This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: 9om0U6QtvyDlSxkOwXM5uhpoqbvpJ0/RBHQ1fOSbUTk= Subject key identifier: EA:85:2C:25:77:7C:5A:B4:74:81:9A:0D:41:0A:A8:03:71:B1:BD:7D Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 07D1 Signing time: Tue 16 Dec 2025 20:54:01 +0000 Manifest this update: Tue 16 Dec 2025 20:54:00 +0000 Manifest next update: Tue 23 Dec 2025 20:54:00 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: yDborWT0GoCeMyzTf80c6x+vgl0Em37TcEu3m9VWndw=) 2: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: umP1jM7YynccOJheC11YvDxU2JNxDYT6vSOoFYsUbhA=) 3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: AlSQiWdBlK2D6fUaLlzUbdGdJEpnbwRmjimYOA50uq4=) 4: 7C76080E08D611EE82522448C4F9AE02.roa (hash: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 20:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Dec 16 20:54:00 2025 GMT Not After : Dec 23 20:54:00 2025 GMT Subject: CN=6941c6e9-1e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9b:6f:d8:c6:ff:2a:f0:3a:e4:05:e3:7f:a5: ce:dd:ad:51:9b:1f:7c:bc:ee:9c:46:76:65:92:1f: b8:ca:23:1c:18:16:b6:4e:c1:e3:71:06:e6:36:83: 8c:e2:6d:26:77:f5:49:e7:ab:fa:c6:3a:3f:e7:36: 44:89:ea:05:e6:b9:f3:3e:b9:df:fe:de:26:48:cc: 1b:ce:06:56:be:e6:ca:46:c2:79:05:b1:23:dc:e8: 43:63:0a:25:8c:29:81:99:8c:6e:37:b4:00:64:5f: 64:03:2b:15:e1:a6:0f:4f:d9:72:b5:c6:fe:3c:d4: 05:6a:3e:7a:55:a6:dc:db:5b:82:12:5b:80:42:2c: b8:02:e7:ab:91:e8:62:c3:b4:14:dd:22:0d:5e:23: 2d:ea:b7:73:f8:dd:1c:f0:07:2f:f5:69:12:53:89: ab:5c:48:7b:ff:1a:3c:8a:b0:cd:9d:06:a6:50:5b: 4c:1b:ee:a1:91:98:f2:2f:77:1f:d9:fa:95:4f:af: 88:6c:b1:cb:2c:c0:c3:1b:93:5e:1d:e0:67:50:f2: b7:c1:9b:39:db:29:88:56:23:14:0e:fd:df:7e:b1: a7:3e:a5:99:a5:5e:b5:01:e3:9f:2e:29:1c:06:a4: c0:b4:40:ce:bc:66:93:91:74:6d:67:eb:b9:45:6f: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:2C:25:77:7C:5A:B4:74:81:9A:0D:41:0A:A8:03:71:B1:BD:7D X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:10:d2:64:43:70:77:cf:f8:5e:de:96:fc:4b:16:57:8f:4b: e6:40:d7:a9:67:c9:25:22:45:12:e1:63:d7:02:51:cb:6c:ee: dc:5a:f5:c4:7d:7b:64:a7:e1:21:6a:5d:d5:60:4c:8a:82:5d: 2a:e1:1f:01:1a:f6:19:2b:04:c2:72:be:e3:a9:52:36:9a:59: 70:24:18:20:89:5d:6b:e0:c6:36:c0:6c:cf:44:bc:09:4f:8f: bd:e9:a6:05:f8:dd:77:95:2c:47:b7:97:73:48:6a:b3:bc:3f: f7:af:70:f9:a6:0b:d0:b3:b6:0b:47:f6:36:46:e2:93:5f:bb: bb:1e:30:91:37:c4:c3:3b:b7:37:9f:7f:c3:0d:99:a9:38:aa: b8:9f:53:ea:20:af:73:9f:69:b6:7e:95:8d:e2:c1:1b:e1:55: 7c:e7:d6:81:c3:aa:03:ec:da:26:42:33:dd:33:19:fe:b0:1a: 25:d2:3a:2d:99:64:ff:7b:60:f7:46:43:24:4d:1f:b4:ce:4d: 24:f6:7e:15:0d:a3:42:93:ab:01:30:d1:0b:f1:b9:ea:25:e5: 98:b9:92:c5:c3:35:02:8a:27:19:7c:47:fb:7a:cd:2b:57:59: 96:ce:ea:19:73:16:f6:07:06:be:44:bb:e2:f8:d6:c3:e5:f0: 93:46:ea:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjUxMjE2MjA1NDAwWhcNMjUxMjIzMjA1NDAwWjAYMRYwFAYD VQQDDA02OTQxYzZlOS0xZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ptv2Mb/KvA65AXjf6XO3a1Rmx98vO6cRnZlkh+4yiMcGBa2TsHjcQbmNoOM 4m0md/VJ56v6xjo/5zZEieoF5rnzPrnf/t4mSMwbzgZWvubKRsJ5BbEj3OhDYwol jCmBmYxuN7QAZF9kAysV4aYPT9lytcb+PNQFaj56Vabc21uCEluAQiy4Auerkehi w7QU3SINXiMt6rdz+N0c8Acv9WkSU4mrXEh7/xo8irDNnQamUFtMG+6hkZjyL3cf 2fqVT6+IbLHLLMDDG5NeHeBnUPK3wZs52ymIViMUDv3ffrGnPqWZpV61AeOfLikc BqTAtEDOvGaTkXRtZ+u5RW86qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqFLCV3 fFq0dIGaDUEKqANxsb19MB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARENJkQ3B3z/he3pb8SxZXj0vmQNepZ8klIkUS4WPXAlHLbO7cWvXE fXtkp+Ehal3VYEyKgl0q4R8BGvYZKwTCcr7jqVI2mllwJBggiV1r4MY2wGzPRLwJ T4+96aYF+N13lSxHt5dzSGqzvD/3r3D5pgvQs7YLR/Y2RuKTX7u7HjCRN8TDO7c3 n3/DDZmpOKq4n1PqIK9zn2m2fpWN4sEb4VV859aBw6oD7NomQjPdMxn+sBol0jot mWT/e2D3RkMkTR+0zk0k9n4VDaNCk6sBMNEL8bnqJeWYuZLFwzUCiicZfEf7es0r V1mWzuoZcxb2Bwa+RLvi+NbD5fCTRuqn -----END CERTIFICATE-----Generated at Thu Dec 18 07:38:27 2025 by rpki-client