This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: dfHf2dgFh2F/sucA24Aya9BTQKI4GGdWMwf0pt2HDqw= Subject key identifier: AF:71:53:AA:C7:E4:FA:FA:DE:70:1D:E8:74:89:20:33:42:F6:CA:F9 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 07F3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 07D3 Signing time: Sat 20 Dec 2025 20:43:27 +0000 Manifest this update: Sat 20 Dec 2025 20:43:26 +0000 Manifest next update: Sat 27 Dec 2025 20:43:26 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: wZ5wpdHvq97BW9XpNqb/1ebw7R+sZ0+eccp69eBoPjc=) 2: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: umP1jM7YynccOJheC11YvDxU2JNxDYT6vSOoFYsUbhA=) 3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: AlSQiWdBlK2D6fUaLlzUbdGdJEpnbwRmjimYOA50uq4=) 4: 7C76080E08D611EE82522448C4F9AE02.roa (hash: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2035 (0x7f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Dec 20 20:43:26 2025 GMT Not After : Dec 27 20:43:26 2025 GMT Subject: CN=69470a6f-fcbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:1f:bb:76:e9:ed:f1:5b:06:74:40:df:fe: e1:3c:4c:42:14:89:7a:da:1c:bd:a7:52:8e:31:87: 17:8e:c7:a6:02:8b:b6:4d:76:e9:f7:d0:36:53:37: 5b:6a:2e:e0:0f:6b:41:d5:63:2e:00:c6:bd:82:cd: d0:42:5d:2f:5b:17:f6:92:ce:f5:7b:1e:b4:dd:13: b2:ad:73:54:7d:80:06:7f:ce:e6:f2:2d:bf:2a:e6: 95:58:b4:06:21:2d:42:1d:0d:17:05:37:5c:9f:1a: c1:a9:53:d8:71:63:07:69:d6:c9:68:3a:f1:c1:56: 52:c9:65:12:c2:f8:22:9a:5e:d5:1f:f1:ab:66:41: a9:2a:e6:dd:71:57:df:0b:0e:12:52:35:25:2d:76: 30:bc:6e:1d:c8:ee:56:0f:65:9e:71:aa:7c:a1:c7: cd:ab:5f:0c:d7:12:6b:ee:d4:a0:4a:2d:7a:fe:73: 5b:f3:af:e0:4f:49:49:93:1d:a0:7e:6c:88:db:00: 1a:a0:5f:ed:0e:ef:d1:ba:3f:66:06:49:18:69:61: a8:a0:68:c1:96:ed:b7:f4:b9:05:dd:57:f5:c4:1b: 20:c6:9d:99:f1:44:39:5d:54:76:ae:4d:3b:93:4a: 45:03:7b:8a:0e:6f:df:15:d1:99:49:68:74:bb:2f: 07:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:71:53:AA:C7:E4:FA:FA:DE:70:1D:E8:74:89:20:33:42:F6:CA:F9 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:08:db:57:64:de:ed:f7:73:8c:b0:95:d2:97:4f:1e:37:44: a4:86:46:f1:7d:6f:04:a8:36:6b:fd:20:ec:b8:3f:b2:cd:45: 09:81:88:7c:ae:5f:7d:5a:85:a6:fa:61:73:c1:b6:53:1b:a1: f9:12:4a:11:c0:41:94:3b:27:e3:7b:f9:c1:c7:8c:cc:f6:71: 05:d2:1c:b8:68:dc:74:d7:ce:4d:a2:bd:d2:04:f7:7f:b5:6d: 56:43:1a:62:ec:b7:3a:fb:c2:1e:96:e5:e7:ac:15:c2:2c:b8: 8a:77:67:40:0d:8b:30:eb:8d:fd:f7:31:7a:ea:d6:cd:17:95: 4c:8a:71:9d:c9:a3:fc:67:7f:76:1f:25:05:f7:a6:b7:27:cb: 17:22:27:03:b6:0c:7b:49:a0:a5:da:1e:fa:fd:2d:5e:cd:ad: 24:58:07:6b:24:3d:e7:ac:12:a1:d8:33:09:e5:dd:19:ae:b8: 9b:c6:1f:b3:1c:3e:66:a5:95:85:e6:c3:b0:df:16:bd:a6:7e: cb:d4:02:dc:4e:c5:32:5d:a0:69:96:49:46:62:8f:f7:49:28: f9:ea:e8:c9:9f:81:6a:1b:1e:02:9f:a2:f9:94:b5:62:b3:64: 67:24:55:e4:6d:ff:83:c0:a3:ac:4d:7f:2e:9a:9c:66:f9:91: 40:46:bd:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjUxMjIwMjA0MzI2WhcNMjUxMjI3MjA0MzI2WjAYMRYwFAYD VQQDDA02OTQ3MGE2Zi1mY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnq4fu3bp7fFbBnRA3/7hPExCFIl62hy9p1KOMYcXjsemAou2TXbp99A2Uzdb ai7gD2tB1WMuAMa9gs3QQl0vWxf2ks71ex603ROyrXNUfYAGf87m8i2/KuaVWLQG IS1CHQ0XBTdcnxrBqVPYcWMHadbJaDrxwVZSyWUSwvgiml7VH/GrZkGpKubdcVff Cw4SUjUlLXYwvG4dyO5WD2Wecap8ocfNq18M1xJr7tSgSi16/nNb86/gT0lJkx2g fmyI2wAaoF/tDu/Ruj9mBkkYaWGooGjBlu239LkF3Vf1xBsgxp2Z8UQ5XVR2rk07 k0pFA3uKDm/fFdGZSWh0uy8HsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9xU6rH 5Pr63nAd6HSJIDNC9sr5MB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBCNtXZN7t93OMsJXSl08eN0SkhkbxfW8EqDZr/SDsuD+yzUUJgYh8 rl99WoWm+mFzwbZTG6H5EkoRwEGUOyfje/nBx4zM9nEF0hy4aNx0185Nor3SBPd/ tW1WQxpi7Lc6+8IeluXnrBXCLLiKd2dADYsw64399zF66tbNF5VMinGdyaP8Z392 HyUF96a3J8sXIicDtgx7SaCl2h76/S1eza0kWAdrJD3nrBKh2DMJ5d0Zrribxh+z HD5mpZWF5sOw3xa9pn7L1ALcTsUyXaBplklGYo/3SSj56ujJn4FqGx4Cn6L5lLVi s2RnJFXkbf+DwKOsTX8umpxm+ZFARr0d -----END CERTIFICATE-----Generated at Sat Dec 20 23:56:12 2025 by rpki-client