This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json) Hash identifier: 6QwOz1vDiEcz7bfbYLL5/xOrQl9hiR2lIE0hkFDanew= Subject key identifier: E2:AA:42:55:4E:D9:16:8F:24:CB:04:A7:17:00:FE:A0:01:33:4D:56 Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 16DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft Manifest number: 16A9 Signing time: Fri 12 Dec 2025 16:34:07 +0000 Manifest this update: Fri 12 Dec 2025 16:34:06 +0000 Manifest next update: Fri 19 Dec 2025 16:34:06 +0000 Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: lIKWjnSYOyx/ZFyjiiYFlxD0Q1i4i8u2Kva4erSdHs8=) 2: 125EA39CBE0311F0BD65F062C4F9AE02.roa (hash: USmtuTTmRco0BEBl+7v5NzI0IPVnUkLZyU5TqgVNBVA=) 3: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: vU1HGyruT0rWn1hdwhJaA7GCZtlR47+81PGq+koUgEQ=) 4: A923DDA2BE0211F090AD9F13C4F9AE02.roa (hash: rJPMOVrpncAhvub4ptLK3aMWfe/wCmar13ef6P+IuQs=) 5: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: wdVUeFPPp5Pt9fuTweBdrE45i6lKsYNin+xhFp9XCWU=) 6: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: 4whCD3BefA16gco8GRXsiAdGqv5E31DbZxV0ybOWul8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 16:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5854 (0x16de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: Dec 12 16:34:06 2025 GMT Not After : Dec 19 16:34:06 2025 GMT Subject: CN=693c43ff-da82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:36:e2:98:70:fa:f3:86:5f:c7:a2:ca:7a:c8: ae:a4:fc:c0:08:e3:3d:83:d0:fe:b6:19:e8:5f:be: 69:58:31:13:b8:94:5c:55:8f:c0:9c:a6:44:85:e3: 79:34:e6:a2:b8:60:2d:aa:d3:ec:a6:b0:b4:5b:7c: 10:e5:78:58:1a:bc:aa:ef:08:0d:99:31:4a:94:7b: bc:2e:cb:71:33:3f:b6:6c:94:aa:65:25:d9:cd:ea: 06:12:9b:43:46:76:71:fe:f3:a5:2c:ce:ce:63:95: 70:81:e3:76:64:d4:9c:ce:f5:e9:45:5e:5f:02:b1: 87:10:3e:9b:4e:9a:69:f1:71:d6:47:aa:2e:8b:e8: c3:a6:8f:11:f8:2a:a1:d2:ee:80:02:c0:9e:99:eb: 88:55:71:8a:88:ff:27:ca:31:63:82:11:f5:07:7f: 8d:89:9a:19:c7:46:2d:f2:03:3d:39:5d:34:2c:11: 5a:74:e5:00:81:99:48:a2:40:70:a7:c4:8b:31:ad: 00:56:22:be:bb:33:16:14:07:01:7c:14:09:33:de: 0d:f7:4e:3e:57:1a:cc:79:bc:f1:50:73:cb:51:2b: 8d:6b:59:76:22:8c:49:e7:3d:14:00:de:86:ae:b2: 2e:78:cc:d1:1e:fb:dc:0b:7f:0d:36:50:c4:c6:ab: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AA:42:55:4E:D9:16:8F:24:CB:04:A7:17:00:FE:A0:01:33:4D:56 X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:fe:1e:c7:67:9f:63:8a:8e:1c:4a:35:3f:07:4d:de:f6:32: 1f:eb:52:ae:95:6d:29:21:17:e3:92:69:3a:97:51:ca:0c:16: 93:d1:da:1d:2a:8b:87:1f:7e:31:40:ff:1d:b3:09:62:a1:de: f7:d3:15:ba:0b:59:04:fb:38:12:d3:09:e6:cb:42:8e:62:ef: b0:5e:08:e3:c4:ea:1d:d7:d0:47:d4:b5:a1:bc:6d:47:2a:b4: 7d:74:59:4f:fc:9d:4e:47:a9:dc:19:6d:31:b3:9a:cc:86:a3: 0c:93:c2:b0:22:28:31:a0:77:d8:41:e1:31:6b:09:90:31:9e: 5d:60:42:23:53:1e:eb:05:ca:57:58:91:52:d2:9e:d4:bd:8a: 67:90:8f:f2:be:40:b6:64:b3:be:ac:37:7a:bf:1c:8c:52:2e: fd:46:ee:90:28:97:0f:8a:4a:19:25:85:18:60:c4:e6:72:8c: 0c:d4:07:e8:86:4c:08:a9:3d:89:a0:46:a9:5f:62:63:c0:dd: 49:f2:06:6d:64:60:26:1d:a9:88:6d:3b:64:03:9a:89:10:25: 36:8e:b7:4c:3a:da:5f:97:0d:68:b5:d5:ab:77:ba:11:71:d1: 16:db:78:6d:ad:10:64:40:8a:e0:54:fc:ed:c3:98:1b:f9:b3: a4:22:74:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjUxMjEyMTYzNDA2WhcNMjUxMjE5MTYzNDA2WjAYMRYwFAYD VQQDDA02OTNjNDNmZi1kYTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TbimHD684Zfx6LKesiupPzACOM9g9D+thnoX75pWDETuJRcVY/AnKZEheN5 NOaiuGAtqtPsprC0W3wQ5XhYGryq7wgNmTFKlHu8LstxMz+2bJSqZSXZzeoGEptD RnZx/vOlLM7OY5VwgeN2ZNSczvXpRV5fArGHED6bTppp8XHWR6oui+jDpo8R+Cqh 0u6AAsCemeuIVXGKiP8nyjFjghH1B3+NiZoZx0Yt8gM9OV00LBFadOUAgZlIokBw p8SLMa0AViK+uzMWFAcBfBQJM94N904+VxrMebzxUHPLUSuNa1l2IoxJ5z0UAN6G rrIueMzRHvvcC38NNlDExqt5OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKqQlVO 2RaPJMsEpxcA/qABM01WMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF/h7HZ59jio4cSjU/B03e9jIf61KulW0pIRfjkmk6l1HKDBaT0dod KouHH34xQP8dswliod730xW6C1kE+zgS0wnmy0KOYu+wXgjjxOod19BH1LWhvG1H KrR9dFlP/J1OR6ncGW0xs5rMhqMMk8KwIigxoHfYQeExawmQMZ5dYEIjUx7rBcpX WJFS0p7UvYpnkI/yvkC2ZLO+rDd6vxyMUi79Ru6QKJcPikoZJYUYYMTmcowM1Afo hkwIqT2JoEapX2JjwN1J8gZtZGAmHamIbTtkA5qJECU2jrdMOtpflw1otdWrd7oR cdEW23htrRBkQIrgVPztw5gb+bOkInRe -----END CERTIFICATE-----Generated at Fri Dec 12 18:49:22 2025 by rpki-client