This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: thLZQRLlUPAYRUq8JSusAWBdEoEvqOdHzQPznmM89zM= Subject key identifier: 89:45:BF:F9:89:AA:4B:DF:7C:B8:A8:5C:68:E7:90:01:84:DB:C3:F5 Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 055F Signing time: Mon 22 Dec 2025 22:31:06 +0000 Manifest this update: Mon 22 Dec 2025 22:31:05 +0000 Manifest next update: Mon 29 Dec 2025 22:31:05 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: Y1LAW7zjFOIjX2u5hOptrL3KeYwKw7Do3NpHoLBohJs=) 2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: DwXb+joRx9u0BG/TCkqlIKWQRw4604GMuFkdr4cvB14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: Dec 22 22:31:05 2025 GMT Not After : Dec 29 22:31:05 2025 GMT Subject: CN=6949c6aa-3587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:0f:aa:71:eb:b3:cb:9f:81:2d:4e:43:b6: d4:be:e9:a4:7a:52:51:9e:52:a2:ab:42:41:70:87: 76:91:30:64:66:c8:62:80:8c:7e:1d:ab:53:f9:b8: 7a:ec:1a:71:16:0f:5c:b2:4b:c1:e0:af:c0:0e:87: 83:4f:e1:67:25:2a:f2:e7:72:27:77:e1:9f:53:4c: e3:17:3e:b7:eb:a0:77:42:a4:a5:c0:44:06:81:cf: d1:cf:cb:e5:36:5f:8d:f6:85:25:a8:4d:8c:34:a3: 5a:96:29:db:f7:35:69:b4:c3:05:aa:84:cf:39:ed: 8a:76:3f:dc:99:ac:45:64:76:67:ac:fd:49:a3:2b: c0:ee:4a:d8:5e:78:06:23:e8:c3:a9:98:a5:2f:bb: 5f:e2:ad:7c:ae:14:44:e7:9c:70:13:01:d5:eb:08: 21:76:fe:56:c7:95:53:3b:9b:d3:17:0f:81:22:c6: a5:6e:eb:a9:6e:30:9b:a3:25:51:66:68:33:5f:d9: 26:a1:ff:54:68:fe:d1:14:45:11:a9:c7:6c:27:5c: e9:b6:24:18:76:f8:0a:14:b9:0e:2a:91:31:f8:0b: 77:06:71:05:9d:d0:ee:d7:cd:17:f2:3b:1a:54:ed: c7:f7:6f:41:62:8c:f5:11:5e:f9:96:4e:4b:99:6d: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:45:BF:F9:89:AA:4B:DF:7C:B8:A8:5C:68:E7:90:01:84:DB:C3:F5 X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1a:b6:14:de:7c:3d:74:05:57:82:31:7e:e9:b2:3f:77:d1: 48:c3:0a:01:49:03:a0:5f:49:96:6d:a6:c6:32:84:77:c8:34: b1:5a:cd:05:7f:7b:e4:35:19:5a:98:6d:fd:f5:7a:29:84:ac: f4:06:a1:5c:63:3a:08:57:5c:cf:c5:06:ef:41:3b:8c:46:e0: b9:0e:42:26:dc:4a:71:e3:a3:ce:ba:ea:09:a4:0f:f3:a5:e6: 63:ee:14:f2:73:71:76:f2:99:6f:80:94:7b:05:02:b4:36:e0: 6a:d3:9d:f8:54:06:db:79:de:c2:b0:87:cc:4a:15:f5:dd:a5: ea:8e:f1:3e:67:13:21:7c:98:4c:43:57:31:d0:7f:ff:35:ce: 7d:ef:ec:5e:3f:15:19:e8:c9:af:23:33:45:ff:1c:53:5a:d2: 2b:9e:48:15:5f:e6:21:fa:74:43:f6:f8:f9:36:68:2e:59:c2: d5:bf:90:51:10:a2:eb:bb:d8:c7:71:05:b2:d8:bc:32:ec:64: 3c:4b:ca:ac:5d:88:c0:bd:a5:d9:6f:e9:1c:17:05:48:f1:48: 78:00:a4:b4:bb:d1:91:40:15:4b:3b:47:d1:82:67:7e:50:16: 59:4e:55:84:44:b7:49:0f:b3:44:21:3d:d0:46:ce:81:24:64: 60:e4:a6:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjUxMjIyMjIzMTA1WhcNMjUxMjI5MjIzMTA1WjAYMRYwFAYD VQQDDA02OTQ5YzZhYS0zNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1EPqnHrs8ufgS1OQ7bUvumkelJRnlKiq0JBcId2kTBkZshigIx+HatT+bh6 7BpxFg9cskvB4K/ADoeDT+FnJSry53Ind+GfU0zjFz6366B3QqSlwEQGgc/Rz8vl Nl+N9oUlqE2MNKNalinb9zVptMMFqoTPOe2Kdj/cmaxFZHZnrP1JoyvA7krYXngG I+jDqZilL7tf4q18rhRE55xwEwHV6wghdv5Wx5VTO5vTFw+BIsalbuupbjCboyVR ZmgzX9kmof9UaP7RFEURqcdsJ1zptiQYdvgKFLkOKpEx+At3BnEFndDu180X8jsa VO3H929BYoz1EV75lk5LmW3A2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlFv/mJ qkvffLioXGjnkAGE28P1MB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGGrYU3nw9dAVXgjF+6bI/d9FIwwoBSQOgX0mWbabGMoR3yDSxWs0F f3vkNRlamG399XophKz0BqFcYzoIV1zPxQbvQTuMRuC5DkIm3Epx46POuuoJpA/z peZj7hTyc3F28plvgJR7BQK0NuBq0534VAbbed7CsIfMShX13aXqjvE+ZxMhfJhM Q1cx0H//Nc597+xePxUZ6MmvIzNF/xxTWtIrnkgVX+Yh+nRD9vj5NmguWcLVv5BR EKLru9jHcQWy2Lwy7GQ8S8qsXYjAvaXZb+kcFwVI8Uh4AKS0u9GRQBVLO0fRgmd+ UBZZTlWERLdJD7NEIT3QRs6BJGRg5KZA -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:46 2025 by rpki-client