This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: 1oiH4TTF162F7qX/rAjRBtnRV6aFeGV4tYIVW24MW80= Subject key identifier: 8C:9F:25:EB:FB:8F:78:26:22:68:45:F4:E7:3C:8B:D8:85:6F:6B:39 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 0360 Signing time: Thu 04 Dec 2025 23:23:47 +0000 Manifest this update: Thu 04 Dec 2025 23:23:46 +0000 Manifest next update: Thu 11 Dec 2025 23:23:46 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: AoRzTvtO1Twmr0e7CuYPp3XJrdf/ZkkKRiMHhr3iwAI=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) 5: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 6: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Dec 4 23:23:46 2025 GMT Not After : Dec 11 23:23:46 2025 GMT Subject: CN=69321803-1a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:29:24:ee:1e:58:5c:28:f9:c4:10:eb:88: 33:77:38:c0:40:ee:e7:be:63:b3:78:24:8f:f6:5a: fe:62:00:da:d1:df:c8:25:d4:36:d9:0b:fb:e5:31: 69:4b:fd:58:cf:47:3a:20:a1:56:28:3e:db:f0:75: ce:98:a0:02:a4:f7:10:e3:ae:51:6f:ed:11:f1:77: b2:6a:68:0b:a1:3a:da:11:36:81:cc:45:43:d5:e6: 3e:d8:91:b9:5d:2f:bb:98:8e:6e:49:6f:79:ac:02: e4:ae:06:92:fe:d8:b7:ec:43:8d:48:2a:b3:32:1c: c8:7c:12:9a:4a:d0:49:c5:3f:49:c2:1a:d7:2a:e1: 6b:4a:4f:f4:0c:a7:0d:83:36:a9:62:9b:44:92:06: 7b:85:70:3f:36:a0:06:84:4c:ae:98:65:c7:35:4c: ae:7b:e8:21:ba:1c:80:cd:c2:79:59:e5:42:06:37: e5:c4:d9:75:9a:46:72:5a:25:6d:57:13:28:f7:b3: 1b:fd:7b:aa:33:8a:57:09:da:4a:58:fe:3b:d7:f8: cc:23:16:35:0f:e6:f6:e9:7a:c9:cc:4b:72:88:df: bd:1f:5e:ac:03:76:7a:a7:5d:0e:c4:0e:7e:f1:1e: 5d:b9:2c:a2:20:23:a3:91:40:72:5f:72:26:a3:43: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9F:25:EB:FB:8F:78:26:22:68:45:F4:E7:3C:8B:D8:85:6F:6B:39 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:f1:60:a1:33:93:7f:6b:26:14:1d:ba:c5:53:78:ff:0d:51: 34:65:fc:61:43:f3:d5:89:21:99:78:2e:49:55:17:9b:23:21: b3:2b:aa:9d:cd:fd:8b:1b:77:72:b8:d2:67:f1:8b:2b:e6:de: ce:15:a9:83:11:59:5a:2f:6d:72:bb:b5:fc:3e:d7:eb:74:fe: ba:1d:b9:30:96:42:f0:6c:eb:ca:29:7e:c2:f5:df:68:11:40: 59:1a:e2:80:25:09:fb:35:54:d2:66:45:36:bd:f9:d5:57:4b: 47:ea:a5:7a:95:07:f7:5f:95:4d:96:7b:36:34:a9:b9:0e:c4: 73:9e:29:35:9a:a4:49:3d:8d:b0:80:bd:0a:2a:19:66:ee:61: 03:03:f6:f0:8c:77:bb:3d:ed:fc:61:68:10:11:d0:de:b6:2e: 99:1e:80:2b:22:a3:9f:2a:64:c7:ea:5d:6b:39:d7:0f:df:f8: 5c:7c:f6:37:b9:22:ab:d7:be:a2:83:f8:6f:42:6c:f7:09:df: 6b:cd:9d:34:ac:1c:93:b9:e3:53:56:fa:35:37:49:67:28:b5: 10:79:14:3f:f1:9a:17:27:f9:78:30:c0:af:dd:df:ca:59:ad: 9c:25:53:f8:75:3d:8d:7b:c0:81:95:9d:1f:62:48:96:a1:89: a9:9e:de:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjUxMjA0MjMyMzQ2WhcNMjUxMjExMjMyMzQ2WjAYMRYwFAYD VQQDEw02OTMyMTgwMy0xYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaYpJO4eWFwo+cQQ64gzdzjAQO7nvmOzeCSP9lr+YgDa0d/IJdQ22Qv75TFp S/1Yz0c6IKFWKD7b8HXOmKACpPcQ465Rb+0R8XeyamgLoTraETaBzEVD1eY+2JG5 XS+7mI5uSW95rALkrgaS/ti37EONSCqzMhzIfBKaStBJxT9JwhrXKuFrSk/0DKcN gzapYptEkgZ7hXA/NqAGhEyumGXHNUyue+ghuhyAzcJ5WeVCBjflxNl1mkZyWiVt VxMo97Mb/XuqM4pXCdpKWP471/jMIxY1D+b26XrJzEtyiN+9H16sA3Z6p10OxA5+ 8R5duSyiICOjkUByX3Imo0OYBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyfJev7 j3gmImhF9Oc8i9iFb2s5MB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg8WChM5N/ayYUHbrFU3j/DVE0ZfxhQ/PViSGZeC5JVRebIyGzK6qd zf2LG3dyuNJn8Ysr5t7OFamDEVlaL21yu7X8PtfrdP66HbkwlkLwbOvKKX7C9d9o EUBZGuKAJQn7NVTSZkU2vfnVV0tH6qV6lQf3X5VNlns2NKm5DsRznik1mqRJPY2w gL0KKhlm7mEDA/bwjHe7Pe38YWgQEdDeti6ZHoArIqOfKmTH6l1rOdcP3/hcfPY3 uSKr176ig/hvQmz3Cd9rzZ00rByTueNTVvo1N0lnKLUQeRQ/8ZoXJ/l4MMCv3d/K Wa2cJVP4dT2Ne8CBlZ0fYkiWoYmpnt5N -----END CERTIFICATE-----Generated at Sat Dec 6 23:04:23 2025 by rpki-client