This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json) Hash identifier: W7yZOIw83+RmEl/cnQQ3CVOEwqi0Xy9BLXHk5TGQSC0= Subject key identifier: 5C:5C:55:DC:64:6B:58:B3:96:A8:63:3B:96:7B:AF:38:69:8F:2C:58 Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft Manifest number: 0132 Signing time: Tue 23 Dec 2025 03:40:52 +0000 Manifest this update: Tue 23 Dec 2025 03:40:51 +0000 Manifest next update: Tue 30 Dec 2025 03:40:51 +0000 Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: TTNYfmS/dt0Udxxlq5TkLBLE1PVzBDpOI1TRy8IoqAc=) 2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: kzK64g+3VdJ70eJ8iwPZF9UwtUca3Ror+UcoTeSU+vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181375, serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Validity Not Before: Dec 23 03:40:51 2025 GMT Not After : Dec 30 03:40:51 2025 GMT Subject: CN=694a0f44-0f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:a7:48:d9:47:87:46:ad:71:ff:30:de:00: ef:30:ce:88:f9:7f:6e:5a:78:15:33:34:d5:00:61: b6:e5:3b:6c:14:be:8d:21:45:f3:31:d5:30:29:d2: f3:56:c1:e2:3f:5b:2d:68:da:27:c3:c5:d2:d6:8b: 2a:06:aa:8f:9a:9c:11:41:c9:c5:59:86:d0:c3:a0: 44:e3:f0:c1:02:c5:ec:0b:d1:b6:ab:9a:50:68:b8: 3a:03:13:1e:9e:45:29:6b:42:2d:1c:ac:3e:55:04: 95:aa:ad:9d:4b:19:a9:62:31:c4:6f:f0:64:4a:f8: 29:03:56:50:67:d1:46:31:8f:c4:a9:96:cb:a3:a6: 90:79:02:3e:d4:57:56:05:cc:d9:9c:36:47:bd:c8: a8:da:b8:82:76:23:39:44:65:0b:ae:e0:c4:39:b9: 43:ec:c2:c2:fc:10:26:25:7d:bc:57:5e:ff:02:aa: 7c:31:fc:00:84:ad:0a:76:e7:88:ef:4a:ea:b5:e1: 1d:e8:fe:69:c2:72:63:e0:ab:a6:37:86:20:c7:df: a0:d3:f4:70:15:5a:6e:6b:5e:7d:4c:bb:1f:4f:03: 1a:40:95:7c:18:40:72:a7:ce:ac:46:f9:50:7d:31: 78:12:a8:6e:f9:8c:5c:a4:25:05:cc:89:3e:37:24: 0d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5C:55:DC:64:6B:58:B3:96:A8:63:3B:96:7B:AF:38:69:8F:2C:58 X509v3 Authority Key Identifier: keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:74:57:7e:ee:8c:1f:d9:37:05:fc:5b:c3:df:34:f9:1d:28: d1:7f:da:b9:1f:fd:a7:20:c0:a5:ec:3e:d1:0f:8b:29:3f:50: df:18:d7:57:87:b1:35:5a:8c:99:f8:cc:7f:7e:aa:f1:07:3e: f4:a5:4a:03:69:07:e4:29:81:cd:8c:ae:8a:cc:f5:a8:ec:74: 76:00:00:e4:2e:6c:fa:53:20:b3:3d:08:8f:5f:6a:34:10:8a: 38:b1:b9:25:dc:23:00:70:14:62:1b:3f:0d:ad:71:0a:71:b4: 2c:9b:de:41:00:09:ae:0d:fc:5d:0e:01:50:e8:eb:37:6d:6d: 9e:49:d2:e4:ad:0a:fb:f3:ca:bf:03:cc:57:54:dc:84:52:79: 80:a5:d0:12:0f:c4:35:92:87:3e:e2:ff:84:86:b6:18:e3:d4: 1c:51:79:11:3f:d2:4b:21:42:ee:e7:bb:1b:09:26:e4:dd:18: b1:1e:cf:e3:55:22:01:b0:40:04:13:e6:25:d0:7d:67:d8:a2: 1a:48:a1:5a:74:4a:5a:10:6e:11:93:be:8e:bb:45:8b:a4:4f: bd:39:7c:0a:5b:df:97:49:7d:eb:d0:48:d3:87:ad:8b:29:00: 04:40:90:91:20:ed:05:7a:34:bc:2d:0d:e2:03:35:d0:3c:80: 40:e0:f2:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw QTYxRUU4NkQwHhcNMjUxMjIzMDM0MDUxWhcNMjUxMjMwMDM0MDUxWjAYMRYwFAYD VQQDDA02OTRhMGY0NC0wZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3CnSNlHh0atcf8w3gDvMM6I+X9uWngVMzTVAGG25TtsFL6NIUXzMdUwKdLz VsHiP1staNonw8XS1osqBqqPmpwRQcnFWYbQw6BE4/DBAsXsC9G2q5pQaLg6AxMe nkUpa0ItHKw+VQSVqq2dSxmpYjHEb/BkSvgpA1ZQZ9FGMY/EqZbLo6aQeQI+1FdW BczZnDZHvcio2riCdiM5RGULruDEOblD7MLC/BAmJX28V17/Aqp8MfwAhK0KdueI 70rqteEd6P5pwnJj4KumN4Ygx9+g0/RwFVpua159TLsfTwMaQJV8GEByp86sRvlQ fTF4Eqhu+YxcpCUFzIk+NyQNFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxcVdxk a1izlqhjO5Z7rzhpjyxYMB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2 RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIdFd+7owf2TcF/FvD3zT5HSjRf9q5H/2nIMCl7D7RD4spP1DfGNdX h7E1WoyZ+Mx/fqrxBz70pUoDaQfkKYHNjK6KzPWo7HR2AADkLmz6UyCzPQiPX2o0 EIo4sbkl3CMAcBRiGz8NrXEKcbQsm95BAAmuDfxdDgFQ6Os3bW2eSdLkrQr788q/ A8xXVNyEUnmApdASD8Q1koc+4v+EhrYY49QcUXkRP9JLIULu57sbCSbk3RixHs/j VSIBsEAEE+Yl0H1n2KIaSKFadEpaEG4Rk76Ou0WLpE+9OXwKW9+XSX3r0EjTh62L KQAEQJCRIO0FejS8LQ3iAzXQPIBA4PLf -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:11 2025 by rpki-client