This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft File: JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft (raw, json) Hash identifier: wk32Gzl7+T8/17SAoGT9IJHzJrOIF3rqs2UKegy4QJM= Subject key identifier: DE:1B:A1:44:9A:5C:09:A4:2C:38:27:4D:C4:4E:53:0A:6C:62:C5:B4 Authority key identifier: 25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33 Certificate issuer: /CN=A91949C1/serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft Manifest number: 0117 Signing time: Fri 19 Dec 2025 03:55:22 +0000 Manifest this update: Fri 19 Dec 2025 03:55:21 +0000 Manifest next update: Fri 26 Dec 2025 03:55:21 +0000 Files and hashes: 1: JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl (hash: m9IfMc244vFXIoHmmIRfsRTsiMuBe4Zj1OvrVAUZtkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933 Validity Not Before: Dec 19 03:55:21 2025 GMT Not After : Dec 26 03:55:21 2025 GMT Subject: CN=6944ccaa-b4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:46:d0:9b:48:9c:c0:ed:c6:af:2e:c4:af: b8:e8:2e:7e:b9:86:0f:af:3c:6e:9f:0e:fd:7f:9f: 78:8d:e6:7a:b6:08:9c:40:cd:15:35:2c:bf:78:c0: 73:be:24:46:fb:58:87:4a:c2:ac:b3:11:54:0d:c6: 3b:a4:3f:02:cc:b3:ff:41:87:da:f0:97:de:78:7d: c1:87:56:6c:fa:f0:b6:92:29:ff:28:8c:f6:f4:21: e2:55:12:7b:f1:f1:63:68:eb:45:23:4d:91:82:21: 59:fe:40:ff:df:d5:e1:71:19:35:30:b8:5d:15:0d: 06:3b:0f:05:3b:7b:3e:dd:47:1d:68:08:51:3e:9c: 7a:a7:74:1c:40:cb:08:11:66:d2:8b:cd:15:7b:1b: 02:06:55:4b:6e:48:e0:36:34:dd:47:a2:ac:d3:07: 7a:42:4e:1e:80:12:46:68:2a:de:2b:6f:0f:07:00: d3:7d:27:62:b2:9c:7c:6a:94:35:b8:ec:c1:d7:00: fb:c3:27:a5:9c:af:f6:8e:e4:bd:02:cb:99:2d:eb: f2:6e:0c:3f:7d:96:2a:b5:05:b2:bb:ba:bc:67:e5: 76:99:88:26:e8:32:ae:74:04:c1:b6:55:6d:1a:49: a2:f1:ec:ad:b5:51:d4:1b:cd:f8:95:9c:4b:bf:0d: ba:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1B:A1:44:9A:5C:09:A4:2C:38:27:4D:C4:4E:53:0A:6C:62:C5:B4 X509v3 Authority Key Identifier: keyid:25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c8:d7:81:1b:c9:f7:4e:c3:fb:58:5c:0e:3d:6f:69:4a:03: 3a:42:74:ab:1a:24:c7:cc:06:e7:06:c7:7a:96:7e:eb:84:12: c7:05:3b:fa:a1:84:f7:4c:22:4c:db:c9:d2:1c:3a:53:e2:68: 99:c7:6b:c4:68:dc:9b:e7:71:f8:cf:60:00:86:02:30:3c:12: 50:2e:21:c1:63:32:b0:1d:a2:12:82:a8:b6:f5:2f:76:2e:16: 98:fc:57:9f:70:02:30:e8:02:11:4f:d5:c0:99:6b:59:2e:7c: 12:25:84:76:d9:4e:cd:29:a4:2d:ba:40:01:fd:58:03:9a:ee: 87:b5:3c:e4:e8:31:40:db:56:50:33:7d:b6:bb:7f:96:b7:8d: e4:4b:8a:b3:15:14:7e:8b:07:88:f0:05:ce:ad:f9:3a:1d:41: 1b:94:fe:4a:48:22:dd:92:87:39:43:d9:03:28:2e:d0:54:07: fb:dd:bf:63:07:cf:a8:d7:cf:87:af:8f:4d:ea:94:d8:97:64: 41:41:9b:92:47:e5:18:1d:50:8c:ee:24:38:df:05:90:37:31: 05:9d:88:37:ea:e1:0c:b5:95:08:5d:42:68:31:8d:fc:94:e1: 04:9c:d0:25:58:6d:40:1c:01:04:38:39:4a:67:c6:64:05:e2: e6:1d:4b:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKDI1ODE3RjhBMDU5MTJFMkQ2QkQ1OUJFRjFGOTUxMzdF OTNEQzk5MzMwHhcNMjUxMjE5MDM1NTIxWhcNMjUxMjI2MDM1NTIxWjAYMRYwFAYD VQQDDA02OTQ0Y2NhYS1iNGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YlG0JtInMDtxq8uxK+46C5+uYYPrzxunw79f594jeZ6tgicQM0VNSy/eMBz viRG+1iHSsKssxFUDcY7pD8CzLP/QYfa8JfeeH3Bh1Zs+vC2kin/KIz29CHiVRJ7 8fFjaOtFI02RgiFZ/kD/39XhcRk1MLhdFQ0GOw8FO3s+3UcdaAhRPpx6p3QcQMsI EWbSi80VexsCBlVLbkjgNjTdR6Ks0wd6Qk4egBJGaCreK28PBwDTfSdispx8apQ1 uOzB1wD7wyelnK/2juS9AsuZLevybgw/fZYqtQWyu7q8Z+V2mYgm6DKudATBtlVt Gkmi8eyttVHUG834lZxLvw26eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4boUSa XAmkLDgnTcROUwpsYsW0MB8GA1UdIwQYMBaAFCWBf4oFkS4ta9Wb7x+VE36T3Jkz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8xNDMyM0Q3NDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi9KWUZfaWdXUkxpMXIxWnZ2SDVVVGZwUGNt VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZRl9pZ1dSTGkxcjFadnZINVVUZnBQY21UTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8xNDMyM0Q3NDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi9KWUZfaWdXUkxp MXIxWnZ2SDVVVGZwUGNtVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOyNeBG8n3TsP7WFwOPW9pSgM6QnSrGiTHzAbnBsd6ln7rhBLHBTv6 oYT3TCJM28nSHDpT4miZx2vEaNyb53H4z2AAhgIwPBJQLiHBYzKwHaISgqi29S92 LhaY/FefcAIw6AIRT9XAmWtZLnwSJYR22U7NKaQtukAB/VgDmu6HtTzk6DFA21ZQ M322u3+Wt43kS4qzFRR+iweI8AXOrfk6HUEblP5KSCLdkoc5Q9kDKC7QVAf73b9j B8+o18+Hr49N6pTYl2RBQZuSR+UYHVCM7iQ43wWQNzEFnYg36uEMtZUIXUJoMY38 lOEEnNAlWG1AHAEEODlKZ8ZkBeLmHUtb -----END CERTIFICATE-----Generated at Sat Dec 20 22:21:41 2025 by rpki-client