This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: TRS9N4L/U53aj1PRL8k7OEOCB+9GU+ZNoyS3vy5MP8Y= Subject key identifier: 40:42:02:14:26:0B:58:E1:1C:58:C5:87:FD:6D:3F:86:F6:DC:AD:7D Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 07F8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 07D8 Signing time: Tue 30 Dec 2025 20:42:09 +0000 Manifest this update: Tue 30 Dec 2025 20:42:09 +0000 Manifest next update: Tue 06 Jan 2026 20:42:09 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: Mu+htdNPC77GWceb7s3QGJI4DOKAZ4IkuOo50n7z7wY=) 2: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: umP1jM7YynccOJheC11YvDxU2JNxDYT6vSOoFYsUbhA=) 3: 7C76080E08D611EE82522448C4F9AE02.roa (hash: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo=) 4: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: AlSQiWdBlK2D6fUaLlzUbdGdJEpnbwRmjimYOA50uq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 14:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Dec 30 20:42:09 2025 GMT Not After : Jan 6 20:42:09 2026 GMT Subject: CN=69543921-39cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:8c:86:8c:b2:ec:94:3b:29:f1:93:c7:0e: 0a:c2:32:96:39:30:ea:67:d0:b7:c9:de:3a:82:34: 1f:1f:39:58:09:72:2a:b5:dd:cb:8f:93:e7:a5:ff: e8:f3:2e:13:8e:25:2c:e3:f0:76:f8:93:ad:b2:f4: db:d4:26:ff:5a:e8:d9:8a:c1:2f:85:eb:f6:bc:15: 1d:af:b5:8b:f8:f7:c6:55:6c:83:3c:e3:29:4d:fd: 47:aa:f5:b1:f0:01:cb:9d:fd:22:57:13:2d:79:b6: 65:52:84:60:6d:6b:54:8c:87:d6:3a:7f:6e:1d:8f: bb:30:d7:da:b7:1a:a1:3c:c9:f6:2f:52:df:3e:e9: 2d:bf:eb:0b:2c:b3:fc:b1:86:8b:b5:6b:79:05:a1: 29:a7:33:1d:ac:1f:1f:69:f9:67:61:a8:3a:99:b0: dc:a1:d6:f0:de:db:ef:3c:49:b8:d3:12:da:47:de: e5:5a:36:b2:b1:b8:0b:35:cc:0c:f2:be:e4:dd:29: 07:96:c7:03:6a:da:54:7b:25:65:25:3b:bd:ad:00: bd:28:3a:5e:57:82:f0:a6:ec:99:21:7a:14:1c:1e: 2d:30:de:1b:e4:1b:74:88:d7:2f:8e:28:56:22:6e: 4a:f0:8b:e4:de:1c:8b:a5:19:e1:74:38:d1:89:5b: 2a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:42:02:14:26:0B:58:E1:1C:58:C5:87:FD:6D:3F:86:F6:DC:AD:7D X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8c:6f:51:6e:dd:a2:2e:17:62:a6:45:8c:be:47:2c:e0:d6: e5:fe:93:b5:39:29:b3:fb:e9:83:9d:57:3d:58:d9:6c:71:d0: 93:ce:b9:03:b2:ed:cc:d9:b6:f9:5a:93:19:7d:68:5a:f8:5d: 7c:23:ab:c9:73:d0:18:a1:e7:b8:d5:e8:65:7f:d1:75:28:58: 4c:f0:4c:4e:09:11:ef:9c:78:73:9a:15:f8:f9:c1:4d:d4:4c: 03:e7:83:a5:29:7d:28:8d:99:23:35:7f:37:b3:58:3b:30:59: 90:08:96:c4:5a:4f:f6:d2:03:ac:ca:ab:00:95:bc:f6:bd:44: ba:fb:ee:a8:62:e3:1a:77:3c:53:4a:95:0a:1b:58:04:f7:7e: db:b0:69:97:63:df:de:61:23:f9:32:67:94:41:96:ff:f4:6b: 78:6e:9c:e9:31:c0:b6:7f:bd:e7:3f:30:12:91:8d:a9:8d:4e: a4:31:5a:50:b9:7d:06:b7:1f:12:b2:fd:32:30:f0:34:ec:7f: 2f:95:dd:5e:21:da:d7:13:78:4e:b9:0a:9c:3f:39:89:cc:89: 9b:50:45:57:0d:4f:39:90:1e:27:f0:cc:1f:59:6f:96:03:65: eb:39:c7:c2:e2:f7:47:e3:1b:51:24:29:33:06:e0:07:67:99: d3:c1:2b:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjUxMjMwMjA0MjA5WhcNMjYwMTA2MjA0MjA5WjAYMRYwFAYD VQQDDA02OTU0MzkyMS0zOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9WMhoyy7JQ7KfGTxw4KwjKWOTDqZ9C3yd46gjQfHzlYCXIqtd3Lj5Pnpf/o 8y4TjiUs4/B2+JOtsvTb1Cb/WujZisEvhev2vBUdr7WL+PfGVWyDPOMpTf1HqvWx 8AHLnf0iVxMtebZlUoRgbWtUjIfWOn9uHY+7MNfatxqhPMn2L1LfPuktv+sLLLP8 sYaLtWt5BaEppzMdrB8faflnYag6mbDcodbw3tvvPEm40xLaR97lWjaysbgLNcwM 8r7k3SkHlscDatpUeyVlJTu9rQC9KDpeV4LwpuyZIXoUHB4tMN4b5Bt0iNcvjihW Im5K8Ivk3hyLpRnhdDjRiVsqBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBCAhQm C1jhHFjFh/1tP4b23K19MB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNjG9Rbt2iLhdipkWMvkcs4Nbl/pO1OSmz++mDnVc9WNlscdCTzrkD su3M2bb5WpMZfWha+F18I6vJc9AYoee41ehlf9F1KFhM8ExOCRHvnHhzmhX4+cFN 1EwD54OlKX0ojZkjNX83s1g7MFmQCJbEWk/20gOsyqsAlbz2vUS6++6oYuMadzxT SpUKG1gE937bsGmXY9/eYSP5MmeUQZb/9Gt4bpzpMcC2f73nPzASkY2pjU6kMVpQ uX0Gtx8Ssv0yMPA07H8vld1eIdrXE3hOuQqcPzmJzImbUEVXDU85kB4n8MwfWW+W A2XrOcfC4vdH4xtRJCkzBuAHZ5nTwSta -----END CERTIFICATE-----Generated at Wed Dec 31 03:41:38 2025 by rpki-client