This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json) Hash identifier: qXLaY7rEEoo4EKWFRlfasJGTPiTl1cEpcjXEBBuwwX0= Subject key identifier: 4C:20:1F:7D:69:B6:76:43:44:FB:90:CE:34:8A:37:62:00:8A:73:9B Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft Manifest number: 7D Signing time: Tue 23 Dec 2025 05:39:31 +0000 Manifest this update: Tue 23 Dec 2025 05:39:31 +0000 Manifest next update: Tue 30 Dec 2025 05:39:31 +0000 Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: w4T8Gc0RqFd9z0tyYT9xrJHPy216MiiuHu0uKd6vpCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Validity Not Before: Dec 23 05:39:31 2025 GMT Not After : Dec 30 05:39:31 2025 GMT Subject: CN=694a2b13-c5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4d:5a:60:39:68:44:ab:51:db:83:d6:a8:10: df:60:db:d9:8f:47:3f:fd:10:bf:11:b6:70:c4:20: 24:7c:ae:bd:d1:bd:9b:49:a8:c7:ae:be:f1:38:3b: 85:ea:d2:97:c2:6a:3d:77:02:23:02:f5:70:d3:b7: 4a:d4:be:8f:6f:32:4d:c1:17:10:62:94:20:fa:54: 40:d7:d1:82:2b:88:c2:cd:84:6e:5a:a0:ec:8d:6e: 2b:2b:60:61:7e:8a:53:73:43:f6:30:a0:34:ea:0b: 17:fe:a9:b0:d4:47:75:b9:41:a2:db:55:0c:6a:a6: 88:69:d0:38:71:c2:71:00:4f:f6:d3:92:87:87:1b: 82:0c:ce:79:1c:a3:84:fa:61:7b:8d:78:dc:1d:da: 0f:d9:b2:d6:a2:a5:5f:9d:ac:80:09:a3:ed:29:93: 83:30:59:6f:b0:21:30:3d:37:74:9c:07:5a:1f:0e: 87:7b:a1:e1:4d:e6:39:19:4c:78:01:9d:c5:61:50: 5e:37:7a:fe:2e:82:e5:15:29:1c:d1:9a:e9:67:14: d5:1e:3c:84:e7:37:bf:1c:4f:46:78:b9:2b:2d:2a: 13:2c:c5:f1:97:20:cf:45:6d:b5:95:3d:49:84:76: 28:f0:ad:97:42:5b:e3:52:89:9d:c3:aa:08:42:ac: ea:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:20:1F:7D:69:B6:76:43:44:FB:90:CE:34:8A:37:62:00:8A:73:9B X509v3 Authority Key Identifier: keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:fd:d6:95:06:66:ec:79:5b:e6:d9:0d:b3:e0:5b:80:6b:02: 1f:b6:f2:06:f4:e0:95:29:62:5f:82:fb:27:b9:f8:fe:17:78: 7c:ca:24:67:f5:70:6c:97:17:20:4e:be:f2:0d:07:dc:1e:e3: 27:26:b5:87:f3:0e:1d:c8:c0:df:1f:db:c6:d7:65:5e:11:17: 19:a1:95:e1:5d:9d:2c:9a:72:40:df:87:5c:d7:8e:f5:2b:2a: 18:37:72:bb:ee:83:c3:9e:60:48:4b:0c:76:67:11:6f:3e:16: aa:b6:ec:5b:ad:f0:b3:7d:d8:39:cd:77:70:cd:ef:8f:98:e1: a4:11:a6:d1:31:56:4f:77:22:82:6f:61:67:a7:d7:8f:d7:2f: 98:65:d4:7e:ab:a7:9b:64:fd:77:8a:4a:96:59:86:50:bd:cb: 80:92:3e:f7:d6:77:b4:d5:66:56:4e:14:96:81:e8:e7:7d:0b: 7d:16:99:ef:98:73:9b:ce:1f:97:08:c8:7d:1b:14:7d:a0:70: 54:b2:2f:d9:51:59:d3:ac:bc:01:17:1c:5d:f8:23:53:41:bd: cf:8a:11:15:d3:97:5a:81:64:4b:c5:10:b2:c6:64:67:eb:49: cc:9d:06:40:f2:3a:fd:b2:c5:21:30:d3:11:5f:0b:9f:ed:42: d9:84:b7:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODdENjExMC8GA1UEBRMoMjU5QjAzQTVBMkUxRTJDQ0M0RTRCRDc1RUIzMzZGMjMx MUI0NDQyQTAeFw0yNTEyMjMwNTM5MzFaFw0yNTEyMzAwNTM5MzFaMBgxFjAUBgNV BAMMDTY5NGEyYjEzLWM1YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCPTVpgOWhEq1Hbg9aoEN9g29mPRz/9EL8RtnDEICR8rr3RvZtJqMeuvvE4O4Xq 0pfCaj13AiMC9XDTt0rUvo9vMk3BFxBilCD6VEDX0YIriMLNhG5aoOyNbisrYGF+ ilNzQ/YwoDTqCxf+qbDUR3W5QaLbVQxqpohp0DhxwnEAT/bTkoeHG4IMznkco4T6 YXuNeNwd2g/ZstaipV+drIAJo+0pk4MwWW+wITA9N3ScB1ofDod7oeFN5jkZTHgB ncVhUF43ev4uguUVKRzRmulnFNUePITnN78cT0Z4uSstKhMsxfGXIM9FbbWVPUmE dijwrZdCW+NSiZ3DqghCrOqFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTCAffWm2 dkNE+5DONIo3YgCKc5swHwYDVR0jBBgwFoAUJZsDpaLh4szE5L116zNvIxG0RCow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4N0Q2LzFFNDYwOTM0MjBB NjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6RTVMMTE2ek52SXhHMFJD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlpzRHBhTGg0c3pFNUwxMTZ6TnZJeEcwUkNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 N0Q2LzFFNDYwOTM0MjBBNjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6 RTVMMTE2ek52SXhHMFJDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAD91pUGZux5W+bZDbPgW4BrAh+28gb04JUpYl+C+ye5+P4XeHzKJGf1 cGyXFyBOvvINB9we4ycmtYfzDh3IwN8f28bXZV4RFxmhleFdnSyackDfh1zXjvUr Khg3crvug8OeYEhLDHZnEW8+Fqq27Fut8LN92DnNd3DN74+Y4aQRptExVk93IoJv YWen14/XL5hl1H6rp5tk/XeKSpZZhlC9y4CSPvfWd7TVZlZOFJaB6Od9C30Wme+Y c5vOH5cIyH0bFH2gcFSyL9lRWdOsvAEXHF34I1NBvc+KERXTl1qBZEvFELLGZGfr ScydBkDyOv2yxSEw0xFfC5/tQtmEt4c= -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:22 2025 by rpki-client