This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json) Hash identifier: TKyCAJdyHermSExbxRTb3aRnYD7J63yZO1TcSWg1ZUo= Subject key identifier: C8:B6:FE:76:62:D9:39:20:94:5E:43:4C:A4:5B:09:1F:63:6F:3D:55 Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft Manifest number: 015B Signing time: Tue 23 Dec 2025 03:06:30 +0000 Manifest this update: Tue 23 Dec 2025 03:06:29 +0000 Manifest next update: Tue 30 Dec 2025 03:06:29 +0000 Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: 4/XIRdX48qemPEx8hZghvfreoeXXLzYsfKRz3Qw4wzw=) 2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: 5gSCSjFQUqd+Yem2lvK3YYMNulDLaRkf2ZFE+aQiiYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Validity Not Before: Dec 23 03:06:29 2025 GMT Not After : Dec 30 03:06:29 2025 GMT Subject: CN=694a0736-ac39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7b:25:c7:f4:d7:db:25:8e:bf:0e:44:d6:fe: 11:8f:89:8b:9b:0a:fa:2e:0a:b7:9d:56:78:e7:89: 7b:d1:3c:77:2a:3e:b9:b1:71:65:24:4b:99:66:17: e4:8c:94:b0:c8:df:df:8f:88:78:dd:e2:c2:f6:f8: 1a:35:d7:bd:90:1d:0d:5c:f2:7a:44:78:94:fa:ea: df:5f:df:ac:bc:9d:1e:df:7e:76:4a:11:e3:bf:3c: 59:01:84:12:6f:3c:8c:b4:23:db:05:b8:31:6b:0c: 72:c8:2f:a4:41:6e:00:95:76:e8:78:e9:22:25:af: 71:e5:93:e8:97:22:d5:db:1e:d2:fc:3f:95:6c:3f: 42:04:87:81:f6:a8:e6:73:a1:d8:8c:16:74:d6:31: 57:b0:ad:6e:ec:1d:98:c7:9c:20:5f:34:81:28:34: 36:aa:98:02:ca:5e:62:61:54:b3:cf:82:cf:35:69: 5e:84:3d:63:a3:6e:eb:54:b0:8c:af:3f:67:cc:fd: a2:b9:50:4f:04:07:3b:b4:a3:62:f0:d6:e2:40:5b: 9d:ef:4a:1a:26:f2:da:e6:db:a6:2d:47:b4:f0:a5: 68:4d:96:eb:24:10:0b:8c:6f:59:44:a0:6f:a3:69: c8:50:8c:33:a2:8d:2d:3b:07:a9:9e:cb:bb:79:4b: 69:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B6:FE:76:62:D9:39:20:94:5E:43:4C:A4:5B:09:1F:63:6F:3D:55 X509v3 Authority Key Identifier: keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:fa:59:fb:4e:5e:cc:99:4a:39:40:e7:78:05:67:7e:9e:62: e1:f3:02:aa:f6:ec:58:ea:7f:37:f4:80:fd:a3:e6:c5:b4:8d: f8:f9:22:ad:29:53:cf:fd:fe:06:05:60:60:4a:a4:39:05:69: 6e:13:b8:df:64:1c:27:c3:6f:43:f1:c6:0d:d8:9e:a8:13:2a: 16:8b:01:16:0d:49:3d:88:f0:19:67:09:4a:97:ed:97:49:22: 05:5c:e1:68:10:a7:97:db:bb:91:d8:d1:f4:bf:32:30:06:fb: ef:69:e8:61:89:c3:a6:68:a4:b3:c8:43:db:a9:63:a6:b8:ed: 1e:fa:98:d2:fb:57:dd:1d:e6:0c:17:7f:b4:d9:07:b1:9d:56: 07:2b:3f:95:c9:1b:a9:38:e1:a9:2f:c9:ca:e5:0f:2f:6a:7b: 5d:c7:51:49:80:f7:93:3b:ec:13:ff:1d:7b:da:cb:22:68:9d: 20:3e:97:c1:4b:53:23:4e:b3:f9:c7:1a:89:3f:5c:e2:e6:54: 01:66:17:32:83:9c:96:ba:55:d2:cc:19:ad:5d:4a:f2:af:43: ea:9c:ed:fc:ab:2b:73:48:bc:c2:7e:02:ed:b8:ef:ee:6a:36: 34:c3:a6:f5:1b:a9:f0:06:f7:59:24:12:7f:73:5b:bb:58:9c: 21:bd:17:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4ODUxMTAvBgNVBAUTKEFFNThFM0YzMjREOTQ2QzY4M0Y0QTM4RjhENEUxQ0Q3 MjU3NDgzMEEwHhcNMjUxMjIzMDMwNjI5WhcNMjUxMjMwMDMwNjI5WjAYMRYwFAYD VQQDDA02OTRhMDczNi1hYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh3slx/TX2yWOvw5E1v4Rj4mLmwr6Lgq3nVZ454l70Tx3Kj65sXFlJEuZZhfk jJSwyN/fj4h43eLC9vgaNde9kB0NXPJ6RHiU+urfX9+svJ0e3352ShHjvzxZAYQS bzyMtCPbBbgxawxyyC+kQW4AlXboeOkiJa9x5ZPolyLV2x7S/D+VbD9CBIeB9qjm c6HYjBZ01jFXsK1u7B2Yx5wgXzSBKDQ2qpgCyl5iYVSzz4LPNWlehD1jo27rVLCM rz9nzP2iuVBPBAc7tKNi8NbiQFud70oaJvLa5tumLUe08KVoTZbrJBALjG9ZRKBv o2nIUIwzoo0tOwepnsu7eUtpqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMi2/nZi 2TkglF5DTKRbCR9jbz1VMB8GA1UdIwQYMBaAFK5Y4/Mk2UbGg/Sjj41OHNcldIMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ERkEwNDA3OEM5 RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJzYUQ5S09QalU0YzF5VjBn d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jsamo4eVRaUnNhRDlLT1BqVTRjMXlWMGd3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4NS9ERkEwNDA3OEM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJz YUQ5S09QalU0YzF5VjBnd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz+ln7Tl7MmUo5QOd4BWd+nmLh8wKq9uxY6n839ID9o+bFtI34+SKt KVPP/f4GBWBgSqQ5BWluE7jfZBwnw29D8cYN2J6oEyoWiwEWDUk9iPAZZwlKl+2X SSIFXOFoEKeX27uR2NH0vzIwBvvvaehhicOmaKSzyEPbqWOmuO0e+pjS+1fdHeYM F3+02QexnVYHKz+VyRupOOGpL8nK5Q8vantdx1FJgPeTO+wT/x172ssiaJ0gPpfB S1MjTrP5xxqJP1zi5lQBZhcyg5yWulXSzBmtXUryr0PqnO38qytzSLzCfgLtuO/u ajY0w6b1G6nwBvdZJBJ/c1u7WJwhvRfm -----END CERTIFICATE-----Generated at Tue Dec 23 14:52:58 2025 by rpki-client