This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json) Hash identifier: Moec/WZAGEUbxwIKdSAQkaUYaY/esLGp5QlpFsOpWuw= Subject key identifier: DA:09:FB:AA:64:0F:2E:78:14:74:E4:BF:36:DA:A1:F6:70:55:88:F4 Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft Manifest number: 016A Signing time: Sun 21 Dec 2025 03:10:50 +0000 Manifest this update: Sun 21 Dec 2025 03:10:49 +0000 Manifest next update: Sun 28 Dec 2025 03:10:49 +0000 Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: z8ITw9s9V0c2MPVZuCqjyhiBGxkaZEELgoYCeJgVmIU=) 2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: c6SlXvh5jnzbFaQ7XL8WHzhEyzH6pjJKr/W4VmAYxxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: Dec 21 03:10:49 2025 GMT Not After : Dec 28 03:10:49 2025 GMT Subject: CN=6947653a-5813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c7:eb:d0:ae:bf:cf:e2:28:b3:c0:18:2a:c4: d6:c1:2c:5f:c4:c5:53:6f:0b:97:25:0a:ca:e5:ea: 9f:b1:0b:dc:6b:bc:99:47:d4:84:fa:e7:f6:24:12: 1b:2b:e5:8b:77:18:8d:85:52:a4:0f:b0:5c:b3:34: 23:f6:0e:c5:9f:f2:da:d0:47:25:3f:4a:44:17:9e: b3:bb:0a:1d:d2:c4:f2:10:b8:ba:37:14:83:ea:60: 7a:c4:cf:ee:41:f1:bb:2f:87:8e:96:e0:60:44:8d: 31:c3:9b:44:b1:d7:23:db:52:8e:44:e3:a0:84:b7: 52:fd:73:48:f4:cc:bc:b6:c8:7e:86:98:58:3a:0e: ea:e6:da:73:e7:4e:b9:34:f0:07:32:09:77:b5:6e: 42:c8:de:6a:fc:79:16:8d:89:2b:0e:62:45:bd:05: 28:87:31:e6:ec:98:90:a9:e7:31:1b:f3:0a:8a:41: ec:b7:ed:7c:19:04:d2:6d:20:d5:9a:f4:fe:1a:02: 5d:6a:7a:35:f3:a8:fa:64:4c:40:e2:2c:d3:29:8e: df:9b:fe:bb:a6:26:8d:36:46:59:98:85:c8:97:4b: 72:b9:06:a1:33:cd:8a:d2:2e:ef:6a:26:db:ed:56: 83:32:64:25:dd:22:41:59:81:65:f4:5c:57:4c:39: 7b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:09:FB:AA:64:0F:2E:78:14:74:E4:BF:36:DA:A1:F6:70:55:88:F4 X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:6d:fc:82:5b:b0:34:06:35:aa:e7:a4:61:86:e7:db:b7:a5: f3:6a:e9:db:8b:1d:27:86:f9:0b:7b:97:8d:2e:06:f7:40:81: f4:1e:6c:c7:e7:79:7a:01:48:e7:4b:7d:29:14:83:74:54:0e: 46:b5:df:45:6a:c7:28:b8:c9:f8:c3:3a:d0:e5:cd:c8:52:dd: 00:b2:9d:6b:3e:68:d3:ef:1f:42:b7:fd:b9:45:81:c4:36:38: e8:64:b6:5f:0f:97:90:00:9b:ec:5e:3d:03:f0:1e:d3:ff:ef: 13:89:01:2f:f7:c6:2e:c6:3b:f2:0c:d2:fe:c1:18:db:f7:11: 00:1f:a7:fb:e6:86:05:60:4d:b7:ae:64:c7:40:8f:da:bd:93: c6:d4:37:fb:af:e7:18:08:f3:90:41:99:eb:44:51:fe:cc:97: 66:49:6d:06:11:39:9e:2f:fb:ab:af:99:00:b4:ae:71:f4:5a: a7:53:35:c1:2c:32:0d:29:a5:05:00:7d:7b:72:e0:f9:b2:46: 9e:75:f8:f5:e0:4b:f0:57:72:0e:2c:76:75:80:76:3b:03:b8: 49:eb:03:c6:08:53:ec:90:e4:b7:93:65:3b:d6:d9:e3:92:7c: f7:a3:37:6d:2a:af:83:9d:ec:28:98:97:9e:99:68:37:28:07: 9c:2c:bf:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjUxMjIxMDMxMDQ5WhcNMjUxMjI4MDMxMDQ5WjAYMRYwFAYD VQQDDA02OTQ3NjUzYS01ODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcfr0K6/z+Ios8AYKsTWwSxfxMVTbwuXJQrK5eqfsQvca7yZR9SE+uf2JBIb K+WLdxiNhVKkD7BcszQj9g7Fn/La0EclP0pEF56zuwod0sTyELi6NxSD6mB6xM/u QfG7L4eOluBgRI0xw5tEsdcj21KOROOghLdS/XNI9My8tsh+hphYOg7q5tpz5065 NPAHMgl3tW5CyN5q/HkWjYkrDmJFvQUohzHm7JiQqecxG/MKikHst+18GQTSbSDV mvT+GgJdano186j6ZExA4izTKY7fm/67piaNNkZZmIXIl0tyuQahM82K0i7vaibb 7VaDMmQl3SJBWYFl9FxXTDl7UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoJ+6pk Dy54FHTkvzbaofZwVYj0MB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBbfyCW7A0BjWq56Rhhufbt6Xzaunbix0nhvkLe5eNLgb3QIH0HmzH 53l6AUjnS30pFIN0VA5Gtd9FascouMn4wzrQ5c3IUt0Asp1rPmjT7x9Ct/25RYHE NjjoZLZfD5eQAJvsXj0D8B7T/+8TiQEv98YuxjvyDNL+wRjb9xEAH6f75oYFYE23 rmTHQI/avZPG1Df7r+cYCPOQQZnrRFH+zJdmSW0GETmeL/urr5kAtK5x9FqnUzXB LDINKaUFAH17cuD5skaedfj14EvwV3IOLHZ1gHY7A7hJ6wPGCFPskOS3k2U71tnj knz3ozdtKq+DnewomJeemWg3KAecLL9r -----END CERTIFICATE-----Generated at Sun Dec 21 19:03:35 2025 by rpki-client