This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft File: jhRqR_5i0JoyZs4IOlecrROlgGY.mft (raw, json) Hash identifier: H0qwzyK1LEad9rGwZ0oFlyNW15Kyg8Roro3o7g2shGo= Subject key identifier: B6:89:04:73:92:AA:F0:F0:22:83:66:5D:B3:92:CB:3F:2A:25:55:59 Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 Certificate issuer: /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft Manifest number: 01DA Signing time: Fri 05 Dec 2025 01:01:31 +0000 Manifest this update: Fri 05 Dec 2025 01:01:30 +0000 Manifest next update: Fri 12 Dec 2025 01:01:30 +0000 Files and hashes: 1: jhRqR_5i0JoyZs4IOlecrROlgGY.crl (hash: MRCVBrXFwNfjkBrHUJmeOtHSieCgpY13RCnpzLD32LM=) 2: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (hash: yNzSo18Zr+VZZ8+QcBD6VKrhKtuzioN93vYAY/qtNGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570C9, serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Validity Not Before: Dec 5 01:01:30 2025 GMT Not After : Dec 12 01:01:30 2025 GMT Subject: CN=69322eeb-025f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:54:91:e0:d8:fa:a3:68:5c:8d:c3:fa:51: 2d:a2:6d:9c:f7:32:cd:13:22:95:cd:3b:a3:14:e5: 37:bc:d3:1f:c1:cb:6f:a7:84:9a:6a:8f:9c:2a:fc: 1a:4f:f0:ff:4a:c2:c1:00:c9:c2:96:e6:a2:f0:63: f5:db:16:24:45:a9:9a:f5:00:17:43:ec:d8:78:e8: d1:fb:e5:80:15:3d:51:47:8a:4b:b3:27:64:93:3c: 50:13:84:fa:08:99:00:3f:a5:82:e4:86:89:46:78: d8:9d:83:3f:f7:cd:e4:83:c1:3d:8e:bf:27:61:a3: 4f:ba:93:9d:86:73:cb:40:82:3b:1e:1e:e5:ad:a7: b0:da:db:bd:e7:79:6f:27:c7:f7:a7:d7:a7:f4:c8: b5:0c:a6:89:02:8a:03:72:f1:3b:cc:12:bf:0a:99: 19:95:93:92:6c:b6:bb:3e:e6:08:63:ab:ad:18:06: a1:e3:c7:bd:d5:8e:b8:b5:3c:f5:a6:b1:30:ad:d3: c3:a8:34:11:8c:bd:da:f1:db:40:d0:2b:d7:b0:f5: 45:24:fd:09:bc:91:56:14:d8:22:a9:c8:24:ea:53: 9f:bf:f2:92:40:51:87:27:24:1d:50:c8:4e:2f:01: 34:ec:de:e4:6e:00:8c:44:e6:b1:64:c8:8b:51:e0: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:89:04:73:92:AA:F0:F0:22:83:66:5D:B3:92:CB:3F:2A:25:55:59 X509v3 Authority Key Identifier: keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:4a:1e:98:d6:51:e3:c0:81:1d:d6:07:77:56:ce:4f:85:11: 58:d2:57:32:b9:9e:ce:2b:47:c8:18:0f:5d:58:3a:6e:75:5c: a6:41:a2:6a:17:e2:8a:63:8a:22:81:31:db:28:f3:56:10:96: 65:e0:ae:77:52:47:3a:6f:55:e9:90:f3:39:3b:bc:b2:5f:4e: e0:19:88:41:6d:81:91:bb:f0:e7:20:7a:0a:5b:19:10:7d:d4: e4:4f:1c:2d:5c:33:15:8d:10:2b:43:30:65:2a:ad:8b:38:e3: c1:83:2a:c9:55:cb:61:6b:01:57:ac:b0:15:1f:0f:cc:4d:e4: ea:49:b4:90:69:87:2d:98:c5:18:db:d5:c4:bd:dd:e5:1c:04: a8:d0:11:29:f2:f1:43:b5:39:1b:e1:e5:e1:8a:c2:4d:2c:37: 06:01:c7:a9:13:d8:5d:7e:50:4a:86:ea:bb:6d:e3:57:a7:a6: dc:5a:e7:ec:37:2b:fd:38:27:2c:0a:89:00:70:19:11:95:1d: db:21:22:37:87:c3:1f:8a:b7:a5:3d:fb:65:2c:6b:91:89:09: 54:f4:c9:ea:42:4b:d8:2a:58:74:e5:7b:a9:50:b4:15:6a:73: 48:d8:b1:a8:2c:45:c0:89:24:16:58:26:02:60:75:d1:05:40: 54:04:ea:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwQzkxMTAvBgNVBAUTKDhFMTQ2QTQ3RkU2MkQwOUEzMjY2Q0UwODNBNTc5Q0FE MTNBNTgwNjYwHhcNMjUxMjA1MDEwMTMwWhcNMjUxMjEyMDEwMTMwWjAYMRYwFAYD VQQDEw02OTMyMmVlYi0wMjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIFUkeDY+qNoXI3D+lEtom2c9zLNEyKVzTujFOU3vNMfwctvp4Saao+cKvwa T/D/SsLBAMnCluai8GP12xYkRama9QAXQ+zYeOjR++WAFT1RR4pLsydkkzxQE4T6 CJkAP6WC5IaJRnjYnYM/983kg8E9jr8nYaNPupOdhnPLQII7Hh7lraew2tu953lv J8f3p9en9Mi1DKaJAooDcvE7zBK/CpkZlZOSbLa7PuYIY6utGAah48e91Y64tTz1 prEwrdPDqDQRjL3a8dtA0CvXsPVFJP0JvJFWFNgiqcgk6lOfv/KSQFGHJyQdUMhO LwE07N7kbgCMROaxZMiLUeCaYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaJBHOS qvDwIoNmXbOSyz8qJVVZMB8GA1UdIwQYMBaAFI4Uakf+YtCaMmbOCDpXnK0TpYBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzBDOS8wMjI3QjlBRUZB MjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBKb3laczRJT2xlY3JST2xn R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poUnFSXzVpMEpveVpzNElPbGVjclJPbGdHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzBDOS8wMjI3QjlBRUZBMjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBK b3laczRJT2xlY3JST2xnR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoSh6Y1lHjwIEd1gd3Vs5PhRFY0lcyuZ7OK0fIGA9dWDpudVymQaJq F+KKY4oigTHbKPNWEJZl4K53Ukc6b1XpkPM5O7yyX07gGYhBbYGRu/DnIHoKWxkQ fdTkTxwtXDMVjRArQzBlKq2LOOPBgyrJVcthawFXrLAVHw/MTeTqSbSQaYctmMUY 29XEvd3lHASo0BEp8vFDtTkb4eXhisJNLDcGAcepE9hdflBKhuq7beNXp6bcWufs Nyv9OCcsCokAcBkRlR3bISI3h8MfirelPftlLGuRiQlU9MnqQkvYKlh05XupULQV anNI2LGoLEXAiSQWWCYCYHXRBUBUBOom -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:23 2025 by rpki-client