This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json) Hash identifier: TK9Q7IiwAvxCgmqrY3jV5AtGMrjzGEYKibPe4NfJ6Sw= Subject key identifier: 23:2E:F3:24:68:14:EE:DE:2A:DB:20:63:AC:FE:B9:0A:C2:AE:EE:20 Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft Manifest number: 010D Signing time: Sun 21 Dec 2025 04:06:53 +0000 Manifest this update: Sun 21 Dec 2025 04:06:53 +0000 Manifest next update: Sun 28 Dec 2025 04:06:53 +0000 Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: 3IdDpF2Cg6y6luByLlChx0Rx+bLEnbhAThl6g7AkMkE=) 2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: Gd34BZHumVDMQlkFxhkn9zZUBjwQGIsnWxDTTynzeE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Validity Not Before: Dec 21 04:06:53 2025 GMT Not After : Dec 28 04:06:53 2025 GMT Subject: CN=6947725d-7fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cb:9c:c3:90:32:a9:30:0a:bd:06:32:0f:20: 4e:2f:7e:d4:66:1e:7c:c4:bf:3f:f9:60:0c:e1:16: 6e:f2:5f:87:51:43:40:e4:d7:cb:e1:11:dd:be:16: 1a:b2:f5:ba:1f:3a:05:da:f1:41:d0:f6:12:5b:df: 05:ad:83:7a:4d:01:a6:a7:ab:c1:75:2f:57:14:05: 16:72:6b:f7:b1:85:28:19:85:0e:eb:b2:cc:bf:c3: 04:43:6d:2a:89:66:36:32:e3:a6:43:6a:0f:19:6e: 53:40:dc:84:b9:e4:5e:8f:65:25:6b:c6:d8:a0:91: af:1e:4f:23:95:b4:91:38:d6:a0:6d:92:89:22:b3: c2:79:6f:92:de:fb:36:71:97:65:fd:9a:82:6f:4c: 40:85:23:e1:b0:1b:bc:d4:a1:5d:43:e5:c7:56:5d: db:ff:43:72:21:54:14:01:0c:45:0d:4f:b6:b8:d3: f9:1a:d6:4a:26:cb:ea:f8:d1:76:e8:26:9e:4f:1f: ab:85:09:2f:0b:50:4e:00:79:f7:a1:66:09:97:1a: 2f:c3:e5:21:d5:fd:c1:8e:5c:e2:d5:05:c4:f1:77: ce:cb:f9:42:01:2a:83:3d:ea:8b:0c:96:c0:62:1c: 09:a9:d5:08:37:af:e5:36:25:c8:5f:2d:31:e0:7d: a3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2E:F3:24:68:14:EE:DE:2A:DB:20:63:AC:FE:B9:0A:C2:AE:EE:20 X509v3 Authority Key Identifier: keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:8e:2d:ef:3f:e5:b6:63:8a:90:b7:78:7b:a4:04:ea:87:ae: 7e:68:18:25:2b:0c:99:d0:83:8b:bd:be:eb:d1:55:49:37:e3: 5e:b5:b9:22:12:2c:c1:a4:13:a4:3e:9b:26:c9:a7:87:4f:bc: 08:f9:62:21:1c:77:ae:d7:e9:c2:aa:17:6f:0c:0d:32:6a:94: 86:a3:bc:a2:53:d1:5d:18:71:73:26:6e:04:fa:94:fa:cf:59: 70:4b:9e:b4:a0:41:ab:fb:fd:f6:21:de:d2:a5:de:71:c0:0c: 6a:43:4a:62:bd:f9:07:99:f5:05:1f:99:41:17:dd:dd:43:f0: 40:62:75:82:7f:72:db:3b:ee:4e:46:05:05:86:e9:fa:4a:a6: 99:7f:72:90:7c:0b:44:34:16:8a:05:26:14:40:08:5f:90:cf: c5:4a:74:e5:59:eb:22:6c:b7:13:78:5d:f4:53:06:5f:3c:db: 7b:9a:3d:15:b3:1f:1b:79:de:31:e2:7c:5c:2e:eb:43:43:eb: d7:2a:ed:f8:f6:64:76:81:d6:f9:49:99:3b:41:15:43:d7:9a: 67:b9:ad:7a:dd:5f:b4:35:b7:23:2d:0b:e0:f9:a1:41:6e:16: b0:7a:84:4c:3e:84:07:0f:28:98:b5:e5:c5:73:f0:1c:3e:00: b9:5b:87:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEODgxMTAvBgNVBAUTKEQwOTlFRUE5RjVDREI2RkU0QzZFRjk4RThEOENGMzM2 NEI5RDYyNjEwHhcNMjUxMjIxMDQwNjUzWhcNMjUxMjI4MDQwNjUzWjAYMRYwFAYD VQQDDA02OTQ3NzI1ZC03ZmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cucw5AyqTAKvQYyDyBOL37UZh58xL8/+WAM4RZu8l+HUUNA5NfL4RHdvhYa svW6HzoF2vFB0PYSW98FrYN6TQGmp6vBdS9XFAUWcmv3sYUoGYUO67LMv8MEQ20q iWY2MuOmQ2oPGW5TQNyEueRej2Ula8bYoJGvHk8jlbSRONagbZKJIrPCeW+S3vs2 cZdl/ZqCb0xAhSPhsBu81KFdQ+XHVl3b/0NyIVQUAQxFDU+2uNP5GtZKJsvq+NF2 6CaeTx+rhQkvC1BOAHn3oWYJlxovw+Uh1f3Bjlzi1QXE8XfOy/lCASqDPeqLDJbA YhwJqdUIN6/lNiXIXy0x4H2jSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMu8yRo FO7eKtsgY6z+uQrCru4gMB8GA1UdIwQYMBaAFNCZ7qn1zbb+TG75jo2M8zZLnWJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQ4OC9COTg2RDkxQTQz MTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2NU1idm1Pall6ek5rdWRZ bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQ4OC9COTg2RDkxQTQzMTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2 NU1idm1Pall6ek5rdWRZbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHji3vP+W2Y4qQt3h7pATqh65+aBglKwyZ0IOLvb7r0VVJN+Netbki EizBpBOkPpsmyaeHT7wI+WIhHHeu1+nCqhdvDA0yapSGo7yiU9FdGHFzJm4E+pT6 z1lwS560oEGr+/32Id7Spd5xwAxqQ0pivfkHmfUFH5lBF93dQ/BAYnWCf3LbO+5O RgUFhun6SqaZf3KQfAtENBaKBSYUQAhfkM/FSnTlWesibLcTeF30UwZfPNt7mj0V sx8bed4x4nxcLutDQ+vXKu349mR2gdb5SZk7QRVD15pnua163V+0NbcjLQvg+aFB bhaweoRMPoQHDyiYteXFc/AcPgC5W4ep -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:04 2025 by rpki-client