This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json) Hash identifier: VjdT6C6g4DY/RFBgf4EOrKSo4vKcpfi1VNU7sPhqFrM= Subject key identifier: B8:F8:24:02:00:1F:93:CC:E1:5D:E0:C5:9A:F6:AF:81:3E:86:78:83 Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft Manifest number: 0229 Signing time: Tue 23 Dec 2025 01:06:41 +0000 Manifest this update: Tue 23 Dec 2025 01:06:41 +0000 Manifest next update: Tue 30 Dec 2025 01:06:41 +0000 Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: tcgxIPKj21NguvFvtWTiLwOgLpMoscWvyEUa8B4nmCQ=) 2: 715C479841DD11F08CCC0259C4F9AE02.roa (hash: PhuNUYKM0kCgELYRDtpFqtUScEso5qA9zbEwuufi2/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Validity Not Before: Dec 23 01:06:41 2025 GMT Not After : Dec 30 01:06:41 2025 GMT Subject: CN=6949eb21-ec27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:18:8f:c9:98:a5:0c:6a:8c:a8:02:7d:f7: 5e:e7:54:22:e2:a1:6a:0e:e9:96:ce:34:25:d4:e4: 1e:3f:37:b5:dd:d2:f6:2c:5d:3b:1f:64:54:63:95: 37:38:02:0d:c6:68:b5:82:a6:55:63:ba:33:04:d3: 58:1a:03:0b:82:40:f3:b7:80:d1:36:f7:75:24:be: cf:0f:13:3d:cd:ad:fe:3d:ad:c4:b7:f8:14:43:e3: 8b:dc:52:b1:bb:67:2c:c1:0e:a2:10:b1:7c:18:26: 91:25:8d:79:83:30:5f:33:3d:77:ef:c4:d1:06:a9: be:0d:db:95:3e:6f:5d:17:e1:f8:52:89:d0:63:d0: 38:2f:a5:55:e1:4d:35:98:90:fb:f1:72:d8:60:18: 3a:a8:e9:02:b9:7d:df:34:b1:00:15:0b:23:0e:b0: 90:4f:34:66:f0:f1:b8:19:b2:5f:c7:52:e4:94:80: 4e:27:1c:6f:80:33:f6:5a:4a:a7:5b:9e:50:83:df: d5:ef:df:3a:43:5d:c3:dd:5d:de:24:c4:98:46:2b: 67:44:0c:8f:84:0c:e6:a5:82:26:9c:70:70:3b:64: b6:d6:b2:5a:a3:c7:e3:ef:28:ea:0f:40:c8:67:be: 9b:e4:9c:91:13:39:27:dd:ee:ce:fc:38:db:7e:17: e4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F8:24:02:00:1F:93:CC:E1:5D:E0:C5:9A:F6:AF:81:3E:86:78:83 X509v3 Authority Key Identifier: keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:53:b6:60:7d:a3:8a:db:69:bf:19:aa:13:b6:dc:49:d9:f0: 2c:5a:13:b6:92:90:9f:a4:63:73:0f:e0:ca:d1:80:f6:44:1b: 5a:a2:5c:3c:5e:a9:2f:fc:ca:a9:b9:dd:f4:16:1f:2c:e1:8d: b5:e7:50:df:9e:41:5f:3e:9a:ae:91:db:75:96:c0:51:dc:b5: ba:c3:db:51:a2:0d:0d:5b:83:5f:da:40:cb:de:2d:b5:89:a4: 6e:90:6b:30:fc:22:4b:28:ca:d1:d2:a9:e2:e7:61:a6:54:fa: 6a:e0:cb:fd:50:1c:2d:3c:bd:fd:8d:4f:c7:f5:29:51:97:b6: 31:82:6e:00:53:b7:bb:f5:f4:e1:01:3b:32:47:0a:a5:1e:b1: 59:39:78:75:92:d6:51:27:81:b0:21:1b:2c:81:39:38:70:18: 0e:4a:b2:93:33:b3:d8:9b:ce:a9:d7:92:bf:81:e6:c1:7a:f3: f0:77:f9:b7:d4:f7:b9:66:55:24:c0:9d:0a:86:3d:5b:cb:7c: e1:18:62:c6:5b:fb:b4:73:81:a2:5f:5f:2c:63:12:68:d6:c2: ac:1d:66:45:7e:11:4b:24:8a:99:0a:af:74:9c:e6:2c:27:df: c3:a9:ca:0f:70:43:22:32:65:07:8d:48:a9:27:15:49:d7:17: 11:1c:08:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC QjE3NEVCMDgwHhcNMjUxMjIzMDEwNjQxWhcNMjUxMjMwMDEwNjQxWjAYMRYwFAYD VQQDDA02OTQ5ZWIyMS1lYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvggYj8mYpQxqjKgCffde51Qi4qFqDumWzjQl1OQePze13dL2LF07H2RUY5U3 OAINxmi1gqZVY7ozBNNYGgMLgkDzt4DRNvd1JL7PDxM9za3+Pa3Et/gUQ+OL3FKx u2cswQ6iELF8GCaRJY15gzBfMz1378TRBqm+DduVPm9dF+H4UonQY9A4L6VV4U01 mJD78XLYYBg6qOkCuX3fNLEAFQsjDrCQTzRm8PG4GbJfx1LklIBOJxxvgDP2Wkqn W55Qg9/V7986Q13D3V3eJMSYRitnRAyPhAzmpYImnHBwO2S21rJao8fj7yjqD0DI Z76b5JyREzkn3e7O/DjbfhfkJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLj4JAIA H5PM4V3gxZr2r4E+hniDMB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN aERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdU7ZgfaOK22m/GaoTttxJ2fAsWhO2kpCfpGNzD+DK0YD2RBtaolw8 Xqkv/Mqpud30Fh8s4Y2151DfnkFfPpqukdt1lsBR3LW6w9tRog0NW4Nf2kDL3i21 iaRukGsw/CJLKMrR0qni52GmVPpq4Mv9UBwtPL39jU/H9SlRl7Yxgm4AU7e79fTh ATsyRwqlHrFZOXh1ktZRJ4GwIRssgTk4cBgOSrKTM7PYm86p15K/gebBevPwd/m3 1Pe5ZlUkwJ0Khj1by3zhGGLGW/u0c4GiX18sYxJo1sKsHWZFfhFLJIqZCq90nOYs J9/DqcoPcEMiMmUHjUipJxVJ1xcRHAi6 -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:30 2025 by rpki-client