This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: ryFIr/9JnmsWSq4gjgGwaH5t3ICnk09XiFZtWye4gdc= Subject key identifier: 19:C9:06:1B:BF:09:7C:20:4D:B0:C7:DB:63:52:CE:B6:B3:59:72:17 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 3525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 3507 Signing time: Mon 22 Dec 2025 15:08:25 +0000 Manifest this update: Mon 22 Dec 2025 15:08:25 +0000 Manifest next update: Mon 29 Dec 2025 15:08:25 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: fiwB61vxBKWShcK8h4lopsqS0lnxuRA+T6T7fv2LDbo=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 6cC6tQeQd87kGRdq2QumL1i69ExtEnVSm6iU0IQLUOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13605 (0x3525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Dec 22 15:08:25 2025 GMT Not After : Dec 29 15:08:25 2025 GMT Subject: CN=69495ee9-f6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:be:6f:a3:d0:6c:ce:ed:63:d5:b3:23:2e: c6:66:cb:fe:6f:76:e1:ea:a0:37:fd:d9:b8:8e:57: e4:55:7c:9f:b0:09:ad:fb:5c:07:fa:db:cd:96:42: ff:77:5c:dc:2e:04:b3:92:b3:66:42:88:8e:e9:51: a3:55:46:05:b9:cf:e8:b0:ea:45:79:58:9a:5c:b1: c8:52:7f:f0:1c:98:00:c9:97:1b:ff:6c:5a:19:20: 3a:dc:21:67:f9:63:d8:b8:e4:4e:c7:1d:48:51:c8: 53:8f:b0:b3:bf:1d:4e:89:5e:40:73:9e:b3:e2:f6: 2a:0f:5f:04:60:2b:68:b3:50:25:07:73:6d:d8:42: 4b:5b:3c:6d:e8:7d:38:c0:6c:30:61:ac:8f:31:83: 8f:8c:84:80:9a:2b:54:f2:bc:ac:b2:42:29:13:d7: 7e:35:5e:d6:04:a4:f1:67:51:07:a6:08:ce:54:9a: 86:31:34:00:a6:63:52:eb:92:4c:41:86:d3:35:3a: 9e:4a:e0:a7:7a:d5:db:fd:dc:95:47:a1:e4:79:4f: 3e:c5:3a:4c:82:72:bf:50:e7:54:35:8f:c9:ab:e2: 78:2b:67:4e:b0:4c:19:fb:43:c9:b0:a1:a6:a2:45: b3:64:db:a6:b6:f2:b5:08:72:af:7c:da:b3:15:3e: 51:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C9:06:1B:BF:09:7C:20:4D:B0:C7:DB:63:52:CE:B6:B3:59:72:17 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:07:8e:7c:d2:85:d7:2d:df:64:58:8a:b1:78:a9:94:d1:90: 8f:12:26:ca:a9:f7:e8:5b:ec:69:2a:c0:d3:c2:26:91:7a:49: 85:92:4c:e8:50:4d:e7:54:cf:d0:7b:f6:ef:c9:c4:1c:6a:c0: e2:71:95:62:03:24:ce:17:ea:79:56:0e:0c:65:f4:bf:8b:b8: c4:b8:6d:39:62:93:e5:1c:8a:23:18:b3:50:41:ae:75:40:f4: b5:d1:dd:ce:bd:64:9c:0f:30:3f:9c:aa:53:5d:53:7a:3b:cd: 2b:79:a7:ed:be:e1:12:54:b8:bf:65:3b:fa:84:e0:76:22:59: ca:9f:3d:db:ba:44:7a:85:44:ff:f3:2d:12:4c:68:0b:18:89: 6a:f7:0e:a5:a7:18:22:e6:3a:66:15:48:89:24:cb:fb:b5:be: b1:3d:13:0e:76:86:38:b6:54:1a:88:76:cd:18:77:10:82:90: c2:79:ed:b2:e3:79:44:78:7a:0b:49:6b:79:f0:a1:7f:82:95: b9:6c:e2:51:ae:f4:4c:02:41:96:90:c7:3d:31:6c:2a:40:9c: 70:6f:5d:00:3c:b9:fe:01:20:f6:d9:2a:4d:01:4b:a1:56:bd: b5:df:9b:63:da:d2:3b:5b:06:3d:c7:d0:c5:c3:94:83:f2:b5: fb:bf:8f:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjUxMjIyMTUwODI1WhcNMjUxMjI5MTUwODI1WjAYMRYwFAYD VQQDDA02OTQ5NWVlOS1mNmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7m+b6PQbM7tY9WzIy7GZsv+b3bh6qA3/dm4jlfkVXyfsAmt+1wH+tvNlkL/ d1zcLgSzkrNmQoiO6VGjVUYFuc/osOpFeViaXLHIUn/wHJgAyZcb/2xaGSA63CFn +WPYuOROxx1IUchTj7Czvx1OiV5Ac56z4vYqD18EYCtos1AlB3Nt2EJLWzxt6H04 wGwwYayPMYOPjISAmitU8rysskIpE9d+NV7WBKTxZ1EHpgjOVJqGMTQApmNS65JM QYbTNTqeSuCnetXb/dyVR6HkeU8+xTpMgnK/UOdUNY/Jq+J4K2dOsEwZ+0PJsKGm okWzZNumtvK1CHKvfNqzFT5R7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnJBhu/ CXwgTbDH22NSzrazWXIXMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASB4580oXXLd9kWIqxeKmU0ZCPEibKqffoW+xpKsDTwiaRekmFkkzo UE3nVM/Qe/bvycQcasDicZViAyTOF+p5Vg4MZfS/i7jEuG05YpPlHIojGLNQQa51 QPS10d3OvWScDzA/nKpTXVN6O80reaftvuESVLi/ZTv6hOB2IlnKnz3bukR6hUT/ 8y0STGgLGIlq9w6lpxgi5jpmFUiJJMv7tb6xPRMOdoY4tlQaiHbNGHcQgpDCee2y 43lEeHoLSWt58KF/gpW5bOJRrvRMAkGWkMc9MWwqQJxwb10APLn+ASD22SpNAUuh Vr2135tj2tI7WwY9x9DFw5SD8rX7v4+o -----END CERTIFICATE-----Generated at Tue Dec 23 05:02:56 2025 by rpki-client