This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: ebqJoefQkHLjjDuJamwpO9dH2oNAQ7c3hnlPLYTOlA0= Subject key identifier: BB:BF:FA:5C:11:35:B7:ED:A6:CF:BE:78:02:BE:B5:33:C1:33:02:BE Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 03A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 037C Signing time: Sun 25 Jan 2026 00:05:54 +0000 Manifest this update: Sun 25 Jan 2026 00:05:53 +0000 Manifest next update: Sun 01 Feb 2026 00:05:53 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: c0TPwt3K2oS03+XrcLR5ohqNl2ggg2/aRHeK+hRtwg8=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: ww4opZQiRIVmFBO4mjZwE04Iiig3sSAh564SMCvzMW4=) 3: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: AZKwm5oe/DltOrJCA0wsNTWeK57n+QgiIhxKKU4O/m8=) 4: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: fhmajm7HssmZQQ+TdhTV2S2xDowh4PJ55/63l3DKRIQ=) 5: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: qcu/mbC7NJdQDGnbXsbmPKN3p+yIRG8W/RKMUuopFVM=) 6: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: mTsfTB0hQKnqCt7WStrUgcMeLzivZL7jZCZ4ciO+4tQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Jan 25 00:05:53 2026 GMT Not After : Feb 1 00:05:53 2026 GMT Subject: CN=69755e61-8c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:af:51:9e:11:bb:01:9d:7b:b3:7b:e2:39: 94:9c:12:3a:6f:b8:b9:a4:14:84:fa:68:03:74:f7: 33:a4:b5:c3:63:02:02:4f:4f:4a:bb:0d:72:6b:b6: 8b:53:20:df:b6:23:b1:49:3a:f3:ea:28:03:be:29: 15:9f:38:7f:ce:3b:f1:00:d9:8e:87:ac:bf:f7:ae: 9c:a0:98:be:05:5c:6a:0d:25:66:96:01:ab:2f:7d: 6f:ff:57:3c:d8:96:ea:ea:fc:5e:20:f9:75:8f:3f: 7b:32:f3:7b:d2:db:ef:26:05:3d:2d:fe:c3:91:95: 3d:ad:aa:b6:3a:03:ce:f9:12:b6:a0:54:51:98:40: 33:fe:70:a7:90:83:30:e7:54:87:3a:a7:ac:98:c2: 81:b1:09:a9:21:dd:04:7c:22:59:50:e1:9b:58:df: 1b:db:9a:b2:a6:ac:d6:25:42:ab:51:bc:d3:0c:1f: 8a:0c:c4:ff:5c:c5:eb:0a:69:89:96:ec:5f:6c:3b: 9f:d8:39:70:9a:58:f0:c1:d7:90:9e:ff:2c:4c:4d: 2b:64:3f:c9:93:10:0c:11:a2:60:d3:4b:9c:ca:bb: 3d:f1:4c:d3:42:fd:08:a9:cf:fc:09:d1:7c:a8:a1: ce:e4:e1:e8:ab:f2:26:c4:f8:5f:c5:42:ba:52:ae: 39:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BF:FA:5C:11:35:B7:ED:A6:CF:BE:78:02:BE:B5:33:C1:33:02:BE X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:69:36:66:3c:92:1a:65:4f:51:b7:95:33:74:30:f1:a1:10: 8e:96:e7:25:44:a2:4a:26:e7:bc:d6:4f:c6:13:e4:58:04:ca: 82:64:df:bf:43:66:3d:b7:60:96:9f:21:c0:a0:53:32:09:27: 88:72:7c:d8:cf:42:70:a7:62:c0:a8:8c:67:22:76:cd:08:e9: bf:aa:39:68:75:ca:27:1d:a4:6c:79:02:00:5c:e8:23:94:14: 09:04:3e:b7:e7:21:05:4f:7e:dd:db:96:d4:94:c6:85:63:aa: 33:67:34:bc:07:b0:ed:18:f2:ae:40:19:40:95:67:e3:eb:63: 87:2a:31:e5:01:d2:d1:ec:21:92:3d:36:2e:07:47:d2:c1:d5: 30:a7:62:58:b8:c7:4a:1a:e5:34:4b:98:85:48:d6:35:6b:30: e2:bd:c4:51:51:13:25:0e:8e:e7:89:ba:ea:1f:32:4d:4b:24: 62:6a:7a:46:9f:c3:a8:b5:04:6f:44:77:64:10:eb:a0:d5:11: 61:c9:47:7b:7b:33:8e:0d:b5:0b:61:fc:56:82:9c:a0:60:0a: b7:6f:51:d8:0b:0d:c7:27:45:c0:af:1f:88:52:74:d1:0e:c0: 2c:2e:71:12:2b:7f:85:07:19:b6:6c:4a:84:29:03:ef:b3:7f: 89:2a:fc:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjYwMTI1MDAwNTUzWhcNMjYwMjAxMDAwNTUzWjAYMRYwFAYD VQQDDA02OTc1NWU2MS04YzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5OvUZ4RuwGde7N74jmUnBI6b7i5pBSE+mgDdPczpLXDYwICT09Kuw1ya7aL UyDftiOxSTrz6igDvikVnzh/zjvxANmOh6y/966coJi+BVxqDSVmlgGrL31v/1c8 2Jbq6vxeIPl1jz97MvN70tvvJgU9Lf7DkZU9raq2OgPO+RK2oFRRmEAz/nCnkIMw 51SHOqesmMKBsQmpId0EfCJZUOGbWN8b25qypqzWJUKrUbzTDB+KDMT/XMXrCmmJ luxfbDuf2DlwmljwwdeQnv8sTE0rZD/JkxAMEaJg00ucyrs98UzTQv0Iqc/8CdF8 qKHO5OHoq/ImxPhfxUK6Uq45vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLu/+lwR Nbftps++eAK+tTPBMwK+MB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaaTZmPJIaZU9Rt5UzdDDxoRCOluclRKJKJue81k/GE+RYBMqCZN+/ Q2Y9t2CWnyHAoFMyCSeIcnzYz0Jwp2LAqIxnInbNCOm/qjlodconHaRseQIAXOgj lBQJBD635yEFT37d25bUlMaFY6ozZzS8B7DtGPKuQBlAlWfj62OHKjHlAdLR7CGS PTYuB0fSwdUwp2JYuMdKGuU0S5iFSNY1azDivcRRURMlDo7nibrqHzJNSyRianpG n8OotQRvRHdkEOug1RFhyUd7ezOODbULYfxWgpygYAq3b1HYCw3HJ0XArx+IUnTR DsAsLnESK3+FBxm2bEqEKQPvs3+JKvyM -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:20 2026 by rpki-client