This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: h96Mtqb+ySkFJwZA4OUxrjXvG4jEIbx+D8rnMyJtm14= Subject key identifier: 3C:7C:CA:F0:0E:F1:9A:3A:AE:07:1C:FC:D2:7A:C8:4A:A1:4C:93:BD Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 025B Signing time: Thu 25 Dec 2025 00:44:39 +0000 Manifest this update: Thu 25 Dec 2025 00:44:39 +0000 Manifest next update: Thu 01 Jan 2026 00:44:39 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: t4ypcpKz2ItEkNuF2wKqNTSxp0OE0UhJJOtvJOB+a7o=) 2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: BP/glgq2z1dVEQeJ08W20vuLvcBOY54eQXp8HeomvRk=) 3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: FNYorUcrDZxaoz80iDO589JZkm4kbfGRGurVB7ty8DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 00:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Dec 25 00:44:39 2025 GMT Not After : Jan 1 00:44:39 2026 GMT Subject: CN=694c88f7-fdf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:aa:3f:6c:3a:1c:39:93:75:48:99:8d:cc:98: d4:3d:59:df:dd:1f:79:ab:f2:e8:c4:29:6e:9a:49: 7e:75:12:64:33:f5:f6:b8:f7:83:3d:82:6a:06:ee: 72:6b:38:7a:3d:1d:81:4b:25:00:d3:9a:4e:a6:6e: 3d:cf:f8:8f:36:a5:3c:18:fb:eb:24:d7:4a:ce:40: e7:3a:ee:05:2c:32:cd:66:ae:b3:6e:22:8b:92:c6: 1a:37:63:53:b8:fa:14:30:1f:29:6b:89:e4:60:c4: 3f:c4:b1:2e:ae:3f:a8:98:26:99:c4:1f:47:95:65: 68:2d:70:14:a2:41:2e:87:1f:27:93:6c:22:71:02: ec:4f:71:15:62:4b:e4:ae:63:3d:4b:74:bb:85:d4: 66:ce:a6:60:c0:1a:be:1a:c1:5f:e4:88:b4:f8:89: 7f:f2:20:3c:0a:63:c6:36:38:9f:7d:b4:d3:ee:39: a6:bf:a2:31:3b:90:87:c1:a2:bc:cc:96:c5:aa:c2: bc:4a:dd:4c:96:82:28:71:d6:49:b4:83:bc:da:38: 2f:2b:4e:a3:04:bd:f4:24:c4:a8:31:d8:9c:06:34: 82:af:29:09:7f:8e:d1:a1:1c:59:f3:fd:7e:43:a9: cd:18:62:a4:22:42:5c:83:5f:13:8a:6d:25:69:8f: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7C:CA:F0:0E:F1:9A:3A:AE:07:1C:FC:D2:7A:C8:4A:A1:4C:93:BD X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:70:2b:97:36:2f:7a:6c:82:e5:d9:d7:d2:7f:bc:31:9b:fb: 6c:af:65:f3:ac:2f:a3:30:ba:61:67:a9:6b:d7:29:c6:39:59: 7d:a9:b1:e1:9c:13:7c:6d:76:cf:2c:23:95:19:74:71:80:07: 72:f0:ac:1d:3b:0c:3e:b4:cc:99:0e:d2:27:97:66:a6:98:4c: 8b:61:7b:56:90:06:7e:c4:ef:b8:27:5b:c7:fb:67:5b:3c:d4: 7e:68:f1:c6:95:92:65:e5:2b:ab:49:c4:ce:8f:0c:8c:af:7a: a8:ee:0a:3d:33:87:34:1c:c8:f8:57:e9:9f:fa:12:3e:e0:94: 2f:fb:b4:19:45:18:8f:dd:2d:0c:ca:88:f5:56:15:a3:54:38: 72:a2:9b:c5:49:51:fc:f7:a1:b7:bc:b3:f0:e2:d1:4f:40:ca: bd:67:a8:26:3e:e6:f7:5a:e5:25:31:5f:d2:a5:12:c2:ab:46: 26:fb:3a:be:18:d0:a8:b2:00:93:6b:56:87:1f:f6:a2:45:b8: ef:82:83:1d:72:b9:54:30:70:d6:6e:ff:97:c3:60:66:6b:22: a2:f0:7b:56:41:34:e6:88:36:11:6d:2d:cb:2a:f4:72:39:25: 0d:b8:78:a8:39:f1:82:fb:e1:aa:09:a8:52:b7:26:51:cc:ec: f6:56:93:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjUxMjI1MDA0NDM5WhcNMjYwMTAxMDA0NDM5WjAYMRYwFAYD VQQDDA02OTRjODhmNy1mZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qo/bDocOZN1SJmNzJjUPVnf3R95q/LoxClumkl+dRJkM/X2uPeDPYJqBu5y azh6PR2BSyUA05pOpm49z/iPNqU8GPvrJNdKzkDnOu4FLDLNZq6zbiKLksYaN2NT uPoUMB8pa4nkYMQ/xLEurj+omCaZxB9HlWVoLXAUokEuhx8nk2wicQLsT3EVYkvk rmM9S3S7hdRmzqZgwBq+GsFf5Ii0+Il/8iA8CmPGNjiffbTT7jmmv6IxO5CHwaK8 zJbFqsK8St1MloIocdZJtIO82jgvK06jBL30JMSoMdicBjSCrykJf47RoRxZ8/1+ Q6nNGGKkIkJcg18Tim0laY9FOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDx8yvAO 8Zo6rgcc/NJ6yEqhTJO9MB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAcCuXNi96bILl2dfSf7wxm/tsr2XzrC+jMLphZ6lr1ynGOVl9qbHh nBN8bXbPLCOVGXRxgAdy8KwdOww+tMyZDtInl2ammEyLYXtWkAZ+xO+4J1vH+2db PNR+aPHGlZJl5SurScTOjwyMr3qo7go9M4c0HMj4V+mf+hI+4JQv+7QZRRiP3S0M yoj1VhWjVDhyopvFSVH896G3vLPw4tFPQMq9Z6gmPub3WuUlMV/SpRLCq0Ym+zq+ GNCosgCTa1aHH/aiRbjvgoMdcrlUMHDWbv+Xw2BmayKi8HtWQTTmiDYRbS3LKvRy OSUNuHioOfGC++GqCahStyZRzOz2VpPr -----END CERTIFICATE-----Generated at Thu Dec 25 23:05:14 2025 by rpki-client