This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft File: jsTj-v1QkSiuwsCHnmr5E54V6rY.mft (raw, json) Hash identifier: XRjDeR87b1PIM3wu//z5Pp6EjxW396X4os/GTwjo7Rw= Subject key identifier: 04:64:E7:C2:BB:2B:8A:CB:2E:56:C8:3C:BB:75:CC:52:BC:72:70:A9 Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 Certificate issuer: /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft Manifest number: 02A4 Signing time: Thu 04 Dec 2025 23:51:28 +0000 Manifest this update: Thu 04 Dec 2025 23:51:27 +0000 Manifest next update: Thu 11 Dec 2025 23:51:27 +0000 Files and hashes: 1: jsTj-v1QkSiuwsCHnmr5E54V6rY.crl (hash: J7DW1JDL8PtE2OfvRyID5ESmUeCW8dELWErgydD76TM=) 2: DD530B9222B111EDA3B74073C4F9AE02.roa (hash: caiPqFBT56PFVGqwt7KrkmELhW0jd+zU9JbUXBLl7o4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142AA2, serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Validity Not Before: Dec 4 23:51:27 2025 GMT Not After : Dec 11 23:51:27 2025 GMT Subject: CN=69321e7f-6bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3d:9e:ca:17:f3:4e:a0:c3:64:d4:ce:8e:34: 9b:2b:d4:6f:10:35:4e:1c:7b:6a:a3:77:73:62:80: 18:ca:0e:5c:57:0f:68:7f:29:11:c2:45:f7:59:36: 64:c1:83:27:af:b1:19:a7:5f:a4:07:a7:eb:26:c4: 5a:2a:c3:9e:67:4b:6f:10:6c:4d:4e:0c:27:bd:38: 1b:60:53:fd:20:e3:3b:dd:c3:31:36:80:45:6d:52: ee:ea:e2:17:80:eb:ef:53:02:29:60:70:24:83:48: 0c:70:37:1f:25:15:fa:8d:b5:40:03:56:60:81:2a: 02:04:99:3f:54:27:fe:69:b8:d5:e9:62:00:08:ad: a7:7f:14:ca:f5:81:0f:e9:0e:4d:6b:92:32:17:59: ab:a4:43:08:15:f6:5a:d2:bc:f8:f3:08:46:f3:88: 1b:4c:89:98:7a:50:66:40:66:4f:f4:09:4a:a3:ce: 7e:98:fe:a5:71:5c:74:3f:a7:e7:03:7c:ad:38:2b: 94:cf:2e:0c:91:f3:40:72:5c:4c:cc:6f:51:01:72: 0d:1c:31:7c:e2:b7:ef:3b:b1:03:1f:96:46:0c:55: 74:e6:f3:c8:20:06:10:f2:28:9f:8f:b5:4c:18:c1: f1:13:3f:3a:62:d8:b2:99:e0:d0:c2:be:dc:0c:0e: 6e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:64:E7:C2:BB:2B:8A:CB:2E:56:C8:3C:BB:75:CC:52:BC:72:70:A9 X509v3 Authority Key Identifier: keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d6:66:68:33:82:7a:93:25:46:69:61:b9:7c:d9:1b:65:68: b0:69:31:7f:9b:e4:f1:d5:65:82:69:4d:ac:37:64:6b:f9:8a: 80:5b:90:4f:f1:a9:0a:3f:6c:8a:42:80:00:9c:45:4b:a2:e8: 4e:0f:8c:b4:58:33:81:5d:18:dc:72:95:1d:17:be:5b:7c:23: 9c:51:9f:70:04:97:e1:8e:6c:fc:0a:b9:e3:cb:28:30:e0:4f: 2a:37:c3:db:15:81:f0:26:65:f4:77:43:a4:b4:44:70:0f:5c: aa:aa:c2:b5:e5:68:64:76:79:f3:be:40:fb:b3:ec:42:ea:1b: 64:23:c7:1b:6f:69:63:c3:47:39:e4:f4:41:5e:ce:de:8c:b0: 82:9e:f1:8c:2f:68:64:90:c1:dc:e4:98:81:96:9c:a4:46:e2: 8e:c2:ec:e5:62:ec:b9:67:e9:53:6e:41:61:44:84:be:c2:36: de:c3:eb:83:9c:64:ea:82:c8:e0:8d:4d:93:02:27:07:98:b8: e1:00:57:e9:5f:2c:19:f0:36:93:43:6e:4a:1e:82:cb:30:47: 47:01:72:a7:2a:14:94:8d:1a:4f:82:47:a1:61:b9:82:a5:38: 62:de:cc:4c:10:a8:39:db:2e:e6:dd:cb:ee:41:20:5b:55:0e: 72:ad:23:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBQTIxMTAvBgNVBAUTKDhFQzRFM0ZBRkQ1MDkxMjhBRUMyQzA4NzlFNkFGOTEz OUUxNUVBQjYwHhcNMjUxMjA0MjM1MTI3WhcNMjUxMjExMjM1MTI3WjAYMRYwFAYD VQQDEw02OTMyMWU3Zi02YmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8z2eyhfzTqDDZNTOjjSbK9RvEDVOHHtqo3dzYoAYyg5cVw9ofykRwkX3WTZk wYMnr7EZp1+kB6frJsRaKsOeZ0tvEGxNTgwnvTgbYFP9IOM73cMxNoBFbVLu6uIX gOvvUwIpYHAkg0gMcDcfJRX6jbVAA1ZggSoCBJk/VCf+abjV6WIACK2nfxTK9YEP 6Q5Na5IyF1mrpEMIFfZa0rz48whG84gbTImYelBmQGZP9AlKo85+mP6lcVx0P6fn A3ytOCuUzy4MkfNAclxMzG9RAXINHDF84rfvO7EDH5ZGDFV05vPIIAYQ8iifj7VM GMHxEz86YtiymeDQwr7cDA5umQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARk58K7 K4rLLlbIPLt1zFK8cnCpMB8GA1UdIwQYMBaAFI7E4/r9UJEorsLAh55q+ROeFeq2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkFBMi8zREE4QTk0NDIy QTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtTaXV3c0NIbm1yNUU1NFY2 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzVGotdjFRa1NpdXdzQ0hubXI1RTU0VjZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkFBMi8zREE4QTk0NDIyQTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtT aXV3c0NIbm1yNUU1NFY2clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq1mZoM4J6kyVGaWG5fNkbZWiwaTF/m+Tx1WWCaU2sN2Rr+YqAW5BP 8akKP2yKQoAAnEVLouhOD4y0WDOBXRjccpUdF75bfCOcUZ9wBJfhjmz8Crnjyygw 4E8qN8PbFYHwJmX0d0OktERwD1yqqsK15WhkdnnzvkD7s+xC6htkI8cbb2ljw0c5 5PRBXs7ejLCCnvGML2hkkMHc5JiBlpykRuKOwuzlYuy5Z+lTbkFhRIS+wjbew+uD nGTqgsjgjU2TAicHmLjhAFfpXywZ8DaTQ25KHoLLMEdHAXKnKhSUjRpPgkehYbmC pThi3sxMEKg52y7m3cvuQSBbVQ5yrSM0 -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:51 2025 by rpki-client