This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json) Hash identifier: hcUFFdlJRMPocihS9xr1JRMlSeBh9YsX93opMKt2Qj0= Subject key identifier: 88:22:17:A2:DB:A7:91:E4:42:90:23:DD:40:90:D9:B9:AE:E3:FA:A8 Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 352B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft Manifest number: 3502 Signing time: Sat 06 Dec 2025 14:47:21 +0000 Manifest this update: Sat 06 Dec 2025 14:47:21 +0000 Manifest next update: Sat 13 Dec 2025 14:47:21 +0000 Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: Cx0ep+/2fYr7/4GkV6xHFxj/LFV+mo7Cb5syNDR5NEw=) 2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: 5AL2LBzCru+E3YFyKW2P0tt8Zy0ls3uab/1OsnqWv48=) 3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: q930PNLNWH/Z46J1d9nklohyp9ezYTSOPJVhEtOZ6aE=) 4: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: GKpbMiXXQOymixNs7kIDcgllt5ej3XEvlSe8jG36fFc=) 5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: y580eZMTmYYpiPdGANCgGD9h1bATBcJx0pEL7nWorJ4=) 6: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: RmtTkfUtODi3Cy7Cko14SjhPi0et23qfIOBSZSmBkOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13611 (0x352b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Dec 6 14:47:21 2025 GMT Not After : Dec 13 14:47:21 2025 GMT Subject: CN=693441f9-1f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:86:06:b4:94:15:a3:b0:cc:36:80:de:1f:87: 3c:45:01:8e:ea:0e:ee:8e:c1:aa:b1:c9:bc:dd:90: c5:3c:24:f2:55:71:f8:dc:d2:1a:d6:b1:22:ab:41: fc:87:a1:ff:c8:6a:46:90:6f:ca:d5:0a:1d:c7:aa: c9:6a:a5:17:56:52:e7:a4:c8:3d:d7:c0:f9:14:d5: d6:82:b0:3b:04:c6:0e:be:15:7b:b4:b6:f3:83:8f: 06:06:14:13:bb:d6:a7:5b:32:0d:4f:e4:37:e9:21: 56:41:3f:68:4f:56:b3:ee:96:04:c0:84:09:73:a1: 5f:14:62:9e:ed:40:31:6d:21:15:29:ab:5a:09:ae: d6:1f:5f:47:73:b1:26:ce:63:64:c7:74:47:98:96: 4f:f4:13:7b:b5:95:46:27:ac:6d:c2:34:75:24:86: bb:1f:56:68:50:ae:a2:dd:f6:49:6c:a6:c8:7e:1c: 83:7d:9b:c8:8c:18:68:b3:cc:f0:66:8a:45:40:64: 76:a4:3f:29:7d:85:5d:ed:bf:82:a7:2c:e9:a9:3b: 00:b1:e4:a6:0f:a5:08:aa:e1:33:09:9f:d3:86:09: 0e:06:18:6a:34:e2:90:23:6a:ee:28:7d:e7:4d:98: 8f:ea:61:5b:f5:46:91:f0:1b:b3:ef:33:60:47:7f: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:22:17:A2:DB:A7:91:E4:42:90:23:DD:40:90:D9:B9:AE:E3:FA:A8 X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:f4:8f:eb:f8:ec:e6:2e:54:8d:d9:78:d0:d5:89:52:d6:c4: 87:69:3e:bf:72:18:c5:03:50:b7:35:54:08:43:fb:93:b5:60: 21:67:3a:f4:93:76:b4:b3:0f:0a:52:1b:63:02:d9:99:6a:f5: 54:52:a4:67:10:d7:f2:27:96:c6:c0:f7:10:1e:de:9c:8c:74: 81:c5:78:71:7b:83:6e:07:57:47:c9:5d:48:db:80:21:57:c6: 8a:21:5e:b9:e4:97:d2:e9:ad:55:0e:da:11:13:2e:52:54:88: 7f:9c:1c:40:e4:63:b1:56:43:94:8e:18:eb:c4:01:74:5b:43: 41:59:fa:1b:3a:62:1f:5d:5b:ec:4a:22:d5:e5:8d:48:12:dc: 83:71:b5:2d:85:ed:77:2f:a0:9c:5c:0d:73:ab:46:b9:bc:86: 52:2d:17:58:92:5e:9a:61:14:63:9e:c8:68:cc:3e:ea:16:99: 0b:9e:14:c7:c3:0d:b3:95:cc:71:06:05:5d:26:2c:73:27:b9: 99:2a:92:9f:d6:60:f5:ff:81:c2:29:94:1f:a6:92:4d:bd:1d: c0:12:d4:e7:1f:9c:0b:1c:06:d3:b4:d0:6c:14:85:02:10:0c: 09:d2:74:35:1f:ba:eb:a6:61:d8:1d:16:f8:e1:f6:70:c9:f1: c5:9e:59:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjUxMjA2MTQ0NzIxWhcNMjUxMjEzMTQ0NzIxWjAYMRYwFAYD VQQDEw02OTM0NDFmOS0xZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oYGtJQVo7DMNoDeH4c8RQGO6g7ujsGqscm83ZDFPCTyVXH43NIa1rEiq0H8 h6H/yGpGkG/K1Qodx6rJaqUXVlLnpMg918D5FNXWgrA7BMYOvhV7tLbzg48GBhQT u9anWzINT+Q36SFWQT9oT1az7pYEwIQJc6FfFGKe7UAxbSEVKataCa7WH19Hc7Em zmNkx3RHmJZP9BN7tZVGJ6xtwjR1JIa7H1ZoUK6i3fZJbKbIfhyDfZvIjBhos8zw ZopFQGR2pD8pfYVd7b+CpyzpqTsAseSmD6UIquEzCZ/ThgkOBhhqNOKQI2ruKH3n TZiP6mFb9UaR8Buz7zNgR3+0NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgiF6Lb p5HkQpAj3UCQ2bmu4/qoMB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjYzQy9CN0FDQzI2QzFEOTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1Jf NjZEaU5TQmQ3dVFDOGdzOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS9I/r+OzmLlSN2XjQ1YlS1sSHaT6/chjFA1C3NVQIQ/uTtWAhZzr0 k3a0sw8KUhtjAtmZavVUUqRnENfyJ5bGwPcQHt6cjHSBxXhxe4NuB1dHyV1I24Ah V8aKIV655JfS6a1VDtoREy5SVIh/nBxA5GOxVkOUjhjrxAF0W0NBWfobOmIfXVvs SiLV5Y1IEtyDcbUthe13L6CcXA1zq0a5vIZSLRdYkl6aYRRjnshozD7qFpkLnhTH ww2zlcxxBgVdJixzJ7mZKpKf1mD1/4HCKZQfppJNvR3AEtTnH5wLHAbTtNBsFIUC EAwJ0nQ1H7rrpmHYHRb44fZwyfHFnlkv -----END CERTIFICATE-----Generated at Sun Dec 7 18:29:12 2025 by rpki-client