This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft File: jUEzbLXQr_8QKCFtlTS7fgLD54U.mft (raw, json) Hash identifier: h/O5LsqgcMPxFxtYstrCc82QFMhZGjOIm1jzMOwWce8= Subject key identifier: 68:AD:C0:E3:BE:83:3F:35:62:85:4F:1D:87:67:43:73:34:89:EB:02 Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Certificate serial: 08E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft Manifest number: 08E2 Signing time: Mon 22 Dec 2025 19:45:38 +0000 Manifest this update: Mon 22 Dec 2025 19:45:38 +0000 Manifest next update: Mon 29 Dec 2025 19:45:38 +0000 Files and hashes: 1: jUEzbLXQr_8QKCFtlTS7fgLD54U.crl (hash: q6d4yj9j9onzmBqJ2x6AXDefb7hRoiEJi+Vw4080768=) 2: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (hash: oyNqHuI92CZn4/vowEHhL13J2MzcFLxMYrnO9NR1z4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2280 (0x8e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C254D, serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Validity Not Before: Dec 22 19:45:38 2025 GMT Not After : Dec 29 19:45:38 2025 GMT Subject: CN=69499fe2-4a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:85:a6:33:00:ec:33:ac:b6:f6:84:a1:45: cf:ce:8e:af:a3:63:cc:f8:1d:f3:f1:05:d5:5c:b7: 53:9a:31:66:f8:24:7a:b3:dd:0a:ae:7b:54:dc:3f: 66:f6:e6:30:1e:05:03:90:eb:26:04:02:ea:b0:60: a9:52:82:69:e5:56:58:c8:d4:b0:ae:6f:2a:2e:40: ab:d9:c1:38:ad:bb:00:c9:0a:b4:e9:3d:a0:9a:03: 3f:48:dd:81:ac:da:77:72:fd:9b:ac:63:14:8b:06: fc:3b:95:04:c9:4d:f3:f5:5c:41:53:03:82:47:19: 2b:9a:49:6d:a6:ff:8e:66:1e:69:4b:11:88:31:01: f1:a2:1e:2c:10:41:c2:6a:e4:64:00:02:01:07:62: 34:11:e7:fe:07:f7:bf:8e:ee:36:bb:d6:86:a5:9c: 2c:f8:05:62:4b:b4:ef:e1:d2:38:aa:01:cc:e1:c8: 0b:78:42:6c:8e:60:d5:90:24:08:bb:0a:45:87:2f: bd:a4:24:b8:90:99:11:e4:43:14:8e:a1:a4:5d:51: 1d:59:0d:4b:cd:28:28:ed:9a:8d:39:b5:7e:5a:16: 4a:c0:2c:91:dc:56:4c:6f:b4:d8:ce:a0:d4:a8:7f: 2a:70:17:45:6f:bb:8a:05:99:61:01:57:e1:1a:e2: 82:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AD:C0:E3:BE:83:3F:35:62:85:4F:1D:87:67:43:73:34:89:EB:02 X509v3 Authority Key Identifier: keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b4:7b:62:28:95:51:16:7a:22:4a:f3:a3:f2:4c:7d:d4:ac: 03:eb:b2:fe:7e:7d:40:d4:f9:e9:0a:68:49:72:b3:c1:38:d5: 05:7b:27:7d:1a:c8:88:89:b8:d6:3f:f4:4c:a9:85:f4:9d:4b: a0:b7:63:76:60:0c:41:ca:56:c1:3f:14:7f:42:6d:1d:24:c1: 63:f8:d0:38:46:65:71:0a:5a:95:8c:ec:4d:3c:db:48:74:14: 57:f3:80:d9:a1:ed:49:ec:10:5a:24:f1:c2:a5:16:47:ad:15: 77:2b:cf:13:55:ba:85:05:3f:7e:95:a0:92:c6:6b:70:06:26: 3d:10:4d:67:ed:8f:35:6e:e5:1a:39:67:53:0e:91:c9:a9:6d: 73:6a:5e:fa:37:bd:77:84:7c:0b:ac:e6:97:fc:49:0f:41:f8: 96:f3:37:68:21:e4:66:b7:4b:9a:06:4c:01:30:b1:a1:c3:ff: 11:f2:e7:74:ae:21:82:4e:10:1d:6b:a5:39:bb:1d:96:5e:7c: c4:8e:0a:dd:cd:31:b1:7c:e8:12:08:9a:57:51:53:e4:1c:a4: f7:9f:7f:66:98:2d:4a:09:1b:fc:46:eb:4b:f9:81:b4:bf:71: d1:a2:c5:f8:5d:8d:08:3a:81:f5:89:f5:52:2f:3f:7c:0f:7b: 15:cc:42:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI1NEQxMTAvBgNVBAUTKDhENDEzMzZDQjVEMEFGRkYxMDI4MjE2RDk1MzRCQjdF MDJDM0U3ODUwHhcNMjUxMjIyMTk0NTM4WhcNMjUxMjI5MTk0NTM4WjAYMRYwFAYD VQQDDA02OTQ5OWZlMi00YTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6WFpjMA7DOstvaEoUXPzo6vo2PM+B3z8QXVXLdTmjFm+CR6s90KrntU3D9m 9uYwHgUDkOsmBALqsGCpUoJp5VZYyNSwrm8qLkCr2cE4rbsAyQq06T2gmgM/SN2B rNp3cv2brGMUiwb8O5UEyU3z9VxBUwOCRxkrmkltpv+OZh5pSxGIMQHxoh4sEEHC auRkAAIBB2I0Eef+B/e/ju42u9aGpZws+AViS7Tv4dI4qgHM4cgLeEJsjmDVkCQI uwpFhy+9pCS4kJkR5EMUjqGkXVEdWQ1LzSgo7ZqNObV+WhZKwCyR3FZMb7TYzqDU qH8qcBdFb7uKBZlhAVfhGuKCqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGitwOO+ gz81YoVPHYdnQ3M0iesCMB8GA1UdIwQYMBaAFI1BM2y10K//ECghbZU0u34Cw+eF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjU0RC84Q0U2MkRGQUMx QTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJfOFFLQ0Z0bFRTN2ZnTEQ1 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVRXpiTFhRcl84UUtDRnRsVFM3ZmdMRDU0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjU0RC84Q0U2MkRGQUMxQTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJf OFFLQ0Z0bFRTN2ZnTEQ1NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMtHtiKJVRFnoiSvOj8kx91KwD67L+fn1A1PnpCmhJcrPBONUFeyd9 GsiIibjWP/RMqYX0nUugt2N2YAxBylbBPxR/Qm0dJMFj+NA4RmVxClqVjOxNPNtI dBRX84DZoe1J7BBaJPHCpRZHrRV3K88TVbqFBT9+laCSxmtwBiY9EE1n7Y81buUa OWdTDpHJqW1zal76N713hHwLrOaX/EkPQfiW8zdoIeRmt0uaBkwBMLGhw/8R8ud0 riGCThAda6U5ux2WXnzEjgrdzTGxfOgSCJpXUVPkHKT3n39mmC1KCRv8RutL+YG0 v3HRosX4XY0IOoH1ifVSLz98D3sVzEJj -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:36 2025 by rpki-client