This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft File: J1fRH3t4Z0h7jocB1yrGGtMnng4.mft (raw, json) Hash identifier: 1fiaYNjXCpuYlE/mtdPR0T1VDFaqI1rxIMXQ1corQgQ= Subject key identifier: B1:F9:19:2F:83:39:92:CC:7B:3D:21:3B:F8:C7:D7:34:B1:CC:40:BE Authority key identifier: 27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E Certificate issuer: /CN=A91F757F/serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft Manifest number: 3E Signing time: Fri 19 Dec 2025 06:23:57 +0000 Manifest this update: Fri 19 Dec 2025 06:23:57 +0000 Manifest next update: Fri 26 Dec 2025 06:23:57 +0000 Files and hashes: 1: J1fRH3t4Z0h7jocB1yrGGtMnng4.crl (hash: baqELVB+ZWaGaVj4rz9/yz1sZGqykEtqCte1vPJb4oA=) 2: 7007614C829811F094DDE01BC4F9AE02.roa (hash: JlL7rH6+ZbtU8No2nd92dJUVhL2GM05xukkBhUx8vso=) 3: 707D9934829811F094DDE01BC4F9AE02.roa (hash: vpJw5tD7ahNx3MYC9rIcR/PLmpedKKSgk44Iu/sVqlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F757F, serialNumber=2757D11F7B7867487B8E8701D72AC61AD3279E0E Validity Not Before: Dec 19 06:23:57 2025 GMT Not After : Dec 26 06:23:57 2025 GMT Subject: CN=6944ef7d-7b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:a8:19:95:40:d2:a8:83:7d:77:7f:b4:69: ed:f4:b8:70:8d:37:38:40:23:20:77:9c:12:23:8e: 4f:0d:e3:2e:1a:33:65:ed:f5:ed:ba:f0:75:30:dc: b7:1b:5f:63:e6:c4:0a:81:18:43:c1:6f:4e:95:84: 64:26:c8:ee:bc:c8:b2:64:58:9c:ca:cc:a2:1c:f5: 32:5a:35:df:32:18:f2:dd:84:cd:ce:30:4a:fe:d1: 70:e4:c5:14:a7:de:a7:94:e0:89:55:72:e4:1f:a5: b3:10:84:1d:73:05:f5:e1:d7:f9:a9:df:4a:33:0c: 91:ae:42:5b:67:be:2a:6e:5c:33:20:4e:d5:89:2e: d9:25:12:79:a6:21:61:e2:d4:77:e8:1b:03:c6:b3: 5e:98:c2:4e:b7:9d:cb:e2:03:1e:81:04:b6:73:fd: e9:bf:4d:2b:22:5a:7b:34:5c:5e:7b:2a:ce:9c:a6: 13:f6:bc:f9:b0:d9:aa:0b:9e:46:d8:3d:d6:49:da: 34:e0:26:f2:da:a8:23:9f:d9:85:d7:57:3d:5c:13: 35:81:2a:51:d1:5d:e2:71:65:ba:bd:f1:af:73:84: 34:b5:ae:dc:4e:ab:3f:05:6f:35:72:b5:eb:b1:03: 73:a4:2a:18:eb:26:b3:8b:f6:c8:a4:5a:e4:ea:27: 0f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F9:19:2F:83:39:92:CC:7B:3D:21:3B:F8:C7:D7:34:B1:CC:40:BE X509v3 Authority Key Identifier: keyid:27:57:D1:1F:7B:78:67:48:7B:8E:87:01:D7:2A:C6:1A:D3:27:9E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1fRH3t4Z0h7jocB1yrGGtMnng4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F757F/A4CCDC627F6F11F0B63E4E3BC4F9AE02/J1fRH3t4Z0h7jocB1yrGGtMnng4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:98:3a:5c:5f:e0:f4:d6:ab:eb:48:38:94:67:39:17:57:43: be:e1:0a:27:62:13:99:fc:c5:e9:94:db:77:80:cb:d8:57:5c: 88:7d:c0:23:1d:bb:66:38:57:f8:df:9a:2e:42:d5:be:a0:95: 84:18:00:d5:11:96:46:d4:5c:aa:93:09:d4:ef:28:9a:37:c9: a4:04:a6:6c:68:28:a7:af:ec:d5:19:6d:90:f7:b9:48:0f:52: 6e:a2:95:b9:84:29:5e:82:1a:23:5b:37:45:06:e2:9f:c0:fb: 3f:34:45:24:2c:9c:77:6d:fe:ed:9c:fc:65:ef:11:3e:e9:b2: 30:4f:41:4e:67:63:21:6d:e1:70:78:d3:42:5d:0d:cd:87:4e: a2:2e:1b:2c:f5:ef:1b:de:c9:c6:47:06:e8:22:b2:d7:fb:72: 8d:c6:b9:e2:63:7e:37:cb:fc:60:12:d1:d5:19:50:4f:2f:a3: 60:78:d7:df:47:b5:2b:95:19:d0:e3:2a:98:94:b4:6b:99:e9: 3a:66:ee:14:5d:54:d9:b9:16:5c:bd:99:7f:a4:65:62:6e:df: fe:60:56:9f:8b:5b:b8:af:62:b1:fd:36:74:67:20:96:15:45: 57:ee:b6:cb:f1:5a:59:eb:3f:2f:70:19:dd:71:c1:91:47:0f: 65:8d:e4:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzU3RjExMC8GA1UEBRMoMjc1N0QxMUY3Qjc4Njc0ODdCOEU4NzAxRDcyQUM2MUFE MzI3OUUwRTAeFw0yNTEyMTkwNjIzNTdaFw0yNTEyMjYwNjIzNTdaMBgxFjAUBgNV BAMMDTY5NDRlZjdkLTdiMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSxKgZlUDSqIN9d3+0ae30uHCNNzhAIyB3nBIjjk8N4y4aM2Xt9e268HUw3Lcb X2PmxAqBGEPBb06VhGQmyO68yLJkWJzKzKIc9TJaNd8yGPLdhM3OMEr+0XDkxRSn 3qeU4IlVcuQfpbMQhB1zBfXh1/mp30ozDJGuQltnvipuXDMgTtWJLtklEnmmIWHi 1HfoGwPGs16Ywk63ncviAx6BBLZz/em/TSsiWns0XF57Ks6cphP2vPmw2aoLnkbY PdZJ2jTgJvLaqCOf2YXXVz1cEzWBKlHRXeJxZbq98a9zhDS1rtxOqz8FbzVyteux A3OkKhjrJrOL9sikWuTqJw9XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsfkZL4M5 ksx7PSE7+MfXNLHMQL4wHwYDVR0jBBgwFoAUJ1fRH3t4Z0h7jocB1yrGGtMnng4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTdGL0E0Q0NEQzYyN0Y2 RjExRjBCNjNFNEUzQkM0RjlBRTAyL0oxZlJIM3Q0WjBoN2pvY0IxeXJHR3RNbm5n NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjFmUkgzdDRaMGg3am9jQjF5ckdHdE1ubmc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 NTdGL0E0Q0NEQzYyN0Y2RjExRjBCNjNFNEUzQkM0RjlBRTAyL0oxZlJIM3Q0WjBo N2pvY0IxeXJHR3RNbm5nNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF2YOlxf4PTWq+tIOJRnORdXQ77hCidiE5n8xemU23eAy9hXXIh9wCMd u2Y4V/jfmi5C1b6glYQYANURlkbUXKqTCdTvKJo3yaQEpmxoKKev7NUZbZD3uUgP Um6ilbmEKV6CGiNbN0UG4p/A+z80RSQsnHdt/u2c/GXvET7psjBPQU5nYyFt4XB4 00JdDc2HTqIuGyz17xveycZHBugistf7co3GueJjfjfL/GAS0dUZUE8vo2B4199H tSuVGdDjKpiUtGuZ6Tpm7hRdVNm5Fly9mX+kZWJu3/5gVp+LW7ivYrH9NnRnIJYV RVfutsvxWlnrPy9wGd1xwZFHD2WN5Ow= -----END CERTIFICATE-----Generated at Fri Dec 19 19:24:29 2025 by rpki-client