This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft File: J3d5rGk2otMhSl8XQCE_25JWxqM.mft (raw, json) Hash identifier: u09w/hA89gKU7o9FfimUqrJZpybhtAkuDdl9enN/Ep4= Subject key identifier: 17:8D:65:C5:DF:7C:1A:93:03:25:DB:55:E8:0A:9C:77:2A:E9:27:B3 Authority key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3 Certificate issuer: /CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3 Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft Manifest number: 02DF Signing time: Sat 06 Dec 2025 23:52:12 +0000 Manifest this update: Sat 06 Dec 2025 23:52:12 +0000 Manifest next update: Sat 13 Dec 2025 23:52:12 +0000 Files and hashes: 1: J3d5rGk2otMhSl8XQCE_25JWxqM.crl (hash: QGVMQFSu78IQ73cjTWMlNhLZz9QOMLUDWMzURCnnigQ=) 2: 2841A0CE0BE111ED9E3AA135C4F9AE02.roa (hash: hJkxXQfC6FPhKQvUl8F7nqWwJZPrWQsil7QshGWSWw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91770B7, serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3 Validity Not Before: Dec 6 23:52:12 2025 GMT Not After : Dec 13 23:52:12 2025 GMT Subject: CN=6934c1ac-627e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:22:94:40:09:79:f8:f1:57:35:74:05:37: ed:c3:8e:97:3d:dd:b8:bb:d2:f4:2f:a6:c1:e3:db: 6a:e3:3e:2b:8e:c1:41:25:27:aa:87:63:f9:11:8f: 85:6e:55:5b:18:25:ab:0f:08:d5:06:ca:48:60:a4: cb:a0:18:0a:64:5a:e0:a2:eb:b4:5b:aa:45:50:8d: 33:e5:bb:30:22:7d:fd:51:37:4b:ee:6a:80:d2:82: 44:a9:55:a6:c5:ff:7d:ea:4e:52:0e:2b:89:25:69: bf:5d:b5:50:dd:34:76:51:59:de:f8:95:20:d6:99: 36:9f:90:9d:89:98:fc:49:53:0d:ad:ef:f7:fe:24: 01:6d:6d:fb:4f:d7:b2:5e:35:1c:8a:9a:1a:69:9a: 69:1b:54:f9:02:40:56:43:9a:62:a2:fa:a9:6d:4b: c7:1b:ac:cd:75:cd:e1:a2:ba:02:30:5c:c0:72:7b: f8:12:8c:f6:f1:07:ed:c4:3a:82:46:d9:07:b1:00: 37:c8:3f:8d:a8:db:a4:91:9e:b7:0c:cc:e0:cb:19: 9a:7e:ea:f8:e4:14:76:20:8c:f0:94:5f:70:aa:4f: 9a:27:31:35:17:19:22:39:29:66:26:2e:8a:c0:96: d0:6f:e0:4e:0f:ec:de:d1:15:bb:13:50:22:0d:fb: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8D:65:C5:DF:7C:1A:93:03:25:DB:55:E8:0A:9C:77:2A:E9:27:B3 X509v3 Authority Key Identifier: keyid:27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:bb:71:ac:9b:58:5a:4b:b7:c7:e9:80:cc:e9:5a:e7:3a:22: 5a:f1:0a:4a:2b:36:57:1e:cb:c8:51:d1:88:1e:50:e9:8b:c2: 1f:2c:14:44:a7:e5:6b:c8:b4:16:e9:55:99:fe:b3:bc:2b:1d: 5d:77:2e:8f:43:e3:4c:8b:de:5c:32:fc:1a:15:1d:c2:ad:ab: be:99:84:c9:0e:89:5a:6c:32:69:b7:9a:28:bf:ae:79:91:49: 16:80:96:49:5d:dc:82:b5:3f:46:65:31:af:e9:b8:f2:ea:d0: 93:84:71:7a:fe:4b:f2:4f:08:79:ee:0d:b4:4b:e9:d9:db:2c: be:7c:14:4b:1e:b8:19:26:7d:72:0c:6e:82:c4:f0:29:69:e3: 21:97:eb:1d:56:56:31:c2:aa:27:bb:56:ae:76:f8:37:7e:73: 5d:d2:46:63:6e:02:79:47:83:ca:b1:0c:5c:bb:68:08:4d:80: 32:ef:5a:71:3f:dd:f7:5d:34:9f:15:26:65:2b:cd:ec:29:44: da:61:8f:0d:6a:27:56:bb:40:5a:2d:01:5a:f4:40:f1:fa:39: 40:59:cd:3c:ac:64:e5:8e:84:48:3c:46:ad:e6:83:36:65:ff: ca:d2:8c:80:59:ef:84:25:bb:22:b4:ae:2d:8b:39:2f:a8:40: cd:d8:02:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcwQjcxMTAvBgNVBAUTKDI3Nzc3OUFDNjkzNkEyRDMyMTRBNUYxNzQwMjEzRkRC OTI1NkM2QTMwHhcNMjUxMjA2MjM1MjEyWhcNMjUxMjEzMjM1MjEyWjAYMRYwFAYD VQQDEw02OTM0YzFhYy02MjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXoilEAJefjxVzV0BTftw46XPd24u9L0L6bB49tq4z4rjsFBJSeqh2P5EY+F blVbGCWrDwjVBspIYKTLoBgKZFrgouu0W6pFUI0z5bswIn39UTdL7mqA0oJEqVWm xf996k5SDiuJJWm/XbVQ3TR2UVne+JUg1pk2n5CdiZj8SVMNre/3/iQBbW37T9ey XjUcipoaaZppG1T5AkBWQ5piovqpbUvHG6zNdc3horoCMFzAcnv4Eoz28QftxDqC RtkHsQA3yD+NqNukkZ63DMzgyxmafur45BR2IIzwlF9wqk+aJzE1FxkiOSlmJi6K wJbQb+BOD+ze0RW7E1AiDfu2dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeNZcXf fBqTAyXbVegKnHcq6SezMB8GA1UdIwQYMBaAFCd3eaxpNqLTIUpfF0AhP9uSVsaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzBCNy9BNTI2NEVFMDBC REQxMUVEOUFCOUVDMkJDNEY5QUUwMi9KM2Q1ckdrMm90TWhTbDhYUUNFXzI1Sld4 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozZDVyR2syb3RNaFNsOFhRQ0VfMjVKV3hxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzBCNy9BNTI2NEVFMDBCREQxMUVEOUFCOUVDMkJDNEY5QUUwMi9KM2Q1ckdrMm90 TWhTbDhYUUNFXzI1Sld4cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALu3Gsm1haS7fH6YDM6VrnOiJa8QpKKzZXHsvIUdGIHlDpi8IfLBRE p+VryLQW6VWZ/rO8Kx1ddy6PQ+NMi95cMvwaFR3Crau+mYTJDolabDJpt5oov655 kUkWgJZJXdyCtT9GZTGv6bjy6tCThHF6/kvyTwh57g20S+nZ2yy+fBRLHrgZJn1y DG6CxPApaeMhl+sdVlYxwqonu1audvg3fnNd0kZjbgJ5R4PKsQxcu2gITYAy71px P933XTSfFSZlK83sKUTaYY8NaidWu0BaLQFa9EDx+jlAWc08rGTljoRIPEat5oM2 Zf/K0oyAWe+EJbsitK4tizkvqEDN2AID -----END CERTIFICATE-----Generated at Mon Dec 8 09:21:19 2025 by rpki-client