This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft File: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json) Hash identifier: uwkSPIXHcr+BOSfAvoKkIc8PQuA/JlRgZaShCwzokGo= Subject key identifier: 08:60:C8:CF:AA:66:32:F9:B2:1B:D5:AE:A1:AA:42:C6:26:0B:C6:C2 Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD Certificate issuer: /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Certificate serial: 05FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft Manifest number: 1F9E Signing time: Mon 22 Dec 2025 16:09:14 +0000 Manifest this update: Mon 22 Dec 2025 16:09:14 +0000 Manifest next update: Mon 29 Dec 2025 16:09:14 +0000 Files and hashes: 1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: mFiLoD4tMzTMxBuLeb4DeXP3tt/SqTte2wN5uJ93ds4=) 2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: 18yGqSgC4OjskRlJV7bTeEZSgygKIsdz22IPs64qVtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1533 (0x5fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Validity Not Before: Dec 22 16:09:14 2025 GMT Not After : Dec 29 16:09:14 2025 GMT Subject: CN=69496d2a-4c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:66:79:b7:f6:a2:47:24:aa:1e:5d:ad:0a: 1b:ef:7e:30:7e:d3:2d:ea:dc:22:90:d7:0a:53:16: 61:6d:4d:57:fa:72:7c:41:b5:a1:e3:b5:8a:2f:82: a6:0f:fc:6b:ad:48:84:68:a5:ad:3d:c6:fe:dc:17: 46:7b:f9:76:ac:fe:7e:3e:fc:00:6a:88:20:da:d5: 1e:51:c4:b4:8d:3e:32:ec:36:49:7d:fa:5c:39:90: e1:0a:34:ad:f8:32:71:80:3e:7d:8e:e9:a4:72:df: 4f:03:2f:34:86:8d:fe:72:5c:e4:9a:c1:93:2b:e1: 78:70:3f:f4:4a:12:ed:ea:6e:45:6a:c2:12:3e:ef: fc:1a:4a:55:c3:c2:0f:e3:0c:fd:9e:eb:59:a9:e9: 80:0a:11:56:a3:d5:2f:d7:4a:5d:3d:d4:5c:fe:49: 34:51:e8:ab:71:85:7e:4c:32:87:f8:1d:d4:d7:3c: af:3c:b6:a0:52:d3:e4:fd:94:4f:49:ea:5c:44:6a: 4c:db:2b:e4:0b:43:45:22:30:8b:d7:70:94:bc:4c: 04:3f:7d:b0:1c:05:c2:20:a0:04:a4:d7:50:bb:d6: ae:74:17:1b:1a:46:56:59:55:dc:2c:4e:8d:68:4b: cf:8c:97:59:f4:1d:b4:72:de:d5:98:7a:d6:b6:e9: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:60:C8:CF:AA:66:32:F9:B2:1B:D5:AE:A1:AA:42:C6:26:0B:C6:C2 X509v3 Authority Key Identifier: keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:0f:49:2a:08:7a:2b:6f:2f:55:73:14:97:f3:ff:46:cb:f7: e3:da:5e:d0:5e:df:5e:9a:ba:48:2a:b1:9b:08:b8:87:3f:79: 57:c0:52:b9:20:ca:7f:03:4e:35:51:68:fb:26:ac:6a:86:7a: a7:13:a1:c9:3c:87:49:a8:e9:7d:f5:0b:fa:b1:eb:e0:76:19: 78:c9:f8:a9:19:ab:f7:0e:d2:77:d8:22:fb:51:a8:ce:b5:bf: 43:d1:83:dc:21:63:69:bf:21:f8:90:bf:77:28:bd:d4:9c:37: e0:bb:4b:b6:be:c3:40:5b:12:3f:f9:b7:0d:36:ce:89:e5:fc: 3d:a9:d9:19:d6:bc:e9:b9:19:18:1e:18:7a:35:51:0b:9d:f3: fb:85:2d:13:db:be:4d:33:bf:b2:09:b1:0a:1c:d0:69:9a:01: 3c:ac:e6:1c:52:ec:a7:81:76:5b:87:97:02:9a:8f:c7:c6:cc: e1:3e:42:0c:96:e6:ee:a8:67:de:95:af:b6:2e:89:46:7c:af: 79:2a:90:16:d9:af:6b:01:67:40:fc:6d:00:10:fe:e3:7b:60: cd:89:e5:f6:00:7c:31:9e:f7:01:81:db:87:c3:3d:21:8d:6d: 81:20:44:69:3a:78:5a:70:e7:3a:01:e6:c1:97:e9:d9:f8:5f: 1a:8a:16:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKDI3M0FBQUUyRTNCRTk5NEZDMjgzM0Y4NTcxMjkyM0NE NDE3QjdGQUQwHhcNMjUxMjIyMTYwOTE0WhcNMjUxMjI5MTYwOTE0WjAYMRYwFAYD VQQDDA02OTQ5NmQyYS00YzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsI5mebf2okckqh5drQob734wftMt6twikNcKUxZhbU1X+nJ8QbWh47WKL4Km D/xrrUiEaKWtPcb+3BdGe/l2rP5+PvwAaogg2tUeUcS0jT4y7DZJffpcOZDhCjSt +DJxgD59jumkct9PAy80ho3+clzkmsGTK+F4cD/0ShLt6m5FasISPu/8GkpVw8IP 4wz9nutZqemAChFWo9Uv10pdPdRc/kk0UeircYV+TDKH+B3U1zyvPLagUtPk/ZRP SepcRGpM2yvkC0NFIjCL13CUvEwEP32wHAXCIKAEpNdQu9audBcbGkZWWVXcLE6N aEvPjJdZ9B20ct7VmHrWtukSCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhgyM+q ZjL5shvVrqGqQsYmC8bCMB8GA1UdIwQYMBaAFCc6quLjvplPwoM/hXEpI81Be3+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1VX0Nnei1GY1NranpVRjdm NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6cXE0dU8tbVVfQ2d6LUZjU2tqelVGN2Y2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1V X0Nnei1GY1NranpVRjdmNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjD0kqCHorby9VcxSX8/9Gy/fj2l7QXt9emrpIKrGbCLiHP3lXwFK5 IMp/A041UWj7JqxqhnqnE6HJPIdJqOl99Qv6sevgdhl4yfipGav3DtJ32CL7UajO tb9D0YPcIWNpvyH4kL93KL3UnDfgu0u2vsNAWxI/+bcNNs6J5fw9qdkZ1rzpuRkY Hhh6NVELnfP7hS0T275NM7+yCbEKHNBpmgE8rOYcUuyngXZbh5cCmo/HxszhPkIM lubuqGfela+2LolGfK95KpAW2a9rAWdA/G0AEP7je2DNieX2AHwxnvcBgduHwz0h jW2BIERpOnhacOc6AebBl+nZ+F8aihbu -----END CERTIFICATE-----Generated at Tue Dec 23 05:01:57 2025 by rpki-client