This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft File: j6hk_qmvHMBaicsQ6i43MXBt8_U.mft (raw, json) Hash identifier: n/gCxrEyPTnRf+937DwyKPyiaJCTlQR3el6neu46xqQ= Subject key identifier: 28:79:EA:E6:C3:92:42:7D:EA:C2:87:49:85:24:9F:1B:EB:80:CA:E4 Authority key identifier: 8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5 Certificate issuer: /CN=A918DAF5/serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft Manifest number: 2C Signing time: Fri 19 Dec 2025 06:35:21 +0000 Manifest this update: Fri 19 Dec 2025 06:35:21 +0000 Manifest next update: Fri 26 Dec 2025 06:35:21 +0000 Files and hashes: 1: j6hk_qmvHMBaicsQ6i43MXBt8_U.crl (hash: IY4HrRDamDF60jM5bJ+M6SXWHKxlaoZaENoM3+nHp2k=) 2: 8121DCA49DF611F0B7D5393FC4F9AE02.roa (hash: 9g7OIf/aUpSy1rCWca9ZMugo81QHot1HlcLobRXWLTE=) 3: 0B1E45B49DF711F09C653340C4F9AE02.roa (hash: vIsigsIWJxpolid0KI36h1A1tKYdEORqEUTOoyk6qAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAF5, serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5 Validity Not Before: Dec 19 06:35:21 2025 GMT Not After : Dec 26 06:35:21 2025 GMT Subject: CN=6944f229-a77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b0:2d:50:48:d2:4d:c3:8e:ce:74:b7:04:b0: 22:ab:82:2c:92:68:ab:41:52:51:f6:99:59:c6:ed: 86:ae:da:c4:38:ae:43:a4:93:e0:e7:df:9f:b2:77: a3:b7:25:3a:98:76:f3:46:e1:6d:1e:c1:03:3d:fa: 6c:53:27:3d:9b:d1:cc:d6:ad:10:fa:85:77:39:bf: df:d4:6a:02:82:cf:bd:a8:60:85:75:98:db:58:23: e0:bf:39:c5:3a:39:05:b1:91:60:a8:ac:7c:43:ea: 67:db:c6:82:c5:25:ca:83:9e:f5:8e:e5:ed:57:60: cb:4c:2e:85:4d:09:d1:a2:4b:81:fe:30:9c:95:7f: 0a:66:eb:3f:a1:ea:08:9e:99:ac:11:7a:0b:40:71: fd:d4:bb:a0:da:e8:d8:96:9e:0f:b7:be:f2:4e:55: 9d:cb:46:ed:e7:55:28:18:33:d8:8f:ac:69:dc:be: f9:c9:2c:be:da:b9:cd:54:be:31:ed:70:99:32:d9: 0d:4d:ab:0b:9d:4b:df:87:ad:2a:62:d4:e4:e4:a7: d3:a3:e9:97:a1:b4:22:db:cd:eb:29:0b:d6:34:7d: 2e:b4:f6:1f:18:0f:a4:0d:29:b2:38:ae:ab:1e:a9: b4:57:12:91:af:3b:e8:b1:9b:d9:94:12:3e:1e:92: 21:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:79:EA:E6:C3:92:42:7D:EA:C2:87:49:85:24:9F:1B:EB:80:CA:E4 X509v3 Authority Key Identifier: keyid:8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:78:67:73:f2:42:c8:87:67:04:ec:b0:b2:59:97:76:4b:19: b4:39:8d:a1:7d:a0:86:68:66:17:75:88:72:70:34:bc:96:a8: 92:7b:d3:1d:20:40:4e:f7:59:f3:6f:45:ad:a1:be:aa:b3:53: 2a:b3:d9:7d:b5:2b:a7:2d:08:62:0a:5c:16:d3:44:dc:05:4b: 62:b8:d0:5e:cc:9a:17:63:3a:39:48:90:f2:69:06:14:58:85: f6:d3:a5:4c:a8:da:1f:4b:4b:85:6a:e3:72:0a:5f:7a:50:ee: 7b:9d:00:56:49:a9:3f:da:fd:07:a3:5c:53:fd:18:d2:74:7a: 1e:34:43:dc:48:6d:15:a4:31:0e:3f:45:c4:53:44:aa:e5:a0: c9:54:b5:cb:37:69:fd:10:87:c8:eb:bc:8d:9a:fc:3d:f9:88: a6:0d:cd:c0:27:d9:e0:09:e6:f8:2b:23:d1:84:81:30:ad:a9: d5:75:2a:ef:fc:88:82:ae:2a:3d:1a:cc:b3:99:5f:7e:95:57: 72:26:34:48:57:7a:19:b9:99:13:63:74:7b:4d:dc:e0:4d:a8: 44:73:59:1a:19:a8:c9:78:d1:92:5c:6a:23:ff:01:31:6b:29: ba:10:42:57:a1:cb:5a:59:b2:c7:00:7a:a0:d0:ac:c1:f2:fa: 70:68:d4:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 REFGNTExMC8GA1UEBRMoOEZBODY0RkVBOUFGMUNDMDVBODlDQjEwRUEyRTM3MzE3 MDZERjNGNTAeFw0yNTEyMTkwNjM1MjFaFw0yNTEyMjYwNjM1MjFaMBgxFjAUBgNV BAMMDTY5NDRmMjI5LWE3N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjsC1QSNJNw47OdLcEsCKrgiySaKtBUlH2mVnG7Yau2sQ4rkOkk+Dn35+yd6O3 JTqYdvNG4W0ewQM9+mxTJz2b0czWrRD6hXc5v9/UagKCz72oYIV1mNtYI+C/OcU6 OQWxkWCorHxD6mfbxoLFJcqDnvWO5e1XYMtMLoVNCdGiS4H+MJyVfwpm6z+h6gie mawRegtAcf3Uu6Da6NiWng+3vvJOVZ3LRu3nVSgYM9iPrGncvvnJLL7auc1UvjHt cJky2Q1NqwudS9+HrSpi1OTkp9Oj6ZehtCLbzespC9Y0fS609h8YD6QNKbI4rqse qbRXEpGvO+ixm9mUEj4ekiHPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKHnq5sOS Qn3qwodJhSSfG+uAyuQwHwYDVR0jBBgwFoAUj6hk/qmvHMBaicsQ6i43MXBt8/Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEQUY1LzdDRDQyQTY4OURG NTExRjA5QTJCNjYyMEM0RjlBRTAyL2o2aGtfcW12SE1CYWljc1E2aTQzTVhCdDhf VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvajZoa19xbXZITUJhaWNzUTZpNDNNWEJ0OF9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE QUY1LzdDRDQyQTY4OURGNTExRjA5QTJCNjYyMEM0RjlBRTAyL2o2aGtfcW12SE1C YWljc1E2aTQzTVhCdDhfVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOZ4Z3PyQsiHZwTssLJZl3ZLGbQ5jaF9oIZoZhd1iHJwNLyWqJJ70x0g QE73WfNvRa2hvqqzUyqz2X21K6ctCGIKXBbTRNwFS2K40F7MmhdjOjlIkPJpBhRY hfbTpUyo2h9LS4Vq43IKX3pQ7nudAFZJqT/a/QejXFP9GNJ0eh40Q9xIbRWkMQ4/ RcRTRKrloMlUtcs3af0Qh8jrvI2a/D35iKYNzcAn2eAJ5vgrI9GEgTCtqdV1Ku/8 iIKuKj0azLOZX36VV3ImNEhXehm5mRNjdHtN3OBNqERzWRoZqMl40ZJcaiP/ATFr KboQQlehy1pZsscAeqDQrMHy+nBo1D4= -----END CERTIFICATE-----Generated at Sat Dec 20 05:00:21 2025 by rpki-client