This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft File: jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json) Hash identifier: zRxfh6wl4SW4hwB58hbs9hPh1GY270NT6idLKZV0BtA= Subject key identifier: 74:38:72:1D:18:96:36:A2:A8:A2:17:58:C1:39:10:8A:A6:B4:19:36 Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 Certificate issuer: /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Certificate serial: 0B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft Manifest number: 0B74 Signing time: Mon 22 Dec 2025 18:36:30 +0000 Manifest this update: Mon 22 Dec 2025 18:36:30 +0000 Manifest next update: Mon 29 Dec 2025 18:36:30 +0000 Files and hashes: 1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: R/GuwYKgu2LbakiOyOgFmdwsW+8DFJ5Tbbn/50igZQE=) 2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: 05ZIlQVIzyMk+/ne8BYyETi6MhBaRQY1pt1J6YgldLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190A9, serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Validity Not Before: Dec 22 18:36:30 2025 GMT Not After : Dec 29 18:36:30 2025 GMT Subject: CN=69498fae-ec2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:d7:79:cd:8c:ec:ad:58:f8:42:3e:87:bd: aa:e2:e2:52:94:ba:e3:42:3f:82:53:66:2f:02:8c: ab:92:87:8d:72:b7:c3:3f:bf:1c:53:ef:96:81:9f: 4e:9d:7c:8e:cd:8e:06:9f:6d:50:28:82:d4:87:c1: dd:c6:28:13:5c:2f:12:7c:5b:71:ab:96:ed:2a:94: cd:09:b7:25:1a:00:88:76:a3:3f:1c:71:57:b7:4e: 14:63:d3:62:16:e4:1a:86:79:09:12:91:0e:0a:8a: e5:2b:7b:f9:72:3c:9a:80:b0:a1:51:17:b1:c4:66: 91:ac:01:ec:02:8a:8f:cd:35:eb:c7:13:4d:65:7b: d6:ca:ee:ca:db:47:3e:49:8a:3f:cb:40:38:d8:ea: b7:92:05:3c:3a:16:de:15:a3:fc:db:b1:be:33:3d: 85:94:b2:d6:a1:7b:a1:1f:2e:51:f8:dd:e1:96:95: 00:ee:5f:31:af:e3:09:5a:e5:ba:7d:30:5a:25:d7: b9:57:75:5a:4c:55:20:12:6d:13:62:63:1d:e5:a1: 64:f7:bd:e2:2a:f4:c1:9b:08:a7:6d:e4:e1:4b:10: 52:d0:61:20:f4:a6:91:d8:04:84:ea:35:c5:70:10: ad:c9:4c:ef:48:86:ec:09:e6:53:8c:33:13:a0:76: 3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:38:72:1D:18:96:36:A2:A8:A2:17:58:C1:39:10:8A:A6:B4:19:36 X509v3 Authority Key Identifier: keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:7b:a0:17:d9:f6:c1:fc:3d:a3:c4:d7:6e:b2:e8:d9:04:d1: 8e:d6:54:68:6c:8f:65:4a:fc:83:af:0c:7a:04:b5:bf:77:50: c2:21:79:7e:5b:5b:37:b0:48:72:f7:c8:15:da:48:48:7b:29: 4d:0b:f6:77:2f:1f:19:8d:94:86:5e:74:d9:42:ee:4b:68:a9: 6e:2c:6f:49:e5:b8:b1:2a:9b:38:60:33:e7:51:fd:04:d0:76: 32:84:d2:db:cc:a8:6e:32:55:20:9e:0c:0d:d5:31:4a:97:a6: b8:23:63:81:e6:e4:3c:0f:59:ac:0a:14:b2:ed:ae:18:82:c8: 95:4d:33:43:3c:bb:0a:ea:9e:9c:11:75:24:f2:56:24:43:d2: 17:1a:e5:56:55:82:00:ae:5e:96:3c:8c:34:8d:a3:f8:3c:61: 63:e0:bb:b8:14:ea:9d:d5:07:ca:35:1f:b7:ac:e9:27:15:67: 08:19:cf:76:a5:45:e2:7c:bb:fd:a4:67:af:a4:3d:bc:6a:6f: e3:32:71:b7:c8:a1:3b:0a:0d:d8:67:c4:4c:c6:8b:fd:8d:fc: bc:53:2d:82:e1:4c:f6:20:9c:97:a4:eb:50:b9:9c:1a:ba:25: 25:a2:f3:c6:37:d8:ab:b7:74:69:71:9d:9e:90:c7:60:42:af: 03:4c:21:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQTkxMTAvBgNVBAUTKDhENDczQkNDNTdDM0YyQUU0RTg3NDhFREVGRDNEMjgx N0MyMDY1NjYwHhcNMjUxMjIyMTgzNjMwWhcNMjUxMjI5MTgzNjMwWjAYMRYwFAYD VQQDDA02OTQ5OGZhZS1lYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5HXec2M7K1Y+EI+h72q4uJSlLrjQj+CU2YvAoyrkoeNcrfDP78cU++WgZ9O nXyOzY4Gn21QKILUh8HdxigTXC8SfFtxq5btKpTNCbclGgCIdqM/HHFXt04UY9Ni FuQahnkJEpEOCorlK3v5cjyagLChURexxGaRrAHsAoqPzTXrxxNNZXvWyu7K20c+ SYo/y0A42Oq3kgU8OhbeFaP827G+Mz2FlLLWoXuhHy5R+N3hlpUA7l8xr+MJWuW6 fTBaJde5V3VaTFUgEm0TYmMd5aFk973iKvTBmwinbeThSxBS0GEg9KaR2ASE6jXF cBCtyUzvSIbsCeZTjDMToHY9mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQ4ch0Y ljaiqKIXWME5EIqmtBk2MB8GA1UdIwQYMBaAFI1HO8xXw/KuTodI7e/T0oF8IGVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBBOS9BOTc0MDQ5QTQx QjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhxNU9oMGp0NzlQU2dYd2da V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVYzd6RmZEOHE1T2gwanQ3OVBTZ1h3Z1pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBBOS9BOTc0MDQ5QTQxQjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhx NU9oMGp0NzlQU2dYd2daV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVe6AX2fbB/D2jxNdusujZBNGO1lRobI9lSvyDrwx6BLW/d1DCIXl+ W1s3sEhy98gV2khIeylNC/Z3Lx8ZjZSGXnTZQu5LaKluLG9J5bixKps4YDPnUf0E 0HYyhNLbzKhuMlUgngwN1TFKl6a4I2OB5uQ8D1msChSy7a4YgsiVTTNDPLsK6p6c EXUk8lYkQ9IXGuVWVYIArl6WPIw0jaP4PGFj4Lu4FOqd1QfKNR+3rOknFWcIGc92 pUXifLv9pGevpD28am/jMnG3yKE7Cg3YZ8RMxov9jfy8Uy2C4Uz2IJyXpOtQuZwa uiUlovPGN9irt3RpcZ2ekMdgQq8DTCFd -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:36 2025 by rpki-client