This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: cPr7bG3qZ/p2XoWiOIQZulUxBpvW5cDhKAQ3i32cxKI= Subject key identifier: 13:D2:C9:C6:7A:69:56:7B:93:6D:10:33:54:D0:3E:10:3E:6C:8D:08 Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 02E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 02DB Signing time: Thu 04 Dec 2025 23:43:44 +0000 Manifest this update: Thu 04 Dec 2025 23:43:44 +0000 Manifest next update: Thu 11 Dec 2025 23:43:44 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: r+WcmYFlXzBLbFWfirliQ0Gda/YrjbS2BpQ6SadK/Bc=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: SkZtMkxJP09Yd2B5Onq8UT9Pvo6N0SWw7PtHEg8gn3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 737 (0x2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: Dec 4 23:43:44 2025 GMT Not After : Dec 11 23:43:44 2025 GMT Subject: CN=69321cb0-c346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:3e:94:ad:57:29:9b:ad:ec:b9:7f:ac:36:de: 89:70:e3:d4:eb:fc:4f:f9:10:73:a4:2c:b0:17:43: 19:c7:f4:94:d1:3e:72:14:cb:0b:3a:4b:04:65:9d: 6f:87:8d:eb:0d:43:eb:bc:98:ed:52:bb:39:fa:fd: 79:96:ac:90:4e:fe:c1:ee:f8:d2:dc:28:a0:34:2d: 8b:c2:b6:f8:06:cc:13:77:0c:a4:e8:bd:b2:83:99: a6:fb:ae:a0:4a:77:71:d8:8f:2b:f3:bb:90:f1:00: a8:e4:8a:b3:c0:e5:11:d4:9b:be:91:88:4b:e0:d9: 6b:a4:1a:9e:35:35:de:10:fb:a7:e9:0d:94:b2:1f: 81:ad:87:77:22:13:d6:b4:df:ca:30:b1:c5:c4:99: b2:53:6c:21:3b:78:fb:cd:8f:c0:e1:07:e5:6f:3c: 23:bf:4e:84:39:f2:b3:c9:05:2a:46:d6:8f:6b:ac: 60:01:17:ee:a9:a4:83:d3:57:0a:0d:f9:fe:1f:3c: 02:4e:23:fd:ed:89:14:aa:8a:b4:04:a6:77:7b:12: 40:fd:09:bf:d8:be:88:11:d1:4e:84:52:af:cb:8e: 5a:ba:d8:cb:39:30:ed:ff:1a:c4:34:c9:1d:42:5a: a4:98:81:0c:65:74:d8:05:04:7b:16:7f:25:0a:75: 74:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D2:C9:C6:7A:69:56:7B:93:6D:10:33:54:D0:3E:10:3E:6C:8D:08 X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:08:c7:52:8c:e7:79:10:d2:bc:5c:24:32:2a:c9:c8:d9:ff: bb:a8:91:92:c0:4c:e0:92:40:d6:42:29:f2:03:2d:9e:be:89: 4f:6e:a1:da:9b:5e:53:70:3e:1b:b5:51:40:25:e3:5e:4f:50: 9a:75:52:59:ca:7e:6b:be:64:9b:01:a6:70:34:fe:cc:ff:5c: 0e:d7:fb:4c:e3:5e:c6:95:e7:14:ee:c9:9c:fc:1b:4d:3c:b7: 94:e7:f9:83:91:24:18:cf:70:76:4b:18:47:0d:88:4d:cc:90: f5:d4:d4:62:74:d3:67:a4:65:c5:c0:09:ff:a7:8c:7a:d3:e7: 46:10:91:5e:64:29:c9:bb:d0:3f:5a:78:d5:a6:b8:ca:dd:a5: d7:bd:de:1c:3e:5c:89:c5:0f:e6:53:31:b6:4d:87:89:f1:12: b2:d2:24:32:52:67:bc:f9:fe:8a:ce:e9:0d:44:b1:89:f8:df: 00:af:8a:bd:2d:cc:2c:b0:24:6c:30:1f:27:2a:5f:ea:ba:ec: 21:ea:d9:02:49:a5:e2:c5:4f:e2:ae:88:16:aa:ef:0d:10:90: 48:70:04:cb:eb:3b:92:dd:6d:45:cb:75:4f:8e:f3:25:0e:73: 3f:1a:32:44:1f:ee:9e:d6:fd:f0:19:65:da:0e:40:2e:e4:10: 60:7f:74:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjUxMjA0MjM0MzQ0WhcNMjUxMjExMjM0MzQ0WjAYMRYwFAYD VQQDEw02OTMyMWNiMC1jMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+j6UrVcpm63suX+sNt6JcOPU6/xP+RBzpCywF0MZx/SU0T5yFMsLOksEZZ1v h43rDUPrvJjtUrs5+v15lqyQTv7B7vjS3CigNC2Lwrb4BswTdwyk6L2yg5mm+66g Sndx2I8r87uQ8QCo5IqzwOUR1Ju+kYhL4NlrpBqeNTXeEPun6Q2Ush+BrYd3IhPW tN/KMLHFxJmyU2whO3j7zY/A4Qflbzwjv06EOfKzyQUqRtaPa6xgARfuqaSD01cK Dfn+HzwCTiP97YkUqoq0BKZ3exJA/Qm/2L6IEdFOhFKvy45autjLOTDt/xrENMkd QlqkmIEMZXTYBQR7Fn8lCnV0lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPSycZ6 aVZ7k20QM1TQPhA+bI0IMB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzCMdSjOd5ENK8XCQyKsnI2f+7qJGSwEzgkkDWQinyAy2evolPbqHa m15TcD4btVFAJeNeT1CadVJZyn5rvmSbAaZwNP7M/1wO1/tM417GlecU7smc/BtN PLeU5/mDkSQYz3B2SxhHDYhNzJD11NRidNNnpGXFwAn/p4x60+dGEJFeZCnJu9A/ WnjVprjK3aXXvd4cPlyJxQ/mUzG2TYeJ8RKy0iQyUme8+f6KzukNRLGJ+N8Ar4q9 LcwssCRsMB8nKl/quuwh6tkCSaXixU/irogWqu8NEJBIcATL6zuS3W1Fy3VPjvMl DnM/GjJEH+6e1v3wGWXaDkAu5BBgf3T+ -----END CERTIFICATE-----Generated at Sat Dec 6 17:43:39 2025 by rpki-client