This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json) Hash identifier: SfeY0DXmL4wTR3+M82YquErQ2Hpr0AvWzK5jN1YPbOY= Subject key identifier: 6D:08:4F:6F:C4:DB:75:07:59:0E:82:88:92:A3:44:89:1D:4F:70:C1 Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft Manifest number: 019B Signing time: Mon 29 Dec 2025 02:32:15 +0000 Manifest this update: Mon 29 Dec 2025 02:32:14 +0000 Manifest next update: Mon 05 Jan 2026 02:32:14 +0000 Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: Kf5tYY+F+UIdqFMxhlG4qub/GSFF1zLwd2ZERdUJmjY=) 2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: mEWfsTcA2IvJ08SERafVpG79nAxQN7WQ08fS/psaf1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 02:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: Dec 29 02:32:14 2025 GMT Not After : Jan 5 02:32:14 2026 GMT Subject: CN=6951e82e-95d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:69:89:6e:09:01:64:df:70:14:97:d6:36: f4:72:f8:df:f2:9b:2c:e5:4f:9e:3f:99:4b:5d:87: 2f:26:3b:53:66:30:97:3d:6a:53:be:03:f3:4f:a2: 7b:eb:f4:fa:82:64:04:02:65:53:d8:5f:99:66:3b: 67:be:a8:00:2f:b8:0a:de:ca:bc:cf:68:e0:12:6e: b1:89:09:1c:8d:fe:2b:dd:6f:02:d4:95:7a:1b:10: a8:cc:80:17:ec:ad:7e:cd:12:0c:9e:cf:dd:f2:d4: fd:2b:cc:28:f1:b4:41:b3:5b:5b:e8:ec:97:1f:50: 53:d8:69:04:ed:42:a4:f1:6b:71:9a:62:bb:45:a7: 7d:7a:3f:68:1d:20:8a:bb:61:0e:43:08:31:e1:1e: 5a:6e:d5:b2:31:f1:53:4c:0d:03:04:18:5b:28:c4: 2c:fa:41:54:73:07:cf:9b:0a:88:c9:4f:e3:cb:52: c3:ea:16:4b:d7:39:47:6e:24:bd:b5:29:e7:31:f7: 6d:33:d7:29:d7:79:27:d2:03:e8:62:31:8c:c5:ef: e7:0f:bf:40:a4:94:a0:7e:aa:2e:b6:94:57:02:e9: 7b:9a:6e:73:7e:67:57:24:ed:ce:26:e6:3f:f5:cb: ec:14:af:7c:b2:5d:06:58:e3:ea:61:98:69:de:3a: 78:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:08:4F:6F:C4:DB:75:07:59:0E:82:88:92:A3:44:89:1D:4F:70:C1 X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:72:f1:e9:9c:37:63:7a:47:14:01:7d:98:29:d4:64:40:80: 79:f8:a5:cb:d2:48:bd:bb:c4:dc:1b:98:d0:1d:9f:1a:0d:cc: c2:e8:6a:22:4b:b8:5d:b3:d8:fd:21:6d:87:6a:92:d8:33:fe: 22:24:cc:1c:0d:78:57:0a:14:81:13:17:5a:f0:72:e0:33:09: da:50:1c:e0:19:1a:49:7b:79:63:79:ce:a4:4f:f5:ee:38:1f: eb:83:27:2c:1a:90:39:22:fb:19:07:df:fd:be:e6:5f:3f:ac: 5c:80:6d:10:f2:7b:83:65:b8:fd:13:6e:76:77:ac:aa:cb:9d: 83:37:a6:a4:1d:e6:5d:e3:f0:3e:21:5e:95:a0:cb:ee:44:90: e3:d8:a1:65:7e:56:c9:6f:59:84:bf:69:cb:81:13:b9:34:4d: 84:3d:57:d5:c1:43:52:85:44:29:92:cf:9c:24:e7:c0:b3:33: 0a:86:58:97:93:89:c6:10:03:4b:b8:4b:4c:11:47:df:1b:aa: 5a:2d:4a:3c:90:06:8c:75:7f:54:a6:3f:ed:9b:0f:a7:da:25: d4:c2:0c:dc:90:aa:8c:d9:ac:24:fe:bf:11:ed:ec:e7:26:43: 68:47:6f:c3:cc:f3:03:df:5d:30:6b:ae:31:0e:f1:de:84:b2: d0:31:4b:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGNzkxMTAvBgNVBAUTKDI1RjlEQjYwMDdBREY2RjU3RUM0RUZGN0E2MkJGNEQ0 MkRBNzVFQzUwHhcNMjUxMjI5MDIzMjE0WhcNMjYwMTA1MDIzMjE0WjAYMRYwFAYD VQQDDA02OTUxZTgyZS05NWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdVpiW4JAWTfcBSX1jb0cvjf8pss5U+eP5lLXYcvJjtTZjCXPWpTvgPzT6J7 6/T6gmQEAmVT2F+ZZjtnvqgAL7gK3sq8z2jgEm6xiQkcjf4r3W8C1JV6GxCozIAX 7K1+zRIMns/d8tT9K8wo8bRBs1tb6OyXH1BT2GkE7UKk8WtxmmK7Rad9ej9oHSCK u2EOQwgx4R5abtWyMfFTTA0DBBhbKMQs+kFUcwfPmwqIyU/jy1LD6hZL1zlHbiS9 tSnnMfdtM9cp13kn0gPoYjGMxe/nD79ApJSgfqoutpRXAul7mm5zfmdXJO3OJuY/ 9cvsFK98sl0GWOPqYZhp3jp4lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0IT2/E 23UHWQ6CiJKjRIkdT3DBMB8GA1UdIwQYMBaAFCX522AHrfb1fsTv96Yr9NQtp17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y3OS9GQTMxQTJCMjZG MUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2Vi14T18zcGl2MDFDMm5Y c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y3OS9GQTMxQTJCMjZGMUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2 Vi14T18zcGl2MDFDMm5Yc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBcvHpnDdjekcUAX2YKdRkQIB5+KXL0ki9u8TcG5jQHZ8aDczC6Goi S7hds9j9IW2HapLYM/4iJMwcDXhXChSBExda8HLgMwnaUBzgGRpJe3ljec6kT/Xu OB/rgycsGpA5IvsZB9/9vuZfP6xcgG0Q8nuDZbj9E252d6yqy52DN6akHeZd4/A+ IV6VoMvuRJDj2KFlflbJb1mEv2nLgRO5NE2EPVfVwUNShUQpks+cJOfAszMKhliX k4nGEANLuEtMEUffG6paLUo8kAaMdX9Upj/tmw+n2iXUwgzckKqM2awk/r8R7ezn JkNoR2/DzPMD310wa64xDvHehLLQMUvh -----END CERTIFICATE-----Generated at Mon Dec 29 22:40:15 2025 by rpki-client