This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json) Hash identifier: 0UH/30JNkZFN8CpNWDbqBqIGAVf9qjnUz5I4du+wmfM= Subject key identifier: 4C:50:86:AD:19:8A:A1:A3:58:EA:40:84:B0:B8:1D:F4:F4:2C:AE:F5 Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Certificate serial: 30BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft Manifest number: 3089 Signing time: Mon 22 Dec 2025 15:19:49 +0000 Manifest this update: Mon 22 Dec 2025 15:19:48 +0000 Manifest next update: Mon 29 Dec 2025 15:19:48 +0000 Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: QO0k3n5L+vmwWYVYtJkftDLOLipvnKmVxm7IZF1uadE=) 2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 04Ktf7aHmtk6w5MhGrvObQ/LJOb4uBLGbSar+Thl/fM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12474 (0x30ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Validity Not Before: Dec 22 15:19:48 2025 GMT Not After : Dec 29 15:19:48 2025 GMT Subject: CN=69496195-3ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8c:de:2e:01:6e:82:ef:ce:cb:e3:5f:aa:47: b4:7e:8d:f5:b6:29:4b:ac:36:94:17:86:ae:fa:80: b6:45:9c:73:72:1d:10:bd:7f:eb:81:45:09:23:1f: 52:f5:75:07:f6:8c:11:d2:45:ea:56:a5:2c:b3:2d: b0:35:fa:70:a5:b1:04:77:5b:a9:e2:6c:9b:f7:64: 32:1d:b3:9d:a4:40:48:d8:d8:69:00:8a:e9:81:61: ca:b4:9a:fe:fe:fe:e7:0b:3e:7a:8a:75:1a:1d:21: 8b:be:a7:5d:b7:25:85:be:89:bb:c0:51:9c:14:f1: ef:9f:8c:9c:02:d1:14:d8:8d:ac:82:07:a7:70:e8: 43:7f:d8:ab:bd:31:d7:31:22:69:17:51:d8:57:d7: ef:17:3d:66:f2:0e:7c:79:a7:ad:e5:db:ef:92:d4: 15:69:be:ab:0c:30:0c:21:d1:30:0b:80:7d:ba:dd: f7:ce:0a:28:40:ad:43:f5:ac:10:d3:17:64:19:1e: 05:87:f9:fe:a5:81:36:9a:d9:95:45:a1:bb:37:10: f3:fd:68:1b:72:07:96:c8:84:32:08:28:2f:04:67: a0:d3:2a:8c:cb:61:09:4e:f3:1a:dc:ce:c0:61:64: fc:5e:1c:6f:bf:cd:05:69:ff:33:e2:69:7d:64:ba: 45:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:50:86:AD:19:8A:A1:A3:58:EA:40:84:B0:B8:1D:F4:F4:2C:AE:F5 X509v3 Authority Key Identifier: keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f6:55:98:10:64:c0:d8:60:49:0a:6c:85:90:c8:0a:9b:d3: 81:8d:96:e7:f9:26:0c:33:a4:84:9f:91:cf:55:a1:ff:4c:e1: 6e:98:22:80:c8:54:a9:7b:be:db:ba:83:31:71:2a:1f:76:37: 3d:fc:6b:06:0c:d7:23:9e:e7:31:26:fa:f6:c6:88:12:0d:9e: db:0f:cb:3b:c6:ab:3d:aa:4b:62:1d:00:d1:ec:37:60:3e:08: 33:54:13:11:28:b9:9a:aa:02:47:d7:8d:46:9c:3a:0c:8e:8c: ec:8b:71:99:f5:b3:e0:d8:da:11:ce:bf:7d:a7:ab:42:9a:39: be:59:c1:a6:62:a2:18:b6:49:b5:d7:54:9b:44:e0:5a:8b:9c: b1:af:73:fb:2c:80:5e:8b:4e:b8:6a:2b:67:43:d5:52:44:3f: 8a:dd:72:4c:6b:9b:24:1d:dd:c1:f1:61:09:1c:74:f3:2b:b5: 56:79:e3:ab:f3:e2:df:9e:c6:5c:5c:b4:91:28:9a:05:3b:28: f8:42:f7:98:16:d3:9b:4d:33:07:77:67:10:ce:ef:ea:c7:fc: c2:f9:3b:9d:ed:92:29:79:97:39:dc:df:9c:2d:62:dd:4d:6c: 69:ab:8c:52:fb:27:39:cb:c9:12:b5:23:3f:1f:94:9b:0b:b1: a5:a6:cc:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNEQxMTAvBgNVBAUTKEQ1QzhGMURDOTREM0MzNDgxRDZDNjk1MzY5NTZBNEE1 MjhENUVEQzMwHhcNMjUxMjIyMTUxOTQ4WhcNMjUxMjI5MTUxOTQ4WjAYMRYwFAYD VQQDDA02OTQ5NjE5NS0zYWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14zeLgFugu/Oy+Nfqke0fo31tilLrDaUF4au+oC2RZxzch0QvX/rgUUJIx9S 9XUH9owR0kXqVqUssy2wNfpwpbEEd1up4myb92QyHbOdpEBI2NhpAIrpgWHKtJr+ /v7nCz56inUaHSGLvqddtyWFvom7wFGcFPHvn4ycAtEU2I2sggencOhDf9irvTHX MSJpF1HYV9fvFz1m8g58eaet5dvvktQVab6rDDAMIdEwC4B9ut33zgooQK1D9awQ 0xdkGR4Fh/n+pYE2mtmVRaG7NxDz/WgbcgeWyIQyCCgvBGeg0yqMy2EJTvMa3M7A YWT8Xhxvv80Faf8z4ml9ZLpFQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExQhq0Z iqGjWOpAhLC4HfT0LK71MB8GA1UdIwQYMBaAFNXI8dyU08NIHWxpU2lWpKUo1e3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE0RC82QzA1NTgyNDA1 ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcwZ2RiR2xUYVZha3BTalY3 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjangzSlRUdzBnZGJHbFRhVmFrcFNqVjdjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE0RC82QzA1NTgyNDA1ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcw Z2RiR2xUYVZha3BTalY3Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU9lWYEGTA2GBJCmyFkMgKm9OBjZbn+SYMM6SEn5HPVaH/TOFumCKA yFSpe77buoMxcSofdjc9/GsGDNcjnucxJvr2xogSDZ7bD8s7xqs9qktiHQDR7Ddg PggzVBMRKLmaqgJH141GnDoMjozsi3GZ9bPg2NoRzr99p6tCmjm+WcGmYqIYtkm1 11SbROBai5yxr3P7LIBei064aitnQ9VSRD+K3XJMa5skHd3B8WEJHHTzK7VWeeOr 8+LfnsZcXLSRKJoFOyj4QveYFtObTTMHd2cQzu/qx/zC+Tud7ZIpeZc53N+cLWLd TWxpq4xS+yc5y8kStSM/H5SbC7Glpsy2 -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:00 2025 by rpki-client