This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json) Hash identifier: s+Kz20tH4EVRJcr6cJphL+9mrmY7Kct6x9DK97qUuKo= Subject key identifier: 48:DB:1F:27:02:9E:B4:30:0E:38:FB:56:AE:CA:AC:9A:3A:D1:50:37 Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft Manifest number: 01F5 Signing time: Sun 21 Dec 2025 01:49:34 +0000 Manifest this update: Sun 21 Dec 2025 01:49:33 +0000 Manifest next update: Sun 28 Dec 2025 01:49:33 +0000 Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: nZ4ErcdcZkzmGcx+/VsPnirKDNt9e8MKSog1e1VhUSc=) 2: 45399802215111F0B94CA13FC4F9AE02.roa (hash: 4P/ZavUH4NM6wMd2wGqcFK1zMWVNSTlldDMPOXOpXSo=) 3: FD678F40214E11F095B05918C4F9AE02.roa (hash: SE2tQtfXNh6RaSGSNFmLS6aWkLKk1NZamBIU1kOWDMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Validity Not Before: Dec 21 01:49:33 2025 GMT Not After : Dec 28 01:49:33 2025 GMT Subject: CN=6947522e-9206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:7b:4e:e2:ce:e9:aa:e1:7c:ee:c0:02:d5: bf:77:29:6e:63:10:c7:53:74:1d:b5:05:80:01:5f: 87:ee:91:7b:f7:47:f5:0f:48:c5:e3:7c:79:82:36: 29:d2:3a:4c:3e:92:e2:8c:ea:54:40:04:71:38:a9: c6:04:d4:60:1c:d2:c9:70:22:33:6e:bb:3e:71:b8: e5:93:f5:8b:88:02:48:bc:f8:7b:4c:75:cd:c0:3f: 60:b0:5e:49:2e:70:1c:8d:b0:67:47:69:a6:4b:e6: b8:a2:1b:6c:9c:fe:7a:cd:18:28:fb:1a:d1:79:38: a0:c3:f0:de:db:bc:b6:24:aa:81:43:11:0f:d9:ba: 6e:e8:11:43:7c:6e:af:89:f8:ff:a0:1a:5d:18:10: 7f:97:f1:93:d1:c9:df:cd:27:ca:ea:21:f2:ad:ce: 6f:b9:12:89:64:31:28:c7:bf:cd:37:fe:f4:72:17: c1:58:d8:28:ec:16:4f:4f:39:00:a2:00:a1:22:e8: 3d:70:04:e2:80:ab:94:0d:73:ad:38:da:27:d6:40: 86:7c:8b:3e:9e:fe:45:91:2d:5f:83:1f:de:bc:86: 55:f4:27:e9:89:83:03:5a:0f:a1:2a:2e:bd:9d:38: b0:5b:26:bc:30:6e:fc:e3:3d:57:7a:49:73:ea:e9: 00:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DB:1F:27:02:9E:B4:30:0E:38:FB:56:AE:CA:AC:9A:3A:D1:50:37 X509v3 Authority Key Identifier: keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:1c:76:4d:82:b8:24:75:9a:7b:61:89:0f:0e:cc:de:42:69: 9f:ca:6e:29:c2:59:30:98:94:6c:50:45:3c:6a:44:b3:a6:ee: 90:08:bf:55:08:2f:69:d7:20:84:4d:e2:8f:49:48:aa:a7:42: 19:4b:c1:30:2f:36:c7:25:e3:06:7c:b8:0d:58:33:27:4c:1e: 8c:80:9f:0d:7c:c0:db:7f:4a:02:ee:dd:b0:57:78:fb:97:40: cc:9f:71:ff:58:b4:fe:61:20:5a:b0:48:77:c4:b8:b3:58:fa: e8:dd:3b:ac:a5:a3:46:17:13:47:93:a0:04:3d:c5:bf:b3:06: 70:88:b6:9a:82:61:2c:ed:e1:95:e0:2a:8c:a8:9a:96:ca:44: 29:81:84:b6:6b:14:76:ce:64:8d:66:d4:98:dc:87:5f:83:91: f5:f4:64:f4:17:18:a6:e7:10:ff:15:0e:bf:9e:d3:eb:c7:d5: 2f:19:9c:b8:84:75:35:64:0c:f2:78:ec:18:d2:6f:30:99:0f: c4:69:87:c6:2e:b6:85:3f:77:68:bc:c5:ae:01:af:5f:36:72: 01:48:97:ff:25:4e:ba:86:ee:19:34:34:3f:b7:a3:ac:85:6d: 1f:5a:5b:91:db:51:31:c1:c3:b0:76:53:d9:f9:dc:70:29:08: 72:8a:3f:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5 MERGMzI0OEEwHhcNMjUxMjIxMDE0OTMzWhcNMjUxMjI4MDE0OTMzWjAYMRYwFAYD VQQDDA02OTQ3NTIyZS05MjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRR7TuLO6arhfO7AAtW/dyluYxDHU3QdtQWAAV+H7pF790f1D0jF43x5gjYp 0jpMPpLijOpUQARxOKnGBNRgHNLJcCIzbrs+cbjlk/WLiAJIvPh7THXNwD9gsF5J LnAcjbBnR2mmS+a4ohtsnP56zRgo+xrReTigw/De27y2JKqBQxEP2bpu6BFDfG6v ifj/oBpdGBB/l/GT0cnfzSfK6iHyrc5vuRKJZDEox7/NN/70chfBWNgo7BZPTzkA ogChIug9cATigKuUDXOtONon1kCGfIs+nv5FkS1fgx/evIZV9CfpiYMDWg+hKi69 nTiwWya8MG784z1Xeklz6ukAXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjbHycC nrQwDjj7Vq7KrJo60VA3MB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJFMy9DNkI1MDEzQ0VBRTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpV UWtJdXItMmNZdUtRM3pKSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHHHZNgrgkdZp7YYkPDszeQmmfym4pwlkwmJRsUEU8akSzpu6QCL9V CC9p1yCETeKPSUiqp0IZS8EwLzbHJeMGfLgNWDMnTB6MgJ8NfMDbf0oC7t2wV3j7 l0DMn3H/WLT+YSBasEh3xLizWPro3TuspaNGFxNHk6AEPcW/swZwiLaagmEs7eGV 4CqMqJqWykQpgYS2axR2zmSNZtSY3Idfg5H19GT0Fxim5xD/FQ6/ntPrx9UvGZy4 hHU1ZAzyeOwY0m8wmQ/EaYfGLraFP3dovMWuAa9fNnIBSJf/JU66hu4ZNDQ/t6Os hW0fWluR21ExwcOwdlPZ+dxwKQhyij9g -----END CERTIFICATE-----Generated at Mon Dec 22 04:26:42 2025 by rpki-client