This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: nth71KHSyxtzkVwcqhcqpFlKfajUU4wGGbRhjF5nTsc= Subject key identifier: 02:CF:FA:79:B7:5E:1C:D6:3B:46:89:8D:A4:8D:B0:D1:7A:2E:D2:1C Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 100F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 1007 Signing time: Mon 22 Dec 2025 17:08:12 +0000 Manifest this update: Mon 22 Dec 2025 17:08:12 +0000 Manifest next update: Mon 29 Dec 2025 17:08:12 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: EJpjxSnp1WNx/cr1rdFKYTGMlqUkPHJB1H09DUL3La0=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: nXcUac3MS90vWtMTrdvd36wOBCE4zfd0e2DObXaS7L4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4111 (0x100f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Dec 22 17:08:12 2025 GMT Not After : Dec 29 17:08:12 2025 GMT Subject: CN=69497afc-4fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2d:5d:44:bf:b0:67:00:2c:e9:64:50:dc:05: 5f:08:39:4c:9d:55:28:46:db:38:83:1d:3b:2c:bf: 08:76:82:ce:eb:c6:01:06:01:8f:b9:d9:6a:26:5f: 12:8c:11:49:b4:78:ce:a7:64:b1:f0:de:85:10:3f: 98:a1:5c:53:43:e7:cc:fb:36:d4:2f:d3:43:e3:26: 7f:d8:e5:9f:87:99:16:05:3b:2e:f5:59:7d:ad:34: f5:ba:bb:97:26:4a:79:63:48:b6:f0:c8:d7:db:98: 3f:16:3d:ae:a3:e0:cd:32:f6:ff:bd:21:69:2c:7b: 39:af:6b:53:e6:a1:f6:e1:4d:9c:f9:36:0d:de:7e: b7:3e:b6:b5:80:c0:bc:bf:94:26:cb:44:b6:36:f1: f7:e5:05:1f:bd:5b:99:78:de:bf:76:13:44:97:29: 0b:ec:f7:19:0c:71:4b:ae:6c:d3:bc:c3:c3:f6:52: 6f:2f:dd:9e:35:eb:82:dd:71:51:f7:14:00:36:68: c8:65:d2:63:0a:28:da:cc:23:95:53:c7:bb:ea:03: 56:4f:14:96:8e:f2:78:17:39:69:03:35:7d:5d:49: e2:43:c3:b7:1f:39:25:73:17:fb:a4:d3:c1:2e:4d: 69:e7:c2:08:92:9e:7a:de:f5:31:82:6b:00:75:f9: ff:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CF:FA:79:B7:5E:1C:D6:3B:46:89:8D:A4:8D:B0:D1:7A:2E:D2:1C X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b0:db:07:95:96:06:17:c8:98:33:a0:48:e1:c6:bc:b7:0b: 4d:2d:d1:5d:10:b4:81:a1:20:e6:15:5a:04:1f:11:5b:37:b4: cd:eb:88:8c:90:18:a0:c7:a1:62:3c:81:be:e0:79:63:25:f6: 72:36:b0:05:c8:a0:fe:3d:4f:49:04:03:ba:42:30:50:a1:4e: d8:40:86:ed:34:50:ac:30:19:a4:04:05:0d:41:e0:1e:7f:cc: 24:59:e6:8a:c3:aa:e8:eb:25:df:ed:b4:d7:0a:73:7a:82:64: 3d:80:10:10:ce:fe:c6:68:9f:6a:7d:80:41:7a:d2:61:52:83: e7:6b:fb:3d:b3:5b:a0:12:f5:f3:b9:49:e1:68:13:52:25:6c: 95:48:65:90:84:47:20:e3:26:00:a5:83:33:c8:64:5b:41:fa: 36:01:17:38:dd:b9:02:37:48:81:54:75:59:f4:56:df:d2:3c: 56:38:b5:69:71:1c:94:0f:22:d5:83:a5:ac:91:c3:a4:9e:89: 5a:f4:03:30:59:ed:0d:41:69:d4:b9:bc:20:21:45:64:ff:59: 9d:d4:9e:35:81:67:b3:a6:0e:2b:11:79:1d:5c:3b:8f:83:19: 0b:d8:82:28:34:17:c7:ff:c3:8c:9e:a4:e4:21:71:46:a8:79: f6:04:d6:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUxMjIyMTcwODEyWhcNMjUxMjI5MTcwODEyWjAYMRYwFAYD VQQDDA02OTQ5N2FmYy00ZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApC1dRL+wZwAs6WRQ3AVfCDlMnVUoRts4gx07LL8IdoLO68YBBgGPudlqJl8S jBFJtHjOp2Sx8N6FED+YoVxTQ+fM+zbUL9ND4yZ/2OWfh5kWBTsu9Vl9rTT1uruX Jkp5Y0i28MjX25g/Fj2uo+DNMvb/vSFpLHs5r2tT5qH24U2c+TYN3n63Pra1gMC8 v5Qmy0S2NvH35QUfvVuZeN6/dhNElykL7PcZDHFLrmzTvMPD9lJvL92eNeuC3XFR 9xQANmjIZdJjCijazCOVU8e76gNWTxSWjvJ4FzlpAzV9XUniQ8O3Hzklcxf7pNPB Lk1p58IIkp563vUxgmsAdfn/ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALP+nm3 XhzWO0aJjaSNsNF6LtIcMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZsNsHlZYGF8iYM6BI4ca8twtNLdFdELSBoSDmFVoEHxFbN7TN64iM kBigx6FiPIG+4HljJfZyNrAFyKD+PU9JBAO6QjBQoU7YQIbtNFCsMBmkBAUNQeAe f8wkWeaKw6ro6yXf7bTXCnN6gmQ9gBAQzv7GaJ9qfYBBetJhUoPna/s9s1ugEvXz uUnhaBNSJWyVSGWQhEcg4yYApYMzyGRbQfo2ARc43bkCN0iBVHVZ9Fbf0jxWOLVp cRyUDyLVg6WskcOknola9AMwWe0NQWnUubwgIUVk/1md1J41gWezpg4rEXkdXDuP gxkL2IIoNBfH/8OMnqTkIXFGqHn2BNY7 -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:30 2025 by rpki-client