This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: EC1cG+m2acU65LWIYrNU701wIuhxhtK1dlbHshSyigU= Subject key identifier: AA:57:E6:8F:61:B2:04:22:7A:8A:7A:C4:90:5E:4C:A7:7B:40:2D:57 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 09C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 09B1 Signing time: Sat 06 Dec 2025 19:12:45 +0000 Manifest this update: Sat 06 Dec 2025 19:12:44 +0000 Manifest next update: Sat 13 Dec 2025 19:12:44 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: YTRsuyfDWPO8OTfcuXDg3w1APdQTp3++yvSchdlVfPo=) 2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: OZf2rTXHu96kBPvuzB26Cb7vuaAcJLdb6hdwqLabxDY=) 3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: G50IgyVtJtFjbRe7GXXuAS+YYFAlwWX6MNmoWMFn7H8=) 4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: UDel8k9RgGctC+s9ZLuCO5lpL1soQPWhGXE8LLODT5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2502 (0x9c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Dec 6 19:12:44 2025 GMT Not After : Dec 13 19:12:44 2025 GMT Subject: CN=6934802c-5a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6d:3e:c7:5b:b4:17:df:b1:74:83:6a:2e:69: 7d:29:53:20:92:af:17:38:0f:24:01:c5:90:82:26: dd:d0:12:d3:46:df:3c:9b:62:22:b8:af:68:ee:34: 0d:76:af:10:c7:7c:dd:e2:b2:1f:de:05:eb:54:28: 09:f9:6f:6f:96:fe:3d:27:c4:d0:e2:7e:f4:01:2f: ce:08:c7:94:e0:e5:08:6f:69:48:0f:8e:f8:33:b1: 3c:9b:f1:b5:c6:c8:09:3c:4e:5d:6a:a5:8b:b7:ee: 74:31:a9:42:41:a6:a8:1d:ff:af:f9:d1:51:33:7c: 87:06:1e:7e:f1:45:a5:a3:16:cc:49:4f:da:7a:f0: d4:32:42:ce:a0:ef:b9:8f:61:34:af:c2:4a:cc:85: cb:1a:e9:46:59:5c:42:b7:da:c2:6a:d5:e5:b4:3a: 75:42:2f:7f:47:86:60:87:5f:aa:e3:dd:20:d6:7c: 8b:24:11:81:2a:15:64:71:f5:4b:7a:c8:f5:ab:1e: 18:b3:44:61:1e:95:79:6f:e6:d7:b5:25:df:a3:8f: c4:96:78:f2:2f:dc:68:ed:7e:bb:cd:12:8c:58:2e: 04:25:76:cf:20:3e:64:4b:7f:f0:87:ad:16:e3:78: 90:5b:2e:d7:f8:8d:d4:3f:46:b8:95:af:6b:85:1b: 60:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:57:E6:8F:61:B2:04:22:7A:8A:7A:C4:90:5E:4C:A7:7B:40:2D:57 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:70:71:35:e2:bb:6a:f6:0f:d4:04:23:5e:31:de:12:49:80: 01:e9:b0:82:6f:e2:44:cc:e4:85:49:84:da:47:9f:ff:6f:94: ce:12:eb:f4:4e:bc:d8:38:18:f8:bd:8d:dc:11:de:b5:86:6c: b7:44:83:72:4f:42:73:21:4c:3f:76:4e:fb:cd:79:44:07:0a: 42:95:00:18:57:a7:fe:1e:1c:88:52:f4:2c:62:1a:02:30:e6: 61:8e:10:4d:7f:fc:69:cc:ca:94:00:26:27:bc:fa:b6:ed:83: 68:54:bd:a0:dd:53:b5:aa:b6:88:27:ff:39:d6:fc:90:aa:2a: 53:9f:a4:61:62:bf:bc:2f:a3:2f:e5:a5:52:e1:ff:ba:c7:fc: 59:e3:e4:b6:3c:9d:e6:f0:b6:11:35:e6:0b:ab:33:e3:77:dd: 0d:f8:24:08:1a:f1:fd:97:68:0e:51:46:ea:3d:4a:a3:5e:f5: 96:a8:c3:0a:09:20:f5:3f:36:db:8d:df:a4:29:c3:38:48:90: 25:60:8b:f4:97:1b:7b:01:0f:89:1c:5b:fa:fd:51:d5:9a:ca: f5:af:55:43:ba:59:88:91:ab:99:da:90:35:a6:5f:ab:c8:56: 4a:99:d6:dd:f3:28:4b:e4:c2:4d:9f:c6:5e:28:a8:59:19:bd: b3:ee:82:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjUxMjA2MTkxMjQ0WhcNMjUxMjEzMTkxMjQ0WjAYMRYwFAYD VQQDEw02OTM0ODAyYy01YTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA120+x1u0F9+xdINqLml9KVMgkq8XOA8kAcWQgibd0BLTRt88m2IiuK9o7jQN dq8Qx3zd4rIf3gXrVCgJ+W9vlv49J8TQ4n70AS/OCMeU4OUIb2lID474M7E8m/G1 xsgJPE5daqWLt+50MalCQaaoHf+v+dFRM3yHBh5+8UWloxbMSU/aevDUMkLOoO+5 j2E0r8JKzIXLGulGWVxCt9rCatXltDp1Qi9/R4Zgh1+q490g1nyLJBGBKhVkcfVL esj1qx4Ys0RhHpV5b+bXtSXfo4/ElnjyL9xo7X67zRKMWC4EJXbPID5kS3/wh60W 43iQWy7X+I3UP0a4la9rhRtgJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpX5o9h sgQieop6xJBeTKd7QC1XMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCccHE14rtq9g/UBCNeMd4SSYAB6bCCb+JEzOSFSYTaR5//b5TOEuv0 TrzYOBj4vY3cEd61hmy3RINyT0JzIUw/dk77zXlEBwpClQAYV6f+HhyIUvQsYhoC MOZhjhBNf/xpzMqUACYnvPq27YNoVL2g3VO1qraIJ/851vyQqipTn6RhYr+8L6Mv 5aVS4f+6x/xZ4+S2PJ3m8LYRNeYLqzPjd90N+CQIGvH9l2gOUUbqPUqjXvWWqMMK CSD1Pzbbjd+kKcM4SJAlYIv0lxt7AQ+JHFv6/VHVmsr1r1VDulmIkauZ2pA1pl+r yFZKmdbd8yhL5MJNn8ZeKKhZGb2z7oJq -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:54 2025 by rpki-client