This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json) Hash identifier: ajfX4VA0h/rbttJLt21r3wUuKoxA0x+8UlaLuU4LYqk= Subject key identifier: C2:A3:76:CB:D2:65:4C:D1:1D:CF:C5:BF:BF:00:59:6B:AA:08:AE:49 Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Certificate serial: 0B07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft Manifest number: 0AFF Signing time: Thu 18 Dec 2025 19:00:20 +0000 Manifest this update: Thu 18 Dec 2025 19:00:20 +0000 Manifest next update: Thu 25 Dec 2025 19:00:20 +0000 Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: yHFBFLfqGM3ilMqcJ1K0+pLjfg4WRfG7U+lWb33d9x8=) 2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: 7Rjkv9es3qmrpwGoh+nsTmGk0d+b2oIzwsuxat3h6cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2823 (0xb07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Validity Not Before: Dec 18 19:00:20 2025 GMT Not After : Dec 25 19:00:20 2025 GMT Subject: CN=69444f44-0430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:de:6c:15:8c:72:08:71:74:44:37:33:37: 6b:ac:cd:f5:08:1a:f2:81:57:f1:b5:f6:cb:a7:06: b9:23:64:0f:6d:43:f8:df:51:36:7d:b9:1d:61:82: 6d:f2:ba:b6:ba:da:3e:c3:43:39:f4:93:fc:1a:e7: 82:2b:c3:8e:a7:15:8d:59:9a:45:42:86:66:d4:92: de:b3:5a:79:f8:e2:45:3c:27:1d:d7:f3:c7:d3:f2: 84:cf:dd:4c:ad:a6:fd:a4:53:d9:01:3b:c4:42:a1: 25:1c:00:16:ed:ec:44:b8:71:a4:ff:80:f8:2d:5c: 29:50:5e:18:d9:b7:22:12:a0:42:23:c7:d4:f1:6e: 42:67:94:df:99:d9:6b:ef:94:3f:48:7c:dc:ee:94: cb:44:fa:ed:92:1c:3f:0b:3b:a5:fd:1d:c0:29:44: 1b:f7:7d:ec:b3:7f:24:a9:2f:b5:17:d2:e9:e8:86: ca:d1:34:51:45:c2:3d:ad:36:34:5d:e3:93:ad:b0: b3:47:33:1b:7b:d4:66:53:63:b1:7d:70:cf:22:e3: af:fd:59:c2:41:db:6b:29:f8:e2:6e:ba:cf:3f:56: e8:72:9c:0f:31:87:3a:37:9c:ee:66:c4:51:d4:1e: c1:ff:11:77:39:08:d2:17:d9:0d:18:4a:4a:4f:f5: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A3:76:CB:D2:65:4C:D1:1D:CF:C5:BF:BF:00:59:6B:AA:08:AE:49 X509v3 Authority Key Identifier: keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6e:f7:f2:cf:fb:74:d8:48:e1:73:eb:a4:9e:7e:e3:88:2b: 2a:84:41:99:de:51:df:b1:19:71:53:e4:63:de:4b:56:9b:a5: eb:b3:bd:19:c0:1a:dd:05:de:34:82:88:8c:b6:14:51:15:1a: 97:f0:ef:66:2f:02:58:03:71:4f:1e:d7:79:e8:48:cf:06:32: 90:73:f8:0c:dc:c1:47:94:51:2d:c6:4c:ad:99:68:fc:a0:2e: 14:b4:88:ec:6f:5c:97:65:d6:3e:6a:44:da:37:2a:ed:c5:5b: 4f:84:9c:11:be:e8:8a:36:89:18:8d:f7:df:3c:53:9b:d5:e8: e7:a1:8c:c0:7b:dd:da:f5:c3:81:8c:0a:04:2d:17:13:8c:38: 1d:1f:7a:46:74:dd:ec:3a:62:8b:21:50:06:24:e1:6a:61:3a: bf:20:69:46:55:22:48:4f:01:c2:78:c3:34:1b:50:83:f8:59: b0:38:57:b2:02:77:42:da:f5:dc:22:ee:a2:7e:15:20:5c:83: a4:fb:29:24:61:59:d6:78:c4:a0:11:df:1e:f0:3a:85:f3:c7: ba:0f:56:5c:c6:11:b6:3d:38:6d:d1:ab:c2:ba:42:c8:38:d8: 29:25:51:8f:2f:b9:5e:80:3f:bc:29:81:f7:79:94:e2:63:50: 67:5d:d7:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyMTAxMTAvBgNVBAUTKDhENDhBMEVFNTdFNjY0NzA5MEMyNEIzRDI1RkU1RkNB NkZBODA0RTEwHhcNMjUxMjE4MTkwMDIwWhcNMjUxMjI1MTkwMDIwWjAYMRYwFAYD VQQDDA02OTQ0NGY0NC0wNDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6PebBWMcghxdEQ3MzdrrM31CBrygVfxtfbLpwa5I2QPbUP431E2fbkdYYJt 8rq2uto+w0M59JP8GueCK8OOpxWNWZpFQoZm1JLes1p5+OJFPCcd1/PH0/KEz91M rab9pFPZATvEQqElHAAW7exEuHGk/4D4LVwpUF4Y2bciEqBCI8fU8W5CZ5Tfmdlr 75Q/SHzc7pTLRPrtkhw/Czul/R3AKUQb933ss38kqS+1F9Lp6IbK0TRRRcI9rTY0 XeOTrbCzRzMbe9RmU2OxfXDPIuOv/VnCQdtrKfjibrrPP1bocpwPMYc6N5zuZsRR 1B7B/xF3OQjSF9kNGEpKT/UR2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKjdsvS ZUzRHc/Fv78AWWuqCK5JMB8GA1UdIwQYMBaAFI1IoO5X5mRwkMJLPSX+X8pvqATh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjIxMC84OTA5MEY0NDU4 NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpIQ1F3a3M5SmY1ZnltLW9C T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVaWc3bGZtWkhDUXdrczlKZjVmeW0tb0JPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjIxMC84OTA5MEY0NDU4NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpI Q1F3a3M5SmY1ZnltLW9CT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDbvfyz/t02Ejhc+uknn7jiCsqhEGZ3lHfsRlxU+Rj3ktWm6Xrs70Z wBrdBd40goiMthRRFRqX8O9mLwJYA3FPHtd56EjPBjKQc/gM3MFHlFEtxkytmWj8 oC4UtIjsb1yXZdY+akTaNyrtxVtPhJwRvuiKNokYjfffPFOb1ejnoYzAe93a9cOB jAoELRcTjDgdH3pGdN3sOmKLIVAGJOFqYTq/IGlGVSJITwHCeMM0G1CD+FmwOFey AndC2vXcIu6ifhUgXIOk+ykkYVnWeMSgEd8e8DqF88e6D1ZcxhG2PTht0avCukLI ONgpJVGPL7legD+8KYH3eZTiY1BnXdft -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:47 2025 by rpki-client