This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft File: jWaK_T4D5wuESYgfo1ATG6ysSFY.mft (raw, json) Hash identifier: NgdqosT5zEHYJNe1tQMt820IZjpA32n/MK5oK72X84E= Subject key identifier: 4C:7F:9E:C2:A2:89:11:A8:3D:75:E7:90:81:47:DF:66:66:45:3C:F5 Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Certificate serial: 0721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft Manifest number: 071A Signing time: Mon 22 Dec 2025 21:07:28 +0000 Manifest this update: Mon 22 Dec 2025 21:07:27 +0000 Manifest next update: Mon 29 Dec 2025 21:07:27 +0000 Files and hashes: 1: jWaK_T4D5wuESYgfo1ATG6ysSFY.crl (hash: FuLhqXKMKyldz9FkmfCJrfGuNrKnWuZxE5eF068EIIQ=) 2: 11328E82645511EBAE4A4633C4F9AE02.roa (hash: uz2dLcbiKvalhoEeN26Zq73ncIHuh+XFmtnGJAva9tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDB80, serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Validity Not Before: Dec 22 21:07:27 2025 GMT Not After : Dec 29 21:07:27 2025 GMT Subject: CN=6949b310-39ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:c3:ed:ab:bd:05:2b:a7:b8:cb:75:88:17: 01:d2:d9:fd:aa:b1:7e:e0:a1:64:ac:0e:0b:10:8a: a4:a5:fa:4f:98:89:8e:27:f9:27:d6:39:3d:88:be: 25:ab:7a:c0:8b:20:e6:8c:8a:7b:74:78:04:1a:9b: 34:2c:89:4e:4a:78:54:be:a0:c9:e3:ea:ad:23:61: 55:c3:03:cd:06:f7:d2:21:aa:0f:e2:46:38:8f:86: 4b:a9:dd:cd:91:c5:4e:a6:99:1a:03:96:ce:ff:48: 7a:8e:9a:fe:aa:0a:22:80:d5:b0:cd:69:f8:50:20: db:74:bf:24:b0:a9:86:34:3d:36:41:c0:9d:26:a9: be:47:0e:23:87:b8:e0:28:23:04:5e:46:58:c2:53: 79:06:f0:99:63:37:a6:7e:ac:f0:d3:26:67:3d:cc: a2:c6:d0:73:18:1d:9d:5e:ee:4d:43:bd:c1:bc:6c: c1:a3:b7:d3:0f:3a:d9:bf:88:21:4d:2a:63:71:e4: 94:76:15:86:0a:70:b8:56:16:43:22:aa:d8:2e:a6: 5d:de:f1:70:d2:a7:e7:0e:bb:c9:83:5f:c3:9a:39: f6:9f:d3:66:b7:6a:a7:a6:84:8b:4d:ac:e7:fe:bd: cb:b0:b7:94:51:49:1f:bb:a8:97:b7:0f:e2:d8:f9: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7F:9E:C2:A2:89:11:A8:3D:75:E7:90:81:47:DF:66:66:45:3C:F5 X509v3 Authority Key Identifier: keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5c:0d:dc:05:6f:36:d5:b9:a4:25:08:3f:1f:68:8f:68:4b: 2c:75:a7:24:29:70:d1:ac:ff:1d:4f:34:a0:73:34:05:a1:c8: 6f:71:65:6a:3b:99:31:b6:2d:e6:63:57:ca:ac:28:66:dd:98: 57:f8:52:21:6b:b5:bf:fb:a9:14:d9:88:d4:c1:31:bd:ec:f2: de:3b:9c:94:67:bb:0d:6a:24:8c:53:0c:c3:14:9e:d4:2e:9a: a8:c6:bc:8e:b4:cf:05:67:8e:08:38:25:bb:8d:ab:8d:1f:bc: 70:89:06:38:77:13:ec:7c:b3:8b:b3:f6:3e:12:54:ef:df:09: f6:45:e9:07:ed:d0:d3:00:02:13:fa:c4:31:41:c0:2e:30:c3: 08:84:2a:4e:a3:d3:73:d4:7e:04:22:bd:3d:7f:05:16:ae:54: 62:5a:f8:e8:33:be:ab:4f:c9:99:d1:71:f1:c5:6a:00:6a:f5: b1:fe:54:e8:2c:d0:b3:53:48:1d:1e:41:02:54:27:d0:83:1d: 3c:46:fc:81:f5:cb:6d:43:df:93:86:d8:9b:db:32:a5:4d:76: 7a:a2:fe:b6:f7:85:f2:1c:6e:bb:85:ae:f9:5f:4c:f4:9b:2a: 97:42:1c:30:f5:aa:7f:de:89:84:28:c6:12:a7:11:96:51:b5: 58:8c:5d:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC QUNBQzQ4NTYwHhcNMjUxMjIyMjEwNzI3WhcNMjUxMjI5MjEwNzI3WjAYMRYwFAYD VQQDDA02OTQ5YjMxMC0zOWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpLD7au9BSunuMt1iBcB0tn9qrF+4KFkrA4LEIqkpfpPmImOJ/kn1jk9iL4l q3rAiyDmjIp7dHgEGps0LIlOSnhUvqDJ4+qtI2FVwwPNBvfSIaoP4kY4j4ZLqd3N kcVOppkaA5bO/0h6jpr+qgoigNWwzWn4UCDbdL8ksKmGND02QcCdJqm+Rw4jh7jg KCMEXkZYwlN5BvCZYzemfqzw0yZnPcyixtBzGB2dXu5NQ73BvGzBo7fTDzrZv4gh TSpjceSUdhWGCnC4VhZDIqrYLqZd3vFw0qfnDrvJg1/Dmjn2n9Nmt2qnpoSLTazn /r3LsLeUUUkfu6iXtw/i2PnKQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEx/nsKi iRGoPXXnkIFH32ZmRTz1MB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0 NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REI4MC9CRTlGNjFBMDY0NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3 dUVTWWdmbzFBVEc2eXNTRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyXA3cBW821bmkJQg/H2iPaEssdackKXDRrP8dTzSgczQFochvcWVq O5kxti3mY1fKrChm3ZhX+FIha7W/+6kU2YjUwTG97PLeO5yUZ7sNaiSMUwzDFJ7U LpqoxryOtM8FZ44IOCW7jauNH7xwiQY4dxPsfLOLs/Y+ElTv3wn2RekH7dDTAAIT +sQxQcAuMMMIhCpOo9Nz1H4EIr09fwUWrlRiWvjoM76rT8mZ0XHxxWoAavWx/lTo LNCzU0gdHkECVCfQgx08RvyB9cttQ9+Thtib2zKlTXZ6ov6294XyHG67ha75X0z0 myqXQhww9ap/3omEKMYSpxGWUbVYjF0M -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:05 2025 by rpki-client