This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft File: JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json) Hash identifier: Abp1+aCZbcBz6AANdNInkld/+s+mXeD3tp7sPGrHOm8= Subject key identifier: 65:B5:D2:5B:A8:2E:27:D6:41:96:39:EB:01:E6:DA:B8:E3:7D:9E:00 Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft Manifest number: 0781 Signing time: Sat 06 Dec 2025 20:36:31 +0000 Manifest this update: Sat 06 Dec 2025 20:36:30 +0000 Manifest next update: Sat 13 Dec 2025 20:36:30 +0000 Files and hashes: 1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: SnJt6tA12cWHG98oNXgo5edy7emsbMpR/PULz6SUrhY=) 2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: Q4VBl6t7IxgDUfIveQUTPQulCitna2Ej85qnHBLGKO8=) 3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: R4hJWTd6VbmXqGeT9fBJVuJc7yCjp6bOssVRsthNf94=) 4: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: 9avL2Ad9M1e51xqr+g4Ok7rpofizFz/lEbEixkRcZkk=) 5: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: YBYY6RrsWzS4ijJ6zt44OGC0XzSR6EQ0weLmwo+ie00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Validity Not Before: Dec 6 20:36:30 2025 GMT Not After : Dec 13 20:36:30 2025 GMT Subject: CN=693493cf-db0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:73:b7:9e:40:5e:bb:a5:b9:0a:c1:98:e9: 69:23:30:66:b9:d9:07:e7:cd:bd:14:f1:b7:5a:f1: d4:6e:27:9c:e6:d9:b1:61:9e:69:41:3f:4b:ba:6d: 55:0a:96:d3:10:04:8e:c7:97:bf:a8:2e:9b:c7:97: 73:01:f9:81:d5:4f:af:0f:b7:e1:eb:ea:28:39:e7: de:7e:7c:04:aa:73:eb:7a:4c:98:9d:19:22:66:24: 9a:72:0b:9d:67:a9:79:13:0f:33:ae:49:d4:ea:cb: 57:31:d4:d3:96:75:6c:2f:59:37:f2:cd:2d:ce:c8: cf:cf:5d:9c:0b:90:4a:29:8c:07:d0:0d:cf:bf:8a: 1f:c8:5b:39:62:d5:dd:fc:6b:10:e6:fe:b0:ce:ed: 7a:14:38:c3:b5:5b:b6:63:52:34:f8:60:5c:3a:83: 79:48:5c:f1:9f:02:09:73:69:f4:65:4b:37:04:66: 3c:e3:6a:72:30:ca:5d:3a:97:78:07:eb:99:f0:62: f4:2a:a9:60:5b:08:5e:d0:3e:62:11:48:24:82:f9: f5:47:e3:0c:88:61:4a:76:0e:38:9f:6a:83:11:21: 18:2a:d3:5a:58:0b:c7:0d:5d:d4:ef:c0:ff:0c:ed: ad:dc:68:f1:57:44:3d:3d:41:25:c4:dd:45:cb:4a: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B5:D2:5B:A8:2E:27:D6:41:96:39:EB:01:E6:DA:B8:E3:7D:9E:00 X509v3 Authority Key Identifier: keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f3:31:83:d4:8e:21:d2:aa:40:6e:a7:f9:ad:75:1f:58:4c: 06:ce:c7:bc:05:88:46:e5:6c:89:34:a8:1b:bf:54:bb:b8:2e: f2:66:bf:d7:b8:21:a3:89:77:0a:4e:b1:5d:d0:f3:fb:21:44: 24:75:b9:03:21:b6:ae:7d:1b:d9:a2:8d:8a:3d:be:86:90:96: fd:aa:e5:82:d0:78:04:3b:0e:f8:c3:7b:c4:fc:5a:0c:9b:ad: 1f:bd:9e:e4:44:a1:cb:fd:af:db:6e:35:e2:9e:5e:5d:5e:d9: 59:42:d8:98:0b:50:75:31:7e:ba:8d:62:67:ff:d5:1b:b7:0c: b4:aa:12:25:35:55:d2:9d:00:bb:e1:2f:86:4b:a7:98:28:81: 73:20:60:b2:d2:45:d5:a4:2c:2e:d0:d6:22:98:94:83:d8:45: d8:d0:c9:e9:87:47:aa:08:cf:5a:1e:0a:88:e1:ab:2b:87:60: 87:1a:f4:4a:77:b8:42:4f:51:fc:1b:e9:cd:5c:52:61:24:ad: f7:47:a7:79:7e:9d:fe:ef:08:bf:52:30:df:6b:ad:da:68:20: dd:a0:84:22:7d:fd:79:af:96:57:f5:32:ba:42:ae:79:e5:b4: 5c:a4:70:56:d3:41:54:23:bc:86:20:11:23:54:3e:b6:89:44: 21:47:8f:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx N0RENjc5NkYwHhcNMjUxMjA2MjAzNjMwWhcNMjUxMjEzMjAzNjMwWjAYMRYwFAYD VQQDEw02OTM0OTNjZi1kYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1Rzt55AXruluQrBmOlpIzBmudkH5829FPG3WvHUbiec5tmxYZ5pQT9Lum1V CpbTEASOx5e/qC6bx5dzAfmB1U+vD7fh6+ooOefefnwEqnPrekyYnRkiZiSacgud Z6l5Ew8zrknU6stXMdTTlnVsL1k38s0tzsjPz12cC5BKKYwH0A3Pv4ofyFs5YtXd /GsQ5v6wzu16FDjDtVu2Y1I0+GBcOoN5SFzxnwIJc2n0ZUs3BGY842pyMMpdOpd4 B+uZ8GL0KqlgWwhe0D5iEUgkgvn1R+MMiGFKdg44n2qDESEYKtNaWAvHDV3U78D/ DO2t3GjxV0Q9PUElxN1Fy0q/VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGW10luo LifWQZY56wHm2rjjfZ4AMB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NThGRi8xMjA0QUIzQzNDM0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3Zmxx OFpRdHZfRHRUNHdYM1dlVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ8zGD1I4h0qpAbqf5rXUfWEwGzse8BYhG5WyJNKgbv1S7uC7yZr/X uCGjiXcKTrFd0PP7IUQkdbkDIbaufRvZoo2KPb6GkJb9quWC0HgEOw74w3vE/FoM m60fvZ7kRKHL/a/bbjXinl5dXtlZQtiYC1B1MX66jWJn/9Ubtwy0qhIlNVXSnQC7 4S+GS6eYKIFzIGCy0kXVpCwu0NYimJSD2EXY0Mnph0eqCM9aHgqI4asrh2CHGvRK d7hCT1H8G+nNXFJhJK33R6d5fp3+7wi/UjDfa63aaCDdoIQiff15r5ZX9TK6Qq55 5bRcpHBW00FUI7yGIBEjVD62iUQhR4/f -----END CERTIFICATE-----Generated at Sun Dec 7 03:44:34 2025 by rpki-client