:fc:a9:73:b0:46:6d:ed:3a:16:b9:b0:11:e1:47: cf:9d:68:16:40:2c:9d:bf:e1:c9:b9:c6:29:e8:84: 0d:bb:ae:e0:64:b4:c5:13:d9:3f:21:84:36:a1:e8: fe:40:3a:99:52:ec:f8:1c:e3:16:2c:d7:aa:d7:37: 80:b6:52:60:45:59:c1:e9:85:39:d7:48:c6:ce:db: bd:3c:4c:f4:ab:ff:0c:f1:67:fb:fe:69:b3:dd:34: 0f:df:98:97:df:e3:ea:25:6d:34:a5:74:fc:3c:f3: d0:0e:33:a7:92:21:cf:54:8f:60:8d:e5:0b:31:e4: f6:e1:a2:b1:bc:b3:dd:3c:29:27:73:c5:93:34:a2: ab:5a:fa:e6:af:e8:93:e2:2f:d6:86:aa:45:91:82: 12:bf:dc:01:47:d4:99:f2:30:33:59:eb:d0:a9:59: 89:5b:ee:12:f1:67:db:d0:fc:4a:a4:87:76:e0:9d: af:10:06:a0:c2:25:d9:98:b3:eb:c2:71:bd:34:58: 23:71:a0:1a:3b:3b:36:a0:df:02:22:be:27:1b:75: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:53:8C:51:9C:35:A7:1E:9B:CB:7C:B1:45:EF:B0:5C:9F:FA:9D:67 X509v3 Authority Key Identifier: keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1b:b4:00:dc:25:21:ad:01:79:8d:59:9c:a0:79:f6:00:cf: c8:bf:1d:62:17:31:df:60:a6:bc:dc:d6:c5:53:d1:ad:d6:54: 18:2f:40:a8:d0:48:75:f4:7d:3a:b7:bd:9e:fb:64:bf:45:b0: 99:5f:6c:6f:ca:03:42:be:48:4b:57:f6:50:28:d0:ea:fb:5f: 33:85:47:5b:a5:23:84:47:c9:a7:4c:2e:10:e1:24:9a:6f:e3: 52:13:99:22:a8:de:37:4d:39:39:93:c8:75:52:f5:06:61:2d: 65:a8:96:c6:35:4d:84:86:cc:ac:86:3b:e1:da:96:a1:0c:e2: 69:b8:7a:2f:3f:76:df:af:fd:8e:c0:56:97:3b:0b:8e:d6:5d: 0e:f2:f3:11:6c:2b:c2:d7:5e:02:61:26:48:70:35:5e:71:c5: c6:6a:83:f6:c3:c8:2b:73:5c:c4:e8:b4:8a:0c:5f:40:76:8a: ba:97:46:81:da:af:de:76:9f:60:a8:53:34:ab:01:7e:2c:99: 4e:ee:27:7f:7e:a4:18:f7:60:00:c5:75:ee:7b:ea:dd:e4:60: ee:a0:3a:56:8f:9c:57:53:73:d0:2e:35:38:25:41:5f:af:1d: 96:28:db:76:ce:30:2f:f6:84:90:80:ad:a9:f8:a6:20:29:8c: af:cd:ec:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3 MUYyOURGNzcwHhcNMjUxMjIyMTkzNzI3WhcNMjUxMjI5MTkzNzI3WjAYMRYwFAYD VQQDDA02OTQ5OWRmNy1hMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBViIivGAPsWKeUU39YArYgH/Yt2EZhcr7GRRNopGO//td7eXFZ/hZGGEcH1 /KlzsEZt7ToWubAR4UfPnWgWQCydv+HJucYp6IQNu67gZLTFE9k/IYQ2oej+QDqZ Uuz4HOMWLNeq1zeAtlJgRVnB6YU510jGztu9PEz0q/8M8Wf7/mmz3TQP35iX3+Pq JW00pXT8PPPQDjOnkiHPVI9gjeULMeT24aKxvLPdPCknc8WTNKKrWvrmr+iT4i/W hqpFkYISv9wBR9SZ8jAzWevQqVmJW+4S8Wfb0PxKpId24J2vEAagwiXZmLPrwnG9 NFgjcaAaOzs2oN8CIr4nG3U9FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlTjFGc Nacem8t8sUXvsFyf+p1nMB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1 MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RURBQy81ODNBRjIwNEI1MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1J OGZ1czg3VERwRVZ4OHAzM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdG7QA3CUhrQF5jVmcoHn2AM/Ivx1iFzHfYKa83NbFU9Gt1lQYL0Co 0Eh19H06t72e+2S/RbCZX2xvygNCvkhLV/ZQKNDq+18zhUdbpSOER8mnTC4Q4SSa b+NSE5kiqN43TTk5k8h1UvUGYS1lqJbGNU2Ehsyshjvh2pahDOJpuHovP3bfr/2O wFaXOwuO1l0O8vMRbCvC114CYSZIcDVeccXGaoP2w8grc1zE6LSKDF9Adoq6l0aB 2q/edp9gqFM0qwF+LJlO7id/fqQY92AAxXXue+rd5GDuoDpWj5xXU3PQLjU4JUFf rx2WKNt2zjAv9oSQgK2p+KYgKYyvzezh -----END CERTIFICATE-----Generated at Tue Dec 23 17:43:55 2025 by rpki-client