This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: Ju5PbzJZrr4pHHjC5YdB5ccOJkIyRBxcb9KAXRhf9rU= Subject key identifier: 04:D4:28:69:6E:D1:4F:22:C2:CC:34:28:C0:44:72:33:D1:E6:80:23 Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 03A0 Signing time: Sun 18 Jan 2026 23:56:26 +0000 Manifest this update: Sun 18 Jan 2026 23:56:25 +0000 Manifest next update: Sun 25 Jan 2026 23:56:25 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: N8dVC2RW9SAuZlSX2zwTr3I5ZuQqybYUKBAWLhByHuI=) 2: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: //KV7irskgDcUAWnVzABNstxODUmGNUu0/9moTMxDMc=) 3: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: shiOCi8JerzzKNFxAB+xO1FlbchCAXUQzSieDiVA75k=) 4: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: luhZnX2YGpSFKY86N1Taq6rino7kZJwDO/AMwEHc8Lk=) 5: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: MMNV0WFJPDmBrnJ58hLCTn0qZ0UGPXof6MadQzXXtIs=) 6: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: NFcBxaNz6mf8ehCSWmhGaRGkP0i5x4WvGMuGJ53JdH4=) 7: 095A440652B311F0B25AA911C4F9AE02.roa (hash: SCCnd/SD2uyESiij/xgMm9LGvYUgxJ9IcJwnyMk6Qmc=) 8: 2CF7FA46995011F082453F71C4F9AE02.roa (hash: 3ORSsymXVLLeXLtjuPskJvheSRddUouqDixLZ7cUu7w=) 9: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: Q2SSdUGho2j7H+8ou7DuxmcggjBbLvW3sHTdOc9TRn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 23:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: Jan 18 23:56:25 2026 GMT Not After : Jan 25 23:56:25 2026 GMT Subject: CN=696d7329-dcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3b:08:15:90:fc:4f:9d:23:79:72:9e:64:3c: 6b:27:b7:14:28:58:df:a9:95:6f:5e:01:4f:84:c3: d7:80:0c:14:7e:04:a8:2b:e4:92:58:0f:f4:dd:16: de:bb:57:5a:d9:ca:68:b9:bf:ab:f1:4c:84:b4:be: a6:5e:89:8d:bb:67:ac:ce:50:c0:41:e3:15:00:2c: 20:98:65:a4:84:03:ae:a1:23:17:2b:0a:22:8e:ba: 69:a3:17:54:6f:95:c9:08:b7:8c:7b:5f:c1:d3:b8: 75:f5:5c:30:36:02:99:69:bb:b0:4d:14:51:08:da: dd:cb:47:6d:7e:d1:b9:f9:2c:c5:fe:7b:e2:1d:16: ad:3a:6b:79:eb:2c:88:e0:78:d5:ad:06:de:80:f7: f2:7a:b5:25:0b:84:e5:e4:c5:0f:52:10:4d:e5:73: 8d:b8:25:dc:7a:ef:b1:64:26:1b:c2:a6:71:3e:f2: 9e:1f:02:ba:e6:f1:5e:5a:bf:be:3f:51:1c:d0:8b: d5:14:f5:3d:ce:8c:bc:42:cc:0b:c0:d1:c9:98:db: 5c:37:85:ba:2f:3f:a3:38:5f:76:fc:c7:f6:61:0c: b9:51:ef:b0:90:66:ac:31:26:bc:14:dd:ea:76:67: 48:9a:a8:ed:ed:cc:b9:f2:a3:7f:45:2b:17:78:af: 9c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D4:28:69:6E:D1:4F:22:C2:CC:34:28:C0:44:72:33:D1:E6:80:23 X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:e9:bc:95:47:03:97:7c:b2:4f:ac:6e:ab:2f:cb:99:f1:4d: 04:8a:b9:7a:15:9d:02:f8:26:45:52:5f:60:1d:c7:02:f9:53: 4e:bf:29:6c:21:5e:a5:d7:0f:30:3c:4b:22:25:f0:6f:ff:6f: 58:7a:00:9a:7c:e7:e9:d6:a3:89:e2:4c:b6:f8:51:f5:b0:b9: 15:3c:3d:db:c2:6b:bc:4f:c6:6d:4e:e6:c3:3b:b9:27:a9:17: 35:ff:d3:03:cf:8c:34:ac:d9:5e:83:db:e0:de:2f:a5:9d:c6: b0:eb:51:ad:72:e3:4c:e3:54:29:b2:c1:14:3c:38:37:52:b9: 19:cf:94:89:fe:a9:39:8c:c0:b1:e2:28:97:ef:04:f6:57:4f: c5:64:e0:db:ad:a5:a2:af:03:9a:3f:56:0f:85:d7:dd:96:62: 7b:59:5a:ae:0d:4c:68:ba:d7:33:7c:0a:4f:02:f7:08:0d:99: 2f:b9:18:7f:61:ce:14:5c:10:1f:3f:55:66:40:04:df:1d:be: e1:54:2a:35:a7:3a:ab:39:d5:1d:4e:74:7c:e9:b4:3e:95:55: a0:d6:11:f6:be:87:3d:0d:13:60:36:23:d8:cf:9e:0f:c4:e2: 09:f3:f0:56:5b:0d:f7:83:9f:6f:53:14:2a:95:90:40:a6:45: 6d:18:6d:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjYwMTE4MjM1NjI1WhcNMjYwMTI1MjM1NjI1WjAYMRYwFAYD VQQDDA02OTZkNzMyOS1kY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TsIFZD8T50jeXKeZDxrJ7cUKFjfqZVvXgFPhMPXgAwUfgSoK+SSWA/03Rbe u1da2cpoub+r8UyEtL6mXomNu2eszlDAQeMVACwgmGWkhAOuoSMXKwoijrppoxdU b5XJCLeMe1/B07h19VwwNgKZabuwTRRRCNrdy0dtftG5+SzF/nviHRatOmt56yyI 4HjVrQbegPfyerUlC4Tl5MUPUhBN5XONuCXceu+xZCYbwqZxPvKeHwK65vFeWr++ P1Ec0IvVFPU9zoy8QswLwNHJmNtcN4W6Lz+jOF92/Mf2YQy5Ue+wkGasMSa8FN3q dmdImqjt7cy58qN/RSsXeK+cGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATUKGlu 0U8iwsw0KMBEcjPR5oAjMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB46byVRwOXfLJPrG6rL8uZ8U0Eirl6FZ0C+CZFUl9gHccC+VNOvyls IV6l1w8wPEsiJfBv/29YegCafOfp1qOJ4ky2+FH1sLkVPD3bwmu8T8ZtTubDO7kn qRc1/9MDz4w0rNleg9vg3i+lncaw61GtcuNM41QpssEUPDg3UrkZz5SJ/qk5jMCx 4iiX7wT2V0/FZODbraWirwOaP1YPhdfdlmJ7WVquDUxoutczfApPAvcIDZkvuRh/ Yc4UXBAfP1VmQATfHb7hVCo1pzqrOdUdTnR86bQ+lVWg1hH2voc9DRNgNiPYz54P xOIJ8/BWWw33g59vUxQqlZBApkVtGG0f -----END CERTIFICATE-----Generated at Mon Jan 19 11:27:07 2026 by rpki-client