This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft File: J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft (raw, json) Hash identifier: R4gHbQiUpciKZB7PY5jJkKdXFjHpHQk/fefCjtOyROQ= Subject key identifier: EE:59:50:A2:B0:EB:74:41:D1:68:63:EB:32:C6:6A:A7:8D:CB:04:0D Authority key identifier: 27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E Certificate issuer: /CN=A91BF781/serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft Manifest number: 0187 Signing time: Sun 21 Dec 2025 02:57:58 +0000 Manifest this update: Sun 21 Dec 2025 02:57:57 +0000 Manifest next update: Sun 28 Dec 2025 02:57:57 +0000 Files and hashes: 1: J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl (hash: uIr927VPPBTDJhtvu2uJbj5eR7Scs30lIP5BmYeymfw=) 2: A6DB1A549BB511EEAAE01C70C4F9AE02.roa (hash: qyWw2r/4K++h/y+FWYONqc3F4IP6pfba3UzSaIofnKI=) 3: DB78FCC4BB5211EE8EB48761C4F9AE02.roa (hash: HxiTvfOZo9+zgn14NrA81k9rbeWuji7E8XDguoQ9w4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF781, serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E Validity Not Before: Dec 21 02:57:57 2025 GMT Not After : Dec 28 02:57:57 2025 GMT Subject: CN=69476236-72a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:9b:28:d0:93:4f:9d:08:d8:8b:54:9e:40: d0:0c:ab:34:e6:d2:48:8a:bd:8a:8a:ba:1f:b8:88: a8:4b:38:ba:ef:72:fe:e6:27:5c:ea:e7:e6:b1:77: 8c:03:01:1a:05:61:9b:b5:10:14:a5:60:ef:fe:0f: 5c:fe:1c:4f:68:9b:56:c8:8a:99:ae:9b:d6:ff:fc: b3:a8:33:80:19:60:ef:5a:e5:4c:17:c7:ac:88:05: 63:f1:c6:41:6c:2d:a4:0d:45:77:d9:a0:45:60:14: 70:c3:05:e6:c6:fe:da:b9:29:dd:dd:84:03:8a:82: a9:ce:32:13:91:07:ff:0a:40:60:c1:80:bf:2d:1a: 1a:0a:74:5c:88:9f:e7:60:e6:b2:09:19:69:38:e3: e2:44:ec:ae:30:c9:dd:c9:ba:d6:d7:51:bd:69:02: 7a:25:93:7d:49:82:b3:eb:c1:29:dc:1c:21:2f:0b: b9:e7:c8:8d:d6:b3:a0:73:fd:a6:ee:95:c6:d8:6f: cb:ef:87:7c:6a:8c:92:b0:b8:65:03:e7:b8:a5:6b: a3:ea:ff:d1:9d:23:fc:46:55:13:66:a2:a2:c7:51: 05:98:9c:1d:49:44:e3:60:26:05:4a:4c:28:2f:4e: 94:3e:ff:56:f4:3d:f4:9c:6b:08:80:6c:42:2d:d1: bd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:59:50:A2:B0:EB:74:41:D1:68:63:EB:32:C6:6A:A7:8D:CB:04:0D X509v3 Authority Key Identifier: keyid:27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:7b:17:fe:2f:ca:67:48:c1:d7:d5:ac:80:eb:8b:b6:d1:93: 6e:ef:d2:5a:fe:9b:46:16:3c:83:12:29:85:4b:e0:27:e5:2a: c8:b1:ba:77:b9:1c:9e:c5:d8:e0:70:f2:d2:72:18:67:eb:f0: 61:96:45:56:92:a4:3a:b2:d5:45:58:5a:c9:65:7c:c9:cf:64: db:de:5d:d8:b9:42:9a:f4:af:e6:5d:f1:68:24:3f:68:ed:a5: 97:0d:e7:70:de:e6:2d:ac:77:3e:6f:e3:3d:7f:34:4f:52:3c: 02:16:cd:4f:dc:e1:1e:8f:80:22:81:8f:95:9b:6b:ef:3e:c7: 61:ba:10:13:c3:b2:b6:5d:9d:a4:f2:8d:85:f2:9c:ac:b8:f7: c3:f0:63:9c:1d:f3:41:5b:a6:51:dc:e9:7c:ac:db:d9:3c:5c: ac:71:d0:fc:79:86:ba:6d:f2:b2:52:71:e3:e3:e1:ab:e4:9f: 56:df:35:f4:8f:3a:c7:19:d9:e3:b7:c7:b2:3a:86:2e:a2:c8: be:65:45:82:72:9f:01:9c:6c:0f:07:f1:c2:ec:9d:12:54:be: f1:a5:c3:eb:ec:bf:63:bc:5c:3d:27:be:2f:5e:c5:4b:6d:92: 87:03:f9:b7:f7:eb:6c:1b:64:70:f1:a8:ad:27:b9:e5:5a:1a: fa:5f:f3:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3ODExMTAvBgNVBAUTKDI3NjlBNEZBOTIyOTdEQ0IxREY4OTZEQUU2MzczOTk2 RkQzMTgwNkUwHhcNMjUxMjIxMDI1NzU3WhcNMjUxMjI4MDI1NzU3WjAYMRYwFAYD VQQDDA02OTQ3NjIzNi03MmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnqbKNCTT50I2ItUnkDQDKs05tJIir2KirofuIioSzi673L+5idc6ufmsXeM AwEaBWGbtRAUpWDv/g9c/hxPaJtWyIqZrpvW//yzqDOAGWDvWuVMF8esiAVj8cZB bC2kDUV32aBFYBRwwwXmxv7auSnd3YQDioKpzjITkQf/CkBgwYC/LRoaCnRciJ/n YOayCRlpOOPiROyuMMndybrW11G9aQJ6JZN9SYKz68Ep3BwhLwu558iN1rOgc/2m 7pXG2G/L74d8aoySsLhlA+e4pWuj6v/RnSP8RlUTZqKix1EFmJwdSUTjYCYFSkwo L06UPv9W9D30nGsIgGxCLdG9EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5ZUKKw 63RB0Whj6zLGaqeNywQNMB8GA1UdIwQYMBaAFCdppPqSKX3LHfiW2uY3OZb9MYBu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc4MS83NTA3MEE0QTk2 QUQxMUVFOUY1Rjg0NURDNEY5QUUwMi9KMm1rLXBJcGZjc2QtSmJhNWpjNWx2MHhn RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oybWstcElwZmNzZC1KYmE1amM1bHYweGdHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc4MS83NTA3MEE0QTk2QUQxMUVFOUY1Rjg0NURDNEY5QUUwMi9KMm1rLXBJcGZj c2QtSmJhNWpjNWx2MHhnRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAexf+L8pnSMHX1ayA64u20ZNu79Ja/ptGFjyDEimFS+An5SrIsbp3 uRyexdjgcPLSchhn6/BhlkVWkqQ6stVFWFrJZXzJz2Tb3l3YuUKa9K/mXfFoJD9o 7aWXDedw3uYtrHc+b+M9fzRPUjwCFs1P3OEej4AigY+Vm2vvPsdhuhATw7K2XZ2k 8o2F8pysuPfD8GOcHfNBW6ZR3Ol8rNvZPFyscdD8eYa6bfKyUnHj4+Gr5J9W3zX0 jzrHGdnjt8eyOoYuosi+ZUWCcp8BnGwPB/HC7J0SVL7xpcPr7L9jvFw9J74vXsVL bZKHA/m39+tsG2Rw8aitJ7nlWhr6X/MM -----END CERTIFICATE-----Generated at Sun Dec 21 15:21:16 2025 by rpki-client