This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: B5xrkOxG7v4n3gYiesx+jOR3X8v8iU9dw9jL1uaoI5A= Subject key identifier: 5B:FF:63:8D:1B:D6:38:72:7E:09:FE:49:6F:2C:FC:1D:B9:5D:AF:5F Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 017C Signing time: Sun 21 Dec 2025 03:00:13 +0000 Manifest this update: Sun 21 Dec 2025 03:00:13 +0000 Manifest next update: Sun 28 Dec 2025 03:00:13 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: C7fC6vKhaiVsI+mwdvSAZ+qxC7ot+1t6680rwYaDtVI=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: CXeDI74nzeVdWZWZG8BaGKP34Wh7rNPwHEDpbZwBOoA=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: NNCNBr7JAI2EgoMi/J/SbTBIH8Xqii5QpYwBz3vHqxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Dec 21 03:00:13 2025 GMT Not After : Dec 28 03:00:13 2025 GMT Subject: CN=694762bd-ba36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:72:64:cd:67:d5:7f:5e:d3:52:0c:b6:e6: b0:35:a3:35:db:2c:f4:82:f3:eb:7b:eb:68:e2:68: 85:2d:b5:18:79:b8:2d:2a:55:26:d8:ed:b9:18:24: da:f2:18:49:1a:15:62:b2:81:b8:60:e9:b8:4c:70: 9b:aa:fe:82:ff:00:fd:5d:6d:41:50:df:74:c0:32: 9a:bc:35:89:35:3e:f8:9a:e3:51:b7:57:9a:5c:e9: 9f:ca:5c:ac:9c:f1:6f:94:8f:57:9f:ea:5d:3c:58: d2:81:b1:89:ed:a6:1b:ee:e2:59:d6:22:1a:73:c3: 7c:71:bc:f9:ec:a9:6c:d5:2a:41:e5:a6:51:35:e2: 92:ff:17:64:3b:8c:e8:ef:94:15:ec:17:0d:3a:d2: 9b:f4:67:bf:fe:13:29:20:ce:72:d1:2a:0f:a6:0c: c2:24:5f:5c:e0:94:24:a6:84:96:53:03:94:79:86: 6d:fd:a2:24:c2:b0:46:0e:05:72:7c:85:ad:7a:47: 61:7e:37:46:bb:02:67:ac:c5:11:c0:37:e7:cc:b2: 9f:30:e0:2e:24:5e:9c:94:a8:01:a9:84:4e:8b:1d: 2e:5a:58:33:77:08:b7:53:df:81:db:eb:83:92:a1: 81:15:48:68:16:74:32:87:85:07:bc:37:4a:ba:c5: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FF:63:8D:1B:D6:38:72:7E:09:FE:49:6F:2C:FC:1D:B9:5D:AF:5F X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:64:66:6c:59:b7:e7:f0:cf:6f:88:b9:43:58:49:9b:d9:eb: af:17:c9:22:00:07:24:81:6b:d6:49:10:1d:ef:4f:64:5e:fe: da:86:90:3c:13:62:4d:e7:25:d5:e6:94:b6:23:85:46:9e:58: dd:23:e1:35:b1:3a:ff:c7:99:23:c2:be:c5:6e:b0:a8:e6:69: c7:a1:49:79:a0:44:e8:5a:af:d1:0a:d8:31:94:95:ea:e8:ae: 3d:bc:5d:13:21:b9:b2:20:51:07:47:bb:01:86:a6:d1:10:63: 82:78:88:72:43:c2:ed:cc:cf:3a:2b:77:ce:f3:ca:e2:bc:71: 0d:4e:75:f3:ba:7e:8c:0d:74:1b:cf:15:12:37:4f:71:46:94: 36:b7:33:85:bb:e2:ca:84:d2:ec:a5:be:13:0b:b7:7a:0d:7d: 16:c1:97:2a:79:a4:c3:bf:69:d9:bd:ff:67:3d:ef:0e:d6:2b: 38:a0:45:56:06:ce:7d:cb:bb:43:7d:1a:b3:23:5e:22:81:2f: 72:ef:a0:be:56:66:56:56:b9:10:8d:29:e1:e7:4e:e3:c5:37: 37:a0:6e:3b:f7:15:8c:92:a0:ae:db:fd:ce:52:21:29:90:ed: f6:9f:02:88:6f:04:5d:a9:17:a6:89:e4:08:5c:49:51:0e:7f: 13:d0:54:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjUxMjIxMDMwMDEzWhcNMjUxMjI4MDMwMDEzWjAYMRYwFAYD VQQDDA02OTQ3NjJiZC1iYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYlyZM1n1X9e01IMtuawNaM12yz0gvPre+to4miFLbUYebgtKlUm2O25GCTa 8hhJGhVisoG4YOm4THCbqv6C/wD9XW1BUN90wDKavDWJNT74muNRt1eaXOmfylys nPFvlI9Xn+pdPFjSgbGJ7aYb7uJZ1iIac8N8cbz57Kls1SpB5aZRNeKS/xdkO4zo 75QV7BcNOtKb9Ge//hMpIM5y0SoPpgzCJF9c4JQkpoSWUwOUeYZt/aIkwrBGDgVy fIWtekdhfjdGuwJnrMURwDfnzLKfMOAuJF6clKgBqYROix0uWlgzdwi3U9+B2+uD kqGBFUhoFnQyh4UHvDdKusU5UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFv/Y40b 1jhyfgn+SW8s/B25Xa9fMB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNZGZsWbfn8M9viLlDWEmb2euvF8kiAAckgWvWSRAd709kXv7ahpA8 E2JN5yXV5pS2I4VGnljdI+E1sTr/x5kjwr7FbrCo5mnHoUl5oEToWq/RCtgxlJXq 6K49vF0TIbmyIFEHR7sBhqbREGOCeIhyQ8LtzM86K3fO88rivHENTnXzun6MDXQb zxUSN09xRpQ2tzOFu+LKhNLspb4TC7d6DX0WwZcqeaTDv2nZvf9nPe8O1is4oEVW Bs59y7tDfRqzI14igS9y76C+VmZWVrkQjSnh507jxTc3oG479xWMkqCu2/3OUiEp kO32nwKIbwRdqRemieQIXElRDn8T0FS+ -----END CERTIFICATE-----Generated at Mon Dec 22 22:14:54 2025 by rpki-client