This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json) Hash identifier: HogMeT+KnXt62SXvQWNvOw8tCiAzG10MYyBxk4Y0lWU= Subject key identifier: AA:64:92:66:6C:84:70:C1:C0:95:EB:7F:EF:1E:2F:D8:40:91:A9:6F Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft Manifest number: 018E Signing time: Fri 05 Dec 2025 01:48:34 +0000 Manifest this update: Fri 05 Dec 2025 01:48:34 +0000 Manifest next update: Fri 12 Dec 2025 01:48:34 +0000 Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: nqZkyutZPYRLrJDpnKLHdyFx24H8kgLGM+z/ObOpiuQ=) 2: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: qZFxZlK/s9XuD9ZwE9EGQRrcfUALnpisB8t9uJ9BMCk=) 3: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: YumOlFepqCcL4/FMk4aKjlchGI7ETUe9t0yQ6qtDs+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Validity Not Before: Dec 5 01:48:34 2025 GMT Not After : Dec 12 01:48:34 2025 GMT Subject: CN=693239f2-52e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8d:bb:13:52:ec:45:29:62:2b:84:0f:6b:6a: 9d:c0:a1:b8:b8:6d:47:60:a6:f5:74:77:30:dc:17: c2:3a:fe:38:4a:4b:17:d0:4e:5a:78:34:eb:6f:d4: 59:d4:64:63:10:b0:ec:ba:dc:ef:0b:58:7d:b3:81: e6:15:08:99:a1:83:a6:5e:a4:09:45:55:eb:02:02: ca:3f:3a:a3:eb:29:0e:81:72:99:e7:06:2d:2a:5e: 00:37:7b:09:35:f1:83:f5:98:63:55:86:85:0b:46: fc:1c:fd:25:54:72:b1:c3:1e:97:cc:ca:a2:6b:81: 9c:3b:3f:18:19:13:0a:23:9c:7a:bc:80:ec:7c:cb: 6a:53:27:4d:a7:97:69:d2:b2:d1:94:17:64:17:b6: 14:af:1a:0c:98:da:ca:6e:46:5f:5d:60:47:e0:ed: a1:fc:aa:94:74:ed:f9:cd:29:be:72:0a:af:7c:86: 0f:3d:ad:f9:04:3f:06:b0:64:02:c7:13:72:bf:af: 63:f2:96:8f:23:3d:58:15:7d:1e:04:6d:f9:ff:ec: d8:a2:c2:6a:a0:f0:29:6c:7a:c7:e5:04:f9:66:ce: e0:ba:1a:98:6f:ec:f7:fa:3b:94:61:3c:50:ad:7b: b8:67:58:08:35:34:55:74:78:f5:72:82:f7:c7:fd: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:64:92:66:6C:84:70:C1:C0:95:EB:7F:EF:1E:2F:D8:40:91:A9:6F X509v3 Authority Key Identifier: keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ed:66:a0:ae:8e:b7:0b:a5:00:46:ea:04:4b:3b:aa:52:68:25: f6:9d:7f:2f:f0:ce:3c:bc:a4:29:56:23:86:7c:f8:0d:dc:9f: cf:64:08:bf:d0:4e:64:b9:76:ba:2f:35:93:0b:3b:c5:0b:27: b1:78:9a:1b:68:4f:ae:f3:c5:5c:9a:40:29:62:a1:82:d3:3b: 72:7f:50:89:d9:65:99:d8:20:93:bd:af:83:79:40:fb:68:82: 0d:4b:7a:81:b6:af:b6:85:4c:7d:09:d3:b4:44:34:01:14:66: 51:25:9d:b8:07:d3:a1:37:3b:3a:47:99:85:93:53:e0:fd:92: 53:ad:e1:d7:9a:fe:2a:e6:2c:ca:60:eb:f4:df:3a:c7:fd:24: 90:70:20:87:89:9d:a8:c2:54:8e:7a:03:32:ba:c7:6c:ce:d1: ac:05:a9:f3:f7:0e:9a:4f:ec:27:0b:52:c3:e0:88:bc:08:cc: 69:41:02:3b:7b:46:25:30:fb:35:93:0e:1a:0c:8c:87:86:37: 40:e4:ae:a3:bf:3a:28:31:49:78:f6:b4:10:6a:94:fc:5b:7d: 87:40:1d:d5:e6:27:4a:ba:ff:15:2a:f5:27:f5:b2:ca:86:69: 41:03:75:20:eb:f7:d1:42:39:28:ce:4a:63:bf:fd:61:cf:27: 45:3b:f2:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZEQkQxMTAvBgNVBAUTKDI3MkQ3MUFENjI2NDU3NzVDQ0RGQkI1NzcwNDc4RTU5 NDNFQTY1OTUwHhcNMjUxMjA1MDE0ODM0WhcNMjUxMjEyMDE0ODM0WjAYMRYwFAYD VQQDEw02OTMyMzlmMi01MmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Y27E1LsRSliK4QPa2qdwKG4uG1HYKb1dHcw3BfCOv44SksX0E5aeDTrb9RZ 1GRjELDsutzvC1h9s4HmFQiZoYOmXqQJRVXrAgLKPzqj6ykOgXKZ5wYtKl4AN3sJ NfGD9ZhjVYaFC0b8HP0lVHKxwx6XzMqia4GcOz8YGRMKI5x6vIDsfMtqUydNp5dp 0rLRlBdkF7YUrxoMmNrKbkZfXWBH4O2h/KqUdO35zSm+cgqvfIYPPa35BD8GsGQC xxNyv69j8paPIz1YFX0eBG35/+zYosJqoPApbHrH5QT5Zs7guhqYb+z3+juUYTxQ rXu4Z1gINTRVdHj1coL3x/3HxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpkkmZs hHDBwJXrf+8eL9hAkalvMB8GA1UdIwQYMBaAFCctca1iZFd1zN+7V3BHjllD6mWV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC9GOUMwRTExRTc5 MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1YzWE0zN3RYY0VlT1dVUHFa WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p5MXhyV0prVjNYTTM3dFhjRWVPV1VQcVpaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRCRC9GOUMwRTExRTc5MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1Yz WE0zN3RYY0VlT1dVUHFaWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDtZqCujrcLpQBG6gRLO6pSaCX2nX8v8M48vKQpViOGfPgN3J/PZAi/ 0E5kuXa6LzWTCzvFCyexeJobaE+u88VcmkApYqGC0ztyf1CJ2WWZ2CCTva+DeUD7 aIINS3qBtq+2hUx9CdO0RDQBFGZRJZ24B9OhNzs6R5mFk1Pg/ZJTreHXmv4q5izK YOv03zrH/SSQcCCHiZ2owlSOegMyusdsztGsBanz9w6aT+wnC1LD4Ii8CMxpQQI7 e0YlMPs1kw4aDIyHhjdA5K6jvzooMUl49rQQapT8W32HQB3V5idKuv8VKvUn9bLK hmlBA3Ug6/fRQjkozkpjv/1hzydFO/Ia -----END CERTIFICATE-----Generated at Sat Dec 6 18:20:44 2025 by rpki-client