This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: P9NBiQIAVlhAq2FcOBWcy09WQ6MeHSrMZhKhwa8clUI= Subject key identifier: C5:A7:C7:82:03:90:C9:22:6F:34:06:FA:AE:7D:18:3F:B3:65:AC:58 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 0388 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 0362 Signing time: Mon 08 Dec 2025 23:21:35 +0000 Manifest this update: Mon 08 Dec 2025 23:21:35 +0000 Manifest next update: Mon 15 Dec 2025 23:21:35 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: 2S+NanCU0xIusgYnTxt/zBZvpxtf7PJdiViZFxvgyiI=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) 5: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 6: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 23:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Dec 8 23:21:35 2025 GMT Not After : Dec 15 23:21:35 2025 GMT Subject: CN=69375d7f-7b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:3c:1f:70:d3:6b:78:28:6b:72:ea:2a:4f: 27:ab:a0:5b:62:02:d2:bb:24:9e:8a:78:f6:09:44: 54:0a:9b:00:4a:e0:4e:26:41:ba:33:55:6c:5a:18: aa:06:6b:27:d1:d1:55:34:3e:04:aa:d3:b9:a5:b1: 5a:f3:8d:09:d0:d7:7e:3d:86:6b:46:70:c4:e4:82: df:cc:48:ea:91:78:18:b3:bb:78:03:82:ab:16:a5: 3c:e2:20:9b:f6:7a:82:13:8e:92:80:ad:3b:8e:3f: ca:39:0f:07:e8:56:1f:ff:69:61:c9:47:34:6f:3e: ad:b5:a6:bd:96:b8:47:0e:5e:66:2b:dd:ad:46:a9: 0d:ef:81:d0:2e:80:49:04:5d:14:d0:a9:46:27:45: fa:50:79:bd:f3:c9:ff:57:3f:3c:14:2d:16:fd:e0: 08:20:7a:db:9b:aa:0f:6f:c5:31:6b:42:04:d2:bd: a3:1d:67:27:30:75:16:c1:49:74:e0:6e:72:25:99: 32:14:82:8b:ad:a2:7d:4d:ce:12:af:bd:54:d1:f6: 50:7a:f8:78:9d:41:54:22:38:a2:83:05:a1:f0:86: 1f:15:07:28:3c:84:bb:bc:ac:8c:cb:bc:8c:4b:db: 8d:34:11:c0:91:ad:24:b0:95:80:fc:c4:84:be:55: b1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A7:C7:82:03:90:C9:22:6F:34:06:FA:AE:7D:18:3F:B3:65:AC:58 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:af:39:52:6a:29:6d:a5:87:ea:ba:77:98:d8:db:58:31:b6: bf:d1:c4:a4:89:a9:2f:60:1c:f3:91:73:10:91:b8:07:b5:d0: 14:e3:77:8f:1e:6f:2b:02:69:6d:d2:e3:eb:12:8f:7e:49:27: 6f:2a:0a:22:b4:a6:bd:c2:cc:f6:6d:43:6e:a4:f6:33:70:16: a3:71:c2:15:54:16:6d:dd:c6:40:29:9b:6b:88:96:6a:19:f2: b0:96:34:f2:84:1b:d2:37:c6:fd:cb:8c:2a:65:be:af:83:38: de:cb:1f:7c:c1:cd:4b:a1:99:39:af:a0:1a:47:e3:30:5d:c1: 8b:93:b8:2b:ef:5b:33:41:e3:7b:1c:b8:f4:55:3a:d3:69:fb: db:4d:48:9a:07:05:c0:da:14:b7:c2:e7:83:d2:b4:86:d1:ae: 5c:58:0c:09:03:8e:27:24:fc:e4:2f:b8:61:18:b9:f6:95:3d: f5:c7:10:b6:aa:ca:40:17:be:1a:49:40:1a:49:30:7f:c5:5b: 9e:ee:6b:6e:1a:2e:2b:ca:54:6a:93:75:2d:4e:97:ab:57:44: 8f:54:bd:76:87:01:d2:f3:a0:9a:24:0f:6e:32:e9:c7:d3:28: c0:4d:d9:8c:4b:f3:9e:86:a7:fe:c4:96:58:b6:b0:1d:38:02: 41:8c:c9:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjUxMjA4MjMyMTM1WhcNMjUxMjE1MjMyMTM1WjAYMRYwFAYD VQQDEw02OTM3NWQ3Zi03Yjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAon08H3DTa3goa3LqKk8nq6BbYgLSuySeinj2CURUCpsASuBOJkG6M1VsWhiq Bmsn0dFVND4EqtO5pbFa840J0Nd+PYZrRnDE5ILfzEjqkXgYs7t4A4KrFqU84iCb 9nqCE46SgK07jj/KOQ8H6FYf/2lhyUc0bz6ttaa9lrhHDl5mK92tRqkN74HQLoBJ BF0U0KlGJ0X6UHm988n/Vz88FC0W/eAIIHrbm6oPb8Uxa0IE0r2jHWcnMHUWwUl0 4G5yJZkyFIKLraJ9Tc4Sr71U0fZQevh4nUFUIjiigwWh8IYfFQcoPIS7vKyMy7yM S9uNNBHAka0ksJWA/MSEvlWx3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWnx4ID kMkibzQG+q59GD+zZaxYMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALrzlSailtpYfquneY2NtYMba/0cSkiakvYBzzkXMQkbgHtdAU43eP Hm8rAmlt0uPrEo9+SSdvKgoitKa9wsz2bUNupPYzcBajccIVVBZt3cZAKZtriJZq GfKwljTyhBvSN8b9y4wqZb6vgzjeyx98wc1LoZk5r6AaR+MwXcGLk7gr71szQeN7 HLj0VTrTafvbTUiaBwXA2hS3wueD0rSG0a5cWAwJA44nJPzkL7hhGLn2lT31xxC2 qspAF74aSUAaSTB/xVue7mtuGi4rylRqk3UtTperV0SPVL12hwHS86CaJA9uMunH 0yjATdmMS/Oehqf+xJZYtrAdOAJBjMlI -----END CERTIFICATE-----Generated at Wed Dec 10 18:52:23 2025 by rpki-client