This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft File: Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json) Hash identifier: 6WQgaFj1JCGUuN6nW9y+mfpkPKeRB5DsZX827ZwQ3U8= Subject key identifier: B1:FE:DD:29:A7:D6:6A:D5:45:21:B6:77:AB:E2:CD:A7:B0:27:77:4F Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 Certificate issuer: /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft Manifest number: 01A6 Signing time: Tue 02 Dec 2025 20:39:01 +0000 Manifest this update: Tue 02 Dec 2025 20:39:00 +0000 Manifest next update: Tue 09 Dec 2025 20:39:00 +0000 Files and hashes: 1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: z+LL4HdY8vc3ux3d8Wpx59qdPCX3oOlynv3g1o9Mc/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 20:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FEB, serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Validity Not Before: Dec 2 20:39:00 2025 GMT Not After : Dec 9 20:39:00 2025 GMT Subject: CN=692f4e64-e32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:88:c9:3e:79:0d:e4:2d:d6:3b:28:d2:33:4e: 1a:80:20:7c:a4:9a:a2:79:cc:71:82:59:0b:b9:eb: fe:76:99:c2:5f:db:03:51:df:c1:ee:9e:ae:c6:b6: 24:82:8a:06:7f:8f:5c:ac:e6:cb:d1:4a:20:e2:b2: 2f:25:43:e0:c2:46:11:b0:76:31:fc:d5:b7:b6:fa: 91:82:62:8a:93:ed:38:9f:f6:5e:32:86:42:9e:b2: 32:23:b4:42:84:62:da:5b:c9:75:ec:52:8c:5d:e7: 0b:28:bf:ca:e2:cb:93:8f:d0:5f:a5:c7:66:35:cb: c9:6c:e9:fd:f7:89:52:5b:c9:4a:e8:b7:fd:d9:7a: ed:7c:de:b6:a2:b2:c1:b5:91:ac:5b:b8:b4:9c:2d: 35:9b:c6:f0:95:15:7c:6e:01:ba:0c:a1:3d:71:5b: bb:8d:06:96:ab:b8:38:e3:3a:7c:ff:14:26:23:8e: 2d:ce:f2:7b:e0:2f:f0:d0:59:0c:ed:86:7b:2f:8c: 4b:24:4c:82:b3:a6:d2:ab:13:c6:8c:db:7b:01:47: db:7f:72:22:47:d3:7c:5d:bf:20:3b:0b:6b:28:8e: 5e:d9:2d:17:40:38:dd:4d:84:85:ff:21:38:2f:01: 35:52:9b:6c:47:23:72:a5:b5:21:21:8d:10:bb:a0: bd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FE:DD:29:A7:D6:6A:D5:45:21:B6:77:AB:E2:CD:A7:B0:27:77:4F X509v3 Authority Key Identifier: keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:be:4d:1c:d0:7c:b4:24:8d:4d:c5:77:c8:3c:d0:97:5c:83: 39:3d:9b:15:0d:91:51:6b:f2:fd:b3:0f:67:c5:43:cb:ab:36: a1:cd:4b:85:e4:dd:aa:c5:06:a5:0f:b7:5d:d4:9a:7d:46:cf: 29:ea:20:5a:61:6a:83:2a:36:0c:20:96:9b:95:fe:e1:3d:16: 23:04:78:db:e7:c7:6e:16:c3:46:6f:e6:19:c0:21:dc:5d:73: be:46:fb:b9:be:57:46:14:89:7b:f3:9d:b4:17:39:96:a0:24: 91:a4:61:a7:0d:0f:ca:df:a5:15:8a:91:b8:7b:76:a8:45:39: 23:8b:9a:c5:f4:da:ec:10:ea:79:90:e0:9d:8f:f7:5f:2b:e5: e4:75:8e:a5:a5:40:93:73:71:55:04:44:f5:6b:56:ae:6b:5a: e6:19:6b:92:1d:01:2c:56:02:cd:c9:87:f8:ce:f7:f8:73:e9: 42:56:ac:85:63:1c:cc:2d:8c:48:2f:fe:06:44:93:ab:1d:ee: 48:80:36:2b:f5:fc:2c:b3:dd:99:92:85:13:54:a6:84:0a:c2: db:0b:94:72:d3:c3:f6:e3:2d:2d:07:74:1e:0e:4f:36:76:8f: 36:ed:0f:04:4e:ab:43:2d:c4:5f:e7:be:0e:37:f8:38:17:94: dc:2c:61:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRUIxMTAvBgNVBAUTKDI2RkVBMEM2NzdEREU3NDNDMkUwNzVFMUNFMDdBQjVC RDY2NjYzMjUwHhcNMjUxMjAyMjAzOTAwWhcNMjUxMjA5MjAzOTAwWjAYMRYwFAYD VQQDEw02OTJmNGU2NC1lMzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIjJPnkN5C3WOyjSM04agCB8pJqiecxxglkLuev+dpnCX9sDUd/B7p6uxrYk gooGf49crObL0Uog4rIvJUPgwkYRsHYx/NW3tvqRgmKKk+04n/ZeMoZCnrIyI7RC hGLaW8l17FKMXecLKL/K4suTj9BfpcdmNcvJbOn994lSW8lK6Lf92XrtfN62orLB tZGsW7i0nC01m8bwlRV8bgG6DKE9cVu7jQaWq7g44zp8/xQmI44tzvJ74C/w0FkM 7YZ7L4xLJEyCs6bSqxPGjNt7AUfbf3IiR9N8Xb8gOwtrKI5e2S0XQDjdTYSF/yE4 LwE1UptsRyNypbUhIY0Qu6C9aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLH+3Smn 1mrVRSG2d6vizaewJ3dPMB8GA1UdIwQYMBaAFCb+oMZ33edDwuB14c4Hq1vWZmMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi8xODc0QzRBNDQ4 NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUwUEM0SFhoemdlclc5Wm1Z eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p2Nmd4bmZkNTBQQzRIWGh6Z2VyVzlabVl5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZFQi8xODc0QzRBNDQ4NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUw UEM0SFhoemdlclc5Wm1ZeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVvk0c0Hy0JI1NxXfIPNCXXIM5PZsVDZFRa/L9sw9nxUPLqzahzUuF 5N2qxQalD7dd1Jp9Rs8p6iBaYWqDKjYMIJablf7hPRYjBHjb58duFsNGb+YZwCHc XXO+Rvu5vldGFIl78520FzmWoCSRpGGnDQ/K36UVipG4e3aoRTkji5rF9NrsEOp5 kOCdj/dfK+XkdY6lpUCTc3FVBET1a1aua1rmGWuSHQEsVgLNyYf4zvf4c+lCVqyF YxzMLYxIL/4GRJOrHe5IgDYr9fwss92ZkoUTVKaECsLbC5Ry08P24y0tB3QeDk82 do827Q8ETqtDLcRf574ON/g4F5TcLGE4 -----END CERTIFICATE-----Generated at Wed Dec 3 16:09:10 2025 by rpki-client