This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft File: cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json) Hash identifier: ErtMsKXp+RmU22TfhBXfvgcTiCNl2zuVXezX9yekvts= Subject key identifier: CC:58:EA:43:DC:A3:16:3B:7A:EA:E8:83:8B:52:84:B2:04:7C:5B:FC Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft Manifest number: 03FA Signing time: Thu 18 Dec 2025 23:45:52 +0000 Manifest this update: Thu 18 Dec 2025 23:45:51 +0000 Manifest next update: Thu 25 Dec 2025 23:45:51 +0000 Files and hashes: 1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: 2au7fleoi9tWUQI+TEU/DZy/RPEEn3DRofrGEod0718=) 2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: IKsBlPoiBaV1Y/8FMivKysodYXv24LUe7kGHbrSaUFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Validity Not Before: Dec 18 23:45:51 2025 GMT Not After : Dec 25 23:45:51 2025 GMT Subject: CN=6944922f-f281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1e:87:b5:a3:e5:65:c9:7f:a5:c0:1c:78:bf: 0c:16:c4:88:c1:7c:71:42:97:e7:81:a5:4c:a6:ca: bb:93:63:15:ef:d8:30:13:b4:d4:27:d7:64:c8:3a: 9b:28:a5:a4:78:e0:00:9b:87:b3:d3:98:8a:6c:24: 5e:02:4d:cb:74:de:c6:25:8f:0b:15:77:1a:86:5e: e3:0c:55:0f:0b:de:84:5b:e7:b3:ac:3a:99:df:48: ab:e0:4e:86:98:90:b5:00:98:a0:47:45:83:ca:ed: 87:d2:46:f3:b3:b9:60:b5:8c:d2:ad:cc:71:d6:b5: 70:06:8d:16:72:6e:e4:36:07:72:5f:ef:94:e1:4f: b7:fc:5b:80:81:3b:fe:aa:44:0d:db:8d:e6:80:83: 84:ff:29:66:37:b9:54:a0:90:85:8f:d9:8e:c4:58: e5:22:70:fa:9c:c4:5f:eb:0a:0d:d0:2e:a7:c9:ee: c9:18:1b:98:59:0d:f1:f0:b0:1c:f0:4f:f6:4e:5d: 1d:42:4b:0d:a4:bb:f9:fb:8e:49:c6:a2:f1:9a:49: 2e:d3:d0:d6:13:73:f0:12:d6:0d:26:7b:86:06:b4: bf:8c:9e:49:a1:f8:09:c1:7d:ef:11:b9:f0:c2:c0: 40:3c:06:1d:c5:e6:08:f2:de:1c:39:57:60:13:7b: b2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:58:EA:43:DC:A3:16:3B:7A:EA:E8:83:8B:52:84:B2:04:7C:5B:FC X509v3 Authority Key Identifier: keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:c4:8b:ca:35:c3:2e:7b:44:d0:ea:97:1a:f1:3b:0b:27:2a: 48:95:6b:1c:14:68:81:5f:06:dd:c3:03:cc:9a:05:19:ce:a8: 9c:29:d0:6f:ac:cb:a3:f6:30:ce:82:9e:14:ac:8d:a7:c3:d4: e4:3a:76:29:72:cb:19:3e:ab:90:7e:ce:1f:ad:75:6f:e6:4c: 29:8f:3a:51:5f:60:84:d2:96:20:e4:a7:1c:c7:fe:67:ce:2c: 07:f2:3a:43:7b:a6:b5:3d:55:4f:cb:d3:cc:e2:36:e3:90:28: ed:51:b0:eb:af:69:d3:11:af:11:72:05:1a:a4:62:15:48:cf: c1:99:01:c6:9a:b2:1e:f8:21:16:50:0d:ec:88:69:78:cb:1c: c5:bc:25:4c:25:16:dc:f6:97:fc:1e:41:c0:00:32:e5:06:18: 44:20:8c:b7:52:d0:5f:5e:f9:a4:f4:0e:b5:87:04:14:dc:b3: 6d:13:48:d3:30:4e:06:61:8d:07:4c:08:1c:24:28:58:d1:f5: 98:a9:8b:cb:61:3d:20:5c:4c:27:2d:33:f6:1a:73:c7:1c:94: cb:21:fa:2e:f5:ba:ec:5b:a7:af:c2:b0:74:6d:7f:6d:6c:f7: 24:5e:dd:c9:f6:04:e9:57:ee:d1:41:b5:dd:8d:65:f2:e9:db: f6:d0:54:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx QTQzMkY0REIwHhcNMjUxMjE4MjM0NTUxWhcNMjUxMjI1MjM0NTUxWjAYMRYwFAYD VQQDDA02OTQ0OTIyZi1mMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAix6HtaPlZcl/pcAceL8MFsSIwXxxQpfngaVMpsq7k2MV79gwE7TUJ9dkyDqb KKWkeOAAm4ez05iKbCReAk3LdN7GJY8LFXcahl7jDFUPC96EW+ezrDqZ30ir4E6G mJC1AJigR0WDyu2H0kbzs7lgtYzSrcxx1rVwBo0Wcm7kNgdyX++U4U+3/FuAgTv+ qkQN243mgIOE/ylmN7lUoJCFj9mOxFjlInD6nMRf6woN0C6nye7JGBuYWQ3x8LAc 8E/2Tl0dQksNpLv5+45JxqLxmkku09DWE3PwEtYNJnuGBrS/jJ5JofgJwX3vEbnw wsBAPAYdxeYI8t4cOVdgE3uyTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxY6kPc oxY7eurog4tShLIEfFv8MB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E UTU2YUhrc0RnWWdhUXk5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACxIvKNcMue0TQ6pca8TsLJypIlWscFGiBXwbdwwPMmgUZzqicKdBv rMuj9jDOgp4UrI2nw9TkOnYpcssZPquQfs4frXVv5kwpjzpRX2CE0pYg5Kccx/5n ziwH8jpDe6a1PVVPy9PM4jbjkCjtUbDrr2nTEa8RcgUapGIVSM/BmQHGmrIe+CEW UA3siGl4yxzFvCVMJRbc9pf8HkHAADLlBhhEIIy3UtBfXvmk9A61hwQU3LNtE0jT ME4GYY0HTAgcJChY0fWYqYvLYT0gXEwnLTP2GnPHHJTLIfou9brsW6evwrB0bX9t bPckXt3J9gTpV+7RQbXdjWXy6dv20FSh -----END CERTIFICATE-----Generated at Fri Dec 19 17:44:43 2025 by rpki-client