This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json) Hash identifier: DPAcYBIyJByEXXY8G/FQNu8rdDxxPGLgHrYCbsUROr0= Subject key identifier: C1:EE:56:47:74:E8:BF:78:66:54:F8:11:8A:F9:C7:D9:94:C2:37:74 Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Certificate serial: 3500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft Manifest number: 34ED Signing time: Sun 16 Nov 2025 15:05:08 +0000 Manifest this update: Sun 16 Nov 2025 15:05:07 +0000 Manifest next update: Sun 23 Nov 2025 15:05:07 +0000 Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: +jbe98tkT78aNTfyDbBB1ZvH9fbY2Gm4kDu3eRVY6Yw=) 2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: a03YccLD26+EVq1g9SXKvWZ2v+EmXltyBYT+9f1nANI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Nov 2025 15:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13568 (0x3500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Validity Not Before: Nov 16 15:05:07 2025 GMT Not After : Nov 23 15:05:07 2025 GMT Subject: CN=6919e823-ecd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:be:12:9e:b2:6f:b5:01:a2:44:b8:1c:6d: 7f:b0:95:3d:0c:22:50:ae:b0:7a:ac:ca:40:b1:d5: fd:db:74:7a:49:fc:95:d0:a9:b8:fa:61:50:27:33: 1f:d5:94:f3:df:e1:dd:15:cc:b2:6c:0e:4f:ac:11: 14:ba:c2:20:22:43:31:aa:4d:e0:a7:15:8a:ae:60: f1:70:4d:60:ea:3a:67:28:06:26:15:92:1b:78:41: 53:72:66:d2:f7:fd:31:03:8c:50:98:15:f9:ee:2d: a8:cd:4f:f3:16:29:24:b9:78:1c:39:fd:a6:69:f7: 07:4e:2f:a9:35:cb:8c:28:59:46:41:48:0d:57:91: 36:25:40:02:7d:70:1b:26:45:e4:7d:2b:6f:9b:f6: ef:1c:92:7e:dc:c8:83:85:f2:4d:32:5c:0c:71:3c: 98:ad:85:26:7b:8d:84:85:24:6c:06:e3:e7:95:75: 9e:59:51:17:17:b6:7b:aa:29:59:96:6a:da:32:5c: 7a:53:28:29:2b:b6:1f:30:28:5d:1d:37:19:9a:64: 7c:7d:69:48:17:e6:7b:b9:9b:b5:a6:12:ba:4b:46: 42:5a:4f:1c:5f:fb:2b:9c:c0:db:3b:9e:a2:31:cc: 2b:2d:c7:20:85:cd:c2:81:d0:56:c1:8d:b1:19:65: 0b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EE:56:47:74:E8:BF:78:66:54:F8:11:8A:F9:C7:D9:94:C2:37:74 X509v3 Authority Key Identifier: keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:e1:de:6e:15:b7:23:4f:7a:a5:ae:38:24:72:33:51:4a:14: d4:42:1e:00:ae:f0:e7:65:2d:5a:d8:f5:f8:7a:ce:f7:4c:18: 90:6b:35:c7:50:5f:9c:84:1e:1b:98:a5:70:9e:71:aa:c1:40: 01:54:9c:80:b7:bc:25:39:6a:42:98:2e:9c:4b:cb:34:d0:6c: 92:1e:05:10:d3:4c:d0:56:bc:07:73:93:cc:f1:39:df:dc:dc: f7:25:6d:20:36:be:61:ca:ae:7b:81:c1:8f:6c:6b:81:3b:e7: 7d:18:6f:e6:83:35:bf:cd:ef:38:e7:27:34:0c:aa:4e:2a:cb: 8e:46:9d:20:0a:6b:47:5c:c0:b9:96:15:88:58:1d:77:0b:18: 46:37:a9:eb:b5:00:55:12:52:05:7c:cd:40:00:08:b8:d0:43: f4:8e:dc:c7:7d:eb:b3:a6:ba:ea:21:4c:65:f6:f1:41:c9:5c: 76:19:df:48:2c:ae:0f:a1:c6:6a:d4:7a:79:e0:32:ea:9a:39: f7:46:7d:6c:e5:0e:4d:4c:50:be:cc:de:0a:73:09:03:f9:18: 49:f7:2e:60:0d:d4:4f:7e:30:cc:ec:44:db:4a:50:81:04:a3: a4:b7:89:0a:96:61:3d:4a:d3:ce:ae:90:b8:16:27:7f:0d:57: b2:c0:89:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND QUU4QkY5MEQwHhcNMjUxMTE2MTUwNTA3WhcNMjUxMTIzMTUwNTA3WjAYMRYwFAYD VQQDEw02OTE5ZTgyMy1lY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLW+Ep6yb7UBokS4HG1/sJU9DCJQrrB6rMpAsdX923R6SfyV0Km4+mFQJzMf 1ZTz3+HdFcyybA5PrBEUusIgIkMxqk3gpxWKrmDxcE1g6jpnKAYmFZIbeEFTcmbS 9/0xA4xQmBX57i2ozU/zFikkuXgcOf2mafcHTi+pNcuMKFlGQUgNV5E2JUACfXAb JkXkfStvm/bvHJJ+3MiDhfJNMlwMcTyYrYUme42EhSRsBuPnlXWeWVEXF7Z7qilZ lmraMlx6UygpK7YfMChdHTcZmmR8fWlIF+Z7uZu1phK6S0ZCWk8cX/srnMDbO56i McwrLccghc3CgdBWwY2xGWUL8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHuVkd0 6L94ZlT4EYr5x9mUwjd0MB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS4d5uFbcjT3qlrjgkcjNRShTUQh4ArvDnZS1a2PX4es73TBiQazXH UF+chB4bmKVwnnGqwUABVJyAt7wlOWpCmC6cS8s00GySHgUQ00zQVrwHc5PM8Tnf 3Nz3JW0gNr5hyq57gcGPbGuBO+d9GG/mgzW/ze845yc0DKpOKsuORp0gCmtHXMC5 lhWIWB13CxhGN6nrtQBVElIFfM1AAAi40EP0jtzHfeuzprrqIUxl9vFByVx2Gd9I LK4PocZq1Hp54DLqmjn3Rn1s5Q5NTFC+zN4KcwkD+RhJ9y5gDdRPfjDM7ETbSlCB BKOkt4kKlmE9StPOrpC4Fid/DVeywIlT -----END CERTIFICATE-----Generated at Tue Nov 18 12:45:56 2025 by rpki-client