This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: IS0WsD15YvLSQOs+TG/9DXBbksN23tOrAWTb0hnaISM= Subject key identifier: EC:EC:7A:47:30:3E:9C:A1:55:CB:DD:9D:00:75:2C:AE:CE:95:C3:5C Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 0567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 055E Signing time: Sat 20 Dec 2025 22:41:04 +0000 Manifest this update: Sat 20 Dec 2025 22:41:04 +0000 Manifest next update: Sat 27 Dec 2025 22:41:04 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: s7dR2n50imy70JBv7R8yQYW7LkQ8Qi4stO8WT1bP8xc=) 2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: DwXb+joRx9u0BG/TCkqlIKWQRw4604GMuFkdr4cvB14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1383 (0x567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: Dec 20 22:41:04 2025 GMT Not After : Dec 27 22:41:04 2025 GMT Subject: CN=69472600-0279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:15:41:24:78:8b:7d:ed:6e:7d:a4:f2:7e: 88:20:b1:2e:fc:aa:1a:37:90:87:b9:ec:71:10:b8: 86:b4:af:4e:cf:ca:68:f0:12:42:13:d4:46:9c:59: 19:4e:d2:53:c1:82:b0:56:84:97:7a:8a:02:b7:06: c7:30:fe:e6:3d:82:a6:ca:33:6b:b6:68:5b:a6:a5: 9b:7c:6a:77:48:93:6d:8f:c5:24:69:c3:d5:a8:8b: 4f:2a:49:33:e1:40:a1:bd:fb:b1:03:55:ef:7a:0d: 70:8b:23:54:6a:a5:da:b4:f7:7b:09:51:58:50:25: ae:d4:71:3f:2f:98:14:95:a6:bd:e3:4f:43:0f:73: 2f:07:71:06:56:c1:eb:8c:8a:03:c9:50:22:91:75: 37:3a:f5:cb:d7:48:80:4b:11:8f:0a:38:6b:70:d3: 6b:a5:f4:bc:f9:66:2a:b8:ee:ea:d8:0c:ac:7e:bb: 5d:78:0e:56:7a:dd:6d:54:c1:d1:e5:e0:81:46:4e: 25:d0:1a:26:25:8e:dc:e4:1b:c9:66:7c:e6:a4:73: d5:6a:0a:f3:2a:13:e9:11:fc:8f:3f:31:fd:42:f7: d7:a4:c1:8a:dc:10:74:b6:4f:96:8f:fa:6f:50:67: 5c:a7:c1:0c:18:7f:56:ee:5f:fd:a8:e9:bd:4a:c0: a7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EC:7A:47:30:3E:9C:A1:55:CB:DD:9D:00:75:2C:AE:CE:95:C3:5C X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:5f:05:3a:3e:ab:d8:cb:64:a7:cd:34:92:ba:81:d1:c2:4d: f8:1e:ef:8e:ee:2d:a7:25:fe:8e:aa:17:6f:47:51:c2:c8:7e: 07:27:93:dd:21:ad:6f:09:9b:d0:94:01:52:c5:bc:6d:0c:62: 4a:a4:5e:a0:70:35:84:3e:27:99:1c:69:fd:52:c9:3c:e3:a3: d8:09:98:fd:64:60:47:6d:3f:40:6c:71:c1:2b:81:b2:cf:43: 7c:1e:80:89:b2:c5:75:52:f0:21:88:14:60:cf:cc:29:cc:86: fa:4c:54:ba:71:3b:40:fb:8c:68:10:19:38:8d:60:8f:80:cf: 30:fb:89:9a:b6:64:91:a4:9c:78:b7:32:24:12:4c:cd:07:3f: 73:d2:22:71:bb:8e:3d:6e:64:2c:f6:02:e6:a1:01:de:c9:3b: fd:39:ec:9e:86:c1:e6:2b:bc:d2:b3:81:be:c2:2d:25:68:d0: 8b:8f:87:d5:46:97:44:2b:f8:50:2c:e9:f6:de:3f:9d:fb:67: d7:e7:92:d7:f8:ce:df:44:9d:5c:c3:0a:a3:8e:df:78:03:a7: f1:07:df:29:4d:27:56:3d:e2:20:d1:6d:4e:f6:0c:ff:fa:ad: 23:fe:41:8c:98:c0:56:7c:04:4f:02:c5:84:2b:46:65:f7:01: 6d:d6:07:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjUxMjIwMjI0MTA0WhcNMjUxMjI3MjI0MTA0WjAYMRYwFAYD VQQDDA02OTQ3MjYwMC0wMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl2AVQSR4i33tbn2k8n6IILEu/KoaN5CHuexxELiGtK9Oz8po8BJCE9RGnFkZ TtJTwYKwVoSXeooCtwbHMP7mPYKmyjNrtmhbpqWbfGp3SJNtj8UkacPVqItPKkkz 4UChvfuxA1Xveg1wiyNUaqXatPd7CVFYUCWu1HE/L5gUlaa9409DD3MvB3EGVsHr jIoDyVAikXU3OvXL10iASxGPCjhrcNNrpfS8+WYquO7q2AysfrtdeA5Wet1tVMHR 5eCBRk4l0BomJY7c5BvJZnzmpHPVagrzKhPpEfyPPzH9QvfXpMGK3BB0tk+Wj/pv UGdcp8EMGH9W7l/9qOm9SsCn4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzsekcw PpyhVcvdnQB1LK7OlcNcMB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTXwU6PqvYy2SnzTSSuoHRwk34Hu+O7i2nJf6OqhdvR1HCyH4HJ5Pd Ia1vCZvQlAFSxbxtDGJKpF6gcDWEPieZHGn9Usk846PYCZj9ZGBHbT9AbHHBK4Gy z0N8HoCJssV1UvAhiBRgz8wpzIb6TFS6cTtA+4xoEBk4jWCPgM8w+4matmSRpJx4 tzIkEkzNBz9z0iJxu449bmQs9gLmoQHeyTv9OeyehsHmK7zSs4G+wi0laNCLj4fV RpdEK/hQLOn23j+d+2fX55LX+M7fRJ1cwwqjjt94A6fxB98pTSdWPeIg0W1O9gz/ +q0j/kGMmMBWfARPAsWEK0Zl9wFt1gcj -----END CERTIFICATE-----Generated at Sun Dec 21 13:29:29 2025 by rpki-client