This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft File: JaGXWBbNnonz1upqdjAiQ77DRe4.mft (raw, json) Hash identifier: 2tx2jR/Zz3ZeQOhbsOrZl4dLRIzReWJaMiUaVQF1oPI= Subject key identifier: 3D:E7:EA:00:48:56:9F:3C:15:AF:3B:75:AE:19:02:C0:E5:0D:0C:19 Authority key identifier: 25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE Certificate issuer: /CN=A91D488C/serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft Manifest number: 4C Signing time: Fri 19 Dec 2025 06:18:03 +0000 Manifest this update: Fri 19 Dec 2025 06:18:03 +0000 Manifest next update: Fri 26 Dec 2025 06:18:03 +0000 Files and hashes: 1: JaGXWBbNnonz1upqdjAiQ77DRe4.crl (hash: NMgj3/Pl1rRMx5qQWiLFTa7rHyJu6PUVVRGl5TSA07U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D488C, serialNumber=25A1975816CD9E89F3D6EA6A76302243BEC345EE Validity Not Before: Dec 19 06:18:03 2025 GMT Not After : Dec 26 06:18:03 2025 GMT Subject: CN=6944ee1b-9e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:fa:bb:41:d1:21:94:de:d9:ae:59:83:98: 82:f1:e5:24:98:e0:7c:87:4f:f9:84:13:e7:61:3c: b8:0e:a1:24:03:ee:37:08:32:10:56:f4:22:e0:da: c7:a6:a5:4f:32:4a:e3:a9:0d:27:32:7a:f6:57:1d: 69:34:7f:e0:83:3f:a6:5c:a1:78:c8:f6:74:1c:67: 57:2f:9d:7f:3e:31:da:84:23:67:ef:e4:ba:f9:96: 54:a7:fa:4c:9e:da:f9:27:23:77:5d:c6:00:84:fe: e3:f9:2f:35:2a:46:aa:bb:b8:12:fe:a3:c0:57:87: fb:6e:b5:22:c8:77:54:23:bc:a1:2d:de:ee:73:20: 4d:c2:99:4e:aa:fd:fa:3b:1b:f3:64:a8:a5:fb:19: f4:0b:db:cf:80:0d:d4:35:50:da:3e:e4:34:94:63: 36:71:2d:9e:29:26:64:4d:c7:6f:fd:52:f1:8b:d1: 67:b6:2b:e7:b0:09:99:e8:07:fc:b8:02:03:76:62: 81:c4:c0:bc:b0:df:34:58:3a:51:83:f6:ee:38:1a: 2a:e5:3e:a9:78:98:48:89:d2:f8:a0:a1:ed:b0:bd: c4:b9:b8:6a:a9:f4:bd:eb:de:cc:27:6d:71:28:61: 98:a1:5a:32:98:8c:5d:eb:13:3f:60:42:0d:b3:4c: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E7:EA:00:48:56:9F:3C:15:AF:3B:75:AE:19:02:C0:E5:0D:0C:19 X509v3 Authority Key Identifier: keyid:25:A1:97:58:16:CD:9E:89:F3:D6:EA:6A:76:30:22:43:BE:C3:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaGXWBbNnonz1upqdjAiQ77DRe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/4F6D6F606B8911F095F1102BC4F9AE02/JaGXWBbNnonz1upqdjAiQ77DRe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:53:61:13:43:d7:5e:71:52:b9:7c:5a:c0:34:99:42:36:41: 1a:bb:bb:ec:ca:7f:6d:2f:04:f7:75:29:78:81:a8:fe:a4:8a: 45:b6:9a:19:08:91:f6:58:dc:44:66:7f:15:9e:53:46:a8:4d: e2:ff:92:bd:ab:38:ab:a1:fa:32:45:45:04:45:13:50:28:08: 31:27:05:5f:db:f8:ec:5b:9b:0a:ec:27:d4:54:f7:32:28:15: b4:db:bd:21:ea:ae:fe:ce:34:85:8e:48:98:25:df:e2:33:54: 1f:58:07:f5:98:b1:bf:4d:9d:19:cc:65:97:81:c3:87:a9:81: ab:ba:c9:09:2b:4d:24:63:7d:68:35:90:4c:74:4d:dc:e7:bb: c5:89:1a:ba:2a:29:8e:97:4f:6f:2f:69:09:fe:bc:8d:56:94: 4b:65:4a:9c:43:7d:b8:80:ea:87:d5:76:b9:d1:80:95:38:03: 71:63:59:7b:6d:37:ae:c1:38:26:77:82:1a:37:b8:29:ca:71: 4b:4d:9c:2a:70:12:53:51:d4:b9:4f:7e:f2:6f:cb:a6:bd:55: f2:f3:67:c0:31:51:d7:6a:f5:a2:77:af:80:41:47:8f:72:08: 13:de:cf:bb:ee:26:da:99:6c:60:5c:5e:af:59:ba:7a:59:7a: 44:52:61:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg4QzExMC8GA1UEBRMoMjVBMTk3NTgxNkNEOUU4OUYzRDZFQTZBNzYzMDIyNDNC RUMzNDVFRTAeFw0yNTEyMTkwNjE4MDNaFw0yNTEyMjYwNjE4MDNaMBgxFjAUBgNV BAMMDTY5NDRlZTFiLTllMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC73fq7QdEhlN7ZrlmDmILx5SSY4HyHT/mEE+dhPLgOoSQD7jcIMhBW9CLg2sem pU8ySuOpDScyevZXHWk0f+CDP6ZcoXjI9nQcZ1cvnX8+MdqEI2fv5Lr5llSn+kye 2vknI3ddxgCE/uP5LzUqRqq7uBL+o8BXh/tutSLId1QjvKEt3u5zIE3CmU6q/fo7 G/NkqKX7GfQL28+ADdQ1UNo+5DSUYzZxLZ4pJmRNx2/9UvGL0We2K+ewCZnoB/y4 AgN2YoHEwLyw3zRYOlGD9u44GirlPql4mEiJ0vigoe2wvcS5uGqp9L3r3swnbXEo YZihWjKYjF3rEz9gQg2zTJVzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPefqAEhW nzwVrzt1rhkCwOUNDBkwHwYDVR0jBBgwFoAUJaGXWBbNnonz1upqdjAiQ77DRe4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODhDLzRGNkQ2RjYwNkI4 OTExRjA5NUYxMTAyQkM0RjlBRTAyL0phR1hXQmJObm9uejF1cHFkakFpUTc3RFJl NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmFHWFdCYk5ub256MXVwcWRqQWlRNzdEUmU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODhDLzRGNkQ2RjYwNkI4OTExRjA5NUYxMTAyQkM0RjlBRTAyL0phR1hXQmJObm9u ejF1cHFkakFpUTc3RFJlNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRTYRND115xUrl8WsA0mUI2QRq7u+zKf20vBPd1KXiBqP6kikW2mhkI kfZY3ERmfxWeU0aoTeL/kr2rOKuh+jJFRQRFE1AoCDEnBV/b+OxbmwrsJ9RU9zIo FbTbvSHqrv7ONIWOSJgl3+IzVB9YB/WYsb9NnRnMZZeBw4epgau6yQkrTSRjfWg1 kEx0Tdznu8WJGroqKY6XT28vaQn+vI1WlEtlSpxDfbiA6ofVdrnRgJU4A3FjWXtt N67BOCZ3gho3uCnKcUtNnCpwElNR1LlPfvJvy6a9VfLzZ8AxUddq9aJ3r4BBR49y CBPez7vuJtqZbGBcXq9ZunpZekRSYa8= -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:29 2025 by rpki-client