This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft File: JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json) Hash identifier: NygoqUN+vCnIrX6KU8LxjduZxyJPbzf8EHANLXa63/c= Subject key identifier: C5:06:F8:86:91:E2:70:4D:16:21:D0:4D:25:30:18:E5:EB:7D:E1:DC Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE Certificate issuer: /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft Manifest number: 4E Signing time: Tue 23 Dec 2025 06:11:18 +0000 Manifest this update: Tue 23 Dec 2025 06:11:17 +0000 Manifest next update: Tue 30 Dec 2025 06:11:17 +0000 Files and hashes: 1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: oBsgd7vK8xVSRH+saRnENBb+Eql0IMbRT8HDOkz7dWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Validity Not Before: Dec 23 06:11:17 2025 GMT Not After : Dec 30 06:11:17 2025 GMT Subject: CN=694a3285-aebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:00:da:b8:a0:5e:10:24:6b:29:58:36:5d:e3: 6a:93:8c:09:bb:d1:b1:54:a2:e8:88:39:92:11:16: 9a:99:b3:21:02:d8:f4:d2:28:95:af:bb:8f:e4:0e: 54:6e:a8:ac:c2:08:53:95:fb:87:ee:48:2f:1f:d8: c7:cc:47:1c:9b:1b:54:7b:bb:82:8f:05:b6:fd:d3: b0:27:8c:f3:2e:2a:14:08:e5:b3:fc:1a:05:6d:b2: 57:ac:40:26:b6:6b:5d:75:e9:df:80:34:4b:e9:40: a6:0e:f2:4b:08:31:14:7f:ff:0b:b6:46:a7:32:2a: 65:16:22:ce:eb:b0:ee:1f:42:15:51:25:d1:a2:55: 3a:ea:e0:6d:6d:d5:7b:dd:b6:7d:f3:85:f6:95:02: 28:c3:87:f4:1a:81:2e:6d:cd:a6:e7:bb:33:52:6c: c3:a8:f3:f2:40:df:5c:06:67:c1:f6:27:ce:dd:8a: 11:83:fa:28:04:60:89:bc:5b:1b:a4:c9:b2:c0:4f: 2a:81:d1:1f:f7:f1:ed:22:3b:ce:5d:5f:c3:38:92: cf:eb:47:43:fb:0d:5e:53:24:67:d8:de:d5:9c:59: ee:ce:74:4e:f3:46:a4:2b:eb:76:83:83:38:f3:f3: 07:94:dc:fe:26:0c:22:8a:d3:e8:e1:c3:2a:05:f3: cb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:06:F8:86:91:E2:70:4D:16:21:D0:4D:25:30:18:E5:EB:7D:E1:DC X509v3 Authority Key Identifier: keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b5:1f:eb:d9:b5:b6:c3:a6:74:43:40:dc:0d:7c:bf:a3:d8: c7:9c:69:28:ae:15:f9:90:1d:da:b2:23:ca:84:e0:37:67:25: ec:0e:5e:cd:1a:ff:00:5b:ee:04:e0:1b:6d:7b:e7:4b:a3:c6: 6b:84:d6:96:54:15:fd:e4:34:a1:ac:6c:80:45:a3:e5:56:6b: 80:e0:51:0e:a3:58:b0:77:43:7a:02:2d:5c:23:c2:84:62:11: 7e:9c:b1:3a:57:3e:0e:08:d5:fe:82:48:25:75:76:66:5d:a3: 4a:36:14:f1:f9:5c:6c:4b:ec:f4:e8:aa:86:c7:06:6b:34:9c: 1b:35:a6:dd:47:fd:59:d8:45:36:0b:b3:8d:3a:bf:b9:75:4c: 54:44:75:6d:b8:dd:b1:10:1c:e8:0a:05:96:ae:53:f5:50:2f: 96:33:6d:4c:53:ee:69:cc:7e:ec:5b:2c:be:5f:f7:46:a5:c9: 8a:ed:fb:32:7e:84:f8:cd:28:3c:b9:db:94:4d:86:db:74:65: 6f:7b:7d:a8:b3:65:07:85:8f:18:5e:df:89:97:e7:86:54:a8: 25:c7:f8:00:fc:05:da:b8:fd:94:23:56:45:0c:bb:30:ee:e7: bb:db:a0:db:44:85:e0:03:d3:d5:9a:b8:c8:7f:ec:89:70:53: 46:07:75:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMjVBMTk3NTgxNkNEOUU4OUYzRDZFQTZBNzYzMDIyNDNC RUMzNDVFRTAeFw0yNTEyMjMwNjExMTdaFw0yNTEyMzAwNjExMTdaMBgxFjAUBgNV BAMMDTY5NGEzMjg1LWFlYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVANq4oF4QJGspWDZd42qTjAm70bFUouiIOZIRFpqZsyEC2PTSKJWvu4/kDlRu qKzCCFOV+4fuSC8f2MfMRxybG1R7u4KPBbb907AnjPMuKhQI5bP8GgVtslesQCa2 a1116d+ANEvpQKYO8ksIMRR//wu2RqcyKmUWIs7rsO4fQhVRJdGiVTrq4G1t1Xvd tn3zhfaVAijDh/QagS5tzabnuzNSbMOo8/JA31wGZ8H2J87dihGD+igEYIm8Wxuk ybLATyqB0R/38e0iO85dX8M4ks/rR0P7DV5TJGfY3tWcWe7OdE7zRqQr63aDgzjz 8weU3P4mDCKK0+jhwyoF88sPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxQb4hpHi cE0WIdBNJTAY5et94dwwHwYDVR0jBBgwFoAUJaGXWBbNnonz1upqdjAiQ77DRe4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzRGNkQ2RjYwNkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0phR1hXQmJObm9uejF1cHFkakFpUTc3RFJl NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmFHWFdCYk5ub256MXVwcWRqQWlRNzdEUmU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzRGNkQ2RjYwNkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0phR1hXQmJObm9u ejF1cHFkakFpUTc3RFJlNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD21H+vZtbbDpnRDQNwNfL+j2MecaSiuFfmQHdqyI8qE4DdnJewOXs0a /wBb7gTgG21750ujxmuE1pZUFf3kNKGsbIBFo+VWa4DgUQ6jWLB3Q3oCLVwjwoRi EX6csTpXPg4I1f6CSCV1dmZdo0o2FPH5XGxL7PToqobHBms0nBs1pt1H/VnYRTYL s406v7l1TFREdW243bEQHOgKBZauU/VQL5YzbUxT7mnMfuxbLL5f90alyYrt+zJ+ hPjNKDy525RNhtt0ZW97faizZQeFjxhe34mX54ZUqCXH+AD8Bdq4/ZQjVkUMuzDu 57vboNtEheAD09WauMh/7IlwU0YHdc4= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:44 2025 by rpki-client