This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json) Hash identifier: XcwsXo3yosI7ALS0cLwOmqINio5Boyxd0oOJbimCsyE= Subject key identifier: 85:3F:02:E4:1F:45:5A:1E:8A:2A:5E:2B:0A:A9:67:DE:28:37:32:AA Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft Manifest number: F7 Signing time: Tue 23 Dec 2025 04:12:01 +0000 Manifest this update: Tue 23 Dec 2025 04:12:01 +0000 Manifest next update: Tue 30 Dec 2025 04:12:01 +0000 Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: EzzPzhFrgGI1X7eb7QiHvv9YSJF9q/IZ5Uti1AbBbLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Validity Not Before: Dec 23 04:12:01 2025 GMT Not After : Dec 30 04:12:01 2025 GMT Subject: CN=694a1691-2d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:2c:2c:6f:ba:05:8f:67:02:50:59:86:32: d1:c8:aa:66:9b:be:95:93:bb:6a:85:2c:6a:17:a3: ca:2d:e7:d8:d3:14:0c:ec:a5:79:fa:61:05:81:4f: 7c:70:fb:17:98:3d:29:5b:bc:d2:70:ef:21:f4:33: d4:cb:b4:27:10:41:ac:dd:fb:c7:29:fa:be:c2:98: 08:2a:93:8a:df:85:38:4d:57:a9:16:0a:6b:90:9f: 2a:64:8b:4f:cd:32:11:28:bc:52:c3:10:ee:8e:c9: 27:83:bf:ad:11:b5:d0:d4:1e:6b:40:b8:90:ed:92: 2e:fc:6b:2a:a8:ed:4d:fb:3d:21:25:29:d5:4c:fe: ae:4c:29:8d:a7:f3:5b:41:83:4b:17:01:5a:25:e9: 04:eb:27:a8:16:61:a4:38:3d:c5:60:79:92:7b:0f: 4e:2a:c2:f1:35:47:cb:ba:e9:62:4e:1f:8b:ab:f7: 9f:6d:13:f6:58:70:4d:17:f9:d1:6c:98:1d:ee:07: 7f:e6:54:06:e4:4e:15:b3:43:ca:bf:19:97:aa:44: 20:37:0b:31:41:19:bf:34:7a:7a:7b:0c:ef:dc:04: da:b1:af:e3:61:c0:56:cd:af:3e:2e:53:20:13:fa: c0:fd:03:d0:6c:0e:e0:e0:4b:54:8b:9d:50:12:a0: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3F:02:E4:1F:45:5A:1E:8A:2A:5E:2B:0A:A9:67:DE:28:37:32:AA X509v3 Authority Key Identifier: keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:47:8f:37:f6:34:07:ce:4f:2f:57:5a:17:b7:9d:05:82:6b: db:22:86:3b:fe:73:63:ed:5e:1c:fd:65:40:0f:82:f5:ca:ae: 43:b6:ee:f2:f6:94:22:96:9b:29:9a:7c:7b:47:8f:2d:9c:c1: 43:2f:55:db:41:6b:38:1a:dc:e6:bc:8c:07:38:7b:6f:20:37: 26:a4:03:e8:43:65:99:f0:05:c4:54:29:b9:47:33:dc:b9:c9: 2d:f7:2b:ea:79:ec:40:8a:aa:fe:a0:71:ca:8b:f7:c0:af:b8: 16:5f:20:d9:c4:ec:c8:bb:99:06:a5:cb:0c:7c:a0:3e:37:45: 7c:ad:0f:96:57:0c:ba:70:63:28:ea:bc:c3:a5:57:0c:73:09: 93:7e:01:2b:cd:55:4b:4a:1e:7b:04:da:58:1c:7b:78:32:ce: 9a:93:52:99:aa:a1:5b:17:f2:ca:1f:1b:c2:28:96:6e:93:08: 35:3d:ed:ff:0c:7e:f4:b6:e9:0f:70:e5:37:d8:0e:4c:88:2a: f5:ec:66:1b:2b:ff:f5:b7:eb:89:eb:84:37:21:d7:f2:81:cc: 47:b8:77:e4:7d:74:f7:e2:75:4c:d1:a7:50:59:29:72:0a:a1: 54:df:12:79:3a:62:b1:53:1b:a4:dc:f9:fd:4f:61:c9:97:19: f8:13:f2:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKDhFOEIzNDYzOUVBNTRERjgxMEI5MkJDQkE3NDI3MDRF NEM4ODQyQzIwHhcNMjUxMjIzMDQxMjAxWhcNMjUxMjMwMDQxMjAxWjAYMRYwFAYD VQQDDA02OTRhMTY5MS0yZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DQsLG+6BY9nAlBZhjLRyKpmm76Vk7tqhSxqF6PKLefY0xQM7KV5+mEFgU98 cPsXmD0pW7zScO8h9DPUy7QnEEGs3fvHKfq+wpgIKpOK34U4TVepFgprkJ8qZItP zTIRKLxSwxDujskng7+tEbXQ1B5rQLiQ7ZIu/GsqqO1N+z0hJSnVTP6uTCmNp/Nb QYNLFwFaJekE6yeoFmGkOD3FYHmSew9OKsLxNUfLuuliTh+Lq/efbRP2WHBNF/nR bJgd7gd/5lQG5E4Vs0PKvxmXqkQgNwsxQRm/NHp6ewzv3ATasa/jYcBWza8+LlMg E/rA/QPQbA7g4EtUi51QEqDjxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIU/AuQf RVoeiipeKwqpZ94oNzKqMB8GA1UdIwQYMBaAFI6LNGOepU34ELkry6dCcE5MiELC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9EOTY1QkE0MDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRmZ1F1U3ZMcDBKd1RreUlR c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9EOTY1QkE0MDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRm Z1F1U3ZMcDBKd1RreUlRc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFR4839jQHzk8vV1oXt50FgmvbIoY7/nNj7V4c/WVAD4L1yq5Dtu7y 9pQilpspmnx7R48tnMFDL1XbQWs4GtzmvIwHOHtvIDcmpAPoQ2WZ8AXEVCm5RzPc uckt9yvqeexAiqr+oHHKi/fAr7gWXyDZxOzIu5kGpcsMfKA+N0V8rQ+WVwy6cGMo 6rzDpVcMcwmTfgErzVVLSh57BNpYHHt4Ms6ak1KZqqFbF/LKHxvCKJZukwg1Pe3/ DH70tukPcOU32A5MiCr17GYbK//1t+uJ64Q3IdfygcxHuHfkfXT34nVM0adQWSly CqFU3xJ5OmKxUxuk3Pn9T2HJlxn4E/L2 -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:58 2025 by rpki-client