This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json) Hash identifier: dFk164BbHBhzBWBlfnNH7IuVdI+cTyzqMal/f6CV1Cw= Subject key identifier: 33:4D:45:9E:52:4F:9C:0D:5A:38:EB:62:7F:4F:4B:41:43:C3:84:AE Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft Manifest number: 81 Signing time: Wed 31 Dec 2025 05:42:17 +0000 Manifest this update: Wed 31 Dec 2025 05:42:17 +0000 Manifest next update: Wed 07 Jan 2026 05:42:17 +0000 Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: 7hC4gBFDh8GVfE0ttyGoJarJ2rHnbwFYfu/SlvsB9Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 05:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Validity Not Before: Dec 31 05:42:17 2025 GMT Not After : Jan 7 05:42:17 2026 GMT Subject: CN=6954b7b9-17dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:1a:b9:f0:db:b3:4d:ff:8b:53:d3:88:8d: 4c:37:ad:25:30:6c:b6:95:91:10:e2:fc:30:e9:fd: 41:74:ed:d4:b3:81:2d:f3:8b:a7:50:46:25:b9:8c: c3:26:8a:e1:72:8c:f3:8f:87:c2:10:52:04:f9:f6: 10:30:2a:4e:96:f7:52:5c:b0:0d:87:b2:e8:d9:5b: 47:73:fa:e2:45:16:2d:57:b9:c1:a0:e6:c8:86:37: 1d:cf:a9:74:bc:d7:1f:3f:ad:db:6f:8f:64:56:9c: 17:01:9c:48:36:38:a1:62:15:98:64:d2:21:25:7f: 24:f0:78:a1:bd:7b:74:68:33:ad:24:93:a9:8c:ca: a6:01:26:39:14:dd:02:4c:89:29:b5:64:a4:eb:a1: 90:62:20:52:e1:1b:12:d7:67:dc:c7:41:75:5a:1b: 5e:1e:56:3d:9e:03:1e:23:82:dd:b3:1c:05:94:da: 4c:c0:70:54:16:c1:4b:ff:e3:4c:c8:29:95:20:4d: 10:b6:5a:ae:f4:c7:e2:fa:cf:08:88:5f:16:73:12: f9:cd:19:a4:0f:48:86:4d:9e:da:b6:e2:d9:2f:42: c1:8d:c9:23:22:62:35:3e:a9:c0:cc:cc:79:d6:a1: 25:c6:90:f6:64:b6:55:38:d3:84:74:b8:9a:5c:20: f9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4D:45:9E:52:4F:9C:0D:5A:38:EB:62:7F:4F:4B:41:43:C3:84:AE X509v3 Authority Key Identifier: keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:31:c7:5b:af:af:62:c3:bd:6e:66:44:7f:ea:8d:f0:d2:d0: bf:a4:be:3a:15:1e:b9:df:26:bc:e9:7a:5f:f5:ab:46:44:e3: 90:31:2d:50:f2:cd:df:0b:cf:10:41:e4:90:02:8a:c1:a6:d2: c7:6c:3b:67:22:11:90:f6:02:51:18:f3:09:6b:1f:f9:a9:15: 26:28:a0:9b:74:d4:5d:4f:a8:ee:2a:5c:9e:de:20:8f:01:3f: ac:2e:42:f1:70:ea:66:c9:9e:f5:62:00:b8:d3:22:8d:c8:8b: 8e:d5:6a:31:4a:ee:39:32:b6:c9:d1:55:63:00:49:39:e3:8a: a0:aa:fb:50:5b:98:57:0a:1a:26:f7:39:cb:08:cb:e5:74:9e: be:43:53:3d:34:d2:2b:b5:70:88:f9:a0:90:0b:94:9c:b9:94: e4:da:f8:d2:7e:b5:34:20:8a:02:6b:c0:a4:78:34:c8:98:00: cc:cb:b7:ed:e8:74:8e:42:e7:d3:0c:cc:a7:9f:b2:f9:33:6f: 57:e5:54:80:2f:d9:55:7b:24:77:54:bf:61:81:44:89:e0:af: 92:5e:76:6d:cd:74:a5:aa:a5:14:f4:05:29:43:b8:3f:6b:d5: 1b:23:65:7e:a9:99:86:36:83:9f:66:d3:53:1e:65:5e:ad:ed: a6:96:a9:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3RDYxMTAvBgNVBAUTKDI1OUIwM0E1QTJFMUUyQ0NDNEU0QkQ3NUVCMzM2RjIz MTFCNDQ0MkEwHhcNMjUxMjMxMDU0MjE3WhcNMjYwMTA3MDU0MjE3WjAYMRYwFAYD VQQDDA02OTU0YjdiOS0xN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyq0aufDbs03/i1PTiI1MN60lMGy2lZEQ4vww6f1BdO3Us4Et84unUEYluYzD Jorhcozzj4fCEFIE+fYQMCpOlvdSXLANh7Lo2VtHc/riRRYtV7nBoObIhjcdz6l0 vNcfP63bb49kVpwXAZxINjihYhWYZNIhJX8k8HihvXt0aDOtJJOpjMqmASY5FN0C TIkptWSk66GQYiBS4RsS12fcx0F1WhteHlY9ngMeI4LdsxwFlNpMwHBUFsFL/+NM yCmVIE0Qtlqu9Mfi+s8IiF8WcxL5zRmkD0iGTZ7atuLZL0LBjckjImI1PqnAzMx5 1qElxpD2ZLZVONOEdLiaXCD5lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNNRZ5S T5wNWjjrYn9PS0FDw4SuMB8GA1UdIwQYMBaAFCWbA6Wi4eLMxOS9deszbyMRtEQq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdENi8xRTQ2MDkzNDIw QTYxMUYwOUZDMjJBNUFDNEY5QUUwMi9KWnNEcGFMaDRzekU1TDExNnpOdkl4RzBS Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pac0RwYUxoNHN6RTVMMTE2ek52SXhHMFJDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdENi8xRTQ2MDkzNDIwQTYxMUYwOUZDMjJBNUFDNEY5QUUwMi9KWnNEcGFMaDRz ekU1TDExNnpOdkl4RzBSQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtMcdbr69iw71uZkR/6o3w0tC/pL46FR653ya86Xpf9atGROOQMS1Q 8s3fC88QQeSQAorBptLHbDtnIhGQ9gJRGPMJax/5qRUmKKCbdNRdT6juKlye3iCP AT+sLkLxcOpmyZ71YgC40yKNyIuO1WoxSu45MrbJ0VVjAEk544qgqvtQW5hXChom 9znLCMvldJ6+Q1M9NNIrtXCI+aCQC5ScuZTk2vjSfrU0IIoCa8CkeDTImADMy7ft 6HSOQufTDMynn7L5M29X5VSAL9lVeyR3VL9hgUSJ4K+SXnZtzXSlqqUU9AUpQ7g/ a9UbI2V+qZmGNoOfZtNTHmVere2mlqlj -----END CERTIFICATE-----Generated at Wed Dec 31 11:03:58 2025 by rpki-client