This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft File: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft (raw, json) Hash identifier: KGfvqFFBFo4eNuTRxeUzBN/tRTzycuN8aPqdkY35zbY= Subject key identifier: 53:13:1B:55:B8:29:C2:05:AC:E4:76:89:20:9C:DA:6C:47:E1:30:BE Authority key identifier: 8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17 Certificate issuer: /CN=A91126E7/serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft Manifest number: 25 Signing time: Fri 05 Dec 2025 05:34:20 +0000 Manifest this update: Fri 05 Dec 2025 05:34:19 +0000 Manifest next update: Fri 12 Dec 2025 05:34:19 +0000 Files and hashes: 1: jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl (hash: MWZJFP2VPg8nIJ5P6zS8fau88aA8AiGUL+DSWveB7jQ=) 2: 658118DC9DD511F0B7B21741C4F9AE02.roa (hash: rVG2mMMlI46nAQV2wjCxVFoXhNfbyWdlWS1Fu6xYQuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126E7, serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317 Validity Not Before: Dec 5 05:34:19 2025 GMT Not After : Dec 12 05:34:19 2025 GMT Subject: CN=69326edb-0034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6d:3b:b2:c5:0c:88:e7:2e:fb:ab:d2:6e:9f: 00:fa:e0:9e:07:8f:a2:2e:d0:d1:17:18:75:c7:a9: 95:fc:1a:2a:4f:0f:a6:37:e6:11:8c:ff:df:6f:86: 17:89:c9:a2:73:22:18:7f:f5:ab:be:a9:ee:c0:c1: b0:b5:20:23:e2:7c:60:cb:00:96:08:c9:85:d2:a9: 14:7b:64:f4:8c:6a:1d:5d:53:f4:85:ff:5c:c2:54: 8e:05:88:1c:df:52:1b:88:a8:26:0e:c7:32:b2:bc: 24:34:e4:56:e4:9e:cb:e0:00:f5:e9:f2:bf:28:1f: 34:9f:b9:3f:7e:ec:b9:69:0f:53:6c:5f:8b:05:54: 74:92:d9:92:be:2e:df:62:fc:80:52:50:d7:25:23: 11:a5:b6:92:fc:2b:7d:dc:37:7a:db:b4:14:21:42: ca:9e:ee:bc:a9:c8:09:ca:2b:14:76:50:94:00:7e: b7:1f:27:cd:8e:45:13:d7:46:aa:6f:e6:23:89:60: 12:14:6d:2f:d9:e0:3d:10:ea:fe:e5:bb:6a:13:7d: b3:25:96:a3:9b:c0:4d:b9:10:9c:f0:d4:3f:8f:73: 77:cc:a9:e8:e9:a4:00:da:38:ff:c8:c1:3a:c7:2e: ff:6f:7b:27:87:df:19:74:b1:51:fc:8e:8b:bb:91: 00:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:13:1B:55:B8:29:C2:05:AC:E4:76:89:20:9C:DA:6C:47:E1:30:BE X509v3 Authority Key Identifier: keyid:8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:dc:b3:d9:2d:b4:ee:5c:23:10:9c:62:6c:80:d3:33:41:42: c8:ae:65:56:c4:7f:92:5e:53:29:60:ee:8c:73:47:39:6e:3f: 6b:11:4d:76:73:99:38:9b:dd:7e:f4:e1:90:ba:de:65:d5:65: 37:ac:42:b2:23:19:24:1e:84:3d:7f:bb:4a:f4:cf:d0:dd:39: bc:13:3e:7a:e3:0c:b8:8b:26:6b:d6:21:ca:91:f9:18:55:8f: 37:67:ab:68:21:97:f7:70:7d:ff:a4:14:d7:3c:e3:49:f4:eb: 49:58:dd:26:31:cd:84:fa:04:d2:07:0f:84:0c:d4:92:4b:d1: 18:c2:64:bf:49:72:2c:67:42:b2:cc:af:3e:b7:bb:ba:70:49: 64:2b:10:7e:67:49:8f:03:35:82:a1:f7:f8:21:3c:48:2b:73: 4b:6a:f8:b9:7a:78:41:62:09:5a:6d:44:c8:b5:83:a2:ca:ca: e9:cf:ac:5b:71:d3:1c:6d:95:f6:6b:c6:cd:8a:86:29:b8:5a: 01:7d:8b:fe:a0:a7:e1:ee:58:06:14:a9:23:29:51:53:bb:1d: ae:ae:19:9d:d3:dc:89:51:fd:17:bd:11:c9:b5:75:b9:cd:ae: cd:94:0e:ca:c9:e2:bd:09:2f:66:0b:73:95:d4:8e:d9:75:4c: 18:17:e2:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MjZFNzExMC8GA1UEBRMoOEM1QkMzREJFRkQ3RDdFODY0MkE4Rjg5NzlFRkI2NzNG MEUxRjMxNzAeFw0yNTEyMDUwNTM0MTlaFw0yNTEyMTIwNTM0MTlaMBgxFjAUBgNV BAMTDTY5MzI2ZWRiLTAwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdbTuyxQyI5y77q9JunwD64J4Hj6Iu0NEXGHXHqZX8GipPD6Y35hGM/99vhheJ yaJzIhh/9au+qe7AwbC1ICPifGDLAJYIyYXSqRR7ZPSMah1dU/SF/1zCVI4FiBzf UhuIqCYOxzKyvCQ05FbknsvgAPXp8r8oHzSfuT9+7LlpD1NsX4sFVHSS2ZK+Lt9i /IBSUNclIxGltpL8K33cN3rbtBQhQsqe7rypyAnKKxR2UJQAfrcfJ82ORRPXRqpv 5iOJYBIUbS/Z4D0Q6v7lu2oTfbMllqObwE25EJzw1D+Pc3fMqejppADaOP/IwTrH Lv9veyeH3xl0sVH8jou7kQAVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUxMbVbgp wgWs5HaJIJzabEfhML4wHwYDVR0jBBgwFoAUjFvD2+/X1+hkKo+Jee+2c/Dh8xcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyNkU3L0FDQjVGNzQ2OURE NDExRjBBNjlGQzYzRkM0RjlBRTAyL2pGdkQyLV9YMS1oa0tvLUplZS0yY19EaDh4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvakZ2RDItX1gxLWhrS28tSmVlLTJjX0RoOHhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy NkU3L0FDQjVGNzQ2OURENDExRjBBNjlGQzYzRkM0RjlBRTAyL2pGdkQyLV9YMS1o a0tvLUplZS0yY19EaDh4Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACncs9kttO5cIxCcYmyA0zNBQsiuZVbEf5JeUylg7oxzRzluP2sRTXZz mTib3X704ZC63mXVZTesQrIjGSQehD1/u0r0z9DdObwTPnrjDLiLJmvWIcqR+RhV jzdnq2ghl/dwff+kFNc840n060lY3SYxzYT6BNIHD4QM1JJL0RjCZL9JcixnQrLM rz63u7pwSWQrEH5nSY8DNYKh9/ghPEgrc0tq+Ll6eEFiCVptRMi1g6LKyunPrFtx 0xxtlfZrxs2Khim4WgF9i/6gp+HuWAYUqSMpUVO7Ha6uGZ3T3IlR/Re9Ecm1dbnN rs2UDsrJ4r0JL2YLc5XUjtl1TBgX4vk= -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:11 2025 by rpki-client