This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: nz/Bcl5pLLYqnVYGGYJX2WpJiU/Gf/6b/5IetstdZgM= Subject key identifier: 82:43:20:19:4C:E9:21:FD:7C:D4:C4:B5:7F:68:8D:D1:60:D7:A8:57 Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 02F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 02EE Signing time: Fri 19 Dec 2025 00:29:35 +0000 Manifest this update: Fri 19 Dec 2025 00:29:34 +0000 Manifest next update: Fri 26 Dec 2025 00:29:34 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: kbo5D0W7/VIicYKfw3GYmv0C1WpfQPSo6vm0gum1pnQ=) 2: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: Or6QdVGJ8KlEltpgE/vRaVt3d7tmMydHusIypsTqbXo=) 3: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: eeihbPUCNIm6wOFP5OHLweAd8KKgDQdtMhUILkD0GVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 759 (0x2f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Dec 19 00:29:34 2025 GMT Not After : Dec 26 00:29:34 2025 GMT Subject: CN=69449c6e-6fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:03:90:dc:8b:de:99:d1:9b:69:70:b7:6e: 3b:ab:7f:10:29:63:15:21:1b:e2:02:36:22:7a:7f: 47:71:86:49:a9:d1:12:5e:69:df:00:48:ac:cb:6e: 42:74:c1:55:a0:b6:aa:d1:2b:44:10:07:a7:fd:23: 13:dc:4e:f8:ff:5a:fe:99:0e:e5:75:84:00:61:6c: 49:42:31:fc:af:c9:94:a4:1c:f6:54:7a:e3:fe:f9: c6:b8:de:88:d8:2c:a0:85:7f:1d:48:5e:ff:6d:da: 50:9f:6b:d8:dd:2b:1a:99:66:40:80:8f:02:16:5f: 99:58:69:eb:e7:54:14:28:0c:c1:ea:e0:5d:1a:81: 34:9e:d5:e7:66:a3:95:b8:a3:df:5c:e1:5d:ac:80: d8:54:14:8e:01:45:27:f8:a6:86:4e:21:e4:45:41: 44:db:a6:2a:d3:dd:e6:34:54:fb:54:4a:4f:ba:9f: 80:f1:bf:3c:3f:a9:72:62:e2:47:e4:69:1b:75:6d: ef:36:00:fa:48:62:7c:bc:d8:82:78:a7:b3:84:56: b5:63:93:b9:2e:ac:1b:93:14:8b:ef:fc:0a:0a:5a: 4c:1e:32:1b:00:5b:d4:d0:af:b9:f0:7d:37:11:d6: 9e:6b:d6:72:4e:e4:66:6d:9d:1d:17:89:f7:21:52: a9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:43:20:19:4C:E9:21:FD:7C:D4:C4:B5:7F:68:8D:D1:60:D7:A8:57 X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:90:12:86:68:18:c5:54:32:24:f7:91:31:b7:14:56:e6:a8: 63:1e:07:01:27:16:a6:26:2a:ec:c0:55:6b:ac:c7:b6:18:61: 88:02:d9:c8:63:01:19:51:07:b2:d7:22:0d:0c:00:d3:5f:a6: 80:8e:4c:e9:1f:21:3f:cb:ac:ca:f8:c7:d3:7c:ab:6c:3b:e3: c4:84:88:66:1f:72:52:90:d1:8a:c1:a5:4b:48:13:f1:ee:a9: 1f:57:eb:2d:a3:5b:56:47:10:c0:c5:6e:1f:81:43:3c:9a:f2: d5:9d:25:46:bb:11:a5:78:74:29:ce:c7:88:95:00:79:fb:c0: 0f:74:8f:aa:fd:a3:4e:cc:9c:2e:69:6d:2e:bd:29:3a:e4:c2: 9f:81:18:c8:6e:e3:43:38:0d:d2:6e:ee:39:c5:f8:a9:f8:50: c7:b3:06:9f:fc:34:e8:5f:61:4a:2e:20:8a:5c:64:a0:b0:a6: 1a:b0:61:59:08:6f:4b:96:fb:75:51:57:95:17:ae:40:a4:3e: 32:16:c7:5d:3a:b7:38:3f:4d:35:27:9c:e1:db:e0:db:85:57: 74:f2:41:78:00:8c:35:bd:61:ae:21:77:15:a2:4d:cd:7c:48: df:6a:cb:79:a1:77:f2:bc:74:d0:b7:a7:36:ef:c6:9d:8b:41: 1d:1e:46:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjUxMjE5MDAyOTM0WhcNMjUxMjI2MDAyOTM0WjAYMRYwFAYD VQQDDA02OTQ0OWM2ZS02ZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7kDkNyL3pnRm2lwt247q38QKWMVIRviAjYien9HcYZJqdESXmnfAEisy25C dMFVoLaq0StEEAen/SMT3E74/1r+mQ7ldYQAYWxJQjH8r8mUpBz2VHrj/vnGuN6I 2CyghX8dSF7/bdpQn2vY3SsamWZAgI8CFl+ZWGnr51QUKAzB6uBdGoE0ntXnZqOV uKPfXOFdrIDYVBSOAUUn+KaGTiHkRUFE26Yq093mNFT7VEpPup+A8b88P6lyYuJH 5GkbdW3vNgD6SGJ8vNiCeKezhFa1Y5O5LqwbkxSL7/wKClpMHjIbAFvU0K+58H03 Edaea9ZyTuRmbZ0dF4n3IVKppQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJDIBlM 6SH9fNTEtX9ojdFg16hXMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCokBKGaBjFVDIk95ExtxRW5qhjHgcBJxamJirswFVrrMe2GGGIAtnI YwEZUQey1yINDADTX6aAjkzpHyE/y6zK+MfTfKtsO+PEhIhmH3JSkNGKwaVLSBPx 7qkfV+sto1tWRxDAxW4fgUM8mvLVnSVGuxGleHQpzseIlQB5+8APdI+q/aNOzJwu aW0uvSk65MKfgRjIbuNDOA3Sbu45xfip+FDHswaf/DToX2FKLiCKXGSgsKYasGFZ CG9Llvt1UVeVF65ApD4yFsddOrc4P001J5zh2+DbhVd08kF4AIw1vWGuIXcVok3N fEjfast5oXfyvHTQt6c278adi0EdHkb5 -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:02 2025 by rpki-client