This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: knUBzxN/VA+OR2IZULrjoAWtfHn9XjY8hVnpq8Wtg+g= Subject key identifier: 6A:FB:1F:55:27:82:AF:C6:BB:A5:13:53:A4:79:36:D9:9F:43:5E:AA Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1D32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1D0E Signing time: Sat 20 Dec 2025 15:58:01 +0000 Manifest this update: Sat 20 Dec 2025 15:58:01 +0000 Manifest next update: Sat 27 Dec 2025 15:58:01 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: stKw0CRCoGfSVxcxqt635o3jIvtMjojCVl3QHVe/NdM=) 2: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: aoLs85T25Nbu5rfe8HQr6/uLXCb4GRzjjbTFp9DkWQU=) 3: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: J9n3zp82JZdNJfliI4sVzoh3Obd0PjO2ofNrwXXpFCA=) 4: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: vGKFHBVQWRpdVQR3PUOS5+JZtPR6OvXFbFU/BnNsNyE=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: sITNhEqet6v++AefMKG16PhZUbQorPDV6OH2LTwcBpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7474 (0x1d32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: Dec 20 15:58:01 2025 GMT Not After : Dec 27 15:58:01 2025 GMT Subject: CN=6946c789-49df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:ad:18:73:18:59:2d:e8:ad:4c:60:1a:bf: 32:47:08:02:5f:c8:c9:56:a7:2c:e6:92:7f:86:cd: 5c:98:f5:4f:53:97:7f:15:ff:69:07:ab:c5:3a:4e: a7:c5:d4:cb:dd:66:9b:33:19:02:b1:80:42:0e:4f: 18:2b:55:f0:75:95:19:7b:15:d8:b3:1e:7d:8b:ba: 9d:4a:0e:d8:df:6f:1a:ff:39:c1:74:88:67:40:fb: fd:e0:e6:2c:fd:c8:dc:e2:24:19:17:ea:51:2f:34: 66:e5:cf:f7:82:65:a5:fc:7a:d9:38:25:78:32:d2: 6b:b7:1e:f8:c7:6e:69:f9:2f:4f:1c:1b:51:4d:62: c5:db:1e:75:c6:fa:1b:92:44:e6:43:c5:5d:2c:18: fe:3e:ef:be:1e:73:b8:c2:89:3f:46:7a:ab:d1:b7: 34:d5:36:81:4f:ed:64:32:45:68:25:6e:79:81:cf: f6:84:ff:d8:48:26:5c:d6:1b:5b:0a:66:62:3b:42: d7:7a:cf:f6:0e:f5:b6:29:df:ce:39:ed:12:e8:1b: c7:d8:c9:ac:d3:80:a4:ac:3c:c8:43:7f:63:d2:42: 05:7e:25:b8:ca:f2:c5:9c:3a:26:65:5b:e0:78:ae: b2:e2:dd:e1:00:9e:e7:cd:7b:ce:39:c4:d8:49:99: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FB:1F:55:27:82:AF:C6:BB:A5:13:53:A4:79:36:D9:9F:43:5E:AA X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:36:59:04:5a:0c:80:ee:67:92:d8:6d:f1:a1:36:fa:77:3c: fc:d8:90:f5:50:49:e1:e5:26:48:e4:9d:37:4d:5e:99:ca:db: 79:22:76:22:31:d8:ce:30:f9:1b:99:63:d7:f2:60:86:81:b9: be:7b:3a:bf:da:c6:88:ee:a7:4e:a8:12:6f:4e:c5:16:75:89: ff:a3:c9:8f:c2:35:8b:1e:14:50:50:f2:4e:90:11:45:4d:4e: f0:f3:0a:d4:b1:a1:46:43:b3:66:42:3c:42:69:3b:3d:38:82: 1c:f2:c4:ab:5a:ea:5a:3b:a9:a2:9f:5f:00:56:c7:8d:38:11: 81:36:7d:e6:ea:a5:95:3e:78:fc:9d:27:29:f1:94:05:4a:f0: c6:32:ce:4d:24:fa:2a:be:9d:76:34:8e:99:14:12:92:c6:36: d4:76:d8:0b:6e:c0:b8:f4:b7:70:5c:3e:56:eb:f5:8b:57:c9: 7f:16:c5:c2:bb:68:aa:42:ff:79:04:43:de:7d:09:ee:09:89: 8c:65:40:5b:c7:d7:4d:cd:b2:35:e0:3f:74:9b:55:df:4e:05: 34:d0:e4:bd:45:d2:a0:90:94:ce:40:77:08:e3:bb:16:69:6d: 5c:bd:c3:06:f1:44:1b:dd:c1:4a:54:bd:36:92:25:4c:96:98: 0e:54:05:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjUxMjIwMTU1ODAxWhcNMjUxMjI3MTU1ODAxWjAYMRYwFAYD VQQDDA02OTQ2Yzc4OS00OWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufGtGHMYWS3orUxgGr8yRwgCX8jJVqcs5pJ/hs1cmPVPU5d/Ff9pB6vFOk6n xdTL3WabMxkCsYBCDk8YK1XwdZUZexXYsx59i7qdSg7Y328a/znBdIhnQPv94OYs /cjc4iQZF+pRLzRm5c/3gmWl/HrZOCV4MtJrtx74x25p+S9PHBtRTWLF2x51xvob kkTmQ8VdLBj+Pu++HnO4wok/Rnqr0bc01TaBT+1kMkVoJW55gc/2hP/YSCZc1htb CmZiO0LXes/2DvW2Kd/OOe0S6BvH2Mms04CkrDzIQ39j0kIFfiW4yvLFnDomZVvg eK6y4t3hAJ7nzXvOOcTYSZnF/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGr7H1Un gq/Gu6UTU6R5NtmfQ16qMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiNlkEWgyA7meS2G3xoTb6dzz82JD1UEnh5SZI5J03TV6Zytt5InYi MdjOMPkbmWPX8mCGgbm+ezq/2saI7qdOqBJvTsUWdYn/o8mPwjWLHhRQUPJOkBFF TU7w8wrUsaFGQ7NmQjxCaTs9OIIc8sSrWupaO6min18AVseNOBGBNn3m6qWVPnj8 nScp8ZQFSvDGMs5NJPoqvp12NI6ZFBKSxjbUdtgLbsC49LdwXD5W6/WLV8l/FsXC u2iqQv95BEPefQnuCYmMZUBbx9dNzbI14D90m1XfTgU00OS9RdKgkJTOQHcI47sW aW1cvcMG8UQb3cFKVL02kiVMlpgOVAX6 -----END CERTIFICATE-----Generated at Mon Dec 22 03:57:37 2025 by rpki-client