This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: vPJ3psVAxlVsdjh15doX2ZCjvfv66UUnSjx0D2lNb60= Subject key identifier: 40:1B:73:A8:19:A2:FD:D7:BC:D6:23:A5:BD:A9:61:BE:75:23:C5:BC Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 02E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 02DA Signing time: Fri 19 Dec 2025 00:34:38 +0000 Manifest this update: Fri 19 Dec 2025 00:34:37 +0000 Manifest next update: Fri 26 Dec 2025 00:34:37 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: 3SITx07hfdgb1l5xyYE5HDFXJ6T94/Go8epzzbdGxEY=) 2: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: zVP6Lu1oo3kp6gcWozNx0s9g3feGp/J0qR06fS1o9cs=) 3: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: +LEU78x/LWwi5ap6sqbnvORUUGIW3bkmD1+ul2+yf4E=) 4: B502B0AE799311EE87452E15C4F9AE02.roa (hash: Af+2fxsg1OVRliv2YbtkhhRaDDPkEDX9Fcaj9HwzrTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 744 (0x2e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Dec 19 00:34:37 2025 GMT Not After : Dec 26 00:34:37 2025 GMT Subject: CN=69449d9e-b5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f7:40:08:9a:5d:2e:74:7a:ad:9f:7d:22:7c: 1e:e1:77:bc:bb:98:0f:6a:3e:fd:be:d8:8f:1a:4c: 60:0e:71:13:2b:aa:a1:57:38:68:6b:a9:d6:ab:c4: 3b:3d:92:a1:3c:4c:ee:fa:1b:65:c5:c7:b7:ed:94: 68:c1:80:59:53:f1:0b:37:08:70:a0:06:41:c9:82: 1b:e6:ab:14:2f:f6:4d:75:0a:31:50:1d:38:6f:6d: f5:97:ef:4f:f7:5f:dd:e8:ec:11:5e:24:42:30:73: 26:3c:b7:1e:a2:7f:3a:ec:cc:01:ac:fe:30:34:49: 39:2c:fe:25:78:cc:cc:5f:75:d0:93:a9:52:4c:bb: d4:77:98:60:ca:93:15:4d:bd:3e:37:2e:93:a8:f2: 03:7c:4d:bc:d1:8a:86:af:d4:17:fe:b9:f5:e3:5d: 1d:b3:a1:60:00:0a:53:bf:1c:7a:ed:5b:42:36:21: 23:30:24:3c:9c:d1:d7:be:a4:ab:cc:05:9c:c3:dd: e8:7c:a4:61:2f:60:fb:97:9c:6a:7b:67:35:1e:1c: f3:0f:d2:18:16:df:e5:d0:5e:c9:0f:7e:41:a2:e3: 7a:be:ed:7e:ff:e3:c1:5e:60:4b:32:e8:48:d3:63: 43:19:43:9b:20:81:db:ea:00:f3:78:12:a9:f7:b8: 5b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1B:73:A8:19:A2:FD:D7:BC:D6:23:A5:BD:A9:61:BE:75:23:C5:BC X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:75:bb:67:01:ef:fc:7b:0c:55:7e:d7:fa:69:39:2a:8f:26: c8:85:8b:d3:25:b3:b8:70:05:cc:f2:43:64:e5:7d:21:cc:bd: 78:12:0c:e9:47:04:47:58:dc:61:af:90:ff:a8:ef:e1:c3:29: 3f:31:f1:ec:ae:34:9e:aa:8e:95:bb:62:ed:7c:b8:44:c8:ec: c6:e7:5e:76:c1:36:3d:db:7c:c5:48:9e:f8:e1:c7:51:5c:f2: 1e:3f:f6:9c:b1:a0:9b:69:a3:f3:5f:de:f2:b5:2b:6e:0b:01: 7a:41:55:28:8e:31:ba:1f:8f:63:87:c5:41:59:b9:f7:8a:e1: 88:8d:db:ff:80:f9:76:27:9f:eb:1f:9c:c6:ca:3f:17:11:1e: 2b:e8:6c:cd:21:ea:6e:eb:c0:67:88:c9:83:0c:b7:cd:0d:a3: 93:bd:df:d8:2c:b6:f1:6a:d1:a9:aa:84:ba:36:f9:da:32:71: c7:15:39:14:86:4b:04:32:28:48:61:c2:46:51:b7:c4:13:1e: e3:a9:52:c6:18:bc:d2:3f:42:59:3f:3b:b8:52:71:5d:a6:b4: 7b:11:39:f2:07:fc:ba:43:63:11:b3:ca:ec:3f:80:62:74:3b: e8:6d:cb:ff:eb:2e:e5:2c:54:4b:2f:3e:1f:c3:98:5f:09:83: 66:64:3c:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjUxMjE5MDAzNDM3WhcNMjUxMjI2MDAzNDM3WjAYMRYwFAYD VQQDDA02OTQ0OWQ5ZS1iNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fdACJpdLnR6rZ99Inwe4Xe8u5gPaj79vtiPGkxgDnETK6qhVzhoa6nWq8Q7 PZKhPEzu+htlxce37ZRowYBZU/ELNwhwoAZByYIb5qsUL/ZNdQoxUB04b231l+9P 91/d6OwRXiRCMHMmPLceon867MwBrP4wNEk5LP4leMzMX3XQk6lSTLvUd5hgypMV Tb0+Ny6TqPIDfE280YqGr9QX/rn1410ds6FgAApTvxx67VtCNiEjMCQ8nNHXvqSr zAWcw93ofKRhL2D7l5xqe2c1HhzzD9IYFt/l0F7JD35BouN6vu1+/+PBXmBLMuhI 02NDGUObIIHb6gDzeBKp97hbiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAbc6gZ ov3XvNYjpb2pYb51I8W8MB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvdbtnAe/8ewxVftf6aTkqjybIhYvTJbO4cAXM8kNk5X0hzL14Egzp RwRHWNxhr5D/qO/hwyk/MfHsrjSeqo6Vu2LtfLhEyOzG5152wTY923zFSJ744cdR XPIeP/acsaCbaaPzX97ytStuCwF6QVUojjG6H49jh8VBWbn3iuGIjdv/gPl2J5/r H5zGyj8XER4r6GzNIepu68BniMmDDLfNDaOTvd/YLLbxatGpqoS6NvnaMnHHFTkU hksEMihIYcJGUbfEEx7jqVLGGLzSP0JZPzu4UnFdprR7ETnyB/y6Q2MRs8rsP4Bi dDvobcv/6y7lLFRLLz4fw5hfCYNmZDwu -----END CERTIFICATE-----Generated at Fri Dec 19 12:08:38 2025 by rpki-client