This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft File: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft (raw, json) Hash identifier: fn7ZzhmcIfLekP5eZz77tyXqZSYDeIPW9JOU9r8eDgQ= Subject key identifier: 69:FF:D9:E1:3D:C3:10:34:55:05:E9:29:2A:CF:FF:C5:CC:91:5C:25 Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E Certificate issuer: /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft Manifest number: 06A0 Signing time: Mon 22 Dec 2025 21:35:06 +0000 Manifest this update: Mon 22 Dec 2025 21:35:05 +0000 Manifest next update: Mon 29 Dec 2025 21:35:05 +0000 Files and hashes: 1: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl (hash: uDLsPLijbnQqhYd1jem29Hwn3dte1d+CrO2qJpUYiWc=) 2: 7510FBA2928911EBB0B38272C4F9AE02.roa (hash: vY9vDu953Z8A1LvSP1j7BcrWJjcpDb2f8NtmWuSIPts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8392, serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Validity Not Before: Dec 22 21:35:05 2025 GMT Not After : Dec 29 21:35:05 2025 GMT Subject: CN=6949b98a-408c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c7:28:3f:58:2d:e0:40:a1:6d:f1:e1:a6:35: aa:3d:0a:f0:b6:ee:04:b8:e2:e6:79:8d:b6:90:a8: 1b:92:e7:3a:9a:58:03:e3:6b:c7:af:4f:a6:cc:eb: 79:7b:9e:b0:a3:2a:f3:ed:4f:f9:68:16:9c:b8:77: be:92:e2:7e:cc:ec:16:87:47:f7:ca:92:6d:71:bb: c2:d8:d9:42:48:95:20:50:5c:3d:27:d3:8f:4b:0a: 64:84:cb:43:62:96:98:4e:4a:44:45:d1:8a:6f:e9: 05:eb:9a:49:3b:8c:0b:5f:b8:b9:2c:d8:16:c6:cd: 68:aa:77:0d:37:af:2a:9f:bb:2c:ce:00:26:22:8f: 78:53:8a:32:c9:73:bf:2a:49:20:b4:14:39:bb:df: 48:2d:fe:7e:96:84:39:17:4b:50:b0:fe:ff:fc:0c: c3:e6:4e:e8:b5:80:62:3f:4f:dc:17:4b:4d:30:ad: c2:3a:de:38:06:16:73:93:e5:7d:3c:11:6b:9d:cf: bd:e0:0c:f9:56:3e:64:6f:ea:70:ed:0d:c1:ae:b9: b8:9e:b2:6e:64:2f:0d:17:a3:3a:21:2b:54:5e:9b: df:a6:12:fa:54:64:e4:67:94:f1:69:4b:e2:71:66: 98:cf:2b:ce:25:76:9c:df:f5:4c:bc:6c:80:69:23: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FF:D9:E1:3D:C3:10:34:55:05:E9:29:2A:CF:FF:C5:CC:91:5C:25 X509v3 Authority Key Identifier: keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:93:f7:03:cd:3c:0e:c0:2e:81:f3:eb:ad:ed:52:06:1a:79: b4:66:26:f3:5e:42:f4:17:24:79:c8:08:1c:49:65:79:51:8c: 44:44:7d:43:d3:0d:88:2e:e9:65:ab:e2:bf:b5:4a:d9:38:f5: b1:c8:fc:5c:7a:55:a6:a6:eb:57:70:d2:41:82:0d:0a:9d:5e: 95:e4:9a:11:30:4c:73:ef:60:af:55:62:dc:9f:6e:ab:95:40: 03:3b:a4:eb:49:f2:0f:1a:b9:89:89:60:1c:4b:9a:76:40:37: b2:2d:2c:81:53:b2:e7:9a:45:44:36:db:66:d9:d7:42:69:c2: 8e:4f:02:51:dd:d7:b6:08:1f:07:8d:09:89:70:0c:15:36:87: 6b:e5:d5:f3:99:e3:10:73:60:b4:e6:84:3f:4c:4a:0b:fb:0b: b7:6b:01:13:71:39:a6:92:95:e4:28:b2:d5:75:26:0b:98:1e: 8b:cd:ee:9c:53:56:3b:4b:e1:89:24:75:c2:ff:8a:6f:4b:f7: e3:d2:54:34:f0:2d:b6:b5:13:5b:1a:d5:6a:ad:34:01:85:66: b1:de:31:3a:69:b8:56:55:77:d2:7d:02:64:23:bd:7e:3a:67: f3:25:a7:23:80:af:9f:ea:59:71:c8:91:25:fb:d1:26:e5:71: bc:3a:2e:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODczNzFCMDQxM0ZG NUY4MkU4MkUwHhcNMjUxMjIyMjEzNTA1WhcNMjUxMjI5MjEzNTA1WjAYMRYwFAYD VQQDDA02OTQ5Yjk4YS00MDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5scoP1gt4EChbfHhpjWqPQrwtu4EuOLmeY22kKgbkuc6mlgD42vHr0+mzOt5 e56woyrz7U/5aBacuHe+kuJ+zOwWh0f3ypJtcbvC2NlCSJUgUFw9J9OPSwpkhMtD YpaYTkpERdGKb+kF65pJO4wLX7i5LNgWxs1oqncNN68qn7sszgAmIo94U4oyyXO/ KkkgtBQ5u99ILf5+loQ5F0tQsP7//AzD5k7otYBiP0/cF0tNMK3COt44BhZzk+V9 PBFrnc+94Az5Vj5kb+pw7Q3Brrm4nrJuZC8NF6M6IStUXpvfphL6VGTkZ5TxaUvi cWaYzyvOJXac3/VMvGyAaSPX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn/2eE9 wxA0VQXpKSrP/8XMkVwlMB8GA1UdIwQYMBaAFCRSGByxCK8R9GKHNxsEE/9fgugu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM5Mi8xNEQ5RTM4QTky ODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4SDBZb2MzR3dRVF8xLUM2 QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pGSVlITEVJcnhIMFlvYzNHd1FUXzEtQzZDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM5Mi8xNEQ5RTM4QTkyODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4 SDBZb2MzR3dRVF8xLUM2QzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvk/cDzTwOwC6B8+ut7VIGGnm0ZibzXkL0FyR5yAgcSWV5UYxERH1D 0w2ILullq+K/tUrZOPWxyPxcelWmputXcNJBgg0KnV6V5JoRMExz72CvVWLcn26r lUADO6TrSfIPGrmJiWAcS5p2QDeyLSyBU7LnmkVENttm2ddCacKOTwJR3de2CB8H jQmJcAwVNodr5dXzmeMQc2C05oQ/TEoL+wu3awETcTmmkpXkKLLVdSYLmB6Lze6c U1Y7S+GJJHXC/4pvS/fj0lQ08C22tRNbGtVqrTQBhWax3jE6abhWVXfSfQJkI71+ OmfzJacjgK+f6llxyJEl+9Em5XG8Oi4h -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:29 2025 by rpki-client