This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft File: JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json) Hash identifier: OLYEo/4sEC2vUySk1ibjJtzYKvtvv/2wLeZfiEAffMI= Subject key identifier: A9:8A:6F:73:A9:B3:58:66:06:76:12:B5:EC:78:44:C4:CD:3B:6D:DD Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA Certificate issuer: /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Certificate serial: 052A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft Manifest number: 0522 Signing time: Mon 22 Dec 2025 22:40:04 +0000 Manifest this update: Mon 22 Dec 2025 22:40:03 +0000 Manifest next update: Mon 29 Dec 2025 22:40:03 +0000 Files and hashes: 1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: 9hdr46LrXkf9iIKBYHNxH9oRthL5i2WjVjzLF7GXWAI=) 2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: lEj2Xm0LQ+xioePgGHWRdpuXrIhiuAdZJ8cF1TzyFTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1322 (0x52a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC73E, serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Validity Not Before: Dec 22 22:40:03 2025 GMT Not After : Dec 29 22:40:03 2025 GMT Subject: CN=6949c8c3-c891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:f4:5c:c0:ba:74:ac:50:3b:79:0f:cc:1b: ae:03:95:43:c6:51:4d:75:12:57:6b:c8:30:91:04: e6:1a:a9:6f:57:00:cb:90:ac:6d:8d:6e:63:e9:fc: 6c:77:05:8d:bc:fb:92:f5:32:95:3b:f2:cf:15:0d: 30:89:e3:d1:99:29:6d:68:ab:ae:4f:f3:c3:1d:38: f1:7b:08:b9:d8:69:c6:6b:4d:84:cb:9c:ac:7d:e5: 3e:e1:1b:79:bd:0d:bb:56:2e:a8:d6:34:00:ef:61: f4:fe:23:89:2a:87:f0:60:77:11:bd:e6:ef:67:6f: da:2d:5a:fa:6f:3d:45:b9:36:07:ef:7f:dd:ac:cb: a5:49:78:a1:01:17:49:67:dd:35:c7:fa:07:29:3b: 0d:4e:09:86:44:73:2c:ca:cc:b7:06:c5:7b:de:b3: fa:0d:a9:ba:91:3b:42:e0:72:ab:ef:1a:70:1f:f1: e1:22:f4:29:d5:3a:63:79:4c:2d:38:1f:c5:64:cc: 46:98:d8:51:38:e5:b3:88:2b:a6:26:80:ca:98:74: 89:5d:25:ba:5b:39:41:9d:59:c3:7e:53:d9:61:b7: 88:8c:d2:9e:03:4a:a3:c3:4b:da:de:9c:47:fe:87: 2c:fe:16:e5:7a:34:38:d6:56:8c:bf:6f:71:52:c6: 9b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8A:6F:73:A9:B3:58:66:06:76:12:B5:EC:78:44:C4:CD:3B:6D:DD X509v3 Authority Key Identifier: keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a2:74:a0:3b:b1:72:d8:62:38:59:81:19:d2:d1:1b:6a:66: ba:3c:e1:21:45:6d:47:17:90:8f:66:0e:0a:cf:21:59:49:19: b7:cb:d7:c2:7e:95:d6:b8:13:28:f9:56:19:ed:8c:15:a8:10: 2a:74:7f:df:a8:11:a0:6b:70:ed:f7:d9:21:60:8a:7f:06:f3: 17:74:09:24:1f:3c:60:4d:00:50:c0:82:f7:b7:e0:09:de:16: 57:46:cd:1b:06:38:23:58:6d:e7:76:e7:61:7b:6f:4e:14:24: 21:3d:a6:69:c8:7e:e8:26:59:af:ce:fc:d8:f4:8b:4b:dd:04: 9e:d3:18:44:46:6a:9a:7c:4f:62:38:8b:11:d3:13:35:92:7d: f9:e1:ee:cb:5b:96:2d:06:f7:de:df:e9:c4:52:0a:ca:f7:97: 5a:c1:10:9d:38:a1:b9:fc:a0:f5:18:5f:8e:81:09:53:98:bb: fd:db:79:0c:c7:b3:58:09:22:f1:51:e0:8d:b2:0f:77:9e:a0: 90:5e:cb:70:d3:2b:6b:b8:31:6c:71:64:1b:60:81:89:41:6a: 8d:a2:64:bb:a4:53:f2:71:91:36:3b:6e:aa:de:da:29:2c:ef: c6:b6:00:70:7d:6a:3f:55:93:84:5d:32:7c:04:92:1d:b7:56: 4f:39:3a:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM3M0UxMTAvBgNVBAUTKDI0M0YyRDQ0NzI3RjFEMUI4MDc5RjQwMTRGNjlGNEEw NzREMUYxRUEwHhcNMjUxMjIyMjI0MDAzWhcNMjUxMjI5MjI0MDAzWjAYMRYwFAYD VQQDDA02OTQ5YzhjMy1jODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHz0XMC6dKxQO3kPzBuuA5VDxlFNdRJXa8gwkQTmGqlvVwDLkKxtjW5j6fxs dwWNvPuS9TKVO/LPFQ0wiePRmSltaKuuT/PDHTjxewi52GnGa02Ey5ysfeU+4Rt5 vQ27Vi6o1jQA72H0/iOJKofwYHcRvebvZ2/aLVr6bz1FuTYH73/drMulSXihARdJ Z901x/oHKTsNTgmGRHMsysy3BsV73rP6Dam6kTtC4HKr7xpwH/HhIvQp1TpjeUwt OB/FZMxGmNhROOWziCumJoDKmHSJXSW6WzlBnVnDflPZYbeIjNKeA0qjw0va3pxH /ocs/hblejQ41laMv29xUsabtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmKb3Op s1hmBnYStex4RMTNO23dMB8GA1UdIwQYMBaAFCQ/LURyfx0bgHn0AU9p9KB00fHq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzczRS80NDU1NDU2MjJD OTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hSdUFlZlFCVDJuMG9IVFI4 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEOHRSSEpfSFJ1QWVmUUJUMm4wb0hUUjhlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzczRS80NDU1NDU2MjJDOTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hS dUFlZlFCVDJuMG9IVFI4ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqonSgO7Fy2GI4WYEZ0tEbama6POEhRW1HF5CPZg4KzyFZSRm3y9fC fpXWuBMo+VYZ7YwVqBAqdH/fqBGga3Dt99khYIp/BvMXdAkkHzxgTQBQwIL3t+AJ 3hZXRs0bBjgjWG3ndudhe29OFCQhPaZpyH7oJlmvzvzY9ItL3QSe0xhERmqafE9i OIsR0xM1kn354e7LW5YtBvfe3+nEUgrK95dawRCdOKG5/KD1GF+OgQlTmLv923kM x7NYCSLxUeCNsg93nqCQXstw0ytruDFscWQbYIGJQWqNomS7pFPycZE2O26q3top LO/GtgBwfWo/VZOEXTJ8BJIdt1ZPOTrY -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:30 2025 by rpki-client