This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: uwQ3v4RIFsx0+fEwTkfbj0ydrF+9m8Tp/DDSecj4IyU= Subject key identifier: 05:5E:0A:FE:89:A9:2A:D3:F5:22:DD:71:9A:B3:EF:48:8E:DA:F8:BD Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 3504 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 34FC Signing time: Thu 18 Dec 2025 14:21:57 +0000 Manifest this update: Thu 18 Dec 2025 14:21:56 +0000 Manifest next update: Thu 25 Dec 2025 14:21:56 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: pr9SA5YUoiwdlRvTf+uJXYBNPC9OQfY6ejDxDHdGnCw=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: eIHncqSLzAK4hT66bMDG+FBpRTxCSLp9MqrqHufX4PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13572 (0x3504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Dec 18 14:21:56 2025 GMT Not After : Dec 25 14:21:56 2025 GMT Subject: CN=69440e04-f0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:04:c2:25:db:58:e6:53:cc:1c:e1:7a:ea: 9f:b7:48:79:6d:48:a3:1f:0d:32:bd:d6:ea:78:09: 3a:db:21:48:e9:6b:ab:64:d3:99:0b:16:c7:4e:5f: bd:dd:61:20:d5:78:3b:46:33:a0:27:ee:ff:0e:f6: ad:94:41:e0:e0:51:88:f6:1e:c8:cd:d7:70:52:8b: bf:10:a1:cc:93:c4:62:86:29:33:02:44:10:0e:c0: fd:c9:52:01:b9:f9:bf:86:cd:8b:42:44:70:71:cb: 84:a3:7b:52:a9:27:46:7d:04:9f:44:88:e1:16:0d: 59:5e:99:9a:87:b8:95:ea:66:3c:d2:dc:bf:fd:c0: 0c:c6:aa:7d:2c:38:bd:8d:59:7e:de:cb:2d:24:15: 6d:08:44:6d:f6:9e:6b:f0:e1:68:17:22:1d:e6:dc: 31:25:1b:20:8f:91:03:f8:c0:af:3f:83:80:1f:33: a1:a8:57:53:22:47:1d:43:4f:a0:5b:09:48:85:04: ce:e7:cd:aa:b0:64:71:03:58:d7:06:c3:18:0f:72: 6c:43:f9:d7:2b:58:00:eb:6c:a7:e6:41:63:28:ba: 02:24:0d:e9:4f:3f:67:01:11:f1:24:fe:82:90:22: 1f:d8:2e:cb:e3:94:74:74:a2:8b:a3:f7:c2:ca:a4: ec:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5E:0A:FE:89:A9:2A:D3:F5:22:DD:71:9A:B3:EF:48:8E:DA:F8:BD X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:04:e6:10:0b:da:87:ad:f3:a2:b6:f9:02:aa:75:46:f5:be: 6d:a8:62:f6:91:07:3f:81:95:cd:ed:1f:b6:59:31:66:68:03: 8c:35:11:63:e6:24:56:f7:9b:ef:18:5b:88:26:4d:74:03:07: ac:a1:14:be:30:33:5a:fa:fe:2b:6a:73:02:be:bf:0d:1f:26: ac:20:16:80:ce:f1:c2:97:c0:a4:40:a0:a1:5c:bf:94:54:f1: f0:09:56:87:92:bc:8f:b2:23:ee:a5:34:7f:85:9f:bd:d1:53: f7:5c:18:96:62:b4:61:0f:f2:76:53:f0:54:85:f9:86:58:a6: a8:e9:b3:17:bc:79:cf:e2:8f:b6:52:c9:cb:a4:bb:73:ba:66: 56:34:c7:93:75:7c:03:fa:d5:75:10:0a:b3:d6:02:6b:3a:01: a7:c6:36:7a:4f:37:62:99:78:eb:ea:79:fa:fb:bb:0b:ce:95: 62:c9:ce:03:87:32:29:23:05:48:e5:44:2b:d2:6d:ba:90:ba: 8c:05:fb:6c:f0:22:8e:a1:82:20:e6:10:60:f6:c6:61:b2:eb: 4a:3a:cf:46:36:2d:0e:23:42:14:62:63:f9:8a:d8:a1:76:e9: 64:1c:94:a3:76:da:ee:89:ce:4a:b0:a9:a6:30:4c:3b:4d:35: d3:6c:e9:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjUxMjE4MTQyMTU2WhcNMjUxMjI1MTQyMTU2WjAYMRYwFAYD VQQDDA02OTQ0MGUwNC1mMGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZIEwiXbWOZTzBzheuqft0h5bUijHw0yvdbqeAk62yFI6WurZNOZCxbHTl+9 3WEg1Xg7RjOgJ+7/DvatlEHg4FGI9h7IzddwUou/EKHMk8RihikzAkQQDsD9yVIB ufm/hs2LQkRwccuEo3tSqSdGfQSfRIjhFg1ZXpmah7iV6mY80ty//cAMxqp9LDi9 jVl+3sstJBVtCERt9p5r8OFoFyId5twxJRsgj5ED+MCvP4OAHzOhqFdTIkcdQ0+g WwlIhQTO582qsGRxA1jXBsMYD3JsQ/nXK1gA62yn5kFjKLoCJA3pTz9nARHxJP6C kCIf2C7L45R0dKKLo/fCyqTseQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVeCv6J qSrT9SLdcZqz70iO2vi9MB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4BOYQC9qHrfOitvkCqnVG9b5tqGL2kQc/gZXN7R+2WTFmaAOMNRFj 5iRW95vvGFuIJk10AwesoRS+MDNa+v4ranMCvr8NHyasIBaAzvHCl8CkQKChXL+U VPHwCVaHkryPsiPupTR/hZ+90VP3XBiWYrRhD/J2U/BUhfmGWKao6bMXvHnP4o+2 UsnLpLtzumZWNMeTdXwD+tV1EAqz1gJrOgGnxjZ6TzdimXjr6nn6+7sLzpViyc4D hzIpIwVI5UQr0m26kLqMBfts8CKOoYIg5hBg9sZhsutKOs9GNi0OI0IUYmP5itih dulkHJSjdtruic5KsKmmMEw7TTXTbOk9 -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:31 2025 by rpki-client