This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft File: JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json) Hash identifier: BPU5ouLC17zsZNQ4nj/lcq+KvAFk8H6rqxS6LSLTZ5k= Subject key identifier: DA:97:99:E2:2A:43:F3:58:5D:41:B3:FA:DA:FF:DE:77:C2:3A:4F:92 Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94 Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft Manifest number: 01AE Signing time: Tue 23 Dec 2025 02:12:50 +0000 Manifest this update: Tue 23 Dec 2025 02:12:50 +0000 Manifest next update: Tue 30 Dec 2025 02:12:50 +0000 Files and hashes: 1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: wLWoNRk3LClkHhQvtc2QvyyonGY/jbIu0WiNUpzNL4c=) 2: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: WRw8P09emg+/M1eyLZMSGNOMq1lxAOjq4wSwuxKAgdk=) 3: C2604920CFE011EE83247F7CC4F9AE02.roa (hash: RlOQ1D2JU0zzfIovINRFiFEm6uvLmquY7AElz0gTShU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394 Validity Not Before: Dec 23 02:12:50 2025 GMT Not After : Dec 30 02:12:50 2025 GMT Subject: CN=6949faa2-cbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:e2:f2:eb:18:68:8c:d1:5e:7c:b8:8b:e8: 23:02:f4:0d:41:37:0d:99:69:de:1e:68:5e:86:5e: d1:c9:bc:66:8d:e7:b9:d3:dd:4e:44:c8:9c:49:f6: 80:4d:8e:05:21:6a:e3:cd:37:b2:3a:a0:41:b6:3e: d3:1a:8e:c3:e5:f7:d0:99:d6:1c:71:a3:bc:8e:d3: d2:45:7b:e9:f0:3a:80:98:14:9b:fc:b0:9a:02:06: 3c:8a:d0:67:eb:57:dc:11:c3:54:b4:03:9f:bc:63: 51:18:4e:48:9e:3e:6f:86:91:d8:f0:24:20:23:ff: 62:d8:2a:b7:68:2d:3b:ce:d6:7a:bf:da:9d:62:a5: 3e:7a:b9:48:99:c9:73:c4:e4:a5:db:5d:19:4b:29: cf:33:29:da:d9:54:3d:dc:ec:0d:fd:93:95:43:43: ac:22:4a:64:e0:f8:27:7b:f6:14:ee:5d:ac:c7:97: 0a:fb:a3:ab:35:87:af:f5:9c:ed:32:47:ee:06:9d: 9e:88:b4:fe:f2:70:79:3e:6c:ee:c9:71:6e:89:e7: ba:1f:6a:93:56:90:0d:8c:56:2a:52:af:68:c1:f2: 58:f4:73:b0:55:e3:34:07:a4:db:3d:c4:ef:e8:e9: e3:ae:dd:5e:33:be:36:06:3e:ae:d4:89:9e:4b:d5: 64:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:97:99:E2:2A:43:F3:58:5D:41:B3:FA:DA:FF:DE:77:C2:3A:4F:92 X509v3 Authority Key Identifier: keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:ae:6f:67:8c:24:2c:cd:1e:a0:23:de:aa:76:16:af:45:d1: 3d:79:83:f5:6a:a0:64:45:e6:f7:1c:93:6e:c0:26:c0:98:82: 12:2f:56:32:f9:e3:e0:40:e6:73:63:98:c0:4f:4a:65:62:8a: 4c:d8:dd:d0:79:60:83:4e:f6:97:b0:de:ba:2d:d4:81:71:4b: d5:47:57:95:37:85:27:06:49:e4:7f:c5:7b:a1:df:8d:d5:49: 45:ea:f7:57:0a:41:5d:52:02:49:91:65:5b:ee:ac:52:cc:c5: 66:70:27:89:5f:61:2e:79:7b:7f:64:f4:c2:f1:3e:0c:01:0e: 48:fd:f4:d4:f4:45:1c:3b:31:66:dd:25:32:e5:8a:1c:48:7f: fc:78:9b:f6:73:8c:b2:67:9c:55:44:19:bb:12:4a:05:1d:af: cb:64:0a:18:47:f4:c8:ba:a0:45:fb:68:a2:dc:2c:21:84:a2: 16:d5:a4:89:e4:f4:d9:ac:4e:06:3b:0d:51:05:8f:24:9a:35: 8b:d8:50:06:57:d0:51:b7:a2:76:bd:cc:fd:46:2d:a7:6a:3c: 38:5b:60:96:23:3e:79:f0:73:b5:15:5b:18:22:5b:bd:2e:aa: dc:ae:d1:93:03:87:44:7e:8d:11:10:c5:af:6d:40:5c:3b:95: 1b:b9:6b:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCRDYxMTAvBgNVBAUTKDI0ODQ4OUI3ODE4QjAwRTcwMDQwNUJBQkMxQUEzNTZD MEExOEYzOTQwHhcNMjUxMjIzMDIxMjUwWhcNMjUxMjMwMDIxMjUwWjAYMRYwFAYD VQQDDA02OTQ5ZmFhMi1jYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmDi8usYaIzRXny4i+gjAvQNQTcNmWneHmhehl7Rybxmjee5091ORMicSfaA TY4FIWrjzTeyOqBBtj7TGo7D5ffQmdYccaO8jtPSRXvp8DqAmBSb/LCaAgY8itBn 61fcEcNUtAOfvGNRGE5Inj5vhpHY8CQgI/9i2Cq3aC07ztZ6v9qdYqU+erlImclz xOSl210ZSynPMyna2VQ93OwN/ZOVQ0OsIkpk4Pgne/YU7l2sx5cK+6OrNYev9Zzt MkfuBp2eiLT+8nB5PmzuyXFuiee6H2qTVpANjFYqUq9owfJY9HOwVeM0B6TbPcTv 6Onjrt1eM742Bj6u1ImeS9VkYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqXmeIq Q/NYXUGz+tr/3nfCOk+SMB8GA1UdIwQYMBaAFCSEibeBiwDnAEBbq8GqNWwKGPOU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEJENi9BQkY4NzMwMjUw REMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFPY0FRRnVyd2FvMWJBb1k4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJU0p0NEdMQU9jQVFGdXJ3YW8xYkFvWTg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEJENi9BQkY4NzMwMjUwREMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFP Y0FRRnVyd2FvMWJBb1k4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJrm9njCQszR6gI96qdhavRdE9eYP1aqBkReb3HJNuwCbAmIISL1Yy +ePgQOZzY5jAT0plYopM2N3QeWCDTvaXsN66LdSBcUvVR1eVN4UnBknkf8V7od+N 1UlF6vdXCkFdUgJJkWVb7qxSzMVmcCeJX2EueXt/ZPTC8T4MAQ5I/fTU9EUcOzFm 3SUy5YocSH/8eJv2c4yyZ5xVRBm7EkoFHa/LZAoYR/TIuqBF+2ii3CwhhKIW1aSJ 5PTZrE4GOw1RBY8kmjWL2FAGV9BRt6J2vcz9Ri2najw4W2CWIz558HO1FVsYIlu9 LqrcrtGTA4dEfo0REMWvbUBcO5UbuWvb -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:25 2025 by rpki-client