This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft File: 1juG48_JVWPv58rwdR2YQCZK2lY.mft (raw, json) Hash identifier: m3VQAQCOczSkwL5CnGcMZJOh64zFMqBXrC3elijoFy0= Subject key identifier: E8:15:B1:BD:65:26:B4:C1:AA:B6:3F:4D:97:8A:E0:C5:A0:D6:9D:58 Authority key identifier: D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56 Certificate issuer: /CN=A91B3455/serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft Manifest number: 5D Signing time: Wed 31 Dec 2025 06:04:14 +0000 Manifest this update: Wed 31 Dec 2025 06:04:13 +0000 Manifest next update: Wed 07 Jan 2026 06:04:13 +0000 Files and hashes: 1: 1juG48_JVWPv58rwdR2YQCZK2lY.crl (hash: 5vWM3yrd7zZMgZeRNTdvH5kQz0P081o3vCFq8pmCZjg=) 2: 39044E9E58B311F084F3982DC4F9AE02.roa (hash: Ia+Jmu8TncD8IiScdaf8hIm9nx7VvvKZ6Drg9K1HDyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 06:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3455, serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56 Validity Not Before: Dec 31 06:04:13 2025 GMT Not After : Jan 7 06:04:13 2026 GMT Subject: CN=6954bcdd-05a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:f8:0e:4e:cd:db:00:b7:65:a3:d9:fc:ef: da:6f:20:ff:86:ac:47:50:4b:9f:c4:bf:12:00:3a: c4:18:3a:f2:84:62:4e:16:34:54:68:e5:51:98:82: 27:db:3c:18:66:59:d0:0a:67:c2:a6:09:d1:90:9a: 78:7a:06:6e:23:aa:4d:19:16:88:d9:05:71:bc:39: f1:8a:e9:db:ec:7e:7a:aa:b3:84:21:e5:99:fc:c5: 31:c6:ad:be:84:31:a5:93:4e:38:9e:32:a7:87:cd: 83:f8:74:40:43:f2:6a:fd:e0:3e:dc:02:32:92:cc: 52:56:55:e7:7b:92:81:be:48:6d:c2:13:9e:cf:18: 85:cc:30:bb:3a:a5:49:a8:e5:eb:f9:ea:73:f7:cd: 8f:e9:0f:ad:dc:4f:60:f0:35:c3:d0:23:90:f9:bf: 41:eb:8c:87:e4:d9:9b:51:ed:66:87:ca:8a:12:a7: 1e:a9:5b:17:2c:e5:36:72:5b:9a:db:ad:5d:c0:7d: 41:4c:c8:90:33:77:12:3b:04:c1:64:75:0d:c0:e6: c3:dc:0c:df:1c:f2:01:72:d9:4d:55:e8:e3:20:e7: fe:16:1e:88:ba:4c:26:56:48:36:51:4f:06:29:cd: 8c:41:a5:6b:9a:5e:37:73:54:14:b5:5f:93:b6:31: b6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:15:B1:BD:65:26:B4:C1:AA:B6:3F:4D:97:8A:E0:C5:A0:D6:9D:58 X509v3 Authority Key Identifier: keyid:D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:83:65:43:4e:b2:58:d2:34:0d:35:d4:17:34:e6:9f:3d:1d: f3:7d:82:dc:72:00:dc:75:bb:1d:60:d6:7a:5f:b0:83:ba:62: d3:46:08:f2:48:80:1b:ec:88:56:f4:86:61:cd:4c:c2:1e:54: 9e:54:33:db:2d:9a:b3:1c:87:61:2f:a7:3a:be:a6:1d:82:5b: bd:95:9d:fd:7e:d1:78:28:e9:57:1f:aa:c5:5a:1d:b9:ac:26: d4:43:85:ec:15:95:52:9a:56:b5:83:b2:2e:35:92:ed:e6:28: 60:de:52:4e:54:50:86:b7:67:4e:dd:10:29:31:b4:dc:e3:f2: f1:51:60:99:a2:12:7a:a6:26:91:08:1a:99:11:3c:af:73:d0: 5c:f7:5e:91:7b:19:52:38:84:d4:97:99:14:41:6e:e3:19:dc: d7:0c:ac:df:78:c9:7c:1a:55:ee:b6:bd:cb:3a:2b:7a:4d:64: e9:d8:a9:84:81:93:18:1b:88:82:60:80:a9:a1:30:84:4e:f3: 7a:d3:19:37:ad:12:3a:be:4f:b0:c0:93:e8:f8:97:bf:b3:4d: b7:16:31:35:d3:c0:f5:37:27:40:c1:78:99:76:6b:06:ea:2d: 9c:9d:b6:7b:65:07:1a:7c:af:6b:52:9e:93:95:98:b6:4f:b9: bb:99:bd:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzQ1NTExMC8GA1UEBRMoRDYzQjg2RTNDRkM5NTU2M0VGRTdDQUYwNzUxRDk4NDAy NjRBREE1NjAeFw0yNTEyMzEwNjA0MTNaFw0yNjAxMDcwNjA0MTNaMBgxFjAUBgNV BAMMDTY5NTRiY2RkLTA1YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCzvgOTs3bALdlo9n879pvIP+GrEdQS5/EvxIAOsQYOvKEYk4WNFRo5VGYgifb PBhmWdAKZ8KmCdGQmnh6Bm4jqk0ZFojZBXG8OfGK6dvsfnqqs4Qh5Zn8xTHGrb6E MaWTTjieMqeHzYP4dEBD8mr94D7cAjKSzFJWVed7koG+SG3CE57PGIXMMLs6pUmo 5ev56nP3zY/pD63cT2DwNcPQI5D5v0HrjIfk2ZtR7WaHyooSpx6pWxcs5TZyW5rb rV3AfUFMyJAzdxI7BMFkdQ3A5sPcDN8c8gFy2U1V6OMg5/4WHoi6TCZWSDZRTwYp zYxBpWuaXjdzVBS1X5O2MbbzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6BWxvWUm tMGqtj9Nl4rgxaDWnVgwHwYDVR0jBBgwFoAU1juG48/JVWPv58rwdR2YQCZK2lYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzNDU1L0ExNjg0QjNBNThC MjExRjA5OUVFNzUyQ0M0RjlBRTAyLzFqdUc0OF9KVldQdjU4cndkUjJZUUNaSzJs WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWp1RzQ4X0pWV1B2NThyd2RSMllRQ1pLMmxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz NDU1L0ExNjg0QjNBNThCMjExRjA5OUVFNzUyQ0M0RjlBRTAyLzFqdUc0OF9KVldQ djU4cndkUjJZUUNaSzJsWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+DZUNOsljSNA011Bc05p89HfN9gtxyANx1ux1g1npfsIO6YtNGCPJI gBvsiFb0hmHNTMIeVJ5UM9stmrMch2Evpzq+ph2CW72Vnf1+0Xgo6VcfqsVaHbms JtRDhewVlVKaVrWDsi41ku3mKGDeUk5UUIa3Z07dECkxtNzj8vFRYJmiEnqmJpEI GpkRPK9z0Fz3XpF7GVI4hNSXmRRBbuMZ3NcMrN94yXwaVe62vcs6K3pNZOnYqYSB kxgbiIJggKmhMIRO83rTGTetEjq+T7DAk+j4l7+zTbcWMTXTwPU3J0DBeJl2awbq LZydtntlBxp8r2tSnpOVmLZPubuZvZw= -----END CERTIFICATE-----Generated at Thu Jan 1 06:24:25 2026 by rpki-client