This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: seyOAwGe0hrvk2vkJJCv0UXiiHZgu+iQzta1iKVCJT8= Subject key identifier: 98:17:C5:59:8C:8F:AA:E6:6C:C3:80:C2:F9:47:29:72:BF:C2:26:5A Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 03C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 0389 Signing time: Thu 04 Dec 2025 23:21:45 +0000 Manifest this update: Thu 04 Dec 2025 23:21:44 +0000 Manifest next update: Thu 11 Dec 2025 23:21:44 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: DYwuAvOiZ//OLm4MYXQY4zfy6EA67tVHNZTmtZNKCb4=) 2: 2CF7FA46995011F082453F71C4F9AE02.roa (hash: 3ORSsymXVLLeXLtjuPskJvheSRddUouqDixLZ7cUu7w=) 3: 095A440652B311F0B25AA911C4F9AE02.roa (hash: SCCnd/SD2uyESiij/xgMm9LGvYUgxJ9IcJwnyMk6Qmc=) 4: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: MMNV0WFJPDmBrnJ58hLCTn0qZ0UGPXof6MadQzXXtIs=) 5: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: //KV7irskgDcUAWnVzABNstxODUmGNUu0/9moTMxDMc=) 6: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: Q2SSdUGho2j7H+8ou7DuxmcggjBbLvW3sHTdOc9TRn0=) 7: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: luhZnX2YGpSFKY86N1Taq6rino7kZJwDO/AMwEHc8Lk=) 8: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: shiOCi8JerzzKNFxAB+xO1FlbchCAXUQzSieDiVA75k=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: NFcBxaNz6mf8ehCSWmhGaRGkP0i5x4WvGMuGJ53JdH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: Dec 4 23:21:44 2025 GMT Not After : Dec 11 23:21:44 2025 GMT Subject: CN=69321789-e940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d2:30:d2:2d:f8:da:0e:9a:ac:ec:01:3d:9e: f9:9c:6e:26:a1:dc:fa:de:d9:a1:21:2b:56:4d:f4: 5a:67:09:e5:c1:d3:59:f0:15:f9:71:82:36:f4:07: dc:0e:1c:f3:9c:70:06:dc:31:19:e5:fb:95:82:4f: e4:e6:28:8e:61:21:8b:b4:50:ab:c3:82:f5:19:54: f2:33:04:9d:75:aa:31:30:67:e9:5b:6e:f4:c0:84: 6e:a4:2d:83:ba:8a:c2:ce:af:b6:e7:ea:09:9e:6d: cb:cb:ee:bf:d4:a7:47:16:11:3a:c1:25:0e:f8:58: b5:ad:32:03:39:eb:b3:fa:0b:3d:a4:56:31:a2:87: 12:19:9e:20:dd:41:82:58:d2:af:d1:ec:df:58:b3: 55:64:de:42:7e:62:4b:17:ac:82:ec:ea:aa:3d:13: 23:10:03:7b:6a:be:b0:51:19:01:07:0c:90:73:5b: 43:47:0d:ca:3f:53:95:85:e7:4f:4c:26:c8:35:ea: 0b:b7:47:bf:1c:16:50:d0:7d:7e:7d:7a:0d:e3:54: 40:36:f3:2b:5c:1f:94:e8:2b:b3:3e:0e:f2:8e:27: 97:11:b3:52:cc:0f:44:b7:4c:54:58:d0:01:5c:a9: 6d:cb:88:76:b9:20:f8:35:5c:83:d6:4e:35:ce:c8: c6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:17:C5:59:8C:8F:AA:E6:6C:C3:80:C2:F9:47:29:72:BF:C2:26:5A X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:2c:42:f7:ad:8d:bd:d1:9b:bb:8d:a5:40:ff:8b:f3:4e:ac: ff:bb:64:b9:4d:7c:64:17:a6:b4:ac:a2:8b:4b:0e:04:1e:e5: ab:0b:ff:9d:a7:0e:ca:9e:61:8c:89:62:f2:82:c6:01:52:d4: d6:dc:6f:98:29:f4:b7:69:86:85:2c:5b:07:5c:08:0d:7e:95: b4:3b:7f:14:ea:8f:e7:d8:bc:3a:1f:b9:97:78:cc:ac:8e:5b: 72:0c:2a:57:a8:6f:24:c1:c5:af:55:b0:db:53:ab:62:e9:98: 1f:30:57:18:3b:4e:dc:04:1c:76:ca:20:81:f9:3d:7e:48:16: b4:ff:47:df:b4:6d:78:fd:39:32:2b:e3:da:e2:da:73:43:63: 67:50:76:6e:f2:91:4b:ac:44:f3:ee:60:03:77:55:6f:70:55: fe:ec:32:56:15:f1:0f:ff:4f:27:5f:ea:d6:d4:38:8c:34:33: c4:79:46:cc:46:5c:b9:4c:c7:75:9b:da:94:98:b8:33:7c:8e: bb:bb:b9:3a:8b:c0:5c:3e:d8:67:d3:f0:5a:3a:29:59:32:18: ad:a9:50:e7:d7:21:62:37:46:50:14:75:ff:4f:49:d4:f5:dc: 44:e8:fd:9a:60:09:04:80:a2:b9:6d:ac:1f:bf:52:22:20:c1: 41:75:c7:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjUxMjA0MjMyMTQ0WhcNMjUxMjExMjMyMTQ0WjAYMRYwFAYD VQQDEw02OTMyMTc4OS1lOTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tIw0i342g6arOwBPZ75nG4modz63tmhIStWTfRaZwnlwdNZ8BX5cYI29Afc DhzznHAG3DEZ5fuVgk/k5iiOYSGLtFCrw4L1GVTyMwSddaoxMGfpW270wIRupC2D uorCzq+25+oJnm3Ly+6/1KdHFhE6wSUO+Fi1rTIDOeuz+gs9pFYxoocSGZ4g3UGC WNKv0ezfWLNVZN5CfmJLF6yC7OqqPRMjEAN7ar6wURkBBwyQc1tDRw3KP1OVhedP TCbINeoLt0e/HBZQ0H1+fXoN41RANvMrXB+U6CuzPg7yjieXEbNSzA9Et0xUWNAB XKlty4h2uSD4NVyD1k41zsjGEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgXxVmM j6rmbMOAwvlHKXK/wiZaMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYLEL3rY290Zu7jaVA/4vzTqz/u2S5TXxkF6a0rKKLSw4EHuWrC/+d pw7KnmGMiWLygsYBUtTW3G+YKfS3aYaFLFsHXAgNfpW0O38U6o/n2Lw6H7mXeMys jltyDCpXqG8kwcWvVbDbU6ti6ZgfMFcYO07cBBx2yiCB+T1+SBa0/0fftG14/Tky K+Pa4tpzQ2NnUHZu8pFLrETz7mADd1VvcFX+7DJWFfEP/08nX+rW1DiMNDPEeUbM Rly5TMd1m9qUmLgzfI67u7k6i8BcPthn0/BaOilZMhitqVDn1yFiN0ZQFHX/T0nU 9dxE6P2aYAkEgKK5bawfv1IiIMFBdcfj -----END CERTIFICATE-----Generated at Fri Dec 5 08:07:05 2025 by rpki-client