This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json) Hash identifier: vUTBb3z+/Kf5BTa6TQ7TvF6lS3F2oMtuZZdJIxZrMok= Subject key identifier: 40:38:D1:82:DB:4B:6C:6A:D0:A2:84:80:69:E1:D0:48:56:D5:6E:CD Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Certificate serial: 09C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft Manifest number: 09A5 Signing time: Thu 04 Dec 2025 19:18:06 +0000 Manifest this update: Thu 04 Dec 2025 19:18:05 +0000 Manifest next update: Thu 11 Dec 2025 19:18:05 +0000 Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: l+JSIpPZ10gvlowb2u6MuFOeb58nDXw0TVjtxXF5PU4=) 2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: X16lFY6K2nhljbiLaCzlwi3FHh2sWAR/KpBd/NkhGQQ=) 3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 5iCZA8jYlZk3gHKxMQWGtU7Eku76azBHbjf03/KNSIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Validity Not Before: Dec 4 19:18:05 2025 GMT Not After : Dec 11 19:18:05 2025 GMT Subject: CN=6931de6d-b132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:65:b4:6b:57:0c:f3:49:8b:ff:6c:e2:0a: ec:68:c6:c6:ba:c9:5d:5e:15:d2:4b:38:11:20:f2: 2d:de:54:55:6d:b9:d8:f3:11:fa:2d:a1:f7:7b:84: a6:7f:cf:03:57:3c:1e:e3:86:2d:d9:c6:07:99:35: ed:4b:96:b4:35:61:6b:cb:28:09:42:47:d2:76:85: 5d:70:ad:24:f7:b2:26:18:34:8b:78:51:72:70:18: c8:d3:b6:5c:5e:38:ab:8e:37:9f:77:07:66:6e:ac: b1:c7:b2:5c:58:4c:b0:29:6a:f8:bf:f4:ab:b7:6f: cf:44:38:83:d7:6f:1d:aa:a1:b2:d3:a0:03:6a:be: 3e:2f:74:ba:84:45:d3:38:34:fb:62:7e:f9:ab:dc: 61:c6:6d:19:8f:9a:21:ad:8d:23:6d:b8:ee:7c:e2: 97:8d:0c:d6:31:5a:f2:d7:6c:d0:b9:4b:08:77:f0: f8:76:16:01:f8:50:ef:c8:26:9c:98:47:2a:ea:42: 4a:c5:4e:8b:0e:9c:16:3b:27:ee:32:77:45:63:16: 54:7a:a4:77:1d:a3:8f:31:11:7a:0d:2a:f9:b0:f0: 64:08:1e:50:a7:67:5f:85:7a:dd:9e:9c:10:38:0e: 3c:23:0e:69:09:53:d1:9c:19:f7:5a:b3:dc:44:62: a3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:38:D1:82:DB:4B:6C:6A:D0:A2:84:80:69:E1:D0:48:56:D5:6E:CD X509v3 Authority Key Identifier: keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b6:83:5d:71:bc:5d:3b:d9:81:b7:7e:68:41:78:96:19:42: 55:25:73:47:93:73:7d:dc:9d:37:5b:00:6d:f8:33:66:1b:60: 7f:52:bc:c7:86:2d:4f:4e:d5:10:08:a2:bb:27:63:d8:01:2c: 60:f8:e6:6d:0f:37:a7:48:33:40:59:60:22:91:49:2a:c2:74: 30:79:2d:e9:32:3b:29:51:d9:6c:a1:69:3c:e0:ad:f2:f7:c4: ce:fa:8a:39:63:3d:af:25:22:e6:d3:37:67:dc:b8:fc:4e:1d: d3:88:5a:cf:90:bb:90:52:25:ee:aa:18:bf:c7:37:4d:d9:85: 57:16:d1:c9:c1:ff:2c:03:5a:c8:b5:74:09:d8:28:cb:17:96: 3a:dd:00:4c:76:4e:b9:c1:2f:28:06:f7:b7:fc:08:95:14:4e: 97:2f:c7:22:f4:e3:3e:f0:50:2c:86:e6:d6:d2:01:eb:07:8f: eb:63:5a:ac:4b:d2:ca:44:3f:eb:19:fa:31:e6:80:d9:d5:80: df:5d:c4:64:a2:5d:fe:a1:6e:7b:91:28:16:30:3b:0b:27:1a: f9:c3:f1:bd:b2:29:3c:12:1a:b2:26:61:63:74:c4:77:a7:a9: 00:ad:0a:51:a2:46:68:99:ae:04:2a:81:15:23:31:da:23:3a: 96:38:18:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC RUM3MDU0NDEwHhcNMjUxMjA0MTkxODA1WhcNMjUxMjExMTkxODA1WjAYMRYwFAYD VQQDEw02OTMxZGU2ZC1iMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SRltGtXDPNJi/9s4grsaMbGusldXhXSSzgRIPIt3lRVbbnY8xH6LaH3e4Sm f88DVzwe44Yt2cYHmTXtS5a0NWFryygJQkfSdoVdcK0k97ImGDSLeFFycBjI07Zc Xjirjjefdwdmbqyxx7JcWEywKWr4v/Srt2/PRDiD128dqqGy06ADar4+L3S6hEXT ODT7Yn75q9xhxm0Zj5ohrY0jbbjufOKXjQzWMVry12zQuUsId/D4dhYB+FDvyCac mEcq6kJKxU6LDpwWOyfuMndFYxZUeqR3HaOPMRF6DSr5sPBkCB5Qp2dfhXrdnpwQ OA48Iw5pCVPRnBn3WrPcRGKjmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEA40YLb S2xq0KKEgGnh0EhW1W7NMB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3 RG5EN215dlVBSnkteHdWRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNtoNdcbxdO9mBt35oQXiWGUJVJXNHk3N93J03WwBt+DNmG2B/UrzH hi1PTtUQCKK7J2PYASxg+OZtDzenSDNAWWAikUkqwnQweS3pMjspUdlsoWk84K3y 98TO+oo5Yz2vJSLm0zdn3Lj8Th3TiFrPkLuQUiXuqhi/xzdN2YVXFtHJwf8sA1rI tXQJ2CjLF5Y63QBMdk65wS8oBve3/AiVFE6XL8ci9OM+8FAshubW0gHrB4/rY1qs S9LKRD/rGfox5oDZ1YDfXcRkol3+oW57kSgWMDsLJxr5w/G9sik8EhqyJmFjdMR3 p6kArQpRokZoma4EKoEVIzHaIzqWOBi+ -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:55 2025 by rpki-client