This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft File: sJELB8hrD_owClKsfDH8tSwFMtc.mft (raw, json) Hash identifier: STf/li+RgfNZ8ixm/zBkiDnRlPa7NMHq+iEmSUfChlw= Subject key identifier: CA:DE:1C:2B:B1:28:FE:D9:CB:C6:A7:AF:EB:1D:B0:BB:D6:28:E3:75 Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 Certificate issuer: /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft Manifest number: 0652 Signing time: Thu 18 Dec 2025 22:01:44 +0000 Manifest this update: Thu 18 Dec 2025 22:01:43 +0000 Manifest next update: Thu 25 Dec 2025 22:01:43 +0000 Files and hashes: 1: sJELB8hrD_owClKsfDH8tSwFMtc.crl (hash: EixkvjT1KdvSjspmgkRwhV1voSHWs2dB3na1Sra2d28=) 2: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (hash: e56G23jx5aYuNxu9h7TKwrgOQjg7ik+mUEMW85KPWtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Validity Not Before: Dec 18 22:01:43 2025 GMT Not After : Dec 25 22:01:43 2025 GMT Subject: CN=694479c8-9e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:5f:dd:de:cb:57:2c:12:79:a4:e7:53:b8: f1:2c:16:06:58:fd:91:e3:93:8e:96:59:0f:ac:b4: 2c:44:52:86:ce:e2:6a:58:bd:98:c5:50:12:e1:a6: 9d:4e:3a:be:57:6f:4b:2e:50:8a:69:47:81:3d:58: 51:4f:cf:0a:4f:00:73:e3:be:a3:a6:37:04:ee:c8: 47:e8:f6:cb:9b:25:5d:a5:f3:32:4e:1a:ff:ac:c7: 6a:95:bf:86:ac:4e:ff:af:b3:10:6d:fe:23:fb:b0: ae:cb:9e:af:33:49:a8:64:15:d8:50:94:1d:49:e0: 1b:4c:0c:24:86:fb:32:61:60:de:90:48:c9:50:6e: bc:1f:a4:a8:5e:c8:08:d2:19:de:78:d6:e6:59:88: 9d:65:4d:84:d8:b4:76:f8:b7:1f:ee:59:2f:35:7e: c9:ab:ec:02:4c:b1:e8:13:33:0c:33:43:74:77:eb: e5:79:53:5d:f0:29:f5:17:7c:2b:19:9d:57:26:ef: 5f:e9:76:c2:69:89:41:73:9b:96:85:c2:d3:a6:be: db:e7:2e:5c:6c:f6:7f:c0:50:b9:47:a5:3b:44:70: 03:21:77:74:ec:73:cc:08:63:22:64:8b:f9:c1:ca: bb:fb:0c:d2:7b:ba:77:2f:8d:ca:00:32:13:51:74: 4e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DE:1C:2B:B1:28:FE:D9:CB:C6:A7:AF:EB:1D:B0:BB:D6:28:E3:75 X509v3 Authority Key Identifier: keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:74:61:29:0c:af:cf:fb:a1:ba:85:8c:03:eb:53:b0:58:68: 80:73:eb:22:65:6e:a3:42:65:08:6a:31:d0:ef:14:79:c1:39: 12:84:35:56:bd:6b:eb:1f:f8:01:68:df:94:2a:36:bf:cf:a7: d7:11:b4:ca:54:1e:05:0d:d9:d0:a1:f5:6b:82:02:e2:d5:e8: fb:09:b1:cb:6b:99:dc:29:e7:45:54:74:9b:ee:4b:f8:09:16: 5f:fc:3a:7e:25:3a:ee:49:ed:5b:35:bb:45:2d:21:91:ad:43: ca:18:ed:26:92:29:d3:8a:6b:ee:a7:3a:f9:65:36:61:22:86: fc:dd:aa:af:24:c9:4f:dd:27:a3:82:70:70:2d:a7:40:f0:9d: 5b:9c:43:ce:63:45:90:ee:d1:99:ca:4a:6d:85:3a:a5:36:f5: 8a:c7:c2:ae:97:74:e4:81:0b:cd:4d:3f:ce:b9:4a:54:0f:be: b3:b7:8a:66:37:0f:30:87:89:93:6e:99:15:7f:cc:29:a6:ca: 19:d4:44:22:c2:2f:3f:59:40:33:73:78:27:88:42:29:44:1e: 3a:70:7f:b2:b4:09:23:bb:c1:b1:4c:f9:ba:71:70:1d:f8:19: b4:27:57:e1:06:02:2b:7e:7f:08:ec:91:4a:44:a8:85:60:a9: 4f:7f:62:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKEIwOTEwQjA3Qzg2QjBGRkEzMDBBNTJBQzdDMzFGQ0I1 MkMwNTMyRDcwHhcNMjUxMjE4MjIwMTQzWhcNMjUxMjI1MjIwMTQzWjAYMRYwFAYD VQQDDA02OTQ0NzljOC05ZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs69f3d7LVywSeaTnU7jxLBYGWP2R45OOllkPrLQsRFKGzuJqWL2YxVAS4aad Tjq+V29LLlCKaUeBPVhRT88KTwBz476jpjcE7shH6PbLmyVdpfMyThr/rMdqlb+G rE7/r7MQbf4j+7Cuy56vM0moZBXYUJQdSeAbTAwkhvsyYWDekEjJUG68H6SoXsgI 0hneeNbmWYidZU2E2LR2+Lcf7lkvNX7Jq+wCTLHoEzMMM0N0d+vleVNd8Cn1F3wr GZ1XJu9f6XbCaYlBc5uWhcLTpr7b5y5cbPZ/wFC5R6U7RHADIXd07HPMCGMiZIv5 wcq7+wzSe7p3L43KADITUXROBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMreHCux KP7Zy8anr+sdsLvWKON1MB8GA1UdIwQYMBaAFLCRCwfIaw/6MApSrHwx/LUsBTLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82MkQwM0U4Q0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRfb3dDbEtzZkRIOHRTd0ZN dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NKRUxCOGhyRF9vd0NsS3NmREg4dFN3Rk10Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82MkQwM0U4Q0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRf b3dDbEtzZkRIOHRTd0ZNdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAdGEpDK/P+6G6hYwD61OwWGiAc+siZW6jQmUIajHQ7xR5wTkShDVW vWvrH/gBaN+UKja/z6fXEbTKVB4FDdnQofVrggLi1ej7CbHLa5ncKedFVHSb7kv4 CRZf/Dp+JTruSe1bNbtFLSGRrUPKGO0mkinTimvupzr5ZTZhIob83aqvJMlP3Sej gnBwLadA8J1bnEPOY0WQ7tGZykpthTqlNvWKx8Kul3TkgQvNTT/OuUpUD76zt4pm Nw8wh4mTbpkVf8wppsoZ1EQiwi8/WUAzc3gniEIpRB46cH+ytAkju8GxTPm6cXAd +Bm0J1fhBgIrfn8I7JFKRKiFYKlPf2IY -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:15 2025 by rpki-client