This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json) Hash identifier: HLDJOTS8+K0BxMTAKaqNRk4YA1/qFUEMw1tbhUgk++I= Subject key identifier: 65:83:19:25:4C:66:9D:12:7E:83:1E:35:05:CB:4C:DD:78:F4:83:01 Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 16DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft Manifest number: 16A6 Signing time: Sat 06 Dec 2025 16:16:27 +0000 Manifest this update: Sat 06 Dec 2025 16:16:26 +0000 Manifest next update: Sat 13 Dec 2025 16:16:26 +0000 Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: ujUiymhiVqYBQTyOKCkNVHHrDSJRX4k2Ptalk4sTdUI=) 2: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: 4whCD3BefA16gco8GRXsiAdGqv5E31DbZxV0ybOWul8=) 3: 125EA39CBE0311F0BD65F062C4F9AE02.roa (hash: USmtuTTmRco0BEBl+7v5NzI0IPVnUkLZyU5TqgVNBVA=) 4: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: vU1HGyruT0rWn1hdwhJaA7GCZtlR47+81PGq+koUgEQ=) 5: A923DDA2BE0211F090AD9F13C4F9AE02.roa (hash: rJPMOVrpncAhvub4ptLK3aMWfe/wCmar13ef6P+IuQs=) 6: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: wdVUeFPPp5Pt9fuTweBdrE45i6lKsYNin+xhFp9XCWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5851 (0x16db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: Dec 6 16:16:26 2025 GMT Not After : Dec 13 16:16:26 2025 GMT Subject: CN=693456db-746b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:59:73:0b:d2:eb:ed:6f:bd:ed:ab:ac:6b: 2a:2b:06:b7:15:2b:0c:b7:a9:ea:cf:b7:dd:72:93: 13:cd:1f:ee:66:46:df:ab:8e:20:24:92:70:ae:55: 36:f5:5f:14:62:08:6d:44:e2:d4:6e:dc:93:c2:12: 05:4b:da:03:a8:08:01:4b:7e:92:a1:3c:5a:70:be: 6c:0d:3f:9e:03:60:41:d8:3b:2d:51:b2:b9:f6:f7: a1:94:a5:0d:b0:b6:a9:fe:dd:aa:2c:d3:72:0a:0e: f2:45:46:09:5d:6b:1c:23:bf:f7:43:a8:0e:a6:10: 8a:90:3b:5c:ea:21:2d:26:05:7c:67:54:63:e1:08: 7e:c8:15:df:47:02:4e:31:2c:5a:0d:00:34:50:a9: 82:74:13:22:f0:eb:46:16:99:70:62:4a:b4:5c:9d: 5e:bd:74:d3:b5:75:9f:e9:1e:55:08:d9:f1:70:93: 94:2b:c0:6f:11:20:8b:01:b4:97:f7:3f:2e:45:ef: 9e:5e:40:56:4b:6c:b8:9a:80:14:20:66:b4:29:53: ae:4b:3b:1a:2f:27:a0:a9:c5:a9:af:6d:3c:07:9f: 15:12:bb:be:8e:b7:6c:5b:a6:8c:fe:96:08:62:b0: 00:1e:7b:67:46:0f:1d:df:d2:01:1c:1e:30:40:e5: 44:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:83:19:25:4C:66:9D:12:7E:83:1E:35:05:CB:4C:DD:78:F4:83:01 X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:38:49:dd:59:d3:b2:0a:58:6f:b6:d9:57:a4:62:48:d0:6a: 58:72:ea:67:96:bf:8a:a4:57:6a:d6:37:42:0b:1a:75:aa:9c: 8f:c4:97:92:48:80:80:1c:aa:3c:74:9b:41:80:a3:37:27:49: 60:60:ed:06:ca:c1:49:a4:5a:7d:ac:bd:e3:85:4e:39:14:8f: 68:ff:3d:3d:cd:70:d3:13:d6:63:ce:cf:11:70:95:44:88:f0: e7:9d:90:99:a7:dc:90:df:0e:02:2e:fb:9b:05:20:b7:32:f1: 3d:3d:c1:a0:9c:3a:e9:e6:bb:46:7e:7e:bf:b4:c1:d8:ef:fe: d3:f7:40:fc:fc:76:87:ef:fc:e4:a1:ea:70:83:21:87:15:bc: 83:1a:f4:ca:90:20:4d:0e:f6:cd:99:57:4f:53:47:6c:2a:b9: 57:4a:61:86:54:4e:e0:80:0d:00:44:69:64:64:77:67:54:09: 8d:95:ac:7b:06:a3:38:dd:44:ad:d0:b0:15:c2:a3:0a:c7:3a: ba:b4:cd:b9:05:0f:e9:d3:fc:96:a5:01:07:5f:a2:fc:c6:43: 27:cf:c2:8d:1b:85:4a:ae:f7:95:93:c5:57:50:fc:9d:ae:0e: da:88:27:51:ca:8e:9b:de:88:bd:1e:07:ff:45:af:bf:88:cd: 72:7e:a4:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjUxMjA2MTYxNjI2WhcNMjUxMjEzMTYxNjI2WjAYMRYwFAYD VQQDEw02OTM0NTZkYi03NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTFZcwvS6+1vve2rrGsqKwa3FSsMt6nqz7fdcpMTzR/uZkbfq44gJJJwrlU2 9V8UYghtROLUbtyTwhIFS9oDqAgBS36SoTxacL5sDT+eA2BB2DstUbK59vehlKUN sLap/t2qLNNyCg7yRUYJXWscI7/3Q6gOphCKkDtc6iEtJgV8Z1Rj4Qh+yBXfRwJO MSxaDQA0UKmCdBMi8OtGFplwYkq0XJ1evXTTtXWf6R5VCNnxcJOUK8BvESCLAbSX 9z8uRe+eXkBWS2y4moAUIGa0KVOuSzsaLyegqcWpr208B58VEru+jrdsW6aM/pYI YrAAHntnRg8d39IBHB4wQOVELQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWDGSVM Zp0SfoMeNQXLTN149IMBMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1OEndWdOyClhvttlXpGJI0GpYcupnlr+KpFdq1jdCCxp1qpyPxJeS SICAHKo8dJtBgKM3J0lgYO0GysFJpFp9rL3jhU45FI9o/z09zXDTE9Zjzs8RcJVE iPDnnZCZp9yQ3w4CLvubBSC3MvE9PcGgnDrp5rtGfn6/tMHY7/7T90D8/HaH7/zk oepwgyGHFbyDGvTKkCBNDvbNmVdPU0dsKrlXSmGGVE7ggA0ARGlkZHdnVAmNlax7 BqM43USt0LAVwqMKxzq6tM25BQ/p0/yWpQEHX6L8xkMnz8KNG4VKrveVk8VXUPyd rg7aiCdRyo6b3oi9Hgf/Ra+/iM1yfqQL -----END CERTIFICATE-----Generated at Sat Dec 6 20:04:04 2025 by rpki-client