This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft File: jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json) Hash identifier: YdLoWKYRjxVW7f7U+qE+D1KzmqiJSu1Hj6+j6IGgOcY= Subject key identifier: 07:CB:32:6A:F9:B7:F1:FE:1B:91:F8:86:AE:A1:94:FE:1C:98:BD:53 Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Certificate serial: 0C9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft Manifest number: 0C86 Signing time: Sat 20 Dec 2025 18:11:36 +0000 Manifest this update: Sat 20 Dec 2025 18:11:36 +0000 Manifest next update: Sat 27 Dec 2025 18:11:36 +0000 Files and hashes: 1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: YqN7JyVcDC6i/HrshROwItkurSAIycjWzlO/+aif6S4=) 2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 4znOjftmOLUP9F0sqZtn3shUbp4rIvm9xbYnsSSpuqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Validity Not Before: Dec 20 18:11:36 2025 GMT Not After : Dec 27 18:11:36 2025 GMT Subject: CN=6946e6d8-bd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:07:18:ac:68:44:b5:b8:61:b5:1e:2d:a8: f7:d2:e5:49:c8:52:83:98:5a:26:9a:8f:8b:c5:e7: b3:b2:9c:33:ce:71:1f:c5:ff:4e:b0:fd:f9:f0:3a: 17:27:35:b5:12:2d:b4:e4:92:cd:5a:ac:d6:6b:d9: 74:f4:d3:b3:dd:f0:1b:4e:22:07:1b:43:1d:27:12: 6e:be:e7:11:5d:6e:df:7c:c2:a9:ab:a6:28:10:67: cb:b9:23:fb:8b:03:17:ee:37:4c:e8:28:10:4d:83: 57:8e:7d:d3:a3:fa:a5:b0:98:90:44:c0:12:ec:d1: 71:ea:eb:1f:9a:43:23:bf:00:44:19:2e:29:16:70: 62:4c:e5:4f:83:38:b9:16:75:7b:e6:67:6e:7e:72: 8a:09:5e:df:1d:25:78:87:1c:d6:d6:6c:25:93:8c: bd:51:54:33:a0:27:63:62:a6:07:0c:4e:9c:23:5a: 06:d8:35:d6:6e:9e:7b:0c:d5:48:fd:56:2a:5d:e7: d5:54:c0:05:33:b2:a1:ea:1a:e5:d7:b7:a8:ba:03: 54:63:9e:68:f0:6f:ef:07:c4:79:8b:0c:ec:62:14: ea:ba:fc:ca:db:df:db:4c:18:8e:f6:58:db:c3:18: 11:10:1c:7d:c9:ae:85:d9:d5:cd:fc:a4:9a:ab:cc: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CB:32:6A:F9:B7:F1:FE:1B:91:F8:86:AE:A1:94:FE:1C:98:BD:53 X509v3 Authority Key Identifier: keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:11:03:34:46:8d:3a:13:01:a7:ec:f7:d6:5e:6f:fb:12:ae: 2d:b2:8b:ff:50:11:77:1d:f4:5c:35:ef:86:0b:1e:61:49:71: 36:fb:69:0a:4d:57:6f:b3:9d:16:1a:06:9b:1d:e6:bd:4f:a8: c3:99:b2:d0:08:ef:35:00:7a:12:fd:19:b9:52:02:1e:e3:82: 76:4f:a6:6a:b7:b4:3a:3a:84:45:6a:ed:4d:ff:9e:8b:3a:86: 1c:cb:ba:f8:39:20:b7:c3:25:96:41:3d:05:f8:ea:ed:f5:33: ff:5d:05:a6:d4:b4:a1:6a:24:c2:c2:15:f0:cc:1e:0d:d4:36: 21:e6:b2:b2:4b:68:a0:e1:1a:d2:5a:ae:78:42:d2:89:f7:e1: 83:0b:83:de:3a:98:92:ba:45:ad:b3:25:80:47:8d:15:90:8d: 15:84:64:86:a0:ae:39:29:72:14:8b:55:66:49:f1:ed:97:bf: ad:a3:e2:33:d8:a4:01:9d:05:dd:db:08:b9:d3:e2:ac:ef:63: 4f:be:90:76:56:5a:c4:c8:14:1f:de:69:08:53:46:06:4c:99: e7:fc:4b:63:6c:75:73:65:0e:e6:11:0b:f0:20:90:84:06:71: 0a:85:c0:48:af:ba:8b:2c:3f:f5:b4:3c:50:ba:eb:f8:da:33: 2d:4f:33:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RjAxMTAvBgNVBAUTKDhDNjZGOUMwRTY2OEFDOTA4MURGNzEwRDYwNDJERjQ3 NDkwQjBBQjkwHhcNMjUxMjIwMTgxMTM2WhcNMjUxMjI3MTgxMTM2WjAYMRYwFAYD VQQDDA02OTQ2ZTZkOC1iZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjwHGKxoRLW4YbUeLaj30uVJyFKDmFommo+LxeezspwzznEfxf9OsP358DoX JzW1Ei205JLNWqzWa9l09NOz3fAbTiIHG0MdJxJuvucRXW7ffMKpq6YoEGfLuSP7 iwMX7jdM6CgQTYNXjn3To/qlsJiQRMAS7NFx6usfmkMjvwBEGS4pFnBiTOVPgzi5 FnV75mdufnKKCV7fHSV4hxzW1mwlk4y9UVQzoCdjYqYHDE6cI1oG2DXWbp57DNVI /VYqXefVVMAFM7Kh6hrl17eougNUY55o8G/vB8R5iwzsYhTquvzK29/bTBiO9ljb wxgREBx9ya6F2dXN/KSaq8zJeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfLMmr5 t/H+G5H4hq6hlP4cmL1TMB8GA1UdIwQYMBaAFIxm+cDmaKyQgd9xDWBC30dJCwq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdGMC9BNjYzMTlGMDEy RDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JKQ0IzM0VOWUVMZlIwa0xD cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pHYjV3T1pvckpDQjMzRU5ZRUxmUjBrTENyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdGMC9BNjYzMTlGMDEyRDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JK Q0IzM0VOWUVMZlIwa0xDcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwEQM0Ro06EwGn7PfWXm/7Eq4tsov/UBF3HfRcNe+GCx5hSXE2+2kK TVdvs50WGgabHea9T6jDmbLQCO81AHoS/Rm5UgIe44J2T6Zqt7Q6OoRFau1N/56L OoYcy7r4OSC3wyWWQT0F+Ort9TP/XQWm1LShaiTCwhXwzB4N1DYh5rKyS2ig4RrS Wq54QtKJ9+GDC4PeOpiSukWtsyWAR40VkI0VhGSGoK45KXIUi1VmSfHtl7+to+Iz 2KQBnQXd2wi50+Ks72NPvpB2VlrEyBQf3mkIU0YGTJnn/EtjbHVzZQ7mEQvwIJCE BnEKhcBIr7qLLD/1tDxQuuv42jMtTzNj -----END CERTIFICATE-----Generated at Sun Dec 21 19:21:20 2025 by rpki-client