This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json) Hash identifier: 6mqOOQd0W/R8hfJ2MBk4MGvA4CkH6aknvhF1jEPtniM= Subject key identifier: 9E:9A:1C:BD:26:C3:39:AE:FA:EA:3E:C9:5F:72:0B:A4:77:2C:FD:49 Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 0A9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft Manifest number: 0A90 Signing time: Sat 06 Dec 2025 18:49:12 +0000 Manifest this update: Sat 06 Dec 2025 18:49:12 +0000 Manifest next update: Sat 13 Dec 2025 18:49:12 +0000 Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: xgP8j59Ut4pvpO7OfI6YvK7yXsiA8d6lzvvn69Swz0U=) 2: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: OtbmYjd+mWe6biEFLJDUdTXgoAn8SFa04cxMhMepJCc=) 3: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: r0RKRgF0/rDGEDAesBgC29Z43qYpMBwutyEjFMfF0YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2715 (0xa9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Dec 6 18:49:12 2025 GMT Not After : Dec 13 18:49:12 2025 GMT Subject: CN=69347aa8-d1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:97:c0:98:27:4b:a9:8a:34:a3:5a:a3:dc: d8:0c:77:d0:62:a4:0a:68:30:af:7d:f7:d5:c8:9a: f5:63:fb:09:ac:85:cc:27:83:40:96:6c:fe:e2:2d: 12:3a:12:be:71:91:7c:6d:e1:9f:4f:29:61:e1:d9: 5d:68:b5:ab:f6:7c:76:a8:40:9b:c0:db:71:fa:03: e7:ba:d5:10:4d:95:05:6c:bb:62:7b:da:60:de:46: de:91:d3:04:c9:92:11:2a:77:60:c8:c6:15:ba:39: 9d:0e:c7:46:0b:4c:f4:ab:25:f9:19:d9:f3:5c:0e: d2:eb:55:f7:af:50:1a:1a:cf:7c:5a:a8:48:bf:07: a9:05:68:ad:74:79:28:27:0f:3f:91:74:e8:a4:9c: d8:a2:a5:fe:fa:c3:4f:59:a1:6f:ac:63:d3:16:33: 5a:e9:b6:16:52:99:db:a2:49:a3:68:b3:19:4e:89: 26:f2:96:68:04:75:1b:16:7b:b8:b3:41:73:91:44: 91:17:70:ec:e8:bf:fd:39:2c:71:6a:9d:51:1c:c2: d9:2a:e9:60:13:fc:ca:0e:84:37:ae:80:b0:0a:6a: cb:18:f2:28:95:03:b0:47:1e:40:ea:a5:c3:8b:88: 27:57:54:a4:05:a1:41:d9:8e:11:c7:03:e5:b0:61: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9A:1C:BD:26:C3:39:AE:FA:EA:3E:C9:5F:72:0B:A4:77:2C:FD:49 X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:64:83:4a:50:47:8e:12:2b:fd:da:99:ec:ea:51:b5:96:ad: a3:e6:ff:2c:3a:42:4f:9a:5b:87:6f:a9:d2:ea:a0:89:c0:b0: 06:37:39:58:b1:4c:61:55:95:9c:d6:a4:84:9d:27:e8:20:fa: a1:df:a7:c2:06:51:92:61:36:7e:d6:96:80:60:62:db:0e:ec: bc:8e:78:fa:44:45:53:f4:26:32:40:56:ba:02:ae:58:40:16: cc:a8:27:52:c3:4d:3f:09:65:a4:53:80:42:ac:e4:9b:4a:d4: 02:96:f5:9d:58:c3:04:f4:c5:f8:93:2e:ef:ed:21:93:97:81: 12:92:f8:62:68:35:30:c6:fa:ce:12:12:19:d2:fa:da:89:8f: 9e:11:a2:d0:54:3b:5f:9a:93:8e:14:69:57:8d:20:25:23:31: a9:3e:03:4b:86:ae:1b:d8:96:9e:e0:06:d7:fb:03:2e:21:9a: 91:59:5f:84:cb:0d:df:46:4c:03:52:32:bf:a4:d7:5b:1a:ac: e7:35:88:98:2e:9c:77:50:35:e7:76:91:88:62:a3:28:32:58: 90:d4:f1:2f:8b:93:e9:fa:e5:18:ff:67:1a:ed:3d:d0:51:6a: f9:6d:2d:38:53:40:3f:44:ec:34:ad:7e:c6:bf:b8:f9:d9:cd: 2c:31:50:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjUxMjA2MTg0OTEyWhcNMjUxMjEzMTg0OTEyWjAYMRYwFAYD VQQDEw02OTM0N2FhOC1kMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17eXwJgnS6mKNKNao9zYDHfQYqQKaDCvfffVyJr1Y/sJrIXMJ4NAlmz+4i0S OhK+cZF8beGfTylh4dldaLWr9nx2qECbwNtx+gPnutUQTZUFbLtie9pg3kbekdME yZIRKndgyMYVujmdDsdGC0z0qyX5GdnzXA7S61X3r1AaGs98WqhIvwepBWitdHko Jw8/kXTopJzYoqX++sNPWaFvrGPTFjNa6bYWUpnbokmjaLMZTokm8pZoBHUbFnu4 s0FzkUSRF3Ds6L/9OSxxap1RHMLZKulgE/zKDoQ3roCwCmrLGPIolQOwRx5A6qXD i4gnV1SkBaFB2Y4RxwPlsGFG+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6aHL0m wzmu+uo+yV9yC6R3LP1JMB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkE2Ri9DQURGRjJGRTZFMzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3 Snc2dmh1Nk1ETFpWR3JsOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEZINKUEeOEiv92pns6lG1lq2j5v8sOkJPmluHb6nS6qCJwLAGNzlY sUxhVZWc1qSEnSfoIPqh36fCBlGSYTZ+1paAYGLbDuy8jnj6REVT9CYyQFa6Aq5Y QBbMqCdSw00/CWWkU4BCrOSbStQClvWdWMME9MX4ky7v7SGTl4ESkvhiaDUwxvrO EhIZ0vraiY+eEaLQVDtfmpOOFGlXjSAlIzGpPgNLhq4b2Jae4AbX+wMuIZqRWV+E yw3fRkwDUjK/pNdbGqznNYiYLpx3UDXndpGIYqMoMliQ1PEvi5Pp+uUY/2ca7T3Q UWr5bS04U0A/ROw0rX7Gv7j52c0sMVAl -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:15 2025 by rpki-client