This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json) Hash identifier: wHd0VZveXAA7UNQ4AB93U4Oc8+pSS5SHfA8UJiU3vv4= Subject key identifier: 2D:F5:2C:B7:72:49:4B:15:55:12:4C:A6:3B:67:61:D5:8D:DA:B2:7B Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft Manifest number: 022E Signing time: Tue 23 Dec 2025 01:06:58 +0000 Manifest this update: Tue 23 Dec 2025 01:06:57 +0000 Manifest next update: Tue 30 Dec 2025 01:06:57 +0000 Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: dRkkizPOUuo/okCJJqhjP9ZWUoLPwqHxiqkQa1XtFzs=) 2: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: S5aqnIp8wBDzzuC/I2D/TZu1GPCH8szm3/gxMup7cPA=) 3: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: cOb2KOzEfKEZcsNXW8uSYWT5P5sqT/oMWjbiB66z740=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: Dec 23 01:06:57 2025 GMT Not After : Dec 30 01:06:57 2025 GMT Subject: CN=6949eb32-c788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c6:a8:d5:de:36:cd:de:ec:b6:39:76:fe:f7: fb:28:1d:93:ce:50:17:c4:df:cb:2c:71:87:4b:fe: a4:04:3b:55:dc:80:2d:4b:e4:9f:ce:c7:dc:73:2c: 59:b8:26:19:d2:42:17:a8:99:79:96:2c:36:5f:f5: 54:5f:30:41:15:3b:8c:4a:83:48:9a:88:c7:76:a4: 52:47:58:e0:a2:93:fd:43:49:49:43:c2:9e:be:d0: 58:bf:e7:87:04:92:50:ad:cc:0f:08:41:b5:33:a6: 1a:54:b3:3a:08:aa:a5:ea:38:cc:56:5a:35:b7:80: c2:df:16:6e:fe:f5:e4:af:d1:09:6c:58:b5:92:0b: 51:68:86:d4:2d:61:67:3b:ac:98:89:17:fd:f7:2c: 7b:05:9b:61:e4:35:47:c8:54:53:f0:01:b9:e4:1c: 29:2b:7c:9f:38:c9:18:79:27:9f:6e:d7:cb:3e:05: 6e:90:96:3f:b0:cb:ca:b3:2c:21:eb:69:b9:f2:78: 11:fd:09:4f:45:3f:0a:d8:75:40:54:db:c3:58:f8: c1:b2:88:c8:45:52:19:61:3c:aa:e9:ed:68:de:c7: cc:b4:8f:4c:4c:28:f5:ac:5e:98:9c:19:49:aa:ca: f3:93:53:14:5e:4c:b9:ab:13:60:85:16:e8:e2:68: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F5:2C:B7:72:49:4B:15:55:12:4C:A6:3B:67:61:D5:8D:DA:B2:7B X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c8:6f:ac:08:88:e4:7c:2a:e5:8b:d7:c3:c6:9e:07:6a:96: 24:30:c8:01:40:87:d0:bc:ef:0f:99:e0:56:51:19:32:40:81: cb:d4:de:2e:34:3d:7e:13:d5:81:c1:56:ac:fb:15:c2:a9:dd: 24:b8:86:00:f9:99:3d:26:8a:a8:be:ec:61:40:b6:7a:6d:6c: d3:fc:11:f3:8d:fb:71:f8:49:c5:66:4b:bb:ce:2a:1b:5c:1b: 1c:ff:07:74:31:22:7d:d4:22:a2:fe:ba:75:b3:72:17:de:c0: 8d:7d:ad:e6:dd:47:ac:b1:b4:de:8e:ad:41:66:cb:af:36:28: fa:04:82:65:2f:9b:8c:fe:94:e4:49:b1:91:9c:1d:17:92:ea: ff:77:2d:83:c0:e0:f2:1f:a8:08:a4:ff:79:21:68:02:4b:6f: 76:41:50:2d:ad:7b:d1:23:90:f0:f2:29:d6:31:5f:cd:0d:15: 63:1b:91:47:1f:f1:06:81:95:b3:68:cc:6f:01:aa:da:23:5a: 8e:e8:dc:11:c3:51:e1:0d:31:29:b9:5a:ca:0c:5a:a4:34:81: 55:6b:e3:c9:53:61:af:dc:00:01:5b:eb:da:4b:8b:fe:3f:e0: 45:85:45:7b:12:c3:ed:1c:38:74:07:e2:38:0f:74:6c:69:89: 4b:39:7f:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjUxMjIzMDEwNjU3WhcNMjUxMjMwMDEwNjU3WjAYMRYwFAYD VQQDDA02OTQ5ZWIzMi1jNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMao1d42zd7stjl2/vf7KB2TzlAXxN/LLHGHS/6kBDtV3IAtS+SfzsfccyxZ uCYZ0kIXqJl5liw2X/VUXzBBFTuMSoNImojHdqRSR1jgopP9Q0lJQ8KevtBYv+eH BJJQrcwPCEG1M6YaVLM6CKql6jjMVlo1t4DC3xZu/vXkr9EJbFi1kgtRaIbULWFn O6yYiRf99yx7BZth5DVHyFRT8AG55BwpK3yfOMkYeSefbtfLPgVukJY/sMvKsywh 62m58ngR/QlPRT8K2HVAVNvDWPjBsojIRVIZYTyq6e1o3sfMtI9MTCj1rF6YnBlJ qsrzk1MUXky5qxNghRbo4miaGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC31LLdy SUsVVRJMpjtnYdWN2rJ7MB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ YndQc0hnWWYzVXc3bTBsLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTyG+sCIjkfCrli9fDxp4HapYkMMgBQIfQvO8PmeBWURkyQIHL1N4u ND1+E9WBwVas+xXCqd0kuIYA+Zk9JoqovuxhQLZ6bWzT/BHzjftx+EnFZku7ziob XBsc/wd0MSJ91CKi/rp1s3IX3sCNfa3m3UessbTejq1BZsuvNij6BIJlL5uM/pTk SbGRnB0Xkur/dy2DwODyH6gIpP95IWgCS292QVAtrXvRI5Dw8inWMV/NDRVjG5FH H/EGgZWzaMxvAaraI1qO6NwRw1HhDTEpuVrKDFqkNIFVa+PJU2Gv3AABW+vaS4v+ P+BFhUV7EsPtHDh0B+I4D3RsaYlLOX87 -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:10 2025 by rpki-client