This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: g2x8T05qguKS5bbJ3FkSgfepav/4gyEZHiYiEplyAx8= Subject key identifier: F2:E0:74:D6:01:C9:D5:6D:1A:85:3F:E5:A3:CB:D8:D7:8B:20:40:25 Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 04F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 04E2 Signing time: Mon 22 Dec 2025 22:53:10 +0000 Manifest this update: Mon 22 Dec 2025 22:53:10 +0000 Manifest next update: Mon 29 Dec 2025 22:53:10 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: VzGYyIYQeN8s3wTr0aoFqvZcbdXa4h3Xyrf1NXA8hF0=) 2: C7C191A0D7D911F0BE4EFACC9BD3641D.roa (hash: 40a30MQYhSi/4kDcgxKAHqwPUDpt/D12CkG2Eyby4K0=) 3: A89EEAE6B98111F0B5A4F31FC4F9AE02.roa (hash: q6OwG8Ta12XGUTNNsJMpzMzGxPGbtxAnBFH7/JXrdgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1269 (0x4f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Dec 22 22:53:10 2025 GMT Not After : Dec 29 22:53:10 2025 GMT Subject: CN=6949cbd6-f855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:ee:ed:ee:a8:e1:68:a7:93:8f:40:ed:0b: 30:25:d7:10:a8:5a:ec:ff:6d:7b:fe:3d:48:95:8e: e7:c4:c4:2a:7a:a4:d2:49:22:99:6c:19:04:a6:6f: 12:d4:ee:eb:1d:8a:db:d9:f6:dc:9b:c5:8e:01:fc: 50:22:72:cc:1a:af:2c:b8:c9:50:51:aa:94:dd:6d: d9:3c:6e:86:c0:bb:3c:85:e7:c4:52:f2:47:e7:aa: a6:fb:6a:26:b5:a9:8b:4f:11:8b:54:e2:28:04:89: 48:5f:3b:7b:28:ca:a3:a2:50:40:da:6f:c6:eb:57: 80:a2:24:7f:86:af:a6:5f:23:b5:04:ff:44:da:c2: f2:b7:1d:e0:b2:94:44:e0:b3:95:38:ab:71:7f:e5: 54:be:21:90:e5:4d:23:25:95:43:f8:d7:b2:36:e4: f3:c8:4c:2d:aa:ca:ca:5c:55:39:80:45:ba:e8:f3: 2a:d8:86:72:5e:4b:d3:b4:11:ce:2a:49:4f:95:14: df:07:64:2b:10:07:11:2b:c7:55:7f:a5:e7:c1:dd: 6d:45:4c:62:b9:f6:ea:56:ed:39:d5:80:7f:74:e2: ca:fb:6f:9a:69:73:25:c6:ea:c0:c4:ba:73:d4:15: d3:c8:8b:f2:ec:d4:de:50:88:4b:44:2e:4d:bf:d2: 2c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E0:74:D6:01:C9:D5:6D:1A:85:3F:E5:A3:CB:D8:D7:8B:20:40:25 X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c6:f0:81:33:2b:b0:67:6f:b1:91:05:c6:b2:70:0a:53:86: 8a:ad:ae:02:32:c6:7b:c3:86:3a:f7:44:5c:77:a8:0a:bd:63: 04:7c:6e:b6:19:2e:e6:e1:06:52:b5:39:aa:9a:71:90:3c:9d: 95:96:11:67:02:95:0a:56:f5:86:b6:9d:a4:2d:8e:79:56:df: 11:27:8e:0f:fd:01:54:0a:40:b7:ba:2c:d9:18:c9:55:2c:8f: dc:16:8d:fc:f9:31:96:f7:fb:42:2a:e2:84:86:f8:cd:4e:05: 17:01:91:b1:ca:af:1f:14:e7:b7:6f:f3:96:bd:16:95:e8:c4: 1b:bc:f2:d5:50:c2:d3:f0:53:50:23:18:93:2e:ac:d6:59:8d: 44:9d:63:b2:fa:6b:77:63:43:e4:8d:f3:10:85:3d:de:3e:31: 6f:33:39:2c:15:6c:17:a1:49:fc:c8:c0:a5:b5:45:c4:80:fb: d7:3e:38:86:d3:36:46:a8:99:a2:1c:6e:1a:20:d3:72:f9:2d: 49:d5:08:ce:37:cc:5b:20:9b:2e:60:72:d2:a0:8d:30:9a:c2: 44:b4:e5:6a:73:16:8a:b8:ce:c6:82:3a:74:a9:0c:c8:93:8b: ff:8a:37:c8:75:81:9a:3a:de:f2:c7:9b:18:31:72:3d:b4:ab: b8:9b:8d:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjUxMjIyMjI1MzEwWhcNMjUxMjI5MjI1MzEwWjAYMRYwFAYD VQQDDA02OTQ5Y2JkNi1mODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPTu7e6o4Wink49A7QswJdcQqFrs/217/j1IlY7nxMQqeqTSSSKZbBkEpm8S 1O7rHYrb2fbcm8WOAfxQInLMGq8suMlQUaqU3W3ZPG6GwLs8hefEUvJH56qm+2om tamLTxGLVOIoBIlIXzt7KMqjolBA2m/G61eAoiR/hq+mXyO1BP9E2sLytx3gspRE 4LOVOKtxf+VUviGQ5U0jJZVD+NeyNuTzyEwtqsrKXFU5gEW66PMq2IZyXkvTtBHO KklPlRTfB2QrEAcRK8dVf6Xnwd1tRUxiufbqVu051YB/dOLK+2+aaXMlxurAxLpz 1BXTyIvy7NTeUIhLRC5Nv9IsEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLgdNYB ydVtGoU/5aPL2NeLIEAlMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARxvCBMyuwZ2+xkQXGsnAKU4aKra4CMsZ7w4Y690Rcd6gKvWMEfG62 GS7m4QZStTmqmnGQPJ2VlhFnApUKVvWGtp2kLY55Vt8RJ44P/QFUCkC3uizZGMlV LI/cFo38+TGW9/tCKuKEhvjNTgUXAZGxyq8fFOe3b/OWvRaV6MQbvPLVUMLT8FNQ IxiTLqzWWY1EnWOy+mt3Y0PkjfMQhT3ePjFvMzksFWwXoUn8yMCltUXEgPvXPjiG 0zZGqJmiHG4aINNy+S1J1QjON8xbIJsuYHLSoI0wmsJEtOVqcxaKuM7Ggjp0qQzI k4v/ijfIdYGaOt7yx5sYMXI9tKu4m41X -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:18 2025 by rpki-client