This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json) Hash identifier: Qir8TldUnOtr6Yg5K8qBujO+SFuCpQ2zPx4lXyR5BQ4= Subject key identifier: 1A:6F:0C:C4:22:11:BB:CE:C2:47:64:CA:28:D4:C4:B1:F9:59:2B:D6 Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 0AC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft Manifest number: 0A9E Signing time: Wed 31 Dec 2025 19:16:44 +0000 Manifest this update: Wed 31 Dec 2025 19:16:44 +0000 Manifest next update: Wed 07 Jan 2026 19:16:44 +0000 Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: 55w+/IagbEi7lZAw1dg25MvS0AYwSXW0h2qxx0sl65o=) 2: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: EvThvFOZKz48161MvTnVXiDNJ6HNF5HAel5hAOJCG+c=) 3: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: WTs+9o9qNNM6mr7pnkWN7ajLcOyi6E/nvXwiULfR9Fc=) 4: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: RtmiTTWdzbSA6sjEHPl66WT8irnWI6qg0r7cthFL2r8=) 5: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: FXrJzxpIMY/mjFWppW9CWCLKoy10/on9Vdnxt1X4PXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 19:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2754 (0xac2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Dec 31 19:16:44 2025 GMT Not After : Jan 7 19:16:44 2026 GMT Subject: CN=6955769c-23c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:93:b9:e2:3d:6a:b9:01:c5:3f:3b:a4:ad:bd: fb:75:86:0b:0a:d8:85:24:f4:2e:ba:c7:cb:83:e1: 48:b8:3c:32:b3:cc:85:17:1c:b7:ef:45:63:1d:20: 9a:ef:67:1f:88:be:c0:a1:bd:3a:2e:62:56:34:e2: d0:a8:2f:d9:af:63:82:9a:35:bd:7e:6d:b4:94:7f: 34:ec:c3:34:08:53:e5:48:9d:db:fb:e1:93:7c:48: f5:bc:9c:ed:ce:76:1d:3d:90:c8:47:4e:8b:ef:c4: be:d2:76:f7:37:bf:14:66:4c:47:53:c5:fa:6b:a6: 75:95:63:2b:ca:3b:e6:f5:34:01:17:23:fd:b6:f0: fc:38:e0:1d:40:83:b4:91:e4:06:59:bf:f5:cc:51: d9:d8:0b:ad:ba:d1:39:e2:5a:7a:f3:c7:95:35:bf: a6:c1:40:52:ba:a2:93:0f:32:79:74:1f:62:35:f4: 0d:00:35:7a:7b:8f:9d:9f:f2:d6:66:16:c6:78:1c: 1a:fa:77:9e:a8:aa:64:56:9e:d8:6b:f7:93:6f:1a: ac:80:f7:ff:f1:6a:7d:62:c8:93:3f:ae:7b:28:76: 76:46:72:2f:67:fb:54:70:fc:11:df:2d:67:0e:80: 65:d6:11:fe:d4:a7:79:19:da:53:fa:8e:e0:74:cc: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6F:0C:C4:22:11:BB:CE:C2:47:64:CA:28:D4:C4:B1:F9:59:2B:D6 X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:72:28:91:88:20:bf:cc:34:f7:41:3b:a9:bf:12:9e:85:1b: 02:6b:2f:48:b1:96:64:ca:0c:e0:f5:c4:41:e9:44:d5:85:7e: 2e:6d:fe:26:7e:bf:9b:23:bd:d7:df:23:37:7d:37:f1:bc:b5: 22:41:3a:f2:31:28:be:a0:7e:5f:1f:d2:f1:04:fc:82:76:b7: cf:28:0f:02:66:29:c0:e4:81:13:98:20:15:cd:01:7d:8a:15: e1:0b:67:19:36:fa:a0:04:18:15:b4:55:83:8d:db:b4:ea:c8: b8:80:9e:fc:e1:3b:00:a0:40:b5:af:d3:e8:0c:01:9b:50:bd: f3:a9:fd:a4:3b:af:b0:40:61:68:ce:02:d7:9e:8c:fa:5f:09: 73:3a:9a:51:75:84:ea:86:b3:fc:2a:ac:5b:f6:f0:82:71:b1: 60:f8:2a:20:ac:09:ff:35:49:2b:b9:b0:04:d5:eb:be:e9:65: 06:28:18:38:0b:f2:6d:8e:cf:c8:29:6e:fa:ee:88:37:b2:e9: c0:81:41:a9:20:f4:e7:9b:7a:8d:08:de:7f:70:ff:b9:a8:09: 76:bb:d4:07:6c:5d:59:37:c7:3c:c9:2b:66:4e:21:32:38:0e: 0c:52:ac:61:8b:dc:af:2b:a1:d0:a7:f7:2d:c9:ba:8c:04:a3: 02:ea:8b:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjUxMjMxMTkxNjQ0WhcNMjYwMTA3MTkxNjQ0WjAYMRYwFAYD VQQDDA02OTU1NzY5Yy0yM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh5O54j1quQHFPzukrb37dYYLCtiFJPQuusfLg+FIuDwys8yFFxy370VjHSCa 72cfiL7Aob06LmJWNOLQqC/Zr2OCmjW9fm20lH807MM0CFPlSJ3b++GTfEj1vJzt znYdPZDIR06L78S+0nb3N78UZkxHU8X6a6Z1lWMryjvm9TQBFyP9tvD8OOAdQIO0 keQGWb/1zFHZ2AututE54lp688eVNb+mwUBSuqKTDzJ5dB9iNfQNADV6e4+dn/LW ZhbGeBwa+neeqKpkVp7Ya/eTbxqsgPf/8Wp9YsiTP657KHZ2RnIvZ/tUcPwR3y1n DoBl1hH+1Kd5GdpT+o7gdMxooQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpvDMQi EbvOwkdkyijUxLH5WSvWMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZDQy9DREJDNTk4NjczMDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lY SDg2QmZHUlNQNE1xTnBGNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpciiRiCC/zDT3QTupvxKehRsCay9IsZZkygzg9cRB6UTVhX4ubf4m fr+bI73X3yM3fTfxvLUiQTryMSi+oH5fH9LxBPyCdrfPKA8CZinA5IETmCAVzQF9 ihXhC2cZNvqgBBgVtFWDjdu06si4gJ784TsAoEC1r9PoDAGbUL3zqf2kO6+wQGFo zgLXnoz6XwlzOppRdYTqhrP8Kqxb9vCCcbFg+CogrAn/NUkrubAE1eu+6WUGKBg4 C/Jtjs/IKW767og3sunAgUGpIPTnm3qNCN5/cP+5qAl2u9QHbF1ZN8c8yStmTiEy OA4MUqxhi9yvK6HQp/ctybqMBKMC6osn -----END CERTIFICATE-----Generated at Fri Jan 2 13:09:18 2026 by rpki-client