This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json) Hash identifier: X1fZ9bYrSufiL+Nv784vgTDDe52wgZOw+T8SBaTXe6c= Subject key identifier: 4C:EF:DE:37:58:F3:26:4F:03:89:81:3E:A3:F4:7E:23:3F:95:95:E5 Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft Manifest number: 0318 Signing time: Sun 21 Dec 2025 00:20:00 +0000 Manifest this update: Sun 21 Dec 2025 00:20:00 +0000 Manifest next update: Sun 28 Dec 2025 00:20:00 +0000 Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: gYT6O1k4Tc8IQD4Kin3+xDrb7/WAX5wFt8qEcWPHJ60=) 2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: G/i4Pg8jdMHmXjQNkM+eJFlsVzQq6gbZlmc97MQExQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Validity Not Before: Dec 21 00:20:00 2025 GMT Not After : Dec 28 00:20:00 2025 GMT Subject: CN=69473d30-42ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:99:1c:6c:2f:74:f9:64:15:8d:02:9a:4a:8b: 13:ad:e2:22:b9:7f:7b:ef:9a:85:a3:89:67:bd:7d: b3:f1:57:73:7d:c2:a9:3b:c6:1c:32:9d:3a:3e:90: fe:19:66:73:96:95:e1:17:10:0a:17:e0:16:2f:9f: c4:55:5f:59:66:6c:cd:fb:0f:65:59:99:82:90:ea: 33:44:69:43:77:87:df:ee:c1:b5:aa:e6:48:a5:bb: b1:35:53:04:a2:77:db:27:ca:95:bf:bc:76:3d:f5: 9b:39:7c:e2:ea:9d:43:a5:4c:cb:01:f2:eb:c4:b1: b2:30:5c:48:ff:d5:ba:9a:5c:d1:ee:e5:c5:a0:68: f9:5d:59:1d:b5:1a:52:60:eb:ea:a6:e5:93:f9:2a: 01:24:d8:40:2a:00:e4:00:a8:ec:a4:b8:9b:b1:7b: 5c:47:6c:c3:29:00:35:0d:50:f7:9f:6a:f4:ce:c1: 6b:2c:e1:ea:f2:b5:38:8b:ae:b8:fe:b7:4d:2f:8f: aa:80:35:86:c8:5b:b0:e8:20:82:51:c4:4d:a9:de: c6:7f:fc:fa:5e:a3:0d:14:ba:ba:8f:df:65:bf:51: 7c:06:b4:b1:06:47:a4:02:b9:f0:37:33:62:42:66: cc:f6:c6:55:14:ac:5d:65:69:de:2a:39:37:77:e2: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EF:DE:37:58:F3:26:4F:03:89:81:3E:A3:F4:7E:23:3F:95:95:E5 X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:21:10:ad:44:6e:b8:b6:e1:aa:dd:69:7f:6e:b9:48:b6:89: 0f:a6:60:94:f6:94:01:dd:56:ee:be:4f:9e:89:eb:45:86:2f: e8:b1:fb:8c:49:8f:60:d4:6b:3c:fe:f7:f2:26:4d:d5:9a:87: d7:f6:0f:13:3c:23:a0:b6:d5:65:85:2e:93:ce:06:92:60:d1: 61:df:38:83:b6:67:60:b0:be:c7:66:b3:db:34:26:da:ca:ce: a6:88:83:9e:2a:3b:77:d7:59:db:f4:e2:4a:59:37:70:66:ac: 16:8b:d3:25:e0:2f:b3:11:5b:f9:9f:f2:af:13:52:31:79:97: 68:70:23:9b:0f:6d:84:f1:fe:40:fc:57:af:f7:2e:70:40:32: 55:12:31:f8:9d:5a:bc:b1:e1:e8:51:77:9b:a5:33:54:a7:7a: 65:16:75:40:80:19:40:29:fd:c2:35:fd:77:43:2a:8b:18:e9: cd:d3:3e:6e:46:a0:dd:21:e9:d8:d9:0c:99:56:30:e4:8a:f5: c2:5b:ed:8a:24:1f:81:0a:96:3d:2f:5c:17:51:28:60:2a:74: a8:a8:0a:74:49:fe:92:97:97:57:59:c3:8b:e0:38:6f:e1:54: be:73:38:9e:80:5f:ee:39:00:4e:68:da:68:ea:2f:56:1d:ba: df:66:f2:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjUxMjIxMDAyMDAwWhcNMjUxMjI4MDAyMDAwWjAYMRYwFAYD VQQDDA02OTQ3M2QzMC00MmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5kcbC90+WQVjQKaSosTreIiuX9775qFo4lnvX2z8VdzfcKpO8YcMp06PpD+ GWZzlpXhFxAKF+AWL5/EVV9ZZmzN+w9lWZmCkOozRGlDd4ff7sG1quZIpbuxNVME onfbJ8qVv7x2PfWbOXzi6p1DpUzLAfLrxLGyMFxI/9W6mlzR7uXFoGj5XVkdtRpS YOvqpuWT+SoBJNhAKgDkAKjspLibsXtcR2zDKQA1DVD3n2r0zsFrLOHq8rU4i664 /rdNL4+qgDWGyFuw6CCCUcRNqd7Gf/z6XqMNFLq6j99lv1F8BrSxBkekArnwNzNi QmbM9sZVFKxdZWneKjk3d+LRlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzv3jdY 8yZPA4mBPqP0fiM/lZXlMB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDIRCtRG64tuGq3Wl/brlItokPpmCU9pQB3Vbuvk+eietFhi/osfuM SY9g1Gs8/vfyJk3VmofX9g8TPCOgttVlhS6TzgaSYNFh3ziDtmdgsL7HZrPbNCba ys6miIOeKjt311nb9OJKWTdwZqwWi9Ml4C+zEVv5n/KvE1IxeZdocCObD22E8f5A /Fev9y5wQDJVEjH4nVq8seHoUXebpTNUp3plFnVAgBlAKf3CNf13QyqLGOnN0z5u RqDdIenY2QyZVjDkivXCW+2KJB+BCpY9L1wXUShgKnSoqAp0Sf6Sl5dXWcOL4Dhv 4VS+cziegF/uOQBOaNpo6i9WHbrfZvJE -----END CERTIFICATE-----Generated at Sun Dec 21 16:03:02 2025 by rpki-client