This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft File: jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json) Hash identifier: IgBQrlFJV+OQ0xNbxQjbAXppI4cSOoZky5svkcJdDw0= Subject key identifier: D1:41:F1:11:39:53:54:E7:89:C8:B0:31:F3:18:A1:DB:51:F5:62:C1 Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Certificate serial: 0C9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft Manifest number: 0C87 Signing time: Mon 22 Dec 2025 18:09:19 +0000 Manifest this update: Mon 22 Dec 2025 18:09:19 +0000 Manifest next update: Mon 29 Dec 2025 18:09:19 +0000 Files and hashes: 1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: hjJunXgWx2irYhymnCPO530xiLccmPv3Z7dv9YSsBjU=) 2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 4znOjftmOLUP9F0sqZtn3shUbp4rIvm9xbYnsSSpuqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3228 (0xc9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Validity Not Before: Dec 22 18:09:19 2025 GMT Not After : Dec 29 18:09:19 2025 GMT Subject: CN=6949894f-9cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:be:f2:99:e3:9a:a9:d4:47:e7:f6:62:f5:85: f6:d5:1e:00:e1:79:fe:db:d1:17:e6:b5:ea:ed:19: 11:5f:c9:80:31:d6:dd:75:1b:e6:77:e8:4d:b1:a8: 6c:10:e9:bb:4a:44:69:fc:97:e0:18:c2:13:cf:3d: 8c:6d:d9:8d:c7:8e:dc:9a:05:8e:0d:d2:c5:6e:75: e9:42:45:bb:b3:f2:df:17:eb:13:61:35:9c:41:92: 61:74:e4:ab:26:b7:96:d8:a3:80:67:55:83:a9:59: b8:44:fe:82:da:ce:bd:e5:04:60:1d:9c:a6:2a:bf: 0a:0b:d1:cd:00:77:4b:43:e4:a8:21:07:c7:9e:2f: 21:39:fc:89:3c:a6:fa:95:b1:d8:af:37:5d:82:e2: db:b5:98:46:31:f0:b0:77:1c:e5:b1:24:26:22:fd: b0:76:78:f6:c9:3e:90:d0:32:12:b2:14:26:9d:87: 9f:b4:5c:d1:dd:2c:3a:34:a7:1a:6f:ec:b8:19:73: 72:ea:59:ce:89:95:01:91:1c:75:f3:03:a4:b0:94: 09:84:6b:75:12:f8:71:5f:ae:03:80:b3:9e:01:ce: 65:0b:c3:fd:49:76:51:df:f2:bb:d5:19:39:d0:83: 54:23:ce:d6:02:67:09:5b:97:63:f6:df:85:b2:78: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:41:F1:11:39:53:54:E7:89:C8:B0:31:F3:18:A1:DB:51:F5:62:C1 X509v3 Authority Key Identifier: keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:16:42:ca:af:28:37:80:b0:b5:c9:6e:5d:51:47:e7:fc:2b: 75:a9:c4:1b:d2:e9:3f:1b:8a:77:3c:b1:de:04:a6:2c:b6:9b: b4:9c:6e:53:6d:d0:67:5f:87:73:b4:24:f6:92:ce:27:05:5d: 8c:3e:16:1e:56:53:c7:97:31:09:38:db:3a:46:0d:d6:0e:f6: 0a:88:a9:66:c4:24:00:27:ef:e8:71:f8:8a:9c:68:5e:61:9a: 63:6a:45:23:e5:ce:71:47:9f:6e:34:cd:02:91:12:35:57:6a: 21:fb:4d:9d:ef:4f:7d:ef:79:57:79:58:88:3f:eb:1c:8e:1f: 9f:22:3c:a8:96:c3:fb:94:a3:a9:20:77:e8:9b:64:2d:7e:e8: 0d:45:40:fd:fd:c8:f2:16:07:b1:df:37:c1:24:bf:67:e0:97: af:e2:25:45:68:bf:b4:b5:76:d4:1c:24:a4:41:70:41:04:ea: bd:a5:e7:ce:12:a5:9d:5a:6c:07:ef:53:4a:ae:47:e8:67:a0: 76:bf:ac:46:d5:b4:98:ec:f4:93:8b:54:a8:15:9f:d5:0a:81: 3e:b0:c8:35:87:21:e0:04:1f:ac:e3:0e:b3:4c:bc:10:a5:83: 81:94:f4:24:fa:c4:02:9d:e4:d7:e2:c6:c6:8e:75:27:4f:00: 8f:61:97:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RjAxMTAvBgNVBAUTKDhDNjZGOUMwRTY2OEFDOTA4MURGNzEwRDYwNDJERjQ3 NDkwQjBBQjkwHhcNMjUxMjIyMTgwOTE5WhcNMjUxMjI5MTgwOTE5WjAYMRYwFAYD VQQDDA02OTQ5ODk0Zi05Y2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtL7ymeOaqdRH5/Zi9YX21R4A4Xn+29EX5rXq7RkRX8mAMdbddRvmd+hNsahs EOm7SkRp/JfgGMITzz2MbdmNx47cmgWODdLFbnXpQkW7s/LfF+sTYTWcQZJhdOSr JreW2KOAZ1WDqVm4RP6C2s695QRgHZymKr8KC9HNAHdLQ+SoIQfHni8hOfyJPKb6 lbHYrzddguLbtZhGMfCwdxzlsSQmIv2wdnj2yT6Q0DISshQmnYeftFzR3Sw6NKca b+y4GXNy6lnOiZUBkRx18wOksJQJhGt1EvhxX64DgLOeAc5lC8P9SXZR3/K71Rk5 0INUI87WAmcJW5dj9t+Fsnhr9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFB8RE5 U1TniciwMfMYodtR9WLBMB8GA1UdIwQYMBaAFIxm+cDmaKyQgd9xDWBC30dJCwq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdGMC9BNjYzMTlGMDEy RDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JKQ0IzM0VOWUVMZlIwa0xD cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pHYjV3T1pvckpDQjMzRU5ZRUxmUjBrTENyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdGMC9BNjYzMTlGMDEyRDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JK Q0IzM0VOWUVMZlIwa0xDcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXFkLKryg3gLC1yW5dUUfn/Ct1qcQb0uk/G4p3PLHeBKYstpu0nG5T bdBnX4dztCT2ks4nBV2MPhYeVlPHlzEJONs6Rg3WDvYKiKlmxCQAJ+/ocfiKnGhe YZpjakUj5c5xR59uNM0CkRI1V2oh+02d709973lXeViIP+scjh+fIjyolsP7lKOp IHfom2QtfugNRUD9/cjyFgex3zfBJL9n4Jev4iVFaL+0tXbUHCSkQXBBBOq9pefO EqWdWmwH71NKrkfoZ6B2v6xG1bSY7PSTi1SoFZ/VCoE+sMg1hyHgBB+s4w6zTLwQ pYOBlPQk+sQCneTX4sbGjnUnTwCPYZdA -----END CERTIFICATE-----Generated at Tue Dec 23 11:40:58 2025 by rpki-client