This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft File: jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json) Hash identifier: oH/13BgQKVgRRvSdh73LHFlHghdbKSIwzKnJuhmsXRo= Subject key identifier: 03:E5:ED:F1:62:16:29:4D:8A:11:58:0A:B9:A9:6B:B5:16:C6:92:9E Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E Certificate issuer: /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft Manifest number: 6A Signing time: Thu 25 Dec 2025 05:55:04 +0000 Manifest this update: Thu 25 Dec 2025 05:55:03 +0000 Manifest next update: Thu 01 Jan 2026 05:55:03 +0000 Files and hashes: 1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: TM9gA9xMIS8+1hSaOs4HjMFl2eb71oMUiRndwvP47dc=) 2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: Lf3alCeyUDstgnP7x5+oblCm0tv/uJ2YmuuNF6Xn0z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 05:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Validity Not Before: Dec 25 05:55:03 2025 GMT Not After : Jan 1 05:55:03 2026 GMT Subject: CN=694cd1b8-b485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:60:41:97:b7:d5:7e:3f:71:63:2e:91:20:a0: f5:ed:db:32:2a:b7:12:93:a4:3e:61:91:46:cb:02: 97:b6:37:3f:9a:31:f7:a5:71:e3:53:79:86:b2:32: 37:8a:2a:b1:0b:49:c8:ec:0d:a5:8c:13:ce:fd:5b: 84:ee:5f:8b:b5:e1:49:46:f3:a8:23:70:8a:b6:5e: 39:ef:ea:b9:40:b5:7b:a8:70:e9:bb:44:06:a9:a0: f1:4b:6e:ce:70:fe:d2:b9:cb:d2:3b:50:78:a7:8b: a3:76:06:5f:58:c0:7f:e7:3c:88:7d:1a:e5:d7:af: 61:06:fd:fa:90:3c:57:69:c8:99:81:22:b4:a5:0d: ca:1c:86:06:51:96:88:cc:67:82:7d:70:3a:42:75: 98:b3:77:27:1a:50:7c:9b:84:59:68:60:de:20:2f: f4:a8:d5:d2:bf:1b:bc:0d:19:96:c0:7b:cd:b0:c3: 31:51:94:d8:55:e6:fa:64:aa:d0:97:46:31:de:e8: 13:32:47:8e:03:78:b3:5f:e7:3f:53:8f:8f:e6:4f: 72:af:8d:8d:34:2d:b0:2d:41:cf:81:af:b8:57:f2: 92:23:df:f7:44:b6:43:b4:d6:7a:c8:66:f6:78:da: a6:ea:9b:d3:52:7c:47:ca:04:85:d5:42:7c:1e:55: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E5:ED:F1:62:16:29:4D:8A:11:58:0A:B9:A9:6B:B5:16:C6:92:9E X509v3 Authority Key Identifier: keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:4d:8d:d4:42:34:ab:75:7b:68:5e:92:06:ab:bf:10:e7:cd: 9f:94:c0:6f:81:d4:16:b4:2f:f5:f5:e3:dc:15:fe:fb:c8:79: f3:f4:4b:9f:c8:d7:07:66:bd:29:81:54:fc:ba:d8:20:e3:b5: bf:3d:a3:5b:e1:bf:d5:0b:1c:50:5d:f3:10:d9:fa:2b:d8:52: 20:c4:83:19:00:bb:5c:6b:af:11:16:4a:2b:87:7e:89:5c:2d: 30:5a:0e:a6:cc:ee:91:1f:d4:4d:61:8c:fb:af:69:d4:c2:11: a6:ff:5f:aa:bf:b9:9f:64:82:f0:c9:0a:1e:16:8c:1f:f3:e3: eb:6b:ab:7e:1f:0e:00:d3:5f:e2:c3:5a:01:17:73:86:d2:a0: aa:9e:6f:2e:f0:f0:17:07:3c:69:ea:0e:e3:dc:84:e3:53:72: db:61:f9:0d:d2:be:a1:97:d2:48:41:52:db:c4:fd:22:49:e4: dc:25:72:09:f7:be:46:35:c6:d6:bd:95:98:18:f6:d2:52:e1: 8e:6f:ef:18:4f:3c:a8:19:f8:39:32:89:84:b8:de:80:f4:b1: b0:76:17:a6:7a:01:50:91:32:a3:4b:d2:b3:1b:6f:36:1b:2c: 7b:a7:43:46:4f:5a:91:9c:f8:0c:dd:2a:fa:e1:8d:73:4e:0f: 04:96:1d:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REYyQjExMC8GA1UEBRMoOENEMTkwQTE0M0FBMkUxRTQ4NzMwM0IxM0RDMDUzRUQx N0JDRUIxRTAeFw0yNTEyMjUwNTU1MDNaFw0yNjAxMDEwNTU1MDNaMBgxFjAUBgNV BAMMDTY5NGNkMWI4LWI0ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhYEGXt9V+P3FjLpEgoPXt2zIqtxKTpD5hkUbLApe2Nz+aMfelceNTeYayMjeK KrELScjsDaWME879W4TuX4u14UlG86gjcIq2Xjnv6rlAtXuocOm7RAapoPFLbs5w /tK5y9I7UHini6N2Bl9YwH/nPIh9GuXXr2EG/fqQPFdpyJmBIrSlDcochgZRlojM Z4J9cDpCdZizdycaUHybhFloYN4gL/So1dK/G7wNGZbAe82wwzFRlNhV5vpkqtCX RjHe6BMyR44DeLNf5z9Tj4/mT3KvjY00LbAtQc+Br7hX8pIj3/dEtkO01nrIZvZ4 2qbqm9NSfEfKBIXVQnweVSTBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA+Xt8WIW KU2KEVgKualrtRbGkp4wHwYDVR0jBBgwFoAUjNGQoUOqLh5IcwOxPcBT7Re86x4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJERjJCLzZDMkI3QjFDNDFC QjExRjBCNDU2RDg1N0M0RjlBRTAyL2pOR1FvVU9xTGg1SWN3T3hQY0JUN1JlODZ4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak5HUW9VT3FMaDVJY3dPeFBjQlQ3UmU4Nng0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE RjJCLzZDMkI3QjFDNDFCQjExRjBCNDU2RDg1N0M0RjlBRTAyL2pOR1FvVU9xTGg1 SWN3T3hQY0JUN1JlODZ4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADBNjdRCNKt1e2hekgarvxDnzZ+UwG+B1Ba0L/X149wV/vvIefP0S5/I 1wdmvSmBVPy62CDjtb89o1vhv9ULHFBd8xDZ+ivYUiDEgxkAu1xrrxEWSiuHfolc LTBaDqbM7pEf1E1hjPuvadTCEab/X6q/uZ9kgvDJCh4WjB/z4+trq34fDgDTX+LD WgEXc4bSoKqeby7w8BcHPGnqDuPchONTctth+Q3SvqGX0khBUtvE/SJJ5Nwlcgn3 vkY1xta9lZgY9tJS4Y5v7xhPPKgZ+DkyiYS43oD0sbB2F6Z6AVCRMqNL0rMbbzYb LHunQ0ZPWpGc+AzdKvrhjXNODwSWHSc= -----END CERTIFICATE-----Generated at Fri Dec 26 18:01:45 2025 by rpki-client