This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json) Hash identifier: /wK3q4m8z8PvVuoLKykeondp2tiHVXf2dQbPf7Cc/z0= Subject key identifier: 42:AC:05:88:AD:CE:F5:C0:16:95:E6:4C:A2:2B:7D:5A:E8:1B:36:7D Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 3534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft Manifest number: 350B Signing time: Wed 24 Dec 2025 14:49:40 +0000 Manifest this update: Wed 24 Dec 2025 14:49:40 +0000 Manifest next update: Wed 31 Dec 2025 14:49:40 +0000 Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: t0fegIUvuiDUd+8ZvlumsXnniC4nsaw/6mVJO0FEEno=) 2: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: RmtTkfUtODi3Cy7Cko14SjhPi0et23qfIOBSZSmBkOI=) 3: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: 5AL2LBzCru+E3YFyKW2P0tt8Zy0ls3uab/1OsnqWv48=) 4: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: y580eZMTmYYpiPdGANCgGD9h1bATBcJx0pEL7nWorJ4=) 5: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: q930PNLNWH/Z46J1d9nklohyp9ezYTSOPJVhEtOZ6aE=) 6: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: GKpbMiXXQOymixNs7kIDcgllt5ej3XEvlSe8jG36fFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 14:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13620 (0x3534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Dec 24 14:49:40 2025 GMT Not After : Dec 31 14:49:40 2025 GMT Subject: CN=694bfd84-7420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:b6:17:ab:23:e4:42:a2:ea:ce:68:fb:79: 9c:1a:ce:8f:85:5d:38:77:5a:16:ac:a8:0d:fe:ac: 00:5c:f8:11:0d:ea:32:8d:e1:54:e1:53:c4:fd:2a: be:89:3f:90:ba:42:c2:4c:c8:68:3b:37:97:77:14: f5:d6:e2:33:c7:a6:c8:1b:d3:bf:10:be:4b:eb:d2: e2:9a:c8:34:2f:d8:c4:ef:8e:54:f7:b6:0b:a0:96: ef:13:83:dd:c4:01:3e:08:f8:e3:de:48:dc:cf:c0: f6:c4:5d:34:6a:ee:eb:fd:39:1c:75:99:09:0a:18: 8d:db:47:71:e9:df:02:3d:39:af:20:22:2c:29:8c: 09:e4:1e:88:9b:3b:c8:a8:e8:f3:85:67:7a:5e:3f: 1c:9b:50:7f:e5:5c:56:e7:46:94:a3:4e:ad:52:78: ac:df:c2:d1:35:fa:c0:52:43:c8:2d:e9:57:26:44: 2c:ce:f7:cf:f7:5e:15:57:25:24:f8:1a:f9:0c:c8: 9a:47:33:ce:19:68:09:3d:a4:e6:6b:65:50:e5:a0: cd:bc:e4:ee:3a:20:b4:98:eb:49:61:74:cb:eb:fe: b7:00:a1:4f:a6:53:0f:7e:9d:35:26:89:87:82:e7: a9:b7:f2:34:cd:f9:8e:38:40:d7:f1:71:0e:22:59: f4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AC:05:88:AD:CE:F5:C0:16:95:E6:4C:A2:2B:7D:5A:E8:1B:36:7D X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e9:26:05:ee:03:d0:17:ef:13:84:a1:a7:27:b7:b7:1c:bc: ae:57:f0:6f:d4:9a:1c:eb:f6:f3:b6:1b:3a:f7:38:a9:60:93: 9f:96:d3:36:d0:90:91:04:b4:e8:4c:ad:a4:3c:6b:c6:c5:95: 0b:b4:76:dc:36:94:b2:49:f4:3c:72:1f:98:9e:d2:d1:a4:8d: dd:3d:30:64:5a:fe:27:49:0d:11:54:42:75:71:54:83:92:c0: d0:0f:15:ff:80:56:e1:dd:80:8a:2e:54:bb:d4:f7:73:4f:6e: ad:df:3e:6a:a4:b1:1b:0c:11:fd:50:56:43:32:2c:72:09:9b: 59:56:36:ff:4b:a4:ea:fe:5a:ba:16:7a:f5:c9:ab:43:17:39: 48:9e:4c:d6:f8:52:18:83:ed:af:19:58:8f:6b:0e:5d:be:93: 7d:09:ec:ef:b4:27:0f:3b:15:02:1f:0a:6c:db:79:1b:d9:12: ff:6d:ac:3b:a1:fe:7b:40:01:0b:ed:4e:55:8b:d9:07:2d:2d: 1d:07:30:eb:47:fc:1f:b2:5b:f9:63:6b:d4:5c:63:d4:7d:3b: 96:0e:ac:cf:cf:ff:f6:e1:e5:82:75:5b:1a:95:ac:3c:98:0b: c7:6d:84:f4:a2:57:cd:52:b3:ee:d6:5f:c8:76:5b:6d:3f:68: 49:bb:26:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjUxMjI0MTQ0OTQwWhcNMjUxMjMxMTQ0OTQwWjAYMRYwFAYD VQQDDA02OTRiZmQ4NC03NDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iu2F6sj5EKi6s5o+3mcGs6PhV04d1oWrKgN/qwAXPgRDeoyjeFU4VPE/Sq+ iT+QukLCTMhoOzeXdxT11uIzx6bIG9O/EL5L69Limsg0L9jE745U97YLoJbvE4Pd xAE+CPjj3kjcz8D2xF00au7r/TkcdZkJChiN20dx6d8CPTmvICIsKYwJ5B6ImzvI qOjzhWd6Xj8cm1B/5VxW50aUo06tUnis38LRNfrAUkPILelXJkQszvfP914VVyUk +Br5DMiaRzPOGWgJPaTma2VQ5aDNvOTuOiC0mOtJYXTL6/63AKFPplMPfp01JomH guept/I0zfmOOEDX8XEOIln01wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKsBYit zvXAFpXmTKIrfVroGzZ9MB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjYzQy9CN0FDQzI2QzFEOTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1Jf NjZEaU5TQmQ3dVFDOGdzOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc6SYF7gPQF+8ThKGnJ7e3HLyuV/Bv1Joc6/bzths69zipYJOfltM2 0JCRBLToTK2kPGvGxZULtHbcNpSySfQ8ch+YntLRpI3dPTBkWv4nSQ0RVEJ1cVSD ksDQDxX/gFbh3YCKLlS71PdzT26t3z5qpLEbDBH9UFZDMixyCZtZVjb/S6Tq/lq6 Fnr1yatDFzlInkzW+FIYg+2vGViPaw5dvpN9CezvtCcPOxUCHwps23kb2RL/baw7 of57QAEL7U5Vi9kHLS0dBzDrR/wfslv5Y2vUXGPUfTuWDqzPz//24eWCdVsalaw8 mAvHbYT0olfNUrPu1l/IdlttP2hJuybg -----END CERTIFICATE-----Generated at Wed Dec 24 21:50:23 2025 by rpki-client