This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: p4XtOr5Q3HiAZ9T2LjPUV43JLbF81RSRVRSqLNITTdA= Subject key identifier: 1E:DA:8D:A6:F1:D3:25:EC:CC:F6:89:E0:FD:54:94:17:95:7C:99:29 Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1D2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1D07 Signing time: Sat 06 Dec 2025 15:49:54 +0000 Manifest this update: Sat 06 Dec 2025 15:49:54 +0000 Manifest next update: Sat 13 Dec 2025 15:49:54 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: 8aoUJEduuGBt2l+EbMB/QNV76I31DqzO5y1ewXBwB7I=) 2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: J9n3zp82JZdNJfliI4sVzoh3Obd0PjO2ofNrwXXpFCA=) 3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: vGKFHBVQWRpdVQR3PUOS5+JZtPR6OvXFbFU/BnNsNyE=) 4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: aoLs85T25Nbu5rfe8HQr6/uLXCb4GRzjjbTFp9DkWQU=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: sITNhEqet6v++AefMKG16PhZUbQorPDV6OH2LTwcBpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7467 (0x1d2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: Dec 6 15:49:54 2025 GMT Not After : Dec 13 15:49:54 2025 GMT Subject: CN=693450a2-8fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:2b:e1:f3:b3:4f:18:8e:8b:cf:e6:0d:66: bc:54:ad:3c:e4:03:55:49:00:11:9b:10:9f:c4:cc: d0:48:d9:a1:c7:e3:73:b0:ca:0c:23:72:00:31:f1: 9a:62:3d:ee:4a:a7:d4:bc:6d:82:c3:66:05:ed:04: 87:c9:ff:b8:21:79:ce:08:41:2a:a2:36:dc:8f:7b: 09:b9:11:66:da:83:4c:ff:a2:7e:92:96:62:92:0d: 03:e7:cb:9b:17:9c:0f:ba:1a:fa:04:6a:15:f6:bb: e2:0e:0b:39:44:72:90:56:3f:f9:ce:1b:8c:2e:62: 06:04:c0:29:46:4a:b0:42:1a:f6:ed:1b:01:a1:b1: f5:e4:ab:22:86:8a:60:b0:ac:87:85:82:51:fa:55: f8:17:06:09:2f:5f:0d:a4:50:b6:e9:f9:f1:b6:9d: 1d:69:5f:dc:38:d2:9d:3a:1f:44:7f:9f:78:60:9e: 3e:0b:94:99:5d:68:75:2c:b4:f3:48:9e:b8:09:66: 51:42:c8:1b:42:54:a7:49:f4:3d:4b:8a:cb:5f:d0: 0c:7b:5f:fc:3d:be:20:46:c8:a0:ea:ff:58:8e:e9: 3e:3b:7f:aa:02:bc:85:3a:cd:c5:7e:96:5f:35:92: f6:37:4d:3f:41:28:63:03:5f:b4:f1:3c:8a:a4:2e: 4b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DA:8D:A6:F1:D3:25:EC:CC:F6:89:E0:FD:54:94:17:95:7C:99:29 X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:0e:fd:90:a2:47:65:0f:f7:32:ec:48:4b:83:8f:11:0e:14: 1f:c9:91:2b:94:ab:72:38:e0:27:f9:2c:92:2e:72:05:3d:34: d2:9e:05:71:e2:33:5d:ca:f5:ca:6d:b1:2f:a1:aa:cb:7d:d4: 84:ca:a4:c6:75:ee:15:06:42:90:cf:36:00:1f:95:4f:ec:92: ac:f4:5f:a6:15:40:b2:26:1f:ae:69:e8:34:fc:11:93:94:10: 94:e9:12:e2:46:b6:5a:bb:4f:16:7a:a8:93:3c:0e:dd:ff:a8: fe:48:ed:b1:9f:19:ee:9f:86:85:5d:84:56:b0:69:04:11:d0: 2c:64:ec:36:f5:da:ee:27:28:07:3d:ae:47:70:55:94:2f:1a: a9:75:65:b8:dd:c8:70:ed:d6:bf:6b:2d:ad:8b:c3:68:81:06: 4b:74:41:e7:64:35:dd:e5:fc:11:1f:59:0c:13:de:93:db:42: 0a:f9:99:d8:24:fd:e7:14:e1:92:d1:78:8a:61:23:af:f2:11: a9:04:09:7c:db:9a:82:b9:48:0a:8e:22:9c:49:22:83:a8:b5: 6a:58:f2:da:2a:4d:36:84:5c:18:6a:dd:57:53:af:7f:45:63: 3a:3f:6d:33:bd:33:7f:70:e5:ce:6d:65:c5:8c:18:25:a5:10: bc:fa:63:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjUxMjA2MTU0OTU0WhcNMjUxMjEzMTU0OTU0WjAYMRYwFAYD VQQDEw02OTM0NTBhMi04ZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tYr4fOzTxiOi8/mDWa8VK085ANVSQARmxCfxMzQSNmhx+NzsMoMI3IAMfGa Yj3uSqfUvG2Cw2YF7QSHyf+4IXnOCEEqojbcj3sJuRFm2oNM/6J+kpZikg0D58ub F5wPuhr6BGoV9rviDgs5RHKQVj/5zhuMLmIGBMApRkqwQhr27RsBobH15Ksihopg sKyHhYJR+lX4FwYJL18NpFC26fnxtp0daV/cONKdOh9Ef594YJ4+C5SZXWh1LLTz SJ64CWZRQsgbQlSnSfQ9S4rLX9AMe1/8Pb4gRsig6v9Yjuk+O3+qAryFOs3FfpZf NZL2N00/QShjA1+08TyKpC5LHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7ajabx 0yXszPaJ4P1UlBeVfJkpMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtDv2QokdlD/cy7EhLg48RDhQfyZErlKtyOOAn+SySLnIFPTTSngVx 4jNdyvXKbbEvoarLfdSEyqTGde4VBkKQzzYAH5VP7JKs9F+mFUCyJh+uaeg0/BGT lBCU6RLiRrZau08WeqiTPA7d/6j+SO2xnxnun4aFXYRWsGkEEdAsZOw29druJygH Pa5HcFWULxqpdWW43chw7da/ay2ti8NogQZLdEHnZDXd5fwRH1kME96T20IK+ZnY JP3nFOGS0XiKYSOv8hGpBAl825qCuUgKjiKcSSKDqLVqWPLaKk02hFwYat1XU69/ RWM6P20zvTN/cOXObWXFjBglpRC8+mM5 -----END CERTIFICATE-----Generated at Sat Dec 6 23:54:02 2025 by rpki-client