This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft File: JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json) Hash identifier: 2ehpuK/v+3q2lbnwJUNMn0XfAm0kxKxJGA2DVm+SvjE= Subject key identifier: 9C:39:63:11:2B:B3:EE:C4:BE:E3:29:88:38:94:8B:5C:06:2C:DF:C2 Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Certificate serial: 07A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft Manifest number: 0787 Signing time: Thu 18 Dec 2025 21:01:58 +0000 Manifest this update: Thu 18 Dec 2025 21:01:57 +0000 Manifest next update: Thu 25 Dec 2025 21:01:57 +0000 Files and hashes: 1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: GODbSyLfnsxfCdvd5tMphxktgFsX6KKZcbq4bXy3X8w=) 2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: Q4VBl6t7IxgDUfIveQUTPQulCitna2Ej85qnHBLGKO8=) 3: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: YBYY6RrsWzS4ijJ6zt44OGC0XzSR6EQ0weLmwo+ie00=) 4: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: 9avL2Ad9M1e51xqr+g4Ok7rpofizFz/lEbEixkRcZkk=) 5: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: R4hJWTd6VbmXqGeT9fBJVuJc7yCjp6bOssVRsthNf94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Validity Not Before: Dec 18 21:01:57 2025 GMT Not After : Dec 25 21:01:57 2025 GMT Subject: CN=69446bc6-1ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b5:52:ba:27:02:c4:c6:6e:f7:85:da:44:2a: 6c:65:c7:57:ff:02:38:29:e9:9c:cc:e0:18:3f:08: b6:78:96:9f:c9:58:cc:31:26:1d:95:cb:4b:3b:fe: 04:1f:e2:4c:79:3d:e8:87:c5:ea:7b:e8:56:ad:65: d1:52:a5:7f:42:ee:bf:17:e3:32:9a:d7:dd:05:1c: 23:6f:95:d9:19:06:7d:e5:8b:ad:76:1a:c7:1f:99: 13:39:00:81:25:8a:5a:7c:60:5f:3e:8f:23:90:e5: ae:b0:70:bd:74:5e:43:3a:20:fc:fe:64:df:9a:b7: bb:18:1e:e1:b5:4a:0a:1e:60:bd:55:60:e6:b0:f9: f1:15:83:95:22:d1:b7:91:01:0a:d0:8d:ae:cd:54: 5f:ce:35:47:b0:35:5a:2d:ca:3a:08:50:fe:1c:fe: 8a:89:d7:e2:a5:55:6f:fe:65:e3:e9:55:94:8f:9c: 0b:9d:fd:cc:cb:04:6d:d9:a6:24:04:d7:a6:d7:2e: dd:27:2b:24:86:fa:4a:2a:96:4d:9a:ed:95:9d:ba: d0:90:db:70:cb:e8:88:71:4d:f3:87:ef:cb:52:d9: dc:32:79:69:64:ed:a9:d0:57:6d:73:c7:4b:e9:e5: 99:19:ba:cc:65:a3:dc:28:4f:8b:2d:ca:d0:23:7b: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:39:63:11:2B:B3:EE:C4:BE:E3:29:88:38:94:8B:5C:06:2C:DF:C2 X509v3 Authority Key Identifier: keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:1a:ad:c4:72:26:91:6f:19:63:16:0a:8f:89:2b:fe:45:dd: 79:ac:9b:14:b2:7e:1d:0b:03:ac:cd:27:fa:77:74:7f:0c:20: fc:c2:2f:70:a5:99:15:2b:17:48:a7:75:ad:27:03:59:4e:71: 9a:95:69:f5:4a:13:2c:06:3a:17:a6:2e:8b:5b:11:21:bd:30: c5:64:6c:ba:8b:29:9e:5b:99:12:40:20:68:4c:35:f3:b4:af: 2d:3e:47:e2:25:98:b3:0c:f4:34:f9:53:b0:ff:c7:7f:3d:d6: 50:8c:8e:e0:72:cb:c3:fb:b5:05:58:8a:cd:27:dc:9b:31:b5: 86:18:8c:6a:c5:7f:d8:19:0b:8b:f7:1a:81:03:67:6c:dd:77: db:af:b7:79:1c:f7:96:6b:94:28:01:fc:2b:66:79:14:af:0c: d7:09:ea:31:64:31:01:ce:94:78:b9:06:db:0f:9d:11:7c:ba: cb:b0:fa:69:a7:15:4b:38:dc:83:37:cb:2c:f4:ff:8b:32:5f: da:c5:4a:98:2a:4d:12:17:b1:f0:ad:9b:a9:71:a6:fc:59:59: 09:03:63:ea:80:24:82:cb:30:af:1f:75:45:11:98:57:f6:05: 36:2a:1e:ee:e1:1e:48:43:42:11:10:be:c9:e9:8f:8e:9a:9a: 95:9f:bf:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx N0RENjc5NkYwHhcNMjUxMjE4MjEwMTU3WhcNMjUxMjI1MjEwMTU3WjAYMRYwFAYD VQQDDA02OTQ0NmJjNi0xZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bVSuicCxMZu94XaRCpsZcdX/wI4KemczOAYPwi2eJafyVjMMSYdlctLO/4E H+JMeT3oh8Xqe+hWrWXRUqV/Qu6/F+MymtfdBRwjb5XZGQZ95YutdhrHH5kTOQCB JYpafGBfPo8jkOWusHC9dF5DOiD8/mTfmre7GB7htUoKHmC9VWDmsPnxFYOVItG3 kQEK0I2uzVRfzjVHsDVaLco6CFD+HP6KidfipVVv/mXj6VWUj5wLnf3MywRt2aYk BNem1y7dJyskhvpKKpZNmu2VnbrQkNtwy+iIcU3zh+/LUtncMnlpZO2p0Fdtc8dL 6eWZGbrMZaPcKE+LLcrQI3sM9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJw5YxEr s+7EvuMpiDiUi1wGLN/CMB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NThGRi8xMjA0QUIzQzNDM0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3Zmxx OFpRdHZfRHRUNHdYM1dlVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwGq3EciaRbxljFgqPiSv+Rd15rJsUsn4dCwOszSf6d3R/DCD8wi9w pZkVKxdIp3WtJwNZTnGalWn1ShMsBjoXpi6LWxEhvTDFZGy6iymeW5kSQCBoTDXz tK8tPkfiJZizDPQ0+VOw/8d/PdZQjI7gcsvD+7UFWIrNJ9ybMbWGGIxqxX/YGQuL 9xqBA2ds3Xfbr7d5HPeWa5QoAfwrZnkUrwzXCeoxZDEBzpR4uQbbD50RfLrLsPpp pxVLONyDN8ss9P+LMl/axUqYKk0SF7HwrZupcab8WVkJA2PqgCSCyzCvH3VFEZhX 9gU2Kh7u4R5IQ0IREL7J6Y+OmpqVn7/F -----END CERTIFICATE-----Generated at Fri Dec 19 19:23:20 2025 by rpki-client