This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft File: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json) Hash identifier: ld/ar1bv14qHw2g3cWb42OgScrW15mv1VEVKf4x03DE= Subject key identifier: 95:1B:FA:9D:59:D6:55:24:79:3A:84:EA:C8:CE:22:CD:E4:85:4D:D2 Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD Certificate issuer: /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Certificate serial: 05FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft Manifest number: 1FA2 Signing time: Fri 26 Dec 2025 16:09:21 +0000 Manifest this update: Fri 26 Dec 2025 16:09:20 +0000 Manifest next update: Fri 02 Jan 2026 16:09:20 +0000 Files and hashes: 1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: c4mhHCWE7DUao7Tlhd8vzi3yALHAShJHbj1LfC1DZe0=) 2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: 18yGqSgC4OjskRlJV7bTeEZSgygKIsdz22IPs64qVtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 16:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1535 (0x5ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Validity Not Before: Dec 26 16:09:20 2025 GMT Not After : Jan 2 16:09:20 2026 GMT Subject: CN=694eb331-5a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dd:4c:90:74:8c:15:e0:1c:bc:ce:51:22:32: 1a:43:32:c5:37:b4:a9:d3:36:41:69:8b:08:8f:74: 05:47:af:c6:06:a1:9a:57:07:c1:a9:c1:15:4d:17: c7:ce:cc:9d:df:3a:c8:a3:8f:b2:85:f5:75:88:ab: 32:0b:b8:10:bb:34:13:86:f7:df:20:70:d3:8c:a5: fb:bb:e8:17:7f:8a:94:a0:1d:69:0c:a8:46:e8:cf: 26:2f:c4:e3:bd:60:bd:4d:01:1c:e7:92:ab:5f:b5: ed:28:18:58:1a:13:fe:c5:84:90:8a:99:63:83:81: b9:6d:9c:35:c2:f1:0b:0a:16:9e:aa:82:8a:5f:d3: 29:45:7a:9d:db:0f:be:58:85:ca:02:a5:60:59:f4: 7b:af:7d:2c:5f:e6:d5:a3:71:b1:d8:8b:12:45:c0: fd:25:f5:04:e3:08:62:8b:f9:cc:ce:b3:da:7e:fc: 29:ba:4c:50:39:c1:44:68:57:da:5e:1e:11:f3:9c: fd:60:49:42:a9:eb:95:cf:ec:2f:f9:22:7f:05:62: a0:d1:79:dc:d8:5b:8c:a9:67:df:ba:ac:e0:c6:46: a3:a9:90:bd:62:f8:56:3a:39:7d:93:d5:6f:a1:cd: f1:f8:a7:ba:ed:cd:c9:af:df:f7:6d:86:71:e9:21: 77:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1B:FA:9D:59:D6:55:24:79:3A:84:EA:C8:CE:22:CD:E4:85:4D:D2 X509v3 Authority Key Identifier: keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:02:c8:c8:b2:06:31:0c:98:0f:5e:c0:f9:4e:dd:a7:01:8f: bc:c4:43:cb:c4:52:0e:4b:12:73:c2:31:ae:c0:6a:63:f6:a7: 4a:24:72:02:b2:ec:28:a2:52:0a:55:87:e6:08:cf:66:03:04: 77:b9:79:28:70:9a:0e:85:bf:34:4c:35:b5:db:64:ea:74:0b: 57:34:20:f6:ec:55:57:28:c6:dc:90:fa:5f:5e:53:22:90:82: f6:85:f3:1e:25:7b:e5:73:60:27:f8:32:af:60:7c:d5:09:aa: 4d:99:a0:72:53:06:3d:a0:af:09:aa:08:3f:59:50:3f:52:a8: 5e:59:1c:bf:c9:ca:5c:0d:92:16:6d:7a:01:2d:86:c7:5f:b7: e8:46:bb:7d:fb:5d:81:ac:70:36:ec:18:5c:4b:9f:37:41:58: 1f:d3:fc:4f:ce:32:26:02:67:95:98:93:a8:bd:b9:ba:a6:0e: bf:db:d2:0b:d9:68:cf:cf:6e:26:84:fb:a1:7c:24:ae:9b:28: 4b:4b:08:14:bc:2b:3c:e5:e4:95:d3:b1:5c:fb:bc:30:11:d9: 91:90:1c:cb:45:47:6d:62:d1:b6:0f:ca:da:bf:56:32:6e:c3: 0d:a2:7a:2b:81:ba:4b:fc:2b:72:64:8b:fa:ce:df:4d:a7:fb: 5c:3f:f3:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKDI3M0FBQUUyRTNCRTk5NEZDMjgzM0Y4NTcxMjkyM0NE NDE3QjdGQUQwHhcNMjUxMjI2MTYwOTIwWhcNMjYwMTAyMTYwOTIwWjAYMRYwFAYD VQQDDA02OTRlYjMzMS01YTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3d1MkHSMFeAcvM5RIjIaQzLFN7Sp0zZBaYsIj3QFR6/GBqGaVwfBqcEVTRfH zsyd3zrIo4+yhfV1iKsyC7gQuzQThvffIHDTjKX7u+gXf4qUoB1pDKhG6M8mL8Tj vWC9TQEc55KrX7XtKBhYGhP+xYSQipljg4G5bZw1wvELChaeqoKKX9MpRXqd2w++ WIXKAqVgWfR7r30sX+bVo3Gx2IsSRcD9JfUE4whii/nMzrPafvwpukxQOcFEaFfa Xh4R85z9YElCqeuVz+wv+SJ/BWKg0Xnc2FuMqWffuqzgxkajqZC9YvhWOjl9k9Vv oc3x+Ke67c3Jr9/3bYZx6SF3qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUb+p1Z 1lUkeTqE6sjOIs3khU3SMB8GA1UdIwQYMBaAFCc6quLjvplPwoM/hXEpI81Be3+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1VX0Nnei1GY1NranpVRjdm NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6cXE0dU8tbVVfQ2d6LUZjU2tqelVGN2Y2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1V X0Nnei1GY1NranpVRjdmNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArAsjIsgYxDJgPXsD5Tt2nAY+8xEPLxFIOSxJzwjGuwGpj9qdKJHIC suwoolIKVYfmCM9mAwR3uXkocJoOhb80TDW122TqdAtXNCD27FVXKMbckPpfXlMi kIL2hfMeJXvlc2An+DKvYHzVCapNmaByUwY9oK8Jqgg/WVA/UqheWRy/ycpcDZIW bXoBLYbHX7foRrt9+12BrHA27BhcS583QVgf0/xPzjImAmeVmJOovbm6pg6/29IL 2WjPz24mhPuhfCSumyhLSwgUvCs85eSV07Fc+7wwEdmRkBzLRUdtYtG2D8rav1Yy bsMNonorgbpL/CtyZIv6zt9Np/tcP/OB -----END CERTIFICATE-----Generated at Sun Dec 28 07:32:32 2025 by rpki-client