This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json) Hash identifier: /+4Li1joZt3Aob0q9IqL5JYzDA0/4vj1u1E+pnsWQEo= Subject key identifier: B6:B4:23:F2:8C:2C:FD:72:47:D1:4C:CB:9D:6D:33:D7:7C:96:05:83 Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 3531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft Manifest number: 3508 Signing time: Thu 18 Dec 2025 14:50:34 +0000 Manifest this update: Thu 18 Dec 2025 14:50:34 +0000 Manifest next update: Thu 25 Dec 2025 14:50:34 +0000 Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: MAAoOVeeJRmaZxYORaYZVh4BInpBJTYgSGi3fzLQnxQ=) 2: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: q930PNLNWH/Z46J1d9nklohyp9ezYTSOPJVhEtOZ6aE=) 3: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: GKpbMiXXQOymixNs7kIDcgllt5ej3XEvlSe8jG36fFc=) 4: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: RmtTkfUtODi3Cy7Cko14SjhPi0et23qfIOBSZSmBkOI=) 5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: y580eZMTmYYpiPdGANCgGD9h1bATBcJx0pEL7nWorJ4=) 6: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: 5AL2LBzCru+E3YFyKW2P0tt8Zy0ls3uab/1OsnqWv48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13617 (0x3531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Dec 18 14:50:34 2025 GMT Not After : Dec 25 14:50:34 2025 GMT Subject: CN=694414ba-ea5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:72:1d:7e:0a:b0:8d:30:78:e3:d3:0b:ed: ff:f2:16:3d:90:06:21:d5:0c:ff:94:7b:83:14:78: eb:7b:54:20:3c:e6:a6:c4:7c:f3:f5:89:03:f9:86: 56:71:b4:20:8d:80:d7:d0:86:79:64:77:e3:a5:78: 26:65:da:e9:18:41:e1:9b:59:42:65:fb:f6:e0:47: d4:a3:79:11:03:c3:6b:1c:41:76:7a:48:13:5a:8e: 74:fc:54:3c:30:8a:16:6b:35:c2:82:10:9b:60:6f: a1:05:47:3f:25:07:e8:d2:6f:48:0f:fd:af:85:68: c7:bf:75:ca:bc:6c:b8:cf:86:e8:89:fc:4e:99:88: aa:89:30:7c:59:56:8c:09:ce:43:ec:53:24:08:7a: d6:3e:62:44:9e:bb:8f:e1:e3:f7:22:59:08:93:a3: 36:da:7c:cf:2d:4a:15:b4:84:f9:b7:0f:a5:a1:ef: ce:cd:51:bf:80:55:24:76:ff:cf:04:82:13:d1:d0: 9c:dc:c0:b6:e9:74:61:0a:79:1c:a4:d1:69:f5:e8: 1d:39:53:35:5b:df:d1:37:e7:17:c5:1d:dc:5e:36: be:f2:38:60:81:d7:19:e6:14:e5:2e:50:16:9e:ae: 28:e9:37:07:45:da:06:1c:87:d0:24:18:1d:9e:7a: 92:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B4:23:F2:8C:2C:FD:72:47:D1:4C:CB:9D:6D:33:D7:7C:96:05:83 X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:42:4b:f6:dc:d7:db:d4:44:0d:e0:75:cc:89:01:2e:07:00: 68:a7:13:dc:d5:d6:8a:74:c1:ee:24:b5:f3:4d:ef:82:86:0b: 9e:f5:18:78:45:dd:c2:db:e5:4a:45:ec:bb:c4:76:be:8d:59: e3:87:97:5c:d2:11:57:ca:d6:fa:fb:50:36:54:cc:80:fe:f4: e2:91:e1:21:b2:2c:28:1f:72:4e:53:8a:38:ee:00:04:5e:6b: 1a:82:c2:f8:d5:cf:d3:bd:ed:32:01:b6:db:e5:b2:8e:7c:a3: 38:5b:e7:40:1f:ea:71:79:8e:a7:ec:ed:af:03:20:c2:b8:34: 2e:ec:07:7d:5f:aa:a4:e1:a3:92:1d:57:f5:33:32:61:cf:c0: 2b:1a:a2:d7:dd:cc:96:b2:ec:75:cd:71:f2:e1:c8:43:1c:0b: 27:23:d8:88:16:d8:54:04:60:2b:f7:7d:79:af:f1:63:91:c4: cb:b6:78:2a:34:0c:88:06:87:1e:14:5e:cf:90:c7:91:b8:5a: b6:ab:2d:89:00:88:29:e7:97:d9:b2:a8:c5:60:0f:6d:56:7c: 7a:5c:6b:99:cb:76:94:84:e1:e5:f9:9c:e6:8f:bf:ff:06:c6: 06:0b:ba:64:28:cb:ef:32:e6:b8:ef:38:a1:1c:a0:39:65:ce: f3:e7:71:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjUxMjE4MTQ1MDM0WhcNMjUxMjI1MTQ1MDM0WjAYMRYwFAYD VQQDDA02OTQ0MTRiYS1lYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmcVyHX4KsI0weOPTC+3/8hY9kAYh1Qz/lHuDFHjre1QgPOamxHzz9YkD+YZW cbQgjYDX0IZ5ZHfjpXgmZdrpGEHhm1lCZfv24EfUo3kRA8NrHEF2ekgTWo50/FQ8 MIoWazXCghCbYG+hBUc/JQfo0m9ID/2vhWjHv3XKvGy4z4boifxOmYiqiTB8WVaM Cc5D7FMkCHrWPmJEnruP4eP3IlkIk6M22nzPLUoVtIT5tw+loe/OzVG/gFUkdv/P BIIT0dCc3MC26XRhCnkcpNFp9egdOVM1W9/RN+cXxR3cXja+8jhggdcZ5hTlLlAW nq4o6TcHRdoGHIfQJBgdnnqSkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLa0I/KM LP1yR9FMy51tM9d8lgWDMB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjYzQy9CN0FDQzI2QzFEOTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1Jf NjZEaU5TQmQ3dVFDOGdzOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxQkv23Nfb1EQN4HXMiQEuBwBopxPc1daKdMHuJLXzTe+Chgue9Rh4 Rd3C2+VKRey7xHa+jVnjh5dc0hFXytb6+1A2VMyA/vTikeEhsiwoH3JOU4o47gAE XmsagsL41c/Tve0yAbbb5bKOfKM4W+dAH+pxeY6n7O2vAyDCuDQu7Ad9X6qk4aOS HVf1MzJhz8ArGqLX3cyWsux1zXHy4chDHAsnI9iIFthUBGAr9315r/FjkcTLtngq NAyIBoceFF7PkMeRuFq2qy2JAIgp55fZsqjFYA9tVnx6XGuZy3aUhOHl+Zzmj7// BsYGC7pkKMvvMua47zihHKA5Zc7z53F8 -----END CERTIFICATE-----Generated at Sat Dec 20 14:13:32 2025 by rpki-client