This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: kLBgVQWP7UPWai0B/j2R1bfKzgrimck3ksqkU7aOiRA= Subject key identifier: 74:BC:0C:8F:88:0D:EC:A5:1B:FB:41:BB:11:42:23:60:F4:02:4C:33 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 0399 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 0373 Signing time: Sun 11 Jan 2026 00:07:20 +0000 Manifest this update: Sun 11 Jan 2026 00:07:20 +0000 Manifest next update: Sun 18 Jan 2026 00:07:20 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: Ozz7UjAPKmjDLqGy5hKfdGTCIbg45x8mWsuINoYi5ho=) 2: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 3: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 4: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 5: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) 6: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 00:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 921 (0x399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Jan 11 00:07:20 2026 GMT Not After : Jan 18 00:07:20 2026 GMT Subject: CN=6962e9b8-0bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:34:33:02:bf:3d:eb:41:1d:45:e6:b1:9c:3c: 72:0b:1e:55:a5:d6:b3:8a:e6:a1:9d:9a:c9:8f:ad: 0c:4e:e3:e5:7b:8a:81:05:57:48:3e:3b:70:bf:b8: c6:f2:28:2a:8e:0b:c3:c8:de:90:f2:c6:51:8b:ad: 63:74:73:b0:23:9a:db:f3:03:c5:33:09:c3:e4:ea: ba:48:02:fc:da:e5:85:c2:5f:f6:b2:66:73:f1:b9: 08:33:96:cf:85:c5:14:47:e7:9e:7e:22:6c:0e:e9: 81:2a:9a:d6:38:5b:74:75:36:22:8b:30:ab:09:0b: a3:38:92:09:a4:c3:c6:d1:1a:d9:af:54:7b:e3:27: 2a:3b:26:5c:42:6b:5e:d4:b1:37:32:ac:71:07:13: 74:96:47:1e:11:a0:3a:28:8c:2c:8e:37:8d:0b:cc: aa:bf:7a:fa:37:72:ce:d5:54:d4:18:91:57:da:c0: e9:98:0d:7a:cf:72:df:20:d2:2b:a1:2f:0e:9c:31: 69:ad:16:a6:6d:50:b9:f5:d2:d5:1f:62:e5:23:07: 58:c9:06:43:dd:07:c5:a3:46:bc:99:9d:89:45:e2: 4c:af:d8:a7:73:b0:fd:2d:96:97:e3:99:da:d3:c4: 8d:55:11:08:2e:45:6b:2d:a2:4b:35:a9:4a:44:8c: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BC:0C:8F:88:0D:EC:A5:1B:FB:41:BB:11:42:23:60:F4:02:4C:33 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:f3:a0:dd:55:e2:bb:64:ff:ce:f5:12:9e:47:85:45:a3:44: 14:63:6c:bd:e8:4c:21:fe:66:47:bf:49:2a:0a:d7:de:32:11: 12:eb:49:ff:1f:f3:c2:0b:22:64:c3:95:d6:63:c6:fb:03:6b: b7:e3:a2:5e:c5:e9:1b:94:3c:0e:66:91:8a:ab:b1:2e:20:54: 68:91:d0:af:5f:99:37:8d:0a:94:1e:b8:db:c4:b9:e5:2b:50: 58:61:59:27:0e:97:22:85:cd:00:9e:a4:f5:aa:51:6e:b8:41: 95:19:ed:50:1b:d0:a9:3e:a3:5d:52:fb:d3:e1:ad:08:0c:8e: 19:c5:8c:e9:eb:ba:7e:35:9f:91:a0:3c:18:b7:e3:f9:bd:be: 99:a3:36:f8:7d:6b:a5:d2:9e:a7:ce:26:7b:ff:aa:48:54:02: af:3d:0b:ad:70:9f:ec:38:92:e2:2f:e3:43:63:fe:a1:ff:46: a1:8d:0d:d5:10:da:e7:9e:98:9b:d7:03:25:d0:86:23:b3:21: fb:60:0d:0b:53:41:37:ce:01:4f:c8:b3:5f:9c:85:9a:fd:88: 4b:22:34:1f:ff:72:71:81:c2:98:d7:54:d2:b4:90:25:e2:eb: f8:f0:f9:7d:6a:30:3e:f4:0b:d1:55:23:4b:ee:90:55:42:aa: a5:46:a3:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjYwMTExMDAwNzIwWhcNMjYwMTE4MDAwNzIwWjAYMRYwFAYD VQQDDA02OTYyZTliOC0wYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzQzAr8960EdReaxnDxyCx5VpdaziuahnZrJj60MTuPle4qBBVdIPjtwv7jG 8igqjgvDyN6Q8sZRi61jdHOwI5rb8wPFMwnD5Oq6SAL82uWFwl/2smZz8bkIM5bP hcUUR+eefiJsDumBKprWOFt0dTYiizCrCQujOJIJpMPG0RrZr1R74ycqOyZcQmte 1LE3MqxxBxN0lkceEaA6KIwsjjeNC8yqv3r6N3LO1VTUGJFX2sDpmA16z3LfINIr oS8OnDFprRambVC59dLVH2LlIwdYyQZD3QfFo0a8mZ2JReJMr9inc7D9LZaX45na 08SNVREILkVrLaJLNalKRIy35QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHS8DI+I DeylG/tBuxFCI2D0AkwzMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDd86DdVeK7ZP/O9RKeR4VFo0QUY2y96Ewh/mZHv0kqCtfeMhES60n/ H/PCCyJkw5XWY8b7A2u346JexekblDwOZpGKq7EuIFRokdCvX5k3jQqUHrjbxLnl K1BYYVknDpcihc0AnqT1qlFuuEGVGe1QG9CpPqNdUvvT4a0IDI4ZxYzp67p+NZ+R oDwYt+P5vb6Zozb4fWul0p6nziZ7/6pIVAKvPQutcJ/sOJLiL+NDY/6h/0ahjQ3V ENrnnpib1wMl0IYjsyH7YA0LU0E3zgFPyLNfnIWa/YhLIjQf/3JxgcKY11TStJAl 4uv48Pl9ajA+9AvRVSNL7pBVQqqlRqPp -----END CERTIFICATE-----Generated at Mon Jan 12 02:04:35 2026 by rpki-client