This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: LzQlRCLNiq64dmsV9axxCemR3sHyA0TyzE1jLentPXs= Subject key identifier: 80:37:AD:D0:24:39:66:26:63:72:2A:EB:C8:8E:9C:9A:B6:F9:D8:7F Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 3523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 3505 Signing time: Thu 18 Dec 2025 15:11:19 +0000 Manifest this update: Thu 18 Dec 2025 15:11:18 +0000 Manifest next update: Thu 25 Dec 2025 15:11:18 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: oKO/EF91C3adUZzkOyW01+UKHapyzEOuIsqNKSg0Xj8=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 6cC6tQeQd87kGRdq2QumL1i69ExtEnVSm6iU0IQLUOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13603 (0x3523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Dec 18 15:11:18 2025 GMT Not After : Dec 25 15:11:18 2025 GMT Subject: CN=69441996-6f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:e6:52:c6:44:35:18:48:ad:f6:9d:fb:87: a8:d6:b0:a6:96:d9:e2:12:eb:e5:7d:9c:91:89:49: c9:53:3a:9b:ed:09:4f:8f:8d:e1:fa:7e:c7:f7:58: ed:ae:7a:99:dc:39:00:31:3f:5d:dd:18:ab:9f:4d: 25:08:1d:6f:2d:e6:3c:b7:44:e2:f0:00:08:c1:32: 42:6b:31:46:62:9f:9d:26:64:54:84:b5:6c:7b:4d: ec:87:ff:fd:b5:9e:7b:62:79:51:8a:49:3d:e8:00: 34:a2:84:5b:9d:27:60:13:60:bf:d1:9e:3b:07:e0: 4b:5c:3b:81:55:7f:e5:46:43:7f:02:8e:e4:9c:53: cb:aa:e6:76:fe:85:98:c9:e1:c0:03:2f:66:d0:ec: 88:89:70:f3:81:29:eb:ad:ee:d7:4c:2a:a6:fe:63: 21:c0:fb:e2:cb:17:3e:32:1b:e1:60:46:d3:f9:35: 26:6c:fe:4d:78:0b:82:14:5b:94:be:1c:4e:0e:8c: 0c:9e:3f:39:59:29:f0:7a:96:44:44:85:37:99:47: e8:b5:39:05:ce:4d:9a:d5:fa:18:7c:5a:3e:cb:8d: a0:4f:cd:b1:bc:d8:e1:77:3e:0e:55:26:c1:e5:8c: cb:30:1c:f3:b3:bf:b1:fa:04:b2:81:3a:76:fd:2f: cf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:37:AD:D0:24:39:66:26:63:72:2A:EB:C8:8E:9C:9A:B6:F9:D8:7F X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:eb:9c:09:76:94:df:49:cd:f7:07:61:ad:1d:f5:08:5a:26: c8:80:c3:3a:2e:01:1a:b2:4b:19:f4:2b:d7:0b:3f:a8:bc:ad: 42:2a:5f:85:58:a3:6d:ae:6c:34:17:37:20:36:b7:55:b7:ed: 2e:d9:fa:e2:a9:42:30:69:fb:5a:13:f9:7f:0e:3e:35:f9:2c: 14:ce:b5:c8:68:8c:20:bc:e5:61:e4:4d:ea:1c:cb:ca:4a:06: f7:c7:0f:c3:04:a2:60:c2:34:ad:a4:a0:c7:ec:88:ca:21:14: 60:d2:f3:87:ec:4d:70:4a:e8:fa:4e:a5:b2:45:f8:17:c2:d9: 16:90:1c:33:03:2a:5d:08:43:b8:65:de:42:c5:a8:db:4c:b0: 5e:18:c5:60:70:07:4b:bd:c9:6a:6a:1c:47:e3:1f:30:e7:e9: 48:aa:cd:e0:96:aa:74:52:c0:77:6d:d4:31:aa:1c:16:b9:ba: d7:03:f0:20:4e:39:1c:95:a3:9d:34:61:0c:f8:c9:25:7b:90: ef:79:e1:67:df:09:10:e5:44:bd:c9:89:18:8a:ec:34:ee:e4: 7c:8b:50:72:44:ea:c7:ce:00:7e:4b:28:bb:41:76:67:9e:fe: c2:6b:19:b6:bf:77:8c:d1:3c:e4:40:7b:80:71:9c:7e:c0:6d: 2c:3c:44:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjUxMjE4MTUxMTE4WhcNMjUxMjI1MTUxMTE4WjAYMRYwFAYD VQQDDA02OTQ0MTk5Ni02Zjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VjmUsZENRhIrfad+4eo1rCmltniEuvlfZyRiUnJUzqb7QlPj43h+n7H91jt rnqZ3DkAMT9d3Rirn00lCB1vLeY8t0Ti8AAIwTJCazFGYp+dJmRUhLVse03sh//9 tZ57YnlRikk96AA0ooRbnSdgE2C/0Z47B+BLXDuBVX/lRkN/Ao7knFPLquZ2/oWY yeHAAy9m0OyIiXDzgSnrre7XTCqm/mMhwPviyxc+MhvhYEbT+TUmbP5NeAuCFFuU vhxODowMnj85WSnwepZERIU3mUfotTkFzk2a1foYfFo+y42gT82xvNjhdz4OVSbB 5YzLMBzzs7+x+gSygTp2/S/PfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIA3rdAk OWYmY3Iq68iOnJq2+dh/MB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp65wJdpTfSc33B2GtHfUIWibIgMM6LgEasksZ9CvXCz+ovK1CKl+F WKNtrmw0FzcgNrdVt+0u2friqUIwaftaE/l/Dj41+SwUzrXIaIwgvOVh5E3qHMvK Sgb3xw/DBKJgwjStpKDH7IjKIRRg0vOH7E1wSuj6TqWyRfgXwtkWkBwzAypdCEO4 Zd5CxajbTLBeGMVgcAdLvclqahxH4x8w5+lIqs3glqp0UsB3bdQxqhwWubrXA/Ag TjkclaOdNGEM+Mkle5DveeFn3wkQ5US9yYkYiuw07uR8i1ByROrHzgB+Syi7QXZn nv7Caxm2v3eM0TzkQHuAcZx+wG0sPERD -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:03 2025 by rpki-client