This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: 83H30PkpgtnIlcViB5qjxukbkvcvob8+4/pUgdsCLMY= Subject key identifier: D5:E7:E2:F8:64:34:E3:A3:94:D4:42:8D:03:FD:CB:B4:83:0D:AF:8D Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 038E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 0368 Signing time: Sun 21 Dec 2025 00:12:21 +0000 Manifest this update: Sun 21 Dec 2025 00:12:21 +0000 Manifest next update: Sun 28 Dec 2025 00:12:21 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: v70ixaobdZ8Ej7AIyQtyuAveg479VSbAFXumRmAjMJM=) 2: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 3: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 4: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 5: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) 6: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 910 (0x38e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Dec 21 00:12:21 2025 GMT Not After : Dec 28 00:12:21 2025 GMT Subject: CN=69473b65-2cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:06:ee:99:04:fd:71:37:64:21:93:78:ca: fa:bb:42:01:10:27:77:3a:f2:1f:43:ec:b7:e0:ca: ac:b5:fb:7e:58:04:e9:29:d9:b7:b6:fe:33:98:05: be:43:ba:9a:fe:42:ba:e5:8f:43:e8:51:06:87:c1: 4c:75:a0:10:b4:4a:99:55:24:93:ca:92:e0:7f:8d: 7b:13:56:eb:65:33:b4:c9:20:09:9d:b5:84:e6:60: 84:bd:ad:f6:93:3f:09:41:52:08:ec:21:71:86:38: 7d:a3:9f:ad:60:3f:d6:16:44:13:80:e2:89:91:53: 39:a4:97:59:8c:8c:f0:42:72:e3:45:d3:0a:86:63: dd:51:e4:8a:d9:bf:4b:b9:df:22:80:7c:f0:7e:6b: 48:3b:3b:8a:4f:91:03:22:ec:99:8c:90:fc:28:da: 7d:08:38:db:f9:52:12:3a:51:da:e8:c8:42:81:ff: a7:78:36:d6:13:d8:f6:b7:98:3e:df:e0:06:6d:a6: 8d:90:69:f1:64:af:95:1e:92:b5:d1:0c:57:44:5d: d4:eb:5a:35:83:eb:33:73:03:42:6b:dc:f3:ac:40: f2:94:5d:c9:e1:c4:ef:25:e7:6b:8f:b0:cc:08:26: 91:38:4e:62:24:db:82:3e:39:3b:e4:ed:35:46:fa: 6d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E7:E2:F8:64:34:E3:A3:94:D4:42:8D:03:FD:CB:B4:83:0D:AF:8D X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e8:71:96:53:bb:a9:58:1c:9d:7e:73:14:49:65:c1:41:f8: 2e:a3:10:85:d5:5a:87:08:c5:58:36:3b:12:9f:65:55:8e:e2: 1f:ac:81:fa:20:96:20:21:96:bf:3b:1f:90:70:70:fa:0f:2d: c1:19:79:31:54:b7:24:bc:4c:2e:4e:90:e6:d2:35:b1:51:3f: 90:a8:88:06:f7:ec:36:18:77:c8:01:97:15:21:e4:81:c7:c8: f4:08:d9:31:9f:82:c4:0b:3e:56:9f:c3:68:e9:c9:05:7a:45: ae:e9:52:40:55:e0:0b:92:c0:c7:ee:da:91:ab:07:41:f0:94: 98:9c:f1:fc:14:05:41:cd:0b:e9:7a:a4:7e:91:79:86:28:09: 12:20:f5:7f:68:d4:3e:72:b4:0a:c1:b0:e9:35:44:d3:04:26: f1:f7:06:7a:90:8d:67:3c:cf:ed:c2:4e:c7:d8:31:50:65:54: 4a:9a:09:7a:b6:96:56:f8:eb:f2:83:b5:93:6f:c3:f3:f5:f4: 9d:8b:72:ca:27:0b:01:3a:af:c7:a3:5e:f8:84:5f:09:4c:27: b2:d8:93:96:bf:c1:26:d8:65:ad:d0:41:6d:62:c7:b5:f5:a0: 77:b9:43:5d:16:53:19:aa:c4:00:7a:95:11:a4:95:df:05:7b: 86:9c:15:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjUxMjIxMDAxMjIxWhcNMjUxMjI4MDAxMjIxWjAYMRYwFAYD VQQDDA02OTQ3M2I2NS0yY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyG8G7pkE/XE3ZCGTeMr6u0IBECd3OvIfQ+y34Mqstft+WATpKdm3tv4zmAW+ Q7qa/kK65Y9D6FEGh8FMdaAQtEqZVSSTypLgf417E1brZTO0ySAJnbWE5mCEva32 kz8JQVII7CFxhjh9o5+tYD/WFkQTgOKJkVM5pJdZjIzwQnLjRdMKhmPdUeSK2b9L ud8igHzwfmtIOzuKT5EDIuyZjJD8KNp9CDjb+VISOlHa6MhCgf+neDbWE9j2t5g+ 3+AGbaaNkGnxZK+VHpK10QxXRF3U61o1g+szcwNCa9zzrEDylF3J4cTvJedrj7DM CCaROE5iJNuCPjk75O01RvptTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXn4vhk NOOjlNRCjQP9y7SDDa+NMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH6HGWU7upWBydfnMUSWXBQfguoxCF1VqHCMVYNjsSn2VVjuIfrIH6 IJYgIZa/Ox+QcHD6Dy3BGXkxVLckvEwuTpDm0jWxUT+QqIgG9+w2GHfIAZcVIeSB x8j0CNkxn4LECz5Wn8No6ckFekWu6VJAVeALksDH7tqRqwdB8JSYnPH8FAVBzQvp eqR+kXmGKAkSIPV/aNQ+crQKwbDpNUTTBCbx9wZ6kI1nPM/twk7H2DFQZVRKmgl6 tpZW+Ovyg7WTb8Pz9fSdi3LKJwsBOq/Ho174hF8JTCey2JOWv8Em2GWt0EFtYse1 9aB3uUNdFlMZqsQAepURpJXfBXuGnBWz -----END CERTIFICATE-----Generated at Sun Dec 21 16:45:36 2025 by rpki-client