This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json) Hash identifier: SDWs9LeSMJeAN62N+YtjKjLHUsBGQVj4KQrzyeu+u0s= Subject key identifier: 55:C4:EE:6F:1D:18:F0:B1:66:FE:8F:87:F4:0E:EB:CB:9E:F7:AB:9D Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft Manifest number: 0162 Signing time: Fri 05 Dec 2025 02:12:51 +0000 Manifest this update: Fri 05 Dec 2025 02:12:50 +0000 Manifest next update: Fri 12 Dec 2025 02:12:50 +0000 Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: 4jm9ndqyPihH/JRfnDqK7mmFHzDUfdegLXp6u7/W9Y4=) 2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: c6SlXvh5jnzbFaQ7XL8WHzhEyzH6pjJKr/W4VmAYxxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: Dec 5 02:12:50 2025 GMT Not After : Dec 12 02:12:50 2025 GMT Subject: CN=69323fa3-dbb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1c:80:0f:d3:dd:2a:b5:29:eb:93:10:13:b0: 77:54:a3:ea:f8:f7:af:1c:a1:a6:0d:90:09:b5:c6: 1a:2f:f9:b2:91:64:9e:23:db:74:a6:29:d4:ce:9f: 8e:62:b9:fe:3e:1c:19:6e:1e:28:34:17:7b:44:9c: 14:15:8f:00:c3:38:2f:27:71:82:7a:b9:0e:33:2d: b9:c7:7e:84:cb:07:88:dc:8d:a2:a4:40:b7:e0:1e: fa:2b:58:06:cf:20:a9:67:e5:43:23:cd:1e:88:10: 37:88:5a:50:31:d8:1c:af:b8:02:f0:3e:22:b1:7b: f7:8f:fb:24:3e:46:36:9f:eb:23:1e:e0:b0:fc:14: c9:d5:28:e5:f4:b3:bc:ef:10:8a:31:cc:53:5d:58: 9d:44:74:1d:36:c6:56:6e:13:fb:3c:a2:57:80:64: db:ed:34:a2:40:66:2c:2b:2b:0a:b7:dc:a3:c5:cd: 42:d7:3e:5e:4b:41:ea:62:55:2d:9a:72:06:fa:62: 99:c5:c0:bc:09:e9:37:92:0f:3a:02:9f:f6:a4:a1: 93:7c:07:65:e5:97:99:bd:87:d7:b4:09:ef:70:9c: 0a:9f:09:f1:ba:68:e8:60:12:7e:ed:30:f6:0e:e9: 3a:28:83:80:d9:b6:b1:21:32:5c:76:ce:40:bf:79: 2e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C4:EE:6F:1D:18:F0:B1:66:FE:8F:87:F4:0E:EB:CB:9E:F7:AB:9D X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c7:0e:67:33:97:b5:d3:79:7f:3f:9f:06:df:7d:97:4a:a8: 52:69:85:58:af:00:04:cd:98:21:8c:d0:28:12:cd:0d:32:23: 03:4b:73:4c:4e:f8:e3:e1:af:c2:fb:86:55:9e:0d:92:ea:1d: 6a:42:6c:89:2f:dd:8e:54:e3:6f:30:fe:e3:cd:0c:15:c2:dd: ba:5d:37:c3:d6:0f:8b:35:84:68:c8:bf:92:76:b9:68:a9:66: eb:6e:b0:87:41:ed:81:bc:ef:31:7c:59:79:a3:0c:b6:da:4b: a8:a5:70:f7:03:98:51:95:b8:3d:61:7f:9f:26:11:c8:d6:69: eb:b9:8f:2d:0e:ea:cb:6b:46:55:6c:b3:fe:e1:5c:7e:a9:de: 2a:fe:65:ee:62:f9:25:b7:6d:e5:3d:35:8c:89:7a:e2:ac:d6: 62:42:d3:5c:a5:42:e8:6d:66:49:2e:3d:68:e9:4a:2d:51:67: 2c:64:5a:c4:99:a5:5c:28:89:4e:9a:05:4d:e4:7f:f5:e6:40: 36:50:cd:68:dc:67:73:90:51:4c:9f:f8:6d:1e:ad:4c:af:ba: cf:a6:91:1b:c4:e6:b9:e9:bc:64:94:28:cb:da:c7:35:5d:35: fb:b7:8f:b1:1f:f2:4b:62:1f:e1:49:e9:fd:c2:ac:18:be:a2: 19:e4:3b:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjUxMjA1MDIxMjUwWhcNMjUxMjEyMDIxMjUwWjAYMRYwFAYD VQQDEw02OTMyM2ZhMy1kYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xyAD9PdKrUp65MQE7B3VKPq+PevHKGmDZAJtcYaL/mykWSeI9t0pinUzp+O Yrn+PhwZbh4oNBd7RJwUFY8AwzgvJ3GCerkOMy25x36EyweI3I2ipEC34B76K1gG zyCpZ+VDI80eiBA3iFpQMdgcr7gC8D4isXv3j/skPkY2n+sjHuCw/BTJ1Sjl9LO8 7xCKMcxTXVidRHQdNsZWbhP7PKJXgGTb7TSiQGYsKysKt9yjxc1C1z5eS0HqYlUt mnIG+mKZxcC8Cek3kg86Ap/2pKGTfAdl5ZeZvYfXtAnvcJwKnwnxumjoYBJ+7TD2 Duk6KIOA2baxITJcds5Av3kuJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXE7m8d GPCxZv6Ph/QO68ue96udMB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuxw5nM5e103l/P58G332XSqhSaYVYrwAEzZghjNAoEs0NMiMDS3NM Tvjj4a/C+4ZVng2S6h1qQmyJL92OVONvMP7jzQwVwt26XTfD1g+LNYRoyL+Sdrlo qWbrbrCHQe2BvO8xfFl5owy22kuopXD3A5hRlbg9YX+fJhHI1mnruY8tDurLa0ZV bLP+4Vx+qd4q/mXuYvklt23lPTWMiXrirNZiQtNcpULobWZJLj1o6UotUWcsZFrE maVcKIlOmgVN5H/15kA2UM1o3GdzkFFMn/htHq1Mr7rPppEbxOa56bxklCjL2sc1 XTX7t4+xH/JLYh/hSen9wqwYvqIZ5DtK -----END CERTIFICATE-----Generated at Sat Dec 6 12:46:59 2025 by rpki-client