This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft File: jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json) Hash identifier: IPK3pBoawavKdAjzMSRFLqlV1kD+Hw2UEMgV3jxkGH8= Subject key identifier: 73:52:39:2B:04:43:16:7F:BB:5A:06:42:80:F7:87:26:D8:69:FD:FE Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A Certificate issuer: /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Certificate serial: 0AC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft Manifest number: 0AB4 Signing time: Sat 20 Dec 2025 19:00:06 +0000 Manifest this update: Sat 20 Dec 2025 19:00:05 +0000 Manifest next update: Sat 27 Dec 2025 19:00:05 +0000 Files and hashes: 1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: kTMhoulSXaF0hmYsNvkU5rAN2FkORtvuk5RH/fx+KIg=) 2: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: CL7yrdAISxhJB7yG8/BlyE8quqQeawuuzae4gw5zbws=) 3: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: hMv9fBk1Ra6uR7Y0gqdPJ+C+iXxo/tfwAVFp8JPwJHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2752 (0xac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Validity Not Before: Dec 20 19:00:05 2025 GMT Not After : Dec 27 19:00:05 2025 GMT Subject: CN=6946f235-11bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:97:aa:a4:98:10:9c:89:4c:21:69:0d:df: 87:d9:0f:51:12:f8:e9:ca:ed:a5:29:be:6e:d3:b6: 00:79:5b:1b:b2:2b:cf:07:54:78:0c:7b:c2:3e:7b: fb:44:cb:53:fa:46:50:83:74:ac:f9:f8:11:6c:a6: 35:19:d2:7d:f8:c2:0b:c4:9e:52:32:aa:02:56:e7: fd:73:8f:d6:ff:ce:14:a3:bc:1d:0b:c7:af:70:5a: 52:37:e4:fb:85:6b:c3:0a:6a:be:c3:4a:41:bf:aa: 04:47:63:0c:1a:72:cd:d4:d5:ab:85:c3:ed:e0:5c: 25:11:2f:f5:2a:d2:81:2b:a2:c3:d4:19:c5:5c:5a: c1:07:0e:48:e8:48:be:35:b0:0f:6b:7e:ef:e3:f8: bf:90:ac:50:b0:ca:05:4c:09:6b:b4:fc:c8:68:4f: d6:b2:fe:33:9f:59:cb:13:67:36:4d:6d:1d:9a:47: 60:dc:7c:ae:f6:b6:08:8d:2a:43:a8:ff:aa:27:9c: ae:5d:8d:86:15:16:6a:b5:b6:73:36:2d:a6:c5:53: 61:06:dd:d3:87:cf:f2:82:db:fb:02:0f:67:00:0d: 03:29:f7:5b:3c:1b:d9:41:3a:21:8c:3a:e6:a8:50: 1b:77:be:50:1b:67:c5:9c:18:6f:90:7b:4f:55:83: 15:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:52:39:2B:04:43:16:7F:BB:5A:06:42:80:F7:87:26:D8:69:FD:FE X509v3 Authority Key Identifier: keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a3:4f:fc:1b:13:83:16:3a:e8:a8:a9:40:e8:b8:a5:dd:f9: a2:31:2d:1b:01:c8:a6:3a:3e:0e:8e:69:2e:d1:bb:5f:de:15: 3b:82:81:a4:77:bf:b3:91:21:ed:ff:6f:3b:6e:19:6d:78:b8: 59:9b:1c:01:a4:da:6c:d1:0a:5a:b6:fb:9f:9f:b2:b0:55:78: aa:9d:89:aa:24:6a:9e:b6:9c:13:aa:df:ca:f3:b9:d0:ea:08: 7e:60:f9:05:86:c5:34:ea:22:92:fd:2e:80:4c:dc:06:79:7f: c8:70:94:ad:49:c4:3d:cf:d1:4d:c1:c4:17:6c:7e:d6:db:28: 63:02:71:47:5c:8e:c1:51:8f:f1:cb:8f:59:ac:b4:bc:67:1f: c4:27:a9:00:d2:82:e0:09:7d:87:57:1a:8e:7e:de:f3:f5:63: 1b:b8:4f:50:e1:7c:3e:3f:11:32:b9:22:27:52:19:96:6e:32: ae:34:54:22:a3:50:bf:d9:0d:1f:b1:f0:38:c7:78:ec:1a:52: 0d:fc:dc:5f:ee:a2:79:af:29:c8:5c:4c:85:6e:54:e1:89:2b: 55:86:64:e5:7d:95:2e:dd:f4:23:83:40:ce:90:31:d9:f3:66: c6:5e:9d:38:77:a1:56:dd:3c:e7:0d:d3:67:87:6f:1c:be:49: 6d:68:8a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJBRTMxMTAvBgNVBAUTKDhGMkJFRkQ1NTgxMzA4MjRFMDFFQkExNUFGODlFRDVE REM5RUI2MUEwHhcNMjUxMjIwMTkwMDA1WhcNMjUxMjI3MTkwMDA1WjAYMRYwFAYD VQQDDA02OTQ2ZjIzNS0xMWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmt+XqqSYEJyJTCFpDd+H2Q9REvjpyu2lKb5u07YAeVsbsivPB1R4DHvCPnv7 RMtT+kZQg3Ss+fgRbKY1GdJ9+MILxJ5SMqoCVuf9c4/W/84Uo7wdC8evcFpSN+T7 hWvDCmq+w0pBv6oER2MMGnLN1NWrhcPt4FwlES/1KtKBK6LD1BnFXFrBBw5I6Ei+ NbAPa37v4/i/kKxQsMoFTAlrtPzIaE/Wsv4zn1nLE2c2TW0dmkdg3Hyu9rYIjSpD qP+qJ5yuXY2GFRZqtbZzNi2mxVNhBt3Th8/ygtv7Ag9nAA0DKfdbPBvZQTohjDrm qFAbd75QG2fFnBhvkHtPVYMVEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNSOSsE QxZ/u1oGQoD3hybYaf3+MB8GA1UdIwQYMBaAFI8r79VYEwgk4B66Fa+J7V3cnrYa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkFFMy8yQUVCMDczRTY3 NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVENDVGdIcm9WcjRudFhkeWV0 aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dnYxVmdUQ0NUZ0hyb1ZyNG50WGR5ZXRoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkFFMy8yQUVCMDczRTY3NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVEND VGdIcm9WcjRudFhkeWV0aG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2o0/8GxODFjroqKlA6Lil3fmiMS0bAcimOj4Ojmku0btf3hU7goGk d7+zkSHt/287bhlteLhZmxwBpNps0Qpatvufn7KwVXiqnYmqJGqetpwTqt/K87nQ 6gh+YPkFhsU06iKS/S6ATNwGeX/IcJStScQ9z9FNwcQXbH7W2yhjAnFHXI7BUY/x y49ZrLS8Zx/EJ6kA0oLgCX2HVxqOft7z9WMbuE9Q4Xw+PxEyuSInUhmWbjKuNFQi o1C/2Q0fsfA4x3jsGlIN/Nxf7qJ5rynIXEyFblThiStVhmTlfZUu3fQjg0DOkDHZ 82bGXp04d6FW3TznDdNnh28cvkltaIoT -----END CERTIFICATE-----Generated at Mon Dec 22 12:50:12 2025 by rpki-client