This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: hV6GIVcEa8saHzw8HLuiqU2XcGL8q5d6K+CLHSl+lj8= Subject key identifier: D5:30:AD:2A:7C:28:2D:D7:9C:9B:D0:43:76:0B:EC:78:00:58:3C:E5 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 07EB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 07CB Signing time: Thu 04 Dec 2025 20:21:29 +0000 Manifest this update: Thu 04 Dec 2025 20:21:29 +0000 Manifest next update: Thu 11 Dec 2025 20:21:29 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: 6Te3WpbcBZgvwBRjOwBDg3/fQ4XeeTEohLBaDHwmN4I=) 2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo=) 3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: AlSQiWdBlK2D6fUaLlzUbdGdJEpnbwRmjimYOA50uq4=) 4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: umP1jM7YynccOJheC11YvDxU2JNxDYT6vSOoFYsUbhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2027 (0x7eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Dec 4 20:21:29 2025 GMT Not After : Dec 11 20:21:29 2025 GMT Subject: CN=6931ed49-eaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:4d:c1:76:1e:56:bf:45:21:30:5c:87:57: 73:8b:1c:3b:12:5a:b1:77:07:eb:6e:80:88:df:fb: b6:4b:ac:c0:df:68:15:ed:5e:7b:ed:c5:99:05:40: 3c:76:46:8d:8a:38:d2:b0:92:69:5e:70:6a:4a:b1: 6b:fe:f9:63:b0:57:42:55:58:84:ac:bd:6c:49:0f: 4a:8f:86:06:27:eb:ad:d2:5a:e5:1f:99:ce:b6:38: ef:9e:a0:c6:cc:6c:08:72:b3:8a:c8:66:b9:65:77: 11:a0:f2:9a:5d:4f:87:b6:05:84:16:98:43:06:38: f5:2f:d7:4e:c4:3a:3a:c5:ef:6e:ed:b5:01:47:6b: 80:af:8f:5f:ff:7d:74:6a:e2:74:8d:1a:98:91:78: 86:cd:c5:42:7f:5f:ad:ff:b0:e2:58:3e:a5:b0:3a: de:4a:18:4f:28:be:1a:44:33:d6:eb:44:aa:8e:fb: f7:7a:8a:29:ea:f6:ba:75:df:16:30:ff:b0:f7:37: 15:1f:30:81:40:a1:32:f1:16:f3:6e:35:00:f0:89: 4c:56:76:bf:22:ea:5b:99:17:f6:1a:6a:c4:0b:c8: 09:49:a3:d7:62:3b:a7:36:9e:84:f4:57:d1:16:a6: 1d:f5:f5:47:13:79:85:62:2e:8f:4e:dc:9b:92:06: dc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:30:AD:2A:7C:28:2D:D7:9C:9B:D0:43:76:0B:EC:78:00:58:3C:E5 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:49:78:88:b9:19:30:ef:55:3c:2b:68:b7:9f:22:53:f7:98: 91:a1:50:7e:47:15:ad:c9:ef:8f:e6:41:20:de:a9:85:92:d6: 4e:0f:85:a5:64:c4:97:d5:54:6d:c3:ca:ea:92:f8:37:3c:2a: 8c:59:54:27:8f:81:93:5b:61:cd:f6:29:91:43:db:d6:9d:78: 8c:45:9d:ad:54:fd:72:54:bf:0c:62:df:63:a6:5a:b9:de:b8: b8:6e:57:27:41:c0:c3:ae:5a:69:29:f2:c7:0f:1d:8d:7a:53: 49:9a:a8:58:84:59:73:f2:5c:0c:db:de:c2:30:71:c6:62:cb: 9e:ab:f2:64:3d:6e:3c:7d:f0:76:9f:e1:7d:1e:29:fd:61:22: f6:9e:ba:46:0f:cb:9a:53:f6:1e:5a:c9:97:0f:58:ae:61:16: 33:ea:30:38:3b:0a:49:21:65:4d:f4:34:6d:71:07:2f:ba:bf: a7:b1:ae:71:13:50:02:10:37:b7:b1:9d:1c:c1:c0:de:e6:c9: 69:37:83:99:b0:78:81:5d:d9:6b:2e:ef:c6:68:74:83:7e:72: 8b:11:be:71:3e:14:46:8d:a7:d1:1a:f8:42:81:c3:ab:8b:15: 9c:e5:f6:a1:93:9f:26:11:8d:a7:c7:9b:ce:4b:c9:c0:8c:65: 15:f6:c8:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjUxMjA0MjAyMTI5WhcNMjUxMjExMjAyMTI5WjAYMRYwFAYD VQQDEw02OTMxZWQ0OS1lYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxVNwXYeVr9FITBch1dzixw7ElqxdwfrboCI3/u2S6zA32gV7V577cWZBUA8 dkaNijjSsJJpXnBqSrFr/vljsFdCVViErL1sSQ9Kj4YGJ+ut0lrlH5nOtjjvnqDG zGwIcrOKyGa5ZXcRoPKaXU+HtgWEFphDBjj1L9dOxDo6xe9u7bUBR2uAr49f/310 auJ0jRqYkXiGzcVCf1+t/7DiWD6lsDreShhPKL4aRDPW60Sqjvv3eoop6va6dd8W MP+w9zcVHzCBQKEy8RbzbjUA8IlMVna/IupbmRf2GmrEC8gJSaPXYjunNp6E9FfR FqYd9fVHE3mFYi6PTtybkgbcEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUwrSp8 KC3XnJvQQ3YL7HgAWDzlMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQSXiIuRkw71U8K2i3nyJT95iRoVB+RxWtye+P5kEg3qmFktZOD4Wl ZMSX1VRtw8rqkvg3PCqMWVQnj4GTW2HN9imRQ9vWnXiMRZ2tVP1yVL8MYt9jplq5 3ri4blcnQcDDrlppKfLHDx2NelNJmqhYhFlz8lwM297CMHHGYsueq/JkPW48ffB2 n+F9Hin9YSL2nrpGD8uaU/YeWsmXD1iuYRYz6jA4OwpJIWVN9DRtcQcvur+nsa5x E1ACEDe3sZ0cwcDe5slpN4OZsHiBXdlrLu/GaHSDfnKLEb5xPhRGjafRGvhCgcOr ixWc5fahk58mEY2nx5vOS8nAjGUV9siN -----END CERTIFICATE-----Generated at Sat Dec 6 19:01:22 2025 by rpki-client