This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: ffC/qpncacxITJmhcIOtsWVqDj1F1p4sosFX/DLFJPo= Subject key identifier: E2:07:01:0A:69:EA:CC:1D:86:41:21:60:D1:60:82:40:E5:CA:43:E8 Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0CC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0CBE Signing time: Thu 04 Dec 2025 17:41:04 +0000 Manifest this update: Thu 04 Dec 2025 17:41:04 +0000 Manifest next update: Thu 11 Dec 2025 17:41:04 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: YaNQd6AiMvYFq27LqjBZFxoqcTVLCJFFH3pYe9DrQRw=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: yPNuIBhOcR1Mr6lLidK3MeZlRO1wbqE9iAxDy/a++Gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3271 (0xcc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Dec 4 17:41:04 2025 GMT Not After : Dec 11 17:41:04 2025 GMT Subject: CN=6931c7b0-3f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:9e:f2:72:df:e0:20:03:6b:aa:f6:22:fb: 4e:d4:7a:ec:53:77:be:94:7f:ab:bb:ea:2d:9a:d1: fb:58:af:96:9c:f2:00:ad:75:ef:c1:cc:61:bd:2d: 17:fc:5a:6a:e8:bd:78:59:13:60:6a:b1:56:0e:bf: f3:02:81:03:47:ff:bc:23:61:d0:18:f7:bb:a8:da: ee:07:23:6b:ea:f1:3f:dc:13:e1:9c:dc:9a:44:4e: f1:f6:77:d3:a8:f3:54:a0:4d:67:c3:e1:90:5b:3c: c4:99:2c:d1:aa:c9:97:cb:42:fc:c4:38:ad:98:14: 17:06:f7:8f:9b:68:da:6d:49:f8:57:4f:11:af:4b: 2e:52:8a:f1:81:8d:51:60:25:fc:cd:a2:22:e1:85: 28:ec:37:e1:b8:ef:a7:76:5a:d1:28:c1:af:9a:fb: 54:4d:14:63:4b:40:e6:93:d4:ba:84:89:24:99:9f: da:b9:18:c7:2b:36:0c:9c:7e:59:a4:b5:c9:3d:fd: 6b:83:77:69:7b:91:05:ca:ce:af:76:0b:c0:d3:cb: 48:ac:b3:1d:1a:8a:9d:71:da:86:e2:76:49:90:b0: 8b:eb:41:f3:c5:e2:41:1d:28:8c:bd:d9:2f:5b:26: dc:8e:da:5c:ca:16:02:57:15:6d:c6:27:11:3e:e4: 05:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:07:01:0A:69:EA:CC:1D:86:41:21:60:D1:60:82:40:E5:CA:43:E8 X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:86:bb:02:ca:c7:c4:63:ca:30:6f:83:81:62:ce:76:3a:04: 1e:b4:18:10:ed:6d:ef:c8:5f:84:a3:3a:d6:e0:64:3e:5f:8f: cc:fc:01:8f:81:4f:57:9b:45:93:4d:6d:d7:c1:cb:8d:c8:39: be:02:ee:34:28:15:01:90:77:e7:a3:e9:5b:54:f9:04:e7:1b: 39:a4:88:98:aa:65:4d:46:72:d9:a7:63:ba:b1:f6:48:71:16: 12:04:ec:44:07:34:dc:97:fc:91:03:0d:70:32:15:6e:c6:35: a6:f2:16:41:cd:62:40:ea:ea:cd:5b:6a:63:12:53:2a:6a:22: a7:ab:40:04:e1:8f:1f:98:7f:cf:f4:9e:7f:31:3f:ed:4a:c9: 0c:80:9f:1e:54:fd:fb:c3:1b:a1:dc:f7:09:78:df:59:4a:04: 96:14:fb:3c:1e:b7:e4:2e:c5:42:8a:20:4a:32:50:d1:bc:67: 82:96:ef:58:b1:4f:39:53:f0:ef:1a:f1:85:6c:3a:8d:05:f1: 01:b3:73:7b:a0:b6:1a:b9:d4:c4:53:2d:0c:41:fd:c1:e7:2e: 83:51:65:15:27:0d:4c:fa:e7:d4:93:2f:f6:af:6d:a6:70:41: d4:c5:5f:6e:db:74:4e:4a:08:11:7a:03:10:d0:26:c3:5c:0b: c3:a2:7e:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjUxMjA0MTc0MTA0WhcNMjUxMjExMTc0MTA0WjAYMRYwFAYD VQQDEw02OTMxYzdiMC0zZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuee8nLf4CADa6r2IvtO1HrsU3e+lH+ru+otmtH7WK+WnPIArXXvwcxhvS0X /Fpq6L14WRNgarFWDr/zAoEDR/+8I2HQGPe7qNruByNr6vE/3BPhnNyaRE7x9nfT qPNUoE1nw+GQWzzEmSzRqsmXy0L8xDitmBQXBvePm2jabUn4V08Rr0suUorxgY1R YCX8zaIi4YUo7DfhuO+ndlrRKMGvmvtUTRRjS0Dmk9S6hIkkmZ/auRjHKzYMnH5Z pLXJPf1rg3dpe5EFys6vdgvA08tIrLMdGoqdcdqG4nZJkLCL60HzxeJBHSiMvdkv WybcjtpcyhYCVxVtxicRPuQFDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIHAQpp 6swdhkEhYNFggkDlykPoMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3hrsCysfEY8owb4OBYs52OgQetBgQ7W3vyF+EozrW4GQ+X4/M/AGP gU9Xm0WTTW3XwcuNyDm+Au40KBUBkHfno+lbVPkE5xs5pIiYqmVNRnLZp2O6sfZI cRYSBOxEBzTcl/yRAw1wMhVuxjWm8hZBzWJA6urNW2pjElMqaiKnq0AE4Y8fmH/P 9J5/MT/tSskMgJ8eVP37wxuh3PcJeN9ZSgSWFPs8HrfkLsVCiiBKMlDRvGeClu9Y sU85U/DvGvGFbDqNBfEBs3N7oLYaudTEUy0MQf3B5y6DUWUVJw1M+ufUky/2r22m cEHUxV9u23ROSggRegMQ0CbDXAvDon6W -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:51 2025 by rpki-client