This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft File: JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft (raw, json) Hash identifier: 6NBh5Et4BNpRZQuc/9iAUYBF0XSczTt8gnJw/7NbbhI= Subject key identifier: 9C:25:AD:F5:54:0B:7F:59:C5:FD:DB:31:00:8F:E0:0E:E8:45:4F:E7 Authority key identifier: 25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33 Certificate issuer: /CN=A91949C1/serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft Manifest number: 0119 Signing time: Tue 23 Dec 2025 03:45:58 +0000 Manifest this update: Tue 23 Dec 2025 03:45:57 +0000 Manifest next update: Tue 30 Dec 2025 03:45:57 +0000 Files and hashes: 1: JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl (hash: pMyQrTRjW0ZluxoEoZ30Gi6AKxw21VzsCZzgwCr67/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933 Validity Not Before: Dec 23 03:45:57 2025 GMT Not After : Dec 30 03:45:57 2025 GMT Subject: CN=694a1076-e70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7f:bc:f8:3d:e0:fc:d8:0b:96:a0:f4:81:2e: 78:24:ff:28:37:e3:2c:1c:48:0d:b2:c3:23:fa:5e: ff:d2:ff:89:a4:7b:31:d6:d8:87:a6:95:5c:2d:d3: 19:ee:d8:b5:6e:dc:ae:6e:49:b0:e0:6d:2a:8e:68: 7e:49:a4:c5:11:e2:ca:8a:62:9b:73:17:63:de:9e: ba:62:69:2f:43:2f:19:00:55:a3:b4:f7:d3:28:7c: 3d:c8:57:03:b5:42:d8:46:db:21:90:a6:9f:d9:11: 67:ac:0a:a6:63:bc:bd:99:80:66:28:81:f8:09:36: 42:51:df:ee:4b:fc:49:45:0b:fe:a4:75:2a:ff:fa: e7:5e:26:f5:61:f5:30:2e:80:e7:06:64:bd:01:fd: 94:39:0d:b7:60:fd:fc:8e:02:40:b3:2e:6e:d0:89: c5:3a:15:a2:d5:ec:fa:e1:13:26:24:46:b0:61:a4: a2:e9:13:43:ee:d7:da:ab:06:30:b2:b3:0b:7e:b0: a1:9e:5d:8e:e3:4b:4b:1d:6d:fc:75:61:31:57:13: 12:bb:11:9d:bb:04:00:48:08:73:b4:e8:e6:3f:7e: 26:42:6b:b8:28:a1:45:7b:a6:3f:7a:7e:8c:18:1c: d0:fc:9b:5a:e7:85:d5:ad:c5:92:8c:5f:f2:36:03: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:25:AD:F5:54:0B:7F:59:C5:FD:DB:31:00:8F:E0:0E:E8:45:4F:E7 X509v3 Authority Key Identifier: keyid:25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f9:48:d4:2d:bc:44:35:c9:fd:a1:4c:f7:9e:84:1c:18:88: 08:7b:0a:c5:56:e5:53:b7:70:ab:60:da:ce:5a:01:25:9b:1d: e8:8e:62:64:b0:21:17:af:ca:18:28:c1:c0:6a:96:fe:4c:d6: 4d:c2:11:12:80:7e:8e:7b:d5:bd:d6:9b:6d:a8:f7:0b:9e:77: fa:a9:81:b6:13:a3:75:36:59:13:72:b2:78:52:ec:f0:41:03: 15:af:ef:87:c7:da:9e:dd:ca:0c:df:ab:e5:d6:50:46:9b:eb: 49:90:8a:55:65:3a:51:1a:c4:e1:d6:24:12:9c:a5:23:3f:03: c9:4b:33:b2:fd:a5:a6:0a:11:19:c6:80:5d:ac:6e:c1:65:52: 98:67:8a:eb:73:fe:a1:be:84:a4:f4:bf:56:2a:0b:50:6d:f3: a4:00:a8:de:90:4d:70:0b:d1:4f:84:8b:74:49:20:69:f8:6e: ee:e8:5b:4b:39:7f:6c:c1:8e:e7:6d:ab:da:57:9d:ea:9d:d9: 6f:47:3c:c2:43:99:33:1e:29:45:f4:1b:7e:47:9a:e7:17:c2: b9:a6:5b:8d:e0:5a:ea:ea:49:d4:28:f5:b3:a6:a5:e3:0f:0d: 35:5f:c2:e3:8e:45:a2:53:3f:0d:f5:02:37:47:b4:7a:61:87: 36:86:ec:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKDI1ODE3RjhBMDU5MTJFMkQ2QkQ1OUJFRjFGOTUxMzdF OTNEQzk5MzMwHhcNMjUxMjIzMDM0NTU3WhcNMjUxMjMwMDM0NTU3WjAYMRYwFAYD VQQDDA02OTRhMTA3Ni1lNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8n+8+D3g/NgLlqD0gS54JP8oN+MsHEgNssMj+l7/0v+JpHsx1tiHppVcLdMZ 7ti1btyubkmw4G0qjmh+SaTFEeLKimKbcxdj3p66YmkvQy8ZAFWjtPfTKHw9yFcD tULYRtshkKaf2RFnrAqmY7y9mYBmKIH4CTZCUd/uS/xJRQv+pHUq//rnXib1YfUw LoDnBmS9Af2UOQ23YP38jgJAsy5u0InFOhWi1ez64RMmJEawYaSi6RND7tfaqwYw srMLfrChnl2O40tLHW38dWExVxMSuxGduwQASAhztOjmP34mQmu4KKFFe6Y/en6M GBzQ/Jta54XVrcWSjF/yNgPwiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwlrfVU C39Zxf3bMQCP4A7oRU/nMB8GA1UdIwQYMBaAFCWBf4oFkS4ta9Wb7x+VE36T3Jkz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8xNDMyM0Q3NDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi9KWUZfaWdXUkxpMXIxWnZ2SDVVVGZwUGNt VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZRl9pZ1dSTGkxcjFadnZINVVUZnBQY21UTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8xNDMyM0Q3NDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi9KWUZfaWdXUkxp MXIxWnZ2SDVVVGZwUGNtVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH+UjULbxENcn9oUz3noQcGIgIewrFVuVTt3CrYNrOWgElmx3ojmJk sCEXr8oYKMHAapb+TNZNwhESgH6Oe9W91pttqPcLnnf6qYG2E6N1NlkTcrJ4Uuzw QQMVr++Hx9qe3coM36vl1lBGm+tJkIpVZTpRGsTh1iQSnKUjPwPJSzOy/aWmChEZ xoBdrG7BZVKYZ4rrc/6hvoSk9L9WKgtQbfOkAKjekE1wC9FPhIt0SSBp+G7u6FtL OX9swY7nbavaV53qndlvRzzCQ5kzHilF9Bt+R5rnF8K5pluN4Frq6knUKPWzpqXj Dw01X8LjjkWiUz8N9QI3R7R6YYc2huzu -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:42 2025 by rpki-client