This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft File: J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft (raw, json) Hash identifier: aXmMcAUL8y8BQAni2uGQOYvo3+zmZ1ENgIS5PnxctlU= Subject key identifier: A5:75:10:41:76:1A:49:45:90:5F:56:BA:C1:7D:AA:57:D1:A5:12:53 Authority key identifier: 27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E Certificate issuer: /CN=A91BF781/serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft Manifest number: 0184 Signing time: Mon 15 Dec 2025 03:08:10 +0000 Manifest this update: Mon 15 Dec 2025 03:08:10 +0000 Manifest next update: Mon 22 Dec 2025 03:08:10 +0000 Files and hashes: 1: J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl (hash: dnEqOVPrfoalZfjrQzN8B5TZ4sYvvX+gO+2SAlQ3gok=) 2: A6DB1A549BB511EEAAE01C70C4F9AE02.roa (hash: qyWw2r/4K++h/y+FWYONqc3F4IP6pfba3UzSaIofnKI=) 3: DB78FCC4BB5211EE8EB48761C4F9AE02.roa (hash: HxiTvfOZo9+zgn14NrA81k9rbeWuji7E8XDguoQ9w4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF781, serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E Validity Not Before: Dec 15 03:08:10 2025 GMT Not After : Dec 22 03:08:10 2025 GMT Subject: CN=693f7b9a-ed4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:86:27:94:9f:76:28:fe:90:2b:ce:06:f9:b6: 53:e3:1e:74:3d:95:9d:13:da:e1:12:da:63:5d:c2: f6:7e:6d:de:f9:9e:5b:74:b2:f6:f1:5b:ee:28:19: 40:8e:44:83:5e:cb:2f:07:1f:3f:4d:f1:d3:bd:5c: 00:71:bd:bb:89:38:5c:d5:cc:70:5e:e6:59:38:01: b7:fb:3d:60:ee:a9:b1:63:87:52:9f:a4:92:ab:3f: ef:12:01:c3:3f:7f:92:ed:ae:7a:0c:5b:e5:2b:45: 18:b9:9a:2b:d4:84:a3:b0:9b:8b:71:8f:e3:7e:7f: c0:14:76:4f:25:50:62:40:43:4d:f6:a5:80:aa:eb: f8:a0:8a:6b:0b:59:af:6f:2b:f8:35:e7:8e:c2:13: 1c:25:42:71:36:3a:79:2c:e1:80:fc:c5:c8:6b:9b: 17:f3:8d:a2:2d:5b:eb:a5:78:47:39:d5:ce:ff:0a: bf:65:90:47:8a:89:23:a0:d5:7d:8a:90:9c:b5:4b: 16:a0:89:d7:62:f9:c0:30:21:b9:d6:4c:19:65:45: 37:c5:a4:b2:31:04:28:cf:61:8a:06:e0:68:9f:a8: ac:d1:db:f7:9b:4b:55:b1:f5:30:8c:95:2f:be:6e: 38:85:d5:38:c5:7e:71:9b:ab:21:aa:fc:0d:44:50: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:75:10:41:76:1A:49:45:90:5F:56:BA:C1:7D:AA:57:D1:A5:12:53 X509v3 Authority Key Identifier: keyid:27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:77:a8:6a:a2:f3:07:a1:0a:32:41:45:1f:1b:90:30:04:c8: aa:52:e1:dc:7c:22:62:2d:43:43:52:d2:ff:29:c1:58:b4:19: d5:94:9a:ec:93:65:54:d2:e4:da:93:40:df:40:5e:b7:bc:6e: ad:cf:37:64:b2:60:a2:0b:62:a7:db:67:78:65:6e:b3:f5:7f: a2:c4:b5:52:45:1d:55:0c:c1:ca:cb:1e:e6:c3:44:83:df:a0: fa:d1:29:8b:0f:74:bf:26:40:fe:e6:e8:99:ba:59:11:82:e4: a0:9d:9a:79:37:ad:25:72:94:88:3a:43:7e:c3:45:01:6a:8d: 8b:14:36:a0:cd:73:ca:46:09:ed:9f:bc:a5:f1:d4:70:27:70: 03:8e:6f:bb:7c:c7:a4:e2:c9:b2:ed:7a:02:aa:3d:3e:79:6e: 08:dc:bb:cc:09:16:df:69:8b:da:6d:1c:e1:b9:b2:c3:30:54: e0:17:3e:09:c2:0e:08:2b:3c:ee:d6:ca:ce:1a:e0:38:f0:38: 27:89:f6:0f:7a:8c:b5:f1:ac:d8:57:8d:5b:a7:b2:7e:02:2f: 77:5b:e8:96:e4:b5:24:5d:5d:bc:7d:06:fb:a7:9f:b2:9f:82: c9:cf:25:44:e3:98:1e:1d:b7:34:b3:67:e8:6d:bc:28:e3:0d: 77:8d:58:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3ODExMTAvBgNVBAUTKDI3NjlBNEZBOTIyOTdEQ0IxREY4OTZEQUU2MzczOTk2 RkQzMTgwNkUwHhcNMjUxMjE1MDMwODEwWhcNMjUxMjIyMDMwODEwWjAYMRYwFAYD VQQDDA02OTNmN2I5YS1lZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oYnlJ92KP6QK84G+bZT4x50PZWdE9rhEtpjXcL2fm3e+Z5bdLL28VvuKBlA jkSDXssvBx8/TfHTvVwAcb27iThc1cxwXuZZOAG3+z1g7qmxY4dSn6SSqz/vEgHD P3+S7a56DFvlK0UYuZor1ISjsJuLcY/jfn/AFHZPJVBiQENN9qWAquv4oIprC1mv byv4NeeOwhMcJUJxNjp5LOGA/MXIa5sX842iLVvrpXhHOdXO/wq/ZZBHiokjoNV9 ipCctUsWoInXYvnAMCG51kwZZUU3xaSyMQQoz2GKBuBon6is0dv3m0tVsfUwjJUv vm44hdU4xX5xm6shqvwNRFA0VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKV1EEF2 GklFkF9WusF9qlfRpRJTMB8GA1UdIwQYMBaAFCdppPqSKX3LHfiW2uY3OZb9MYBu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc4MS83NTA3MEE0QTk2 QUQxMUVFOUY1Rjg0NURDNEY5QUUwMi9KMm1rLXBJcGZjc2QtSmJhNWpjNWx2MHhn RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oybWstcElwZmNzZC1KYmE1amM1bHYweGdHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc4MS83NTA3MEE0QTk2QUQxMUVFOUY1Rjg0NURDNEY5QUUwMi9KMm1rLXBJcGZj c2QtSmJhNWpjNWx2MHhnRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBad6hqovMHoQoyQUUfG5AwBMiqUuHcfCJiLUNDUtL/KcFYtBnVlJrs k2VU0uTak0DfQF63vG6tzzdksmCiC2Kn22d4ZW6z9X+ixLVSRR1VDMHKyx7mw0SD 36D60SmLD3S/JkD+5uiZulkRguSgnZp5N60lcpSIOkN+w0UBao2LFDagzXPKRgnt n7yl8dRwJ3ADjm+7fMek4smy7XoCqj0+eW4I3LvMCRbfaYvabRzhubLDMFTgFz4J wg4IKzzu1srOGuA48DgnifYPeoy18azYV41bp7J+Ai93W+iW5LUkXV28fQb7p5+y n4LJzyVE45geHbc0s2fobbwo4w13jVjb -----END CERTIFICATE-----Generated at Tue Dec 16 18:46:14 2025 by rpki-client