This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft File: JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json) Hash identifier: dQLc3ZIjqNv4Xmigu/6ELo3IQgxfPWUvXZRoAWNVpIU= Subject key identifier: B4:6D:CC:D0:86:1E:32:03:61:58:7C:A3:B4:D1:C3:5A:C4:D1:D0:65 Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Certificate serial: 0E54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft Manifest number: 0E2C Signing time: Mon 22 Dec 2025 17:02:14 +0000 Manifest this update: Mon 22 Dec 2025 17:02:14 +0000 Manifest next update: Mon 29 Dec 2025 17:02:14 +0000 Files and hashes: 1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: OSVr43wSsQMquXuYbw5vs6VHakaZIGgI5yo8WlV4YrQ=) 2: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: MeekIL6so4gjZtd7naeHv/pTHtXC6CO9tqXsAjmLWMY=) 3: 5CBAC63066DF11F0935CCC36C4F9AE02.roa (hash: MMhTJwyUJmHa7Fchm2S5tYiwrlXSG8WD1IWktZLzhpI=) 4: 525D3FA866D811F0A962E05FC4F9AE02.roa (hash: z09k51nzzFDblGF1ujAcm9UkE2oGVdDnqzxyRLL8JQk=) 5: 331C6A2C66DF11F0A3F38136C4F9AE02.roa (hash: kor8/NDnBK7P8dppMp/iyuN21sK3KmR3jpyTrgrDBxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3668 (0xe54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Validity Not Before: Dec 22 17:02:14 2025 GMT Not After : Dec 29 17:02:14 2025 GMT Subject: CN=69497996-ce91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:3e:f9:ad:57:22:2f:65:2b:86:74:90:34: 00:54:80:25:28:19:1e:b1:11:bc:f4:2a:d6:7e:12: f7:42:c8:70:f5:6a:e1:d1:0c:22:4c:a7:e8:63:33: 67:65:02:a9:b7:39:47:51:ce:d8:48:7b:cf:75:0a: 2d:0d:7c:5c:d5:3e:ee:f1:23:b2:de:6e:23:f6:2e: c0:b8:8a:85:29:48:21:84:bf:2d:ff:6d:c2:68:b3: 44:13:13:b6:31:3e:e3:eb:17:8a:df:fd:db:d0:2b: 1e:dd:77:7a:c3:b0:86:d3:2a:c1:7b:d6:2a:06:29: 2f:05:28:c1:4a:a8:45:4e:4a:49:46:25:12:ab:66: ba:29:98:aa:22:f9:71:12:ae:d3:97:08:e3:56:46: 4e:28:dc:52:f2:65:e3:fa:6a:57:0e:7b:f8:c8:72: f3:98:6f:3a:f6:eb:83:c4:d7:22:39:8e:42:e3:50: 8d:2a:ca:92:76:32:cb:7f:b8:11:9a:fe:60:62:77: 9a:5f:f5:98:d1:b2:23:2e:a6:3c:6f:c9:c9:17:d8: cb:d8:81:da:cf:b4:f2:09:ed:fb:b4:13:8d:01:f9: 01:64:74:d7:8b:26:8b:ce:13:c1:19:08:31:b0:82: e6:ee:11:c5:1c:16:1a:24:3d:2a:c8:ae:3a:81:a3: ea:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6D:CC:D0:86:1E:32:03:61:58:7C:A3:B4:D1:C3:5A:C4:D1:D0:65 X509v3 Authority Key Identifier: keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a2:41:4a:f3:be:ae:8b:d9:72:55:9a:d8:c3:f7:4e:3b:31: a1:55:3d:eb:7f:97:cf:09:d0:c4:45:51:ed:78:42:78:cf:03: 6c:78:6e:c3:53:4e:f7:e6:47:c3:d4:85:a7:44:28:f3:66:a0: 3e:d8:c3:7c:d2:a9:94:68:c5:80:28:c1:76:00:20:83:41:10: 4f:1f:e8:11:21:55:e2:10:66:b4:be:c9:fc:ae:67:a9:04:f1: da:6f:ae:e2:16:91:46:cc:5b:d0:d8:eb:a7:b8:59:c0:7b:d0: 9a:73:98:c8:30:70:0a:89:5b:d4:18:d8:4e:c6:01:54:21:57: 25:35:f1:53:7d:d7:61:8c:69:92:e4:58:51:de:af:9f:db:8f: 31:7b:99:bd:7c:68:dc:15:60:06:48:e8:a6:fd:d3:40:da:d1: 46:ce:7c:e7:0d:43:b8:ca:53:bf:00:0f:a7:e3:70:e8:70:b0: 0a:01:99:38:cf:14:48:22:a4:c0:c3:91:fe:51:79:90:1a:c6: f9:f5:b1:07:f1:e3:2b:21:09:c6:a7:e1:f6:a9:09:98:09:21: fd:96:5d:d5:14:73:f6:fd:3d:3e:f6:7c:b8:7c:de:22:d1:98: 50:35:3d:b0:34:e2:ae:97:c3:a1:a7:91:6c:90:e2:ad:28:8f: 1e:df:c1:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFMTkxMTAvBgNVBAUTKDI1NTI5MEEwMUFBOUI5MTE4QjY2RUVEQTBGOTA1RjZE NDBEQjA1QUUwHhcNMjUxMjIyMTcwMjE0WhcNMjUxMjI5MTcwMjE0WjAYMRYwFAYD VQQDDA02OTQ5Nzk5Ni1jZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGA++a1XIi9lK4Z0kDQAVIAlKBkesRG89CrWfhL3Qshw9Wrh0QwiTKfoYzNn ZQKptzlHUc7YSHvPdQotDXxc1T7u8SOy3m4j9i7AuIqFKUghhL8t/23CaLNEExO2 MT7j6xeK3/3b0Cse3Xd6w7CG0yrBe9YqBikvBSjBSqhFTkpJRiUSq2a6KZiqIvlx Eq7TlwjjVkZOKNxS8mXj+mpXDnv4yHLzmG869uuDxNciOY5C41CNKsqSdjLLf7gR mv5gYneaX/WY0bIjLqY8b8nJF9jL2IHaz7TyCe37tBONAfkBZHTXiyaLzhPBGQgx sILm7hHFHBYaJD0qyK46gaPqAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRtzNCG HjIDYVh8o7TRw1rE0dBlMB8GA1UdIwQYMBaAFCVSkKAaqbkRi2bu2g+QX21A2wWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUUxOS8zNTZGMkYzRUMx QTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVSR0xadTdhRDVCZmJVRGJC YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWS1FvQnFwdVJHTFp1N2FENUJmYlVEYkJhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUUxOS8zNTZGMkYzRUMxQTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVS R0xadTdhRDVCZmJVRGJCYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbokFK876ui9lyVZrYw/dOOzGhVT3rf5fPCdDERVHteEJ4zwNseG7D U0735kfD1IWnRCjzZqA+2MN80qmUaMWAKMF2ACCDQRBPH+gRIVXiEGa0vsn8rmep BPHab67iFpFGzFvQ2OunuFnAe9Cac5jIMHAKiVvUGNhOxgFUIVclNfFTfddhjGmS 5FhR3q+f248xe5m9fGjcFWAGSOim/dNA2tFGznznDUO4ylO/AA+n43DocLAKAZk4 zxRIIqTAw5H+UXmQGsb59bEH8eMrIQnGp+H2qQmYCSH9ll3VFHP2/T0+9ny4fN4i 0ZhQNT2wNOKul8Ohp5FskOKtKI8e38HU -----END CERTIFICATE-----Generated at Mon Dec 22 18:58:25 2025 by rpki-client