This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json) Hash identifier: WfWzsvas2S3lQmiPCEO57wwUDXkrUp342okjaWPAKag= Subject key identifier: 2B:E9:63:87:1C:8F:40:11:BD:FE:33:4A:66:3C:1E:1C:55:24:37:82 Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft Manifest number: 8F Signing time: Tue 23 Dec 2025 05:33:57 +0000 Manifest this update: Tue 23 Dec 2025 05:33:57 +0000 Manifest next update: Tue 30 Dec 2025 05:33:57 +0000 Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: /xXhPq5oqX4YwgGTyhqwbrZfHERk2x75QscQSDazZGk=) 2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: HrcPdg7AcdEC2smU/wutkGHmrLpDpotb0GCdlOs2xPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB Validity Not Before: Dec 23 05:33:57 2025 GMT Not After : Dec 30 05:33:57 2025 GMT Subject: CN=694a29c5-ff9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:2f:34:a2:4d:26:da:ee:3f:27:78:d3:0e: dd:0f:9e:29:86:b9:30:59:b5:8b:60:45:ac:01:da: 8a:5d:67:f2:7a:58:fa:13:92:b9:25:a6:a4:4a:4e: 30:f2:31:8b:e4:5d:01:86:db:11:77:98:e4:db:6d: 5f:e5:49:07:35:98:76:86:18:39:8b:e1:9b:2e:de: f3:63:35:82:cb:61:9d:de:3d:95:f3:76:22:d0:0d: e8:72:9d:3b:33:1d:85:53:9e:7a:52:bc:15:3b:ca: a8:18:d1:5a:ef:11:5e:03:c9:e9:00:17:50:c5:a7: e3:fb:4c:b5:48:36:c0:ac:de:f5:00:2a:12:4a:f6: e9:c1:0a:df:af:91:ab:a7:dc:cc:d9:8b:b8:5f:c5: 8e:d0:5a:d1:7a:d3:f3:55:27:70:9a:e5:f9:62:eb: 6b:14:ba:d5:6a:e4:74:fc:f0:35:84:64:86:fc:38: a5:61:7e:48:a2:e8:4e:c7:83:7e:3d:df:68:97:3f: c4:b9:c1:ab:4f:84:7a:43:a9:04:63:35:f8:c2:ba: 7a:1c:a3:97:a8:ac:82:04:04:e9:48:a8:08:2f:5f: df:ff:a0:56:76:00:96:0d:2f:fc:0b:e7:60:d4:12: 95:71:95:6c:3b:83:33:6c:07:1c:e3:71:f0:91:00: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E9:63:87:1C:8F:40:11:BD:FE:33:4A:66:3C:1E:1C:55:24:37:82 X509v3 Authority Key Identifier: keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a9:b9:17:ae:d6:4e:77:07:75:bc:7c:3e:01:27:7a:62:24: ca:40:85:5a:de:10:6c:79:ae:8a:80:ab:75:6f:51:92:45:5c: 8e:7f:84:21:88:ae:d9:99:03:67:06:0a:1e:b9:90:00:1e:a4: dd:6d:50:7e:e1:49:8e:ae:41:9d:6b:03:32:2e:ad:b2:44:d6: 4d:26:6a:5b:d4:49:a8:9e:31:38:4a:37:0c:1e:42:5a:03:bc: 22:58:b1:d8:83:c2:ac:f0:12:4d:9d:eb:fd:c6:2b:1c:68:e1: 1c:a0:52:da:b0:80:66:ea:0d:31:03:25:d1:51:11:61:f1:25: 06:c4:3d:c8:2b:f8:f5:90:11:dd:52:48:2b:7e:1c:54:27:2f: 86:b5:41:10:22:fd:14:02:f1:2a:43:0a:e7:68:47:b7:4e:97: 0c:de:84:a1:b3:32:c8:01:d8:45:97:a3:b5:59:c0:e6:62:64: ee:ce:f2:8b:a9:70:30:16:06:6a:aa:c6:0b:c7:d8:5d:ad:7c: e1:2a:de:5f:5e:f5:2f:ce:8b:bc:f9:6e:f4:06:81:63:31:3d: 0f:c2:33:dd:46:62:72:2e:f7:65:19:e5:aa:97:c3:bf:a7:7b: b9:e8:a9:fb:1f:d6:89:09:0f:f7:2c:1d:64:9c:24:aa:bc:e6: 62:15:61:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNUYxMTAvBgNVBAUTKDk0OTZCMUZDNjA2MzY0NDM3MjM5OENFQTMzOEI4MjI0 MjU5MTc1Q0IwHhcNMjUxMjIzMDUzMzU3WhcNMjUxMjMwMDUzMzU3WjAYMRYwFAYD VQQDDA02OTRhMjljNS1mZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOkvNKJNJtruPyd40w7dD54phrkwWbWLYEWsAdqKXWfyelj6E5K5JaakSk4w 8jGL5F0BhtsRd5jk221f5UkHNZh2hhg5i+GbLt7zYzWCy2Gd3j2V83Yi0A3ocp07 Mx2FU556UrwVO8qoGNFa7xFeA8npABdQxafj+0y1SDbArN71ACoSSvbpwQrfr5Gr p9zM2Yu4X8WO0FrRetPzVSdwmuX5YutrFLrVauR0/PA1hGSG/DilYX5IouhOx4N+ Pd9olz/EucGrT4R6Q6kEYzX4wrp6HKOXqKyCBATpSKgIL1/f/6BWdgCWDS/8C+dg 1BKVcZVsO4MzbAcc43HwkQDR9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvpY4cc j0ARvf4zSmY8HhxVJDeCMB8GA1UdIwQYMBaAFJSWsfxgY2RDcjmM6jOLgiQlkXXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I1Ri9CQTAwQzUxNDEz NjYxMUYwODJFM0M1MERDNEY5QUUwMi9sSmF4X0dCalpFTnlPWXpxTTR1Q0pDV1Jk Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xKYXhfR0JqWkVOeU9ZenFNNHVDSkNXUmRjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I1Ri9CQTAwQzUxNDEzNjYxMUYwODJFM0M1MERDNEY5QUUwMi9sSmF4X0dCalpF TnlPWXpxTTR1Q0pDV1JkY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9qbkXrtZOdwd1vHw+ASd6YiTKQIVa3hBsea6KgKt1b1GSRVyOf4Qh iK7ZmQNnBgoeuZAAHqTdbVB+4UmOrkGdawMyLq2yRNZNJmpb1EmonjE4SjcMHkJa A7wiWLHYg8Ks8BJNnev9xiscaOEcoFLasIBm6g0xAyXRURFh8SUGxD3IK/j1kBHd UkgrfhxUJy+GtUEQIv0UAvEqQwrnaEe3TpcM3oShszLIAdhFl6O1WcDmYmTuzvKL qXAwFgZqqsYLx9hdrXzhKt5fXvUvzou8+W70BoFjMT0PwjPdRmJyLvdlGeWql8O/ p3u56Kn7H9aJCQ/3LB1knCSqvOZiFWFC -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:29 2025 by rpki-client