This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json) Hash identifier: g93+bVAeywbU5Zx15O52PgvKHhCyvJQ3jI2oy9yqq90= Subject key identifier: 1F:6D:40:B7:55:56:D8:EA:23:C1:B2:D8:1F:EF:42:0A:88:7B:60:75 Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft Manifest number: 0313 Signing time: Wed 10 Dec 2025 23:30:51 +0000 Manifest this update: Wed 10 Dec 2025 23:30:51 +0000 Manifest next update: Wed 17 Dec 2025 23:30:51 +0000 Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: dMpiGAorD8OQIDlcXLpI9KKTk2jMtkGyXQ8oklLBoXc=) 2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: G/i4Pg8jdMHmXjQNkM+eJFlsVzQq6gbZlmc97MQExQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 23:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Validity Not Before: Dec 10 23:30:51 2025 GMT Not After : Dec 17 23:30:51 2025 GMT Subject: CN=693a02ab-3958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:97:65:43:85:8e:ef:e5:e1:02:d1:fc:e6:a3: 87:0d:86:91:bd:9c:36:0c:43:1c:9e:77:79:71:28: 23:26:9a:c7:d6:a5:84:24:99:47:a9:6c:e5:fd:8a: c0:20:6f:6d:ef:36:fc:a2:31:2e:bf:5c:39:f1:ee: 64:ee:6d:de:17:b5:51:af:9a:e4:3c:2f:49:9a:34: db:58:df:80:eb:ba:c7:dd:f8:e0:9d:41:8e:fa:ab: 47:89:34:67:e6:fa:f8:73:20:4b:8f:99:18:19:b0: 7e:20:41:a4:af:00:f5:6c:93:d2:cd:69:20:e4:e2: 16:37:bf:99:4f:3d:33:22:f3:36:2a:86:ea:06:54: 27:1a:98:ca:eb:0c:e7:a7:16:19:af:01:b9:9e:eb: 52:aa:48:f7:ee:74:90:af:26:36:1f:28:89:bc:4c: f8:74:a4:2f:73:2f:4e:46:72:b0:7e:39:c4:f9:cd: a7:a0:a1:50:97:5d:12:58:f4:68:82:00:1f:aa:a8: 36:64:3e:63:4b:cf:ac:68:bc:13:40:9b:ef:75:67: 01:29:ac:f6:a9:21:2c:df:f3:d4:f6:09:69:06:67: 70:c1:e3:31:4d:e1:41:eb:cb:8b:cd:85:2b:4b:59: c1:36:b1:c5:2c:7a:01:9f:a2:90:9f:dd:58:1f:e7: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6D:40:B7:55:56:D8:EA:23:C1:B2:D8:1F:EF:42:0A:88:7B:60:75 X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:4b:50:de:f4:35:39:05:f9:cb:2a:3f:d6:6f:47:d1:39:ba: f9:c8:a9:b3:c6:4c:36:a1:32:27:a6:4f:b8:c5:c6:cf:0c:62: a5:80:e4:89:2d:fb:0a:47:73:59:a8:81:2f:5e:4f:9f:03:83: 8c:06:5d:20:9f:86:63:2b:0b:1b:88:ea:52:4c:aa:59:dd:aa: 27:94:0e:0e:de:cd:f4:da:43:2b:4e:db:4a:22:62:07:0e:70: 53:cb:d9:c8:51:e9:4f:fd:6b:a5:df:4a:56:98:63:a6:82:74: 59:c5:0b:e8:04:f9:0d:29:2a:50:75:28:9e:bc:bc:5b:4b:7b: 27:f2:76:ee:10:7f:b3:08:46:29:34:50:83:21:74:e8:b4:89: e7:e4:9a:d8:91:39:a4:09:e9:30:35:ea:11:00:10:c5:c2:f3: 4e:49:06:e3:4e:1d:36:4b:44:ae:e2:a5:ff:61:85:99:85:a6: 40:63:1b:ab:cc:61:c7:fc:3f:a4:2f:99:4f:42:76:4d:0c:81: b9:99:4c:63:a0:08:14:e2:f3:c0:5f:9c:11:8b:89:64:b1:f0: 38:5e:75:48:9a:91:7c:ed:2c:25:1d:49:45:f1:1b:0a:65:af: 1a:e5:2f:54:43:3c:e1:ec:fc:ab:f1:6d:40:49:e5:95:9a:4c: 67:b5:55:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjUxMjEwMjMzMDUxWhcNMjUxMjE3MjMzMDUxWjAYMRYwFAYD VQQDEw02OTNhMDJhYi0zOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pdlQ4WO7+XhAtH85qOHDYaRvZw2DEMcnnd5cSgjJprH1qWEJJlHqWzl/YrA IG9t7zb8ojEuv1w58e5k7m3eF7VRr5rkPC9JmjTbWN+A67rH3fjgnUGO+qtHiTRn 5vr4cyBLj5kYGbB+IEGkrwD1bJPSzWkg5OIWN7+ZTz0zIvM2KobqBlQnGpjK6wzn pxYZrwG5nutSqkj37nSQryY2HyiJvEz4dKQvcy9ORnKwfjnE+c2noKFQl10SWPRo ggAfqqg2ZD5jS8+saLwTQJvvdWcBKaz2qSEs3/PU9glpBmdwweMxTeFB68uLzYUr S1nBNrHFLHoBn6KQn91YH+eEjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9tQLdV VtjqI8Gy2B/vQgqIe2B1MB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9S1De9DU5BfnLKj/Wb0fRObr5yKmzxkw2oTInpk+4xcbPDGKlgOSJ LfsKR3NZqIEvXk+fA4OMBl0gn4ZjKwsbiOpSTKpZ3aonlA4O3s302kMrTttKImIH DnBTy9nIUelP/Wul30pWmGOmgnRZxQvoBPkNKSpQdSievLxbS3sn8nbuEH+zCEYp NFCDIXTotInn5JrYkTmkCekwNeoRABDFwvNOSQbjTh02S0Su4qX/YYWZhaZAYxur zGHH/D+kL5lPQnZNDIG5mUxjoAgU4vPAX5wRi4lksfA4XnVImpF87SwlHUlF8RsK Za8a5S9UQzzh7Pyr8W1ASeWVmkxntVUD -----END CERTIFICATE-----Generated at Fri Dec 12 13:15:03 2025 by rpki-client