This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: u91a5JtwqlsC1mChV1KG03qh4BPdD5VETHF/5iPMFUc= Subject key identifier: C9:47:25:64:8D:EB:72:A0:F9:78:3B:35:3D:98:41:55:1D:23:AF:B4 Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 02E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 02E2 Signing time: Fri 19 Dec 2025 00:33:34 +0000 Manifest this update: Fri 19 Dec 2025 00:33:33 +0000 Manifest next update: Fri 26 Dec 2025 00:33:33 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: evfdmN1Y0arU+qW7irGkNxyj4BFGE2pldTpG3pqZfIY=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: SkZtMkxJP09Yd2B5Onq8UT9Pvo6N0SWw7PtHEg8gn3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 744 (0x2e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: Dec 19 00:33:33 2025 GMT Not After : Dec 26 00:33:33 2025 GMT Subject: CN=69449d5e-8084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:21:2d:c6:76:9c:e4:0c:e9:5a:e7:f4:ac: 61:db:52:16:02:dd:4c:bd:3f:25:f9:a1:0c:a1:5a: 5e:b3:f0:31:a2:79:c5:fc:52:01:15:d3:a7:b1:44: 5c:05:cf:11:78:17:33:ad:b0:eb:29:b9:03:6f:0e: 07:24:ae:5d:6a:1a:90:1c:37:95:17:63:d5:c1:d1: f4:55:bb:8d:a6:f4:b6:ca:35:1c:2f:f5:ec:20:62: e3:8e:c6:9b:f4:81:90:07:3e:e7:1c:27:ca:c1:98: f9:a9:1b:56:97:43:96:dc:f8:35:81:f4:68:50:00: 62:82:2c:0d:9c:c7:9d:60:62:21:2f:76:85:d3:00: 88:ea:7b:2d:63:2b:24:fb:ea:3f:d8:11:f9:fe:df: 41:2d:e4:61:f9:85:06:dd:06:09:7f:91:5e:89:f9: 5b:ed:e2:3e:f1:dc:16:10:a2:ad:27:fc:a7:b3:b1: 22:cf:27:0b:57:eb:6a:fa:42:cd:b6:02:ac:d5:9c: cc:9b:d1:a4:f6:42:3a:76:2d:17:f3:40:b8:88:57: b0:f2:eb:23:83:1e:86:6d:eb:b7:f5:14:03:40:9f: ad:5f:21:1e:83:d0:69:5b:26:26:b2:66:18:0b:8d: 19:02:c3:69:d3:9f:ae:81:45:f7:72:72:82:62:25: 95:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:47:25:64:8D:EB:72:A0:F9:78:3B:35:3D:98:41:55:1D:23:AF:B4 X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:31:43:03:5f:35:18:d0:cb:a1:04:8a:87:b6:e1:39:81:75: eb:ed:cf:0b:d9:61:c6:ce:c6:42:3c:14:5c:dc:c5:04:6b:12: f1:53:1a:c9:e8:89:42:60:2e:aa:32:b8:d6:0b:f7:6c:cf:89: c1:b7:11:db:32:e2:9e:60:b5:25:6e:94:d2:66:69:55:a8:fd: ae:cb:71:3c:1a:be:62:95:72:22:8d:80:ef:6c:f0:18:97:20: e5:2a:d7:d8:3e:24:07:a6:e7:9e:9a:b0:5c:4e:e9:64:4d:6d: e2:4c:05:ae:59:ad:65:d9:e4:6f:a3:2b:c8:6c:d4:1a:87:5d: 9e:89:b6:56:e3:06:19:3c:6f:4e:52:a6:d2:1c:34:5e:f4:45: 84:a4:3c:1c:e0:8f:0b:cb:0e:c8:3a:9e:a0:4e:19:9d:61:09: 69:85:d9:0a:c2:8b:f0:33:35:36:a8:5d:82:5f:0f:4c:01:c5: 59:92:60:b1:5b:f5:be:d9:fd:b6:8c:11:47:83:f8:60:de:b7: 2c:8c:f8:39:62:d2:8b:71:89:47:47:91:97:56:eb:0f:f8:7e: af:31:52:42:43:71:cc:95:ab:f1:5f:72:42:8e:c4:8e:be:87: c4:80:c8:c4:aa:c8:41:71:3e:2d:3b:6d:e6:24:c3:ec:03:25: 23:6f:06:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjUxMjE5MDAzMzMzWhcNMjUxMjI2MDAzMzMzWjAYMRYwFAYD VQQDDA02OTQ0OWQ1ZS04MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr4hLcZ2nOQM6Vrn9Kxh21IWAt1MvT8l+aEMoVpes/AxonnF/FIBFdOnsURc Bc8ReBczrbDrKbkDbw4HJK5dahqQHDeVF2PVwdH0VbuNpvS2yjUcL/XsIGLjjsab 9IGQBz7nHCfKwZj5qRtWl0OW3Pg1gfRoUABigiwNnMedYGIhL3aF0wCI6nstYysk ++o/2BH5/t9BLeRh+YUG3QYJf5Feiflb7eI+8dwWEKKtJ/yns7EizycLV+tq+kLN tgKs1ZzMm9Gk9kI6di0X80C4iFew8usjgx6Gbeu39RQDQJ+tXyEeg9BpWyYmsmYY C40ZAsNp05+ugUX3cnKCYiWV6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlHJWSN 63Kg+Xg7NT2YQVUdI6+0MB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvMUMDXzUY0MuhBIqHtuE5gXXr7c8L2WHGzsZCPBRc3MUEaxLxUxrJ 6IlCYC6qMrjWC/dsz4nBtxHbMuKeYLUlbpTSZmlVqP2uy3E8Gr5ilXIijYDvbPAY lyDlKtfYPiQHpueemrBcTulkTW3iTAWuWa1l2eRvoyvIbNQah12eibZW4wYZPG9O UqbSHDRe9EWEpDwc4I8Lyw7IOp6gThmdYQlphdkKwovwMzU2qF2CXw9MAcVZkmCx W/W+2f22jBFHg/hg3rcsjPg5YtKLcYlHR5GXVusP+H6vMVJCQ3HMlavxX3JCjsSO vofEgMjEqshBcT4tO23mJMPsAyUjbwZS -----END CERTIFICATE-----Generated at Sat Dec 20 21:58:02 2025 by rpki-client