This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft File: jPXBj4McqRLIk_4OjnMjU7YKbtI.mft (raw, json) Hash identifier: 0i9nHLTuEqc8lLugCI78/Lc8fwXqjBAF+kJVzG3VUAY= Subject key identifier: A8:17:88:D7:01:5C:BB:24:3E:70:74:30:5A:E0:12:CE:4A:4A:F7:45 Authority key identifier: 8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2 Certificate issuer: /CN=A91201EE/serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft Manifest number: 07 Signing time: Tue 23 Dec 2025 06:56:16 +0000 Manifest this update: Tue 23 Dec 2025 06:56:16 +0000 Manifest next update: Tue 30 Dec 2025 06:56:16 +0000 Files and hashes: 1: jPXBj4McqRLIk_4OjnMjU7YKbtI.crl (hash: YSuBqsKEWK2ZfZMgoeRfhy0GqqH5Qi38lmZUDCpXelg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91201EE, serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2 Validity Not Before: Dec 23 06:56:16 2025 GMT Not After : Dec 30 06:56:16 2025 GMT Subject: CN=694a3d10-7049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:2c:1e:c1:fc:4d:2b:6d:dc:64:79:ce:eb: 99:e1:a2:0d:cc:93:bd:bc:6d:34:24:e8:47:2d:ae: 27:bd:02:4d:bc:ad:a3:f0:1a:ae:25:e0:02:f1:9d: 7a:86:a2:0a:91:c6:04:51:cf:d6:5b:2f:e7:25:f7: 50:40:36:bc:65:bf:8d:06:65:12:ec:b7:17:4e:85: fa:92:de:ac:61:c7:32:a9:d0:fa:e9:de:4a:d5:4e: e1:fe:a2:b2:2f:38:30:da:33:22:67:4f:77:60:9b: 5b:b6:de:f0:c6:26:1a:dc:46:6b:73:ab:bc:86:67: b8:4c:9e:5c:f6:af:b2:1d:e3:bb:48:ad:3c:8e:10: 01:57:a1:24:cf:02:20:1e:ed:7d:5f:2a:a4:27:b0: 2b:32:3f:b5:cd:27:7d:9a:c0:26:c1:bd:d7:0e:fc: 94:e4:19:72:3c:69:6c:87:7d:22:23:d1:6d:cb:31: dc:05:0a:fc:37:d5:42:40:44:dc:01:8d:3f:1b:3e: 3b:d2:0f:6f:a9:69:3f:b5:e7:13:eb:e4:43:d2:ab: 0a:7a:06:5a:e4:fe:2a:bf:9e:61:6b:9c:4a:86:23: 08:92:91:27:60:3c:5c:48:26:a2:c0:0d:6b:42:6b: a6:03:f9:24:ff:e6:70:5a:0a:7c:44:93:ac:a1:a0: e9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:17:88:D7:01:5C:BB:24:3E:70:74:30:5A:E0:12:CE:4A:4A:F7:45 X509v3 Authority Key Identifier: keyid:8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:8c:cd:76:c7:cb:39:ae:f3:de:38:c7:df:4b:c0:95:6f:57: 22:fb:bd:a1:6a:94:22:90:c0:5e:d6:67:f9:13:2e:9c:b7:4e: 2d:28:0f:f9:45:56:27:e1:f9:77:90:e3:3b:8e:ee:7d:b5:6a: 77:2c:5b:b4:b0:50:ee:55:5c:71:f3:8d:c0:40:68:ac:d4:dd: 97:78:03:6c:d0:12:ac:89:ec:f5:6a:49:c6:cd:09:f9:5f:85: 91:cd:d8:87:7d:a3:1d:59:1e:01:96:78:ee:28:81:e1:4e:c1: 4c:56:06:85:8c:3b:d1:d3:bb:38:a2:3e:28:e9:ab:fe:98:70: 64:fe:43:b3:c0:95:f3:76:6c:14:9b:85:44:fa:f8:1f:43:5a: d8:3c:df:5a:4e:d1:bb:d7:92:ad:48:8d:da:dc:28:03:33:9c: 68:e2:ea:ab:e7:d3:1f:58:8a:06:c9:b6:5f:ae:ee:49:5f:8e: fd:50:68:d7:3a:83:d8:01:5c:82:12:5c:5e:7f:62:79:ec:8c: a9:c0:4f:7d:01:08:d1:3f:c5:2e:d1:96:db:bc:43:55:05:76: ac:c8:2a:0d:71:7a:b0:41:d5:89:22:51:e8:21:1f:e3:2b:f4: 60:ae:28:d9:9f:c0:c9:5e:1a:53:a3:ed:35:e0:d0:70:62:b9: 08:df:f2:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDFFRTExMC8GA1UEBRMoOENGNUMxOEY4MzFDQTkxMkM4OTNGRTBFOEU3MzIzNTNC NjBBNkVEMjAeFw0yNTEyMjMwNjU2MTZaFw0yNTEyMzAwNjU2MTZaMBgxFjAUBgNV BAMMDTY5NGEzZDEwLTcwNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5wiwewfxNK23cZHnO65nhog3Mk728bTQk6Ectrie9Ak28raPwGq4l4ALxnXqG ogqRxgRRz9ZbL+cl91BANrxlv40GZRLstxdOhfqS3qxhxzKp0Prp3krVTuH+orIv ODDaMyJnT3dgm1u23vDGJhrcRmtzq7yGZ7hMnlz2r7Id47tIrTyOEAFXoSTPAiAe 7X1fKqQnsCsyP7XNJ32awCbBvdcO/JTkGXI8aWyHfSIj0W3LMdwFCvw31UJARNwB jT8bPjvSD2+paT+15xPr5EPSqwp6Blrk/iq/nmFrnEqGIwiSkSdgPFxIJqLADWtC a6YD+ST/5nBaCnxEk6yhoOmbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqBeI1wFc uyQ+cHQwWuASzkpK90UwHwYDVR0jBBgwFoAUjPXBj4McqRLIk/4OjnMjU7YKbtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMUVFL0Q2MEM3MDAyRDc0 RjExRjBCNTg3MTRCQzZERDM2NDFEL2pQWEJqNE1jcVJMSWtfNE9qbk1qVTdZS2J0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvalBYQmo0TWNxUkxJa180T2puTWpVN1lLYnRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MUVFL0Q2MEM3MDAyRDc0RjExRjBCNTg3MTRCQzZERDM2NDFEL2pQWEJqNE1jcVJM SWtfNE9qbk1qVTdZS2J0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAKMzXbHyzmu8944x99LwJVvVyL7vaFqlCKQwF7WZ/kTLpy3Ti0oD/lF Vifh+XeQ4zuO7n21ancsW7SwUO5VXHHzjcBAaKzU3Zd4A2zQEqyJ7PVqScbNCflf hZHN2Id9ox1ZHgGWeO4ogeFOwUxWBoWMO9HTuziiPijpq/6YcGT+Q7PAlfN2bBSb hUT6+B9DWtg831pO0bvXkq1IjdrcKAMznGji6qvn0x9YigbJtl+u7klfjv1QaNc6 g9gBXIISXF5/YnnsjKnAT30BCNE/xS7Rltu8Q1UFdqzIKg1xerBB1YkiUeghH+Mr 9GCuKNmfwMleGlOj7TXg0HBiuQjf8hw= -----END CERTIFICATE-----Generated at Wed Dec 24 14:04:58 2025 by rpki-client