This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: Gd3JcHNnhyOEcCtiKX6JHTvfX1IGfBhfH7DMyBOdtkI= Subject key identifier: C6:A9:22:03:39:F8:D3:AC:EF:D2:F8:C3:9A:91:A3:76:F1:8B:6F:A4 Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 0168 Signing time: Tue 23 Dec 2025 02:58:57 +0000 Manifest this update: Tue 23 Dec 2025 02:58:57 +0000 Manifest next update: Tue 30 Dec 2025 02:58:57 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: ZaxQdwOu9/U1JWFbe/T87xZl1zqeZDmSira5RvXLuAQ=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Dec 23 02:58:57 2025 GMT Not After : Dec 30 02:58:57 2025 GMT Subject: CN=694a0571-a60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:dd:e8:c9:43:03:39:c0:24:eb:85:26:c2: 0e:9d:fa:6a:7d:ad:16:69:1f:41:0e:ea:c8:d9:e5: 71:d4:4f:25:41:ca:e9:ad:9d:74:5c:82:22:67:43: b1:82:87:02:61:62:f0:d7:0d:f4:be:c3:a0:44:e5: a9:55:42:fb:02:90:48:39:e6:4d:9f:a1:91:66:07: e5:02:6a:20:53:76:10:e5:52:0e:12:90:8a:06:0b: e4:18:fa:0d:8b:06:97:4f:44:84:c8:86:6e:f5:5a: ba:50:c9:8d:2e:2e:9a:21:16:1e:0c:13:6b:fc:e1: d1:b9:16:11:47:46:86:01:8f:9c:ff:6d:6d:56:d2: 7c:15:99:dd:c4:7e:3f:80:d3:9a:90:02:1c:b7:c2: 6b:26:b4:bf:8c:33:7d:ff:56:90:dd:b9:8b:23:cd: e4:f7:35:2f:70:1f:88:e6:12:e8:04:87:90:6a:49: 18:d5:51:4a:a6:99:19:c6:26:a4:7c:92:05:05:e6: 92:58:28:e5:8c:89:64:d2:42:c9:22:17:9b:5c:6c: 54:55:5f:14:09:0f:d5:ff:7d:33:6c:e4:cf:48:33: 4a:56:8d:cd:da:fb:7a:4c:e5:98:9f:30:7a:a7:ab: b0:24:0b:ef:24:46:e4:7f:ee:98:8d:75:f6:6e:fb: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A9:22:03:39:F8:D3:AC:EF:D2:F8:C3:9A:91:A3:76:F1:8B:6F:A4 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a4:00:5b:9e:4d:c1:f6:fb:67:e2:c8:12:7b:86:5b:2e:bd: 96:10:09:c1:dc:e9:9d:31:a2:fe:54:5c:44:a9:67:64:d3:9c: 38:24:80:e8:5a:07:f4:52:08:c4:90:68:5a:0b:a7:55:35:b6: bd:15:ca:56:17:66:49:bd:47:f3:77:10:e1:b6:55:7f:ac:0d: d2:41:df:db:f2:b4:13:cd:a2:33:be:82:a5:6d:2d:31:85:39: 2d:55:9d:34:62:91:84:fd:22:02:c3:ab:2a:78:45:12:6f:44: 1c:f6:b3:c8:81:5a:d3:3c:51:33:a2:9c:3f:40:ec:ac:24:9f: d3:7b:d3:77:7e:0b:25:c1:b8:84:ea:1d:1c:01:b5:d0:5e:4e: 0f:89:2b:0e:39:2f:d8:36:4f:d3:90:b8:83:ec:b9:67:cb:81: 6e:c6:fd:77:b7:9f:d7:92:3e:d5:52:d3:5d:73:2b:b6:db:02: a3:9d:65:ac:30:2a:0c:e5:d8:6d:c0:8f:5b:fd:f0:b6:fe:4d: 69:cd:f7:63:0a:16:28:46:3b:b8:2d:89:0f:00:f4:5d:9d:87: 04:d0:71:60:8d:9a:a9:6b:7d:39:db:10:4e:f6:56:d3:d2:9f: ba:94:a9:0a:26:fc:63:f6:b3:b4:83:e5:5f:d1:b2:c1:ba:10: 64:5c:d1:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjUxMjIzMDI1ODU3WhcNMjUxMjMwMDI1ODU3WjAYMRYwFAYD VQQDDA02OTRhMDU3MS1hNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiDd6MlDAznAJOuFJsIOnfpqfa0WaR9BDurI2eVx1E8lQcrprZ10XIIiZ0Ox gocCYWLw1w30vsOgROWpVUL7ApBIOeZNn6GRZgflAmogU3YQ5VIOEpCKBgvkGPoN iwaXT0SEyIZu9Vq6UMmNLi6aIRYeDBNr/OHRuRYRR0aGAY+c/21tVtJ8FZndxH4/ gNOakAIct8JrJrS/jDN9/1aQ3bmLI83k9zUvcB+I5hLoBIeQakkY1VFKppkZxiak fJIFBeaSWCjljIlk0kLJIhebXGxUVV8UCQ/V/30zbOTPSDNKVo3N2vt6TOWYnzB6 p6uwJAvvJEbkf+6YjXX2bvtATwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMapIgM5 +NOs79L4w5qRo3bxi2+kMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9pABbnk3B9vtn4sgSe4ZbLr2WEAnB3OmdMaL+VFxEqWdk05w4JIDo Wgf0UgjEkGhaC6dVNba9FcpWF2ZJvUfzdxDhtlV/rA3SQd/b8rQTzaIzvoKlbS0x hTktVZ00YpGE/SICw6sqeEUSb0Qc9rPIgVrTPFEzopw/QOysJJ/Te9N3fgslwbiE 6h0cAbXQXk4PiSsOOS/YNk/TkLiD7Llny4Fuxv13t5/Xkj7VUtNdcyu22wKjnWWs MCoM5dhtwI9b/fC2/k1pzfdjChYoRju4LYkPAPRdnYcE0HFgjZqpa3052xBO9lbT 0p+6lKkKJvxj9rO0g+Vf0bLBuhBkXNEx -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:02 2025 by rpki-client