This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft File: JXqeaRTVinRbDuar5UjNvgIEiNQ.mft (raw, json) Hash identifier: fmKG8HxPs8rYMAz12fBvH/EjzPVExHsW/bazFx7V/HM= Subject key identifier: C3:8E:9C:AF:71:89:B4:41:F3:0E:1E:1E:D1:4A:13:41:5E:C6:61:20 Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Certificate serial: 02E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft Manifest number: 029A Signing time: Fri 05 Dec 2025 00:18:44 +0000 Manifest this update: Fri 05 Dec 2025 00:18:44 +0000 Manifest next update: Fri 12 Dec 2025 00:18:44 +0000 Files and hashes: 1: JXqeaRTVinRbDuar5UjNvgIEiNQ.crl (hash: pwi3embafO6v8okDN6TGUIx/uHeIffdCbpHdxoP3g3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 737 (0x2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Validity Not Before: Dec 5 00:18:44 2025 GMT Not After : Dec 12 00:18:44 2025 GMT Subject: CN=693224e4-a987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:2f:2a:c3:1b:6f:1f:01:6e:db:02:f0:6a: ae:0c:8f:c2:50:29:cd:62:87:bc:00:20:78:a7:c6: 45:42:23:19:ba:26:55:48:7a:b0:c3:47:dc:59:12: f6:40:e4:a6:1d:03:d2:da:f9:d0:f6:71:ef:34:83: bf:85:90:6d:df:a9:55:8d:8c:81:9a:70:9c:85:db: d0:02:36:68:c0:62:e8:ef:9d:16:71:42:af:3d:aa: d4:14:4f:c5:88:d2:70:93:4f:6a:18:78:49:c8:95: 80:50:7a:6d:58:51:1e:66:4e:6d:7f:a8:a9:aa:a2: 6a:33:9f:e9:53:1d:16:e0:67:4e:77:88:ba:e6:dd: ee:12:e5:0f:e1:9b:6a:5f:1d:b5:5e:6c:d6:d8:3e: fe:73:a5:66:6f:26:f9:55:5b:e3:fb:82:f3:a7:e1: 78:db:cc:37:6d:66:90:df:8e:ba:b9:6a:83:1e:a5: 18:ac:7d:a6:4b:14:7d:e1:2c:c8:23:cc:7d:80:bc: 3b:3c:a5:71:d5:04:16:4e:13:ad:8c:7f:0b:5d:17: c9:aa:a7:14:f1:10:a7:24:23:43:6a:ef:6c:6d:e4: b4:eb:c1:ad:12:44:e5:9c:47:fc:b9:b1:a0:d7:9f: ce:8e:02:da:fb:f5:e2:78:64:cf:40:0b:4f:1d:75: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8E:9C:AF:71:89:B4:41:F3:0E:1E:1E:D1:4A:13:41:5E:C6:61:20 X509v3 Authority Key Identifier: keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a9:08:ee:b1:09:31:a5:e2:1b:31:eb:7c:44:53:eb:9e:b2: 02:04:bd:64:09:5f:f9:19:cd:31:be:da:7e:17:25:ca:a3:37: da:3a:c6:19:69:f6:64:c1:75:bb:35:4f:88:e9:f7:2a:29:40: c0:2f:58:c8:d2:6d:5d:e1:ee:30:53:10:dd:98:4d:f6:51:5f: 26:26:36:bb:4b:68:f4:ff:3b:02:20:e1:a7:4c:09:7e:02:aa: 1a:bc:b0:a2:11:49:6c:c7:4e:ea:7e:98:92:b0:98:69:63:03: 7b:bb:e7:06:d6:60:74:bf:4d:eb:f5:8b:83:0d:d5:99:2a:f0: 48:28:79:ed:8b:83:52:b4:52:95:1a:a4:4c:30:48:3c:7d:6e: 47:c5:d5:1b:e0:ae:f6:9b:c3:1c:3d:10:96:9a:d3:9f:9c:8f: 00:25:70:39:b7:e4:07:d2:39:65:3a:c9:0f:82:cd:58:76:65: 61:eb:fc:0d:0a:bd:31:9f:72:1a:cc:c8:81:6d:44:75:ce:17: 49:0f:f0:31:1d:a8:7f:e1:ba:f7:46:cc:5e:53:6a:93:82:d5: 9b:65:c6:87:97:f5:c3:38:45:ea:17:63:43:8e:a6:2b:c5:ef: ec:12:a4:8f:4e:f6:f4:f6:96:61:4f:3c:17:79:6a:24:44:8d: 6c:45:f9:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF MDIwNDg4RDQwHhcNMjUxMjA1MDAxODQ0WhcNMjUxMjEyMDAxODQ0WjAYMRYwFAYD VQQDEw02OTMyMjRlNC1hOTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfIvKsMbbx8BbtsC8GquDI/CUCnNYoe8ACB4p8ZFQiMZuiZVSHqww0fcWRL2 QOSmHQPS2vnQ9nHvNIO/hZBt36lVjYyBmnCchdvQAjZowGLo750WcUKvParUFE/F iNJwk09qGHhJyJWAUHptWFEeZk5tf6ipqqJqM5/pUx0W4GdOd4i65t3uEuUP4Ztq Xx21XmzW2D7+c6Vmbyb5VVvj+4Lzp+F428w3bWaQ3466uWqDHqUYrH2mSxR94SzI I8x9gLw7PKVx1QQWThOtjH8LXRfJqqcU8RCnJCNDau9sbeS068GtEkTlnEf8ubGg 15/OjgLa+/XieGTPQAtPHXWN4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOOnK9x ibRB8w4eHtFKE0FexmEgMB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDE1RC82QzQ3NDkyMDczMTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmlu UmJEdWFyNVVqTnZnSUVpTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+qQjusQkxpeIbMet8RFPrnrICBL1kCV/5Gc0xvtp+FyXKozfaOsYZ afZkwXW7NU+I6fcqKUDAL1jI0m1d4e4wUxDdmE32UV8mJja7S2j0/zsCIOGnTAl+ AqoavLCiEUlsx07qfpiSsJhpYwN7u+cG1mB0v03r9YuDDdWZKvBIKHnti4NStFKV GqRMMEg8fW5HxdUb4K72m8McPRCWmtOfnI8AJXA5t+QH0jllOskPgs1YdmVh6/wN Cr0xn3IazMiBbUR1zhdJD/AxHah/4br3RsxeU2qTgtWbZcaHl/XDOEXqF2NDjqYr xe/sEqSPTvb09pZhTzwXeWokRI1sRfm4 -----END CERTIFICATE-----Generated at Sat Dec 6 22:42:11 2025 by rpki-client