This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json) Hash identifier: duvJMfXkqZ/qAMKKof8Ysp+d7Wmqceuq9JAU5Ha3oV0= Subject key identifier: D8:8B:FE:3A:03:54:C5:E5:A2:59:B3:CD:77:F3:0B:CF:B9:3A:93:FC Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0E2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft Manifest number: 0E24 Signing time: Sat 06 Dec 2025 17:15:34 +0000 Manifest this update: Sat 06 Dec 2025 17:15:33 +0000 Manifest next update: Sat 13 Dec 2025 17:15:33 +0000 Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: YQ9yQOcxRad9Dd2cTr+4S8JiwfrlJqLQ8pxCUEs0FCs=) 2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: cYdmS5wLlGFfq5Y1sGvt09KmgEcXdc6nHMkHCfvEFrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3627 (0xe2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: Dec 6 17:15:33 2025 GMT Not After : Dec 13 17:15:33 2025 GMT Subject: CN=693464b6-7718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:e8:9b:eb:1a:eb:2e:54:e8:e6:10:23:dc: bb:4e:2e:72:5d:9e:8e:e8:27:2b:7c:1b:99:c1:10: de:61:fe:e0:db:48:1b:13:2f:7e:f2:5e:cb:cc:84: 2c:55:4c:af:5a:31:c7:4a:90:2d:25:be:2d:a9:9a: d6:aa:5c:cb:65:70:51:b0:9b:fd:20:16:f8:85:d1: 91:c0:86:44:5e:a0:ca:9e:f6:ae:4a:39:0e:ce:1d: 74:0c:a8:c8:22:69:26:38:d4:96:4c:2f:f8:cf:bc: 33:44:f8:56:2b:48:f6:5d:ba:ca:db:6a:ee:c0:c3: 64:d3:6b:2c:c2:66:4e:c3:cd:a9:9d:74:1c:f3:ff: c8:16:f1:c3:ef:cf:0f:a3:29:1f:cb:fa:cb:c7:c8: 62:ea:5d:61:fc:e0:09:c5:c6:3c:be:41:5d:53:8d: 85:88:b7:eb:f7:f6:b4:84:d3:a1:cc:bb:7c:4f:e5: ed:fb:b2:6b:2a:31:cc:89:e2:6f:8c:c1:3b:8b:a9: fe:9c:a1:07:c8:e6:8f:52:44:d5:c7:32:c7:70:c7: 5d:e9:3c:06:9c:e6:8b:d7:be:f3:62:f3:d2:2d:e2: b2:dd:f1:73:a2:29:18:d8:e9:36:12:6f:8f:71:ad: f1:14:ca:17:18:12:aa:6c:bc:c8:7c:a4:09:6b:53: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8B:FE:3A:03:54:C5:E5:A2:59:B3:CD:77:F3:0B:CF:B9:3A:93:FC X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:70:bb:ee:89:b7:4a:67:a7:06:ee:da:5f:ec:5b:3c:0f:db: 49:20:c0:6c:28:36:93:df:e1:0e:df:b1:2b:5a:d0:95:cd:80: 62:56:2c:61:28:35:24:f3:9a:95:81:4f:43:ff:07:8e:87:f0: 33:3d:7a:10:ca:33:f8:03:a1:6a:bb:46:f5:09:b3:bf:61:3f: 74:4f:aa:fe:a3:7d:41:b9:6f:6e:f2:e4:c2:5a:39:95:96:aa: 91:2e:d4:69:54:68:b1:ec:f4:a5:0c:d0:a4:83:14:d9:68:20: 62:77:31:a3:28:52:76:23:2f:c8:b1:77:1b:2f:d6:86:b6:73: 59:8a:88:39:7d:4c:68:ad:1c:f0:7a:dc:83:75:d9:25:52:d8: 52:67:ee:3a:05:8b:37:9d:bd:c6:0b:a0:0f:16:66:43:fb:a6: ec:d2:f3:39:bb:7c:5a:19:fe:4b:9b:e0:b3:d2:e7:fe:ae:bb: 32:3c:d7:d5:d4:d9:4a:4f:02:71:b0:58:e5:3e:b8:36:c5:8e: a2:d5:d5:cd:6b:78:be:21:2f:39:1b:87:bc:ec:a5:65:8a:79: d1:7f:9e:41:c7:5c:82:61:b1:12:ba:4f:fe:7d:66:eb:55:3d: 5a:15:09:db:34:55:c5:55:c8:3f:d1:14:50:02:3c:83:85:e7: 59:da:e5:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjUxMjA2MTcxNTMzWhcNMjUxMjEzMTcxNTMzWjAYMRYwFAYD VQQDEw02OTM0NjRiNi03NzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTLom+sa6y5U6OYQI9y7Ti5yXZ6O6CcrfBuZwRDeYf7g20gbEy9+8l7LzIQs VUyvWjHHSpAtJb4tqZrWqlzLZXBRsJv9IBb4hdGRwIZEXqDKnvauSjkOzh10DKjI ImkmONSWTC/4z7wzRPhWK0j2XbrK22ruwMNk02sswmZOw82pnXQc8//IFvHD788P oykfy/rLx8hi6l1h/OAJxcY8vkFdU42FiLfr9/a0hNOhzLt8T+Xt+7JrKjHMieJv jME7i6n+nKEHyOaPUkTVxzLHcMdd6TwGnOaL177zYvPSLeKy3fFzoikY2Ok2Em+P ca3xFMoXGBKqbLzIfKQJa1MOBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiL/joD VMXlolmzzXfzC8+5OpP8MB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt STU0bWpFNEVhMnlNWDJHV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6cLvuibdKZ6cG7tpf7Fs8D9tJIMBsKDaT3+EO37ErWtCVzYBiVixh KDUk85qVgU9D/weOh/AzPXoQyjP4A6Fqu0b1CbO/YT90T6r+o31BuW9u8uTCWjmV lqqRLtRpVGix7PSlDNCkgxTZaCBidzGjKFJ2Iy/IsXcbL9aGtnNZiog5fUxorRzw etyDddklUthSZ+46BYs3nb3GC6APFmZD+6bs0vM5u3xaGf5Lm+Cz0uf+rrsyPNfV 1NlKTwJxsFjlPrg2xY6i1dXNa3i+IS85G4e87KVlinnRf55Bx1yCYbESuk/+fWbr VT1aFQnbNFXFVcg/0RRQAjyDhedZ2uUy -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:15 2025 by rpki-client