This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft File: jprppXQf-n7Wju-jrYsFjQHMJRk.mft (raw, json) Hash identifier: z6Oama23+x6F2BaiCxV7Ev5cBSbzOALdCI6emq4LVNA= Subject key identifier: CC:92:2F:FF:EF:CB:EA:B5:81:11:FD:45:EB:95:7F:04:FC:9B:17:2D Authority key identifier: 8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19 Certificate issuer: /CN=A91B0C2E/serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519 Certificate serial: 0644 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft Manifest number: 0644 Signing time: Mon 22 Dec 2025 21:50:39 +0000 Manifest this update: Mon 22 Dec 2025 21:50:38 +0000 Manifest next update: Mon 29 Dec 2025 21:50:38 +0000 Files and hashes: 1: jprppXQf-n7Wju-jrYsFjQHMJRk.crl (hash: jQyJ+mFujCQTWb3x8Lva5I516B1vK2TJ6wl8YU5T7xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0C2E, serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519 Validity Not Before: Dec 22 21:50:38 2025 GMT Not After : Dec 29 21:50:38 2025 GMT Subject: CN=6949bd2f-0696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9a:f1:0e:51:89:96:2e:43:8e:23:0e:0b:fc: 2a:a1:6a:3e:31:74:57:4a:ee:f8:0c:65:cd:31:d6: cb:59:03:a2:a7:21:fe:b8:d5:71:23:e8:26:91:67: c8:d3:df:06:2f:dc:d7:6b:01:5a:fc:90:7d:7f:78: cc:72:a8:59:f0:ad:4b:26:8a:a7:1e:3c:2a:3e:3f: 8b:d8:1e:e0:b1:18:d2:4f:96:17:b2:2b:4b:73:9c: 00:60:db:40:e4:c3:b4:11:0a:83:c8:07:72:75:19: 74:cd:7f:a2:3c:42:24:a8:84:72:51:61:d6:71:3a: e9:76:b7:c9:96:f2:e7:6c:ff:54:15:dd:c3:ec:ab: 51:e8:14:0f:1f:53:58:52:fa:dd:59:d9:96:df:0b: ff:95:eb:8e:19:42:26:31:40:ce:d1:74:cc:0e:e5: 70:6a:e7:29:a5:ca:60:ec:30:1d:fb:81:3e:e4:e5: ca:b9:9f:2f:8d:ce:59:30:de:6e:63:ab:d3:49:d4: d0:8a:db:76:79:40:82:3a:3c:69:6a:a9:84:2e:e3: 66:3b:03:98:65:af:00:92:81:2e:3e:56:c9:b2:28: 5c:6d:d2:08:cd:49:49:97:26:ff:88:27:e6:7b:56: ff:55:62:09:eb:58:5e:c8:eb:f8:41:59:d4:8f:d4: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:92:2F:FF:EF:CB:EA:B5:81:11:FD:45:EB:95:7F:04:FC:9B:17:2D X509v3 Authority Key Identifier: keyid:8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:60:02:86:9f:e0:65:56:8d:13:a3:f3:75:71:ba:7a:d6:4b: 92:e2:86:39:a0:ae:53:1b:d9:13:2a:1c:28:55:be:93:37:44: 19:af:41:72:7e:30:87:9d:0e:42:dc:54:27:5e:a4:5b:ee:1b: c6:ef:9b:9e:56:d0:33:dd:4c:e1:89:64:58:ef:6b:df:e7:9c: 12:71:33:4d:9e:72:49:ef:ac:bf:6a:09:97:f6:30:ab:28:c8: 1a:25:b9:c6:31:e9:f4:76:e4:df:de:62:92:55:17:ce:eb:58: 66:1d:44:d9:00:75:57:0d:9b:a1:f2:0e:be:78:97:2b:3e:2f: f2:1d:9b:01:ec:8c:47:24:f8:1a:78:a0:00:60:e6:dc:ef:53: 13:c4:f4:0a:9b:d6:a5:20:50:3f:27:fd:6f:84:fa:b7:2e:b2: 4a:9a:33:0b:1a:cd:f9:ff:97:cb:8e:74:34:f7:a9:4b:4e:22: c5:94:18:f9:77:58:b9:90:19:6b:f5:66:ba:2d:d5:38:bf:d2: 57:e0:6f:82:50:5c:40:50:c2:35:c6:c6:4a:ff:8d:7d:d6:60: ff:86:93:31:0b:bd:16:2a:d1:a6:f6:7d:19:e7:27:5b:4d:a4: bf:03:60:ea:12:3c:c4:91:a5:25:10:a4:8b:3e:ae:e7:1b:0d: f6:05:68:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBDMkUxMTAvBgNVBAUTKDhFOUFFOUE1NzQxRkZBN0VENjhFRUZBM0FEOEIwNThE MDFDQzI1MTkwHhcNMjUxMjIyMjE1MDM4WhcNMjUxMjI5MjE1MDM4WjAYMRYwFAYD VQQDDA02OTQ5YmQyZi0wNjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55rxDlGJli5DjiMOC/wqoWo+MXRXSu74DGXNMdbLWQOipyH+uNVxI+gmkWfI 098GL9zXawFa/JB9f3jMcqhZ8K1LJoqnHjwqPj+L2B7gsRjST5YXsitLc5wAYNtA 5MO0EQqDyAdydRl0zX+iPEIkqIRyUWHWcTrpdrfJlvLnbP9UFd3D7KtR6BQPH1NY UvrdWdmW3wv/leuOGUImMUDO0XTMDuVwaucppcpg7DAd+4E+5OXKuZ8vjc5ZMN5u Y6vTSdTQitt2eUCCOjxpaqmELuNmOwOYZa8AkoEuPlbJsihcbdIIzUlJlyb/iCfm e1b/VWIJ61heyOv4QVnUj9QpNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMySL//v y+q1gRH9ReuVfwT8mxctMB8GA1UdIwQYMBaAFI6a6aV0H/p+1o7vo62LBY0BzCUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEMyRS9BNzE2ODM2OEI0 ODcxMUVCOTcyM0ZEMzNDNEY5QUUwMi9qcHJwcFhRZi1uN1dqdS1qcllzRmpRSE1K UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pwcnBwWFFmLW43V2p1LWpyWXNGalFITUpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEMyRS9BNzE2ODM2OEI0ODcxMUVCOTcyM0ZEMzNDNEY5QUUwMi9qcHJwcFhRZi1u N1dqdS1qcllzRmpRSE1KUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5YAKGn+BlVo0To/N1cbp61kuS4oY5oK5TG9kTKhwoVb6TN0QZr0Fy fjCHnQ5C3FQnXqRb7hvG75ueVtAz3UzhiWRY72vf55wScTNNnnJJ76y/agmX9jCr KMgaJbnGMen0duTf3mKSVRfO61hmHUTZAHVXDZuh8g6+eJcrPi/yHZsB7IxHJPga eKAAYObc71MTxPQKm9alIFA/J/1vhPq3LrJKmjMLGs35/5fLjnQ096lLTiLFlBj5 d1i5kBlr9Wa6LdU4v9JX4G+CUFxAUMI1xsZK/4191mD/hpMxC70WKtGm9n0Z5ydb TaS/A2DqEjzEkaUlEKSLPq7nGw32BWjO -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:37 2025 by rpki-client