This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json) Hash identifier: SPhSgEoqUkCkA0/Sljx7UN0HeTYgaMhYjTWmikavo8o= Subject key identifier: 53:2A:70:96:8C:00:4A:A4:14:AF:99:8F:6B:F0:1C:03:B2:70:43:FC Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft Manifest number: 91 Signing time: Sat 27 Dec 2025 05:29:24 +0000 Manifest this update: Sat 27 Dec 2025 05:29:24 +0000 Manifest next update: Sat 03 Jan 2026 05:29:24 +0000 Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: eh7AUlPm+zKAvBXsYIZynhsDCjsIqVFRX3PjEjlTnHU=) 2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: HrcPdg7AcdEC2smU/wutkGHmrLpDpotb0GCdlOs2xPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 05:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB Validity Not Before: Dec 27 05:29:24 2025 GMT Not After : Jan 3 05:29:24 2026 GMT Subject: CN=694f6eb4-5de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:96:54:cb:eb:40:24:7b:6b:4d:8a:fa:f8:4f: ba:08:55:78:8c:b6:6c:aa:da:a0:6c:26:ae:ab:47: 67:95:87:01:3d:41:f7:4a:dd:38:4a:b4:7f:c7:bd: 06:86:f1:53:d3:e2:ba:81:46:0d:f8:b5:cc:38:3b: e5:52:61:af:a2:4a:3e:9d:b3:54:a4:37:5e:2c:d4: 27:d1:5e:34:0b:28:f7:0e:9f:ab:3c:04:33:e5:72: b7:b6:9b:6c:1a:14:8b:51:b4:e4:ee:1f:95:e5:41: b4:2b:21:25:d0:4d:1a:21:2c:7f:78:6e:ae:6d:d0: b7:71:0e:b8:42:be:41:82:cb:43:85:8c:db:76:cf: f7:17:6d:6d:71:6d:b4:98:b6:d2:42:f5:86:8d:e5: c7:42:db:5b:cf:c1:ae:aa:89:74:9e:a2:8e:a3:db: e4:32:ea:fc:17:76:ea:b8:2c:8e:88:3b:ab:d9:1a: 27:e7:87:6a:8d:a0:b5:8b:0f:fa:6f:68:97:3e:fa: b4:c1:15:32:e6:93:9d:8d:7b:7d:06:a0:7c:be:92: c8:b2:4c:2d:6b:dc:27:5c:fa:b3:21:27:0d:3d:b6: 55:38:b0:f1:01:77:f1:0f:8e:5b:b0:02:68:7f:83: 9c:5f:bb:71:49:a7:14:dd:bf:b9:53:d1:aa:33:c0: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2A:70:96:8C:00:4A:A4:14:AF:99:8F:6B:F0:1C:03:B2:70:43:FC X509v3 Authority Key Identifier: keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a0:a1:8d:a1:22:70:9a:df:59:92:d9:47:9a:86:f9:50:12: ec:dd:37:9a:7a:95:e1:a7:74:1b:29:d6:13:7d:ec:93:69:3a: c0:d9:11:9a:7f:11:9d:dd:45:fe:27:10:8f:ba:89:2a:8c:c4: 90:dd:1b:bd:2d:57:af:e1:a1:e8:f1:12:ef:e0:20:22:be:72: ad:ac:05:bd:c5:7c:03:c8:99:fa:65:5b:86:b5:2b:d4:cf:f1: 41:db:0b:26:c0:9f:b6:a2:92:c6:6e:bf:07:50:84:27:d3:b0: c3:a8:29:e7:b3:05:f0:7d:f2:24:ce:37:73:93:e6:ff:21:a8: c3:1b:c8:4c:8c:2c:b3:ba:3b:b6:a4:46:9b:c9:04:f7:d8:74: e5:f9:4c:63:2b:f4:00:ae:e7:a3:d3:e8:9e:fb:ea:3e:26:b2: 9b:e9:02:d8:65:15:d8:e1:cb:b3:55:10:b1:76:0d:a7:11:53: ee:e2:70:b6:54:a8:55:25:18:0d:57:9f:f2:9c:d1:e9:59:3e: 28:f8:b7:05:cb:97:f6:a0:05:af:c9:34:02:93:de:9f:50:47: 90:b6:a5:3d:e1:91:9c:ee:58:2a:89:e3:2e:a4:70:ff:8c:8c: 81:30:e9:7f:4c:0f:a1:ae:02:e1:74:37:67:5a:ac:59:19:54: 9f:17:77:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNUYxMTAvBgNVBAUTKDk0OTZCMUZDNjA2MzY0NDM3MjM5OENFQTMzOEI4MjI0 MjU5MTc1Q0IwHhcNMjUxMjI3MDUyOTI0WhcNMjYwMTAzMDUyOTI0WjAYMRYwFAYD VQQDDA02OTRmNmViNC01ZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkpZUy+tAJHtrTYr6+E+6CFV4jLZsqtqgbCauq0dnlYcBPUH3St04SrR/x70G hvFT0+K6gUYN+LXMODvlUmGvoko+nbNUpDdeLNQn0V40Cyj3Dp+rPAQz5XK3tpts GhSLUbTk7h+V5UG0KyEl0E0aISx/eG6ubdC3cQ64Qr5BgstDhYzbds/3F21tcW20 mLbSQvWGjeXHQttbz8Guqol0nqKOo9vkMur8F3bquCyOiDur2Ron54dqjaC1iw/6 b2iXPvq0wRUy5pOdjXt9BqB8vpLIskwta9wnXPqzIScNPbZVOLDxAXfxD45bsAJo f4OcX7txSacU3b+5U9GqM8BKiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMqcJaM AEqkFK+Zj2vwHAOycEP8MB8GA1UdIwQYMBaAFJSWsfxgY2RDcjmM6jOLgiQlkXXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I1Ri9CQTAwQzUxNDEz NjYxMUYwODJFM0M1MERDNEY5QUUwMi9sSmF4X0dCalpFTnlPWXpxTTR1Q0pDV1Jk Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xKYXhfR0JqWkVOeU9ZenFNNHVDSkNXUmRjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I1Ri9CQTAwQzUxNDEzNjYxMUYwODJFM0M1MERDNEY5QUUwMi9sSmF4X0dCalpF TnlPWXpxTTR1Q0pDV1JkY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAboKGNoSJwmt9ZktlHmob5UBLs3TeaepXhp3QbKdYTfeyTaTrA2RGa fxGd3UX+JxCPuokqjMSQ3Ru9LVev4aHo8RLv4CAivnKtrAW9xXwDyJn6ZVuGtSvU z/FB2wsmwJ+2opLGbr8HUIQn07DDqCnnswXwffIkzjdzk+b/IajDG8hMjCyzuju2 pEabyQT32HTl+UxjK/QAruej0+ie++o+JrKb6QLYZRXY4cuzVRCxdg2nEVPu4nC2 VKhVJRgNV5/ynNHpWT4o+LcFy5f2oAWvyTQCk96fUEeQtqU94ZGc7lgqieMupHD/ jIyBMOl/TA+hrgLhdDdnWqxZGVSfF3cy -----END CERTIFICATE-----Generated at Mon Dec 29 01:50:29 2025 by rpki-client