This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json) Hash identifier: QxTSwPnHBnaKTO14vLMIiWCTCqODwEBTh5myCrbu3+w= Subject key identifier: 04:E3:B4:C6:D1:22:09:83:96:90:C2:0F:B5:B6:CA:F7:0E:DD:6C:8F Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Certificate serial: 0C48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft Manifest number: 0C41 Signing time: Wed 31 Dec 2025 18:24:24 +0000 Manifest this update: Wed 31 Dec 2025 18:24:23 +0000 Manifest next update: Wed 07 Jan 2026 18:24:23 +0000 Files and hashes: 1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: MxRyhmcGoE0xyd5hHn2tVStRYOrAX5jsPCdgfO5zhBQ=) 2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: COZjXXHmsAr243ikhBQiH/+xCiQuWS4OIqMygfy8ftc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 18:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3144 (0xc48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Validity Not Before: Dec 31 18:24:23 2025 GMT Not After : Jan 7 18:24:23 2026 GMT Subject: CN=69556a58-137b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c0:17:69:c8:46:5f:f2:c1:b7:ac:20:a4:b7: 15:ad:c3:d2:65:a5:9a:e6:08:0e:b5:31:bc:3a:99: 94:55:8f:a7:c2:eb:e2:17:ae:c6:5a:93:5f:a0:94: c6:11:7e:ca:73:d9:5d:44:fb:72:12:cb:80:3b:18: a4:a7:41:69:e8:77:64:5d:b1:cd:ac:f0:5d:18:f0: 05:31:70:71:d5:37:e2:8d:82:7a:41:3c:09:e7:f1: f6:3a:03:4e:5d:9d:30:c2:45:18:93:df:b7:de:48: d6:8a:09:36:c8:14:93:a9:a4:fe:9e:19:af:9f:4b: 03:66:36:cc:9b:d9:c3:09:31:9f:53:f0:0a:d8:56: f1:5b:5d:00:e7:e4:fe:f3:06:23:45:c7:96:e6:b5: af:5c:f5:9e:52:30:e7:47:a6:54:68:b4:0b:68:32: 2f:dc:2d:a1:9c:4e:d4:c7:7d:06:71:35:a6:ed:66: ea:39:28:b7:a4:06:1e:d7:52:1a:8f:94:94:c1:e3: 3a:bf:10:91:a8:e0:91:c6:38:36:00:4b:26:92:0d: 2d:78:50:08:3d:36:d2:a5:7d:6c:4a:b2:34:95:bf: 15:89:60:45:54:ee:a4:c7:05:cd:fc:1a:ef:a0:88: 93:b9:35:72:51:48:ba:e4:45:ae:31:29:11:d4:dc: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E3:B4:C6:D1:22:09:83:96:90:C2:0F:B5:B6:CA:F7:0E:DD:6C:8F X509v3 Authority Key Identifier: keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:8b:c7:f3:7c:3e:b2:90:50:8f:0a:c6:93:72:6b:a9:4e:c4: 59:ac:0f:cb:63:27:3e:bc:a4:40:5e:a5:04:68:6f:2d:6e:17: 86:2d:2e:2a:a7:4f:80:97:7e:7b:69:77:e2:70:91:06:a1:df: 1a:16:8f:6d:88:21:7f:1f:68:dd:6d:36:d2:ab:a4:37:66:92: 62:aa:58:6a:db:b3:24:8f:c3:5f:e3:7e:c6:81:7d:8e:16:bb: 06:b5:e3:6c:7e:f6:9d:00:62:fd:b0:d4:b6:68:c8:22:e9:d3: 8d:18:29:f7:d0:cd:8f:02:bc:7c:c1:c6:e7:b3:ba:08:c9:9e: 18:c6:33:7f:a1:7f:38:0e:42:c9:98:36:fd:d0:69:64:32:eb: 23:f1:c3:56:de:2d:9f:fc:f2:75:09:c1:b0:54:a8:25:69:1b: 8c:d0:ca:e9:a2:84:e2:6f:09:6b:80:6e:83:a4:57:36:bb:77: c0:0e:4b:68:b0:e3:a0:6d:7c:b5:98:34:10:fb:8d:26:da:65: 9e:50:ad:9e:52:1f:d6:58:8d:8a:f3:ca:fb:cd:b2:93:2e:64: 82:3d:b3:bd:d4:43:af:8f:69:b0:0d:93:cb:4c:f3:e9:79:c9: 5f:f6:ef:56:42:d0:5f:53:83:d7:3c:0c:6a:88:83:d0:f5:aa: c0:4a:60:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgxRTgxMTAvBgNVBAUTKDhGNTZFQjhFNzI3N0EyMTdGNDY3RTg5QzgxRjY0Qjc1 REZCODdEMUUwHhcNMjUxMjMxMTgyNDIzWhcNMjYwMTA3MTgyNDIzWjAYMRYwFAYD VQQDDA02OTU1NmE1OC0xMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8MAXachGX/LBt6wgpLcVrcPSZaWa5ggOtTG8OpmUVY+nwuviF67GWpNfoJTG EX7Kc9ldRPtyEsuAOxikp0Fp6HdkXbHNrPBdGPAFMXBx1TfijYJ6QTwJ5/H2OgNO XZ0wwkUYk9+33kjWigk2yBSTqaT+nhmvn0sDZjbMm9nDCTGfU/AK2FbxW10A5+T+ 8wYjRceW5rWvXPWeUjDnR6ZUaLQLaDIv3C2hnE7Ux30GcTWm7WbqOSi3pAYe11Ia j5SUweM6vxCRqOCRxjg2AEsmkg0teFAIPTbSpX1sSrI0lb8ViWBFVO6kxwXN/Brv oIiTuTVyUUi65EWuMSkR1NxHlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATjtMbR IgmDlpDCD7W2yvcO3WyPMB8GA1UdIwQYMBaAFI9W645yd6IX9GfonIH2S3XfuH0e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODFFOC85NTEyNTIwODFB NDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29oZjBaLWljZ2ZaTGRkLTRm UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxYnJqbkozb2hmMFotaWNnZlpMZGQtNGZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODFFOC85NTEyNTIwODFBNDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29o ZjBaLWljZ2ZaTGRkLTRmUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRi8fzfD6ykFCPCsaTcmupTsRZrA/LYyc+vKRAXqUEaG8tbheGLS4q p0+Al357aXficJEGod8aFo9tiCF/H2jdbTbSq6Q3ZpJiqlhq27Mkj8Nf437GgX2O FrsGteNsfvadAGL9sNS2aMgi6dONGCn30M2PArx8wcbns7oIyZ4YxjN/oX84DkLJ mDb90GlkMusj8cNW3i2f/PJ1CcGwVKglaRuM0MrpooTibwlrgG6DpFc2u3fADkto sOOgbXy1mDQQ+40m2mWeUK2eUh/WWI2K88r7zbKTLmSCPbO91EOvj2mwDZPLTPPp eclf9u9WQtBfU4PXPAxqiIPQ9arASmBX -----END CERTIFICATE-----Generated at Thu Jan 1 14:28:38 2026 by rpki-client