This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft File: jPXBj4McqRLIk_4OjnMjU7YKbtI.mft (raw, json) Hash identifier: TCZbUvZVig52mtpx8w4JoIutJru975cT0PjVfzMMQow= Subject key identifier: AA:86:48:05:48:96:EB:86:FF:6D:CB:32:A7:7D:CA:C6:E3:CF:F5:FE Authority key identifier: 8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2 Certificate issuer: /CN=A91201EE/serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft Manifest number: 05 Signing time: Fri 19 Dec 2025 07:01:24 +0000 Manifest this update: Fri 19 Dec 2025 07:01:24 +0000 Manifest next update: Fri 26 Dec 2025 07:01:24 +0000 Files and hashes: 1: jPXBj4McqRLIk_4OjnMjU7YKbtI.crl (hash: 3XJJLsiQGE+zCVJyL9LDhdWwtgcBFFrURsSfU4Pifpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91201EE, serialNumber=8CF5C18F831CA912C893FE0E8E732353B60A6ED2 Validity Not Before: Dec 19 07:01:24 2025 GMT Not After : Dec 26 07:01:24 2025 GMT Subject: CN=6944f844-29c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:f1:66:4d:88:0a:b0:2b:b2:f4:84:95:a8: 7e:bc:54:f3:ee:95:97:6b:e4:de:02:d6:a5:f0:84: c2:3f:b0:8e:d2:ea:70:66:29:45:76:18:c5:62:06: c7:f2:4a:04:10:47:a3:e7:e5:fd:0c:f2:fe:62:39: 5c:5d:9b:e3:24:d0:46:9b:da:91:6a:1e:bb:af:e5: 70:09:6f:6a:d6:5c:40:25:3a:8f:f6:c4:ae:07:be: 06:0b:ab:4e:cc:d3:32:86:0b:49:63:b0:52:01:45: c0:a3:e2:ae:01:ea:8f:d8:52:61:40:c7:0a:ba:3f: 01:43:63:df:bd:1d:24:3b:46:25:a1:90:8b:86:69: c3:99:83:a4:48:b5:69:8d:9f:60:12:8a:30:3e:cd: 20:01:8c:ce:c9:f2:b3:b1:91:b5:19:63:42:ee:c0: e7:1a:9f:45:bc:f3:9d:b7:99:1e:7e:92:d5:2c:7a: 53:42:e5:fb:ec:22:b8:65:fb:f9:f6:30:e5:43:bb: b1:34:fd:35:21:29:bf:bb:b2:db:23:ef:b9:08:56: 60:15:9c:6e:15:4e:52:ed:c7:98:6b:75:67:62:f2: 08:55:2f:11:03:bb:62:7b:8f:e8:23:99:8e:69:ae: a1:15:a8:26:47:d0:71:e0:82:bc:24:9c:29:67:e5: f1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:86:48:05:48:96:EB:86:FF:6D:CB:32:A7:7D:CA:C6:E3:CF:F5:FE X509v3 Authority Key Identifier: keyid:8C:F5:C1:8F:83:1C:A9:12:C8:93:FE:0E:8E:73:23:53:B6:0A:6E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPXBj4McqRLIk_4OjnMjU7YKbtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/D60C7002D74F11F0B58714BC6DD3641D/jPXBj4McqRLIk_4OjnMjU7YKbtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6f:2e:5b:37:4a:31:77:ad:7e:84:85:45:7b:5b:52:b0:7d: 4a:41:96:27:f3:7f:fc:6c:bc:b2:a6:8f:1d:2d:b8:8b:71:38: 10:44:3c:ac:f4:12:ec:5b:53:a1:39:b0:f2:8d:d7:07:c7:64: 05:37:da:6d:88:08:4f:f2:41:60:0e:73:3a:c7:d8:69:90:c6: 85:79:ec:63:25:4e:12:a4:7b:12:88:9e:05:ff:0f:ed:72:e3: d2:e6:86:8b:66:20:1d:6a:a2:7a:0f:bf:fb:03:ff:4c:46:da: 44:6e:b7:2b:d9:62:37:a0:df:db:11:c6:06:68:75:20:11:b8: e3:e2:0c:fa:37:21:0a:33:de:ca:78:b2:4d:71:91:a7:9d:64: 39:a0:d7:69:b6:6f:03:da:1b:0b:f3:aa:2b:e5:d6:e0:3b:d6: 4b:67:39:ee:c9:0d:5c:26:cd:91:e2:d1:53:e5:1f:9e:6d:b2: ad:c2:03:da:aa:d8:5f:de:1c:bb:66:8c:71:78:38:0c:e7:60: 8d:30:5d:cb:2f:fc:72:50:9b:37:45:9f:65:ad:7a:7e:c5:85: 21:ff:9b:2d:58:fb:82:c9:f6:a0:b7:51:f9:13:2a:19:0f:4b: c1:93:77:6e:bc:ba:cb:4f:1a:12:49:af:3b:1d:99:bd:bb:2f: 38:10:a7:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDFFRTExMC8GA1UEBRMoOENGNUMxOEY4MzFDQTkxMkM4OTNGRTBFOEU3MzIzNTNC NjBBNkVEMjAeFw0yNTEyMTkwNzAxMjRaFw0yNTEyMjYwNzAxMjRaMBgxFjAUBgNV BAMMDTY5NDRmODQ0LTI5YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCukPFmTYgKsCuy9ISVqH68VPPulZdr5N4C1qXwhMI/sI7S6nBmKUV2GMViBsfy SgQQR6Pn5f0M8v5iOVxdm+Mk0Eab2pFqHruv5XAJb2rWXEAlOo/2xK4HvgYLq07M 0zKGC0ljsFIBRcCj4q4B6o/YUmFAxwq6PwFDY9+9HSQ7RiWhkIuGacOZg6RItWmN n2ASijA+zSABjM7J8rOxkbUZY0LuwOcan0W88523mR5+ktUselNC5fvsIrhl+/n2 MOVDu7E0/TUhKb+7stsj77kIVmAVnG4VTlLtx5hrdWdi8ghVLxEDu2J7j+gjmY5p rqEVqCZH0HHggrwknCln5fF9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqoZIBUiW 64b/bcsyp33KxuPP9f4wHwYDVR0jBBgwFoAUjPXBj4McqRLIk/4OjnMjU7YKbtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMUVFL0Q2MEM3MDAyRDc0 RjExRjBCNTg3MTRCQzZERDM2NDFEL2pQWEJqNE1jcVJMSWtfNE9qbk1qVTdZS2J0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvalBYQmo0TWNxUkxJa180T2puTWpVN1lLYnRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MUVFL0Q2MEM3MDAyRDc0RjExRjBCNTg3MTRCQzZERDM2NDFEL2pQWEJqNE1jcVJM SWtfNE9qbk1qVTdZS2J0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH1vLls3SjF3rX6EhUV7W1KwfUpBlifzf/xsvLKmjx0tuItxOBBEPKz0 EuxbU6E5sPKN1wfHZAU32m2ICE/yQWAOczrH2GmQxoV57GMlThKkexKIngX/D+1y 49LmhotmIB1qonoPv/sD/0xG2kRutyvZYjeg39sRxgZodSARuOPiDPo3IQoz3sp4 sk1xkaedZDmg12m2bwPaGwvzqivl1uA71ktnOe7JDVwmzZHi0VPlH55tsq3CA9qq 2F/eHLtmjHF4OAznYI0wXcsv/HJQmzdFn2Wten7FhSH/my1Y+4LJ9qC3UfkTKhkP S8GTd268ustPGhJJrzsdmb27LzgQp+E= -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:19 2025 by rpki-client