This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: 8qcSZzQxHibwwxzEdPsHWG4IdpPDh/vCwX9AKBLC20M= Subject key identifier: F3:E9:50:D2:49:9E:52:40:21:23:69:37:6F:11:DF:28:94:CC:38:E8 Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 1304 Signing time: Thu 04 Dec 2025 18:49:45 +0000 Manifest this update: Thu 04 Dec 2025 18:49:45 +0000 Manifest next update: Thu 11 Dec 2025 18:49:45 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: Vk136G81YtuwjYcpJPgQr7Y5oYIcteG8wWvVKEHHX/c=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: E328j+fp8f6dEpnkUoVG1DilnqBamfwHF17LQ6P3KGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: Dec 4 18:49:45 2025 GMT Not After : Dec 11 18:49:45 2025 GMT Subject: CN=6931d7c9-1185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:0e:cd:21:d6:95:7a:94:89:15:83:e6:5d: 44:93:7e:8e:1d:96:73:fa:6e:b9:65:54:02:b4:62: 07:43:83:17:98:65:8e:a9:43:c4:60:da:eb:43:30: 47:d0:4c:a6:b9:b3:83:ab:ea:e0:00:9a:44:86:c7: e5:24:98:f2:dd:7d:2f:92:61:1b:f5:37:12:25:95: 88:82:51:15:c4:14:89:aa:75:81:91:b1:a9:f6:4e: 60:e4:c0:0f:8a:51:6d:4b:ca:23:cc:13:65:01:e2: e5:93:70:3d:ff:86:d4:76:dc:ee:b6:ae:6f:5c:f3: 11:9c:53:a0:71:4c:b5:43:9c:7d:cf:65:e8:22:1d: 14:ac:e0:3d:2f:44:2b:7d:64:82:47:c6:12:9a:5b: 98:87:7f:4b:64:f3:10:ea:b7:b5:8e:4f:71:1a:6c: f2:83:c8:db:02:6b:0f:47:52:8b:08:a5:34:ba:a6: f3:01:3d:74:59:bb:23:e4:86:71:ae:c7:da:66:11: 9b:ed:94:77:62:48:f2:49:8f:ed:8b:4b:ce:16:c9: 20:bc:a2:02:25:3d:7d:05:46:a1:83:41:66:65:0d: e8:26:f1:75:a3:f5:e1:9a:91:83:7b:10:64:9c:da: df:95:38:01:fc:04:42:2b:1b:72:16:a6:04:b5:c3: b7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E9:50:D2:49:9E:52:40:21:23:69:37:6F:11:DF:28:94:CC:38:E8 X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:09:5b:e5:67:d5:c0:79:1c:ea:76:f1:04:40:4f:9c:c3:3a: 4e:23:3e:7a:eb:e6:49:08:48:9e:9f:d5:4f:22:0c:45:0b:06: 26:80:5e:d9:bd:a3:56:a7:79:55:43:bf:ce:67:0e:4a:91:65: f8:87:81:32:fa:5a:a1:34:98:de:6f:d0:d5:35:b9:40:9d:25: fb:00:de:d9:15:f2:50:32:5c:14:28:c7:d6:9a:a2:e4:a2:2d: 75:33:5d:a2:c6:e7:05:5c:93:17:1f:bd:e7:88:de:ee:51:67: 80:49:bc:25:c0:2e:63:e6:14:d3:0d:9b:85:91:20:b4:d9:2e: b5:ac:91:af:4b:e9:68:09:b3:30:37:73:5b:d4:2a:ae:60:e7: 02:24:62:05:74:fd:92:2c:2f:5b:78:fb:cb:83:f0:69:d0:79: 64:71:47:d9:b4:21:f8:fe:77:12:b2:73:34:99:fe:45:bf:92: ff:96:12:3a:3e:ab:0e:55:2e:f9:9d:0a:a8:df:cb:48:71:b9: cc:4b:bf:55:ff:f2:dc:85:01:96:ad:c1:36:f3:39:49:ec:af: 4b:f8:f0:dc:e5:ae:7a:9b:7b:54:8f:a6:c7:0e:39:84:c5:dc: 2d:7c:dc:c2:ed:8b:3b:58:5e:dc:cf:e9:e7:2c:ab:f7:cc:65: 51:d7:4b:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjUxMjA0MTg0OTQ1WhcNMjUxMjExMTg0OTQ1WjAYMRYwFAYD VQQDEw02OTMxZDdjOS0xMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMsOzSHWlXqUiRWD5l1Ek36OHZZz+m65ZVQCtGIHQ4MXmGWOqUPEYNrrQzBH 0EymubODq+rgAJpEhsflJJjy3X0vkmEb9TcSJZWIglEVxBSJqnWBkbGp9k5g5MAP ilFtS8ojzBNlAeLlk3A9/4bUdtzutq5vXPMRnFOgcUy1Q5x9z2XoIh0UrOA9L0Qr fWSCR8YSmluYh39LZPMQ6re1jk9xGmzyg8jbAmsPR1KLCKU0uqbzAT10Wbsj5IZx rsfaZhGb7ZR3YkjySY/ti0vOFskgvKICJT19BUahg0FmZQ3oJvF1o/XhmpGDexBk nNrflTgB/ARCKxtyFqYEtcO3/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPpUNJJ nlJAISNpN28R3yiUzDjoMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwCVvlZ9XAeRzqdvEEQE+cwzpOIz566+ZJCEien9VPIgxFCwYmgF7Z vaNWp3lVQ7/OZw5KkWX4h4Ey+lqhNJjeb9DVNblAnSX7AN7ZFfJQMlwUKMfWmqLk oi11M12ixucFXJMXH73niN7uUWeASbwlwC5j5hTTDZuFkSC02S61rJGvS+loCbMw N3Nb1CquYOcCJGIFdP2SLC9bePvLg/Bp0HlkcUfZtCH4/ncSsnM0mf5Fv5L/lhI6 PqsOVS75nQqo38tIcbnMS79V//LchQGWrcE28zlJ7K9L+PDc5a56m3tUj6bHDjmE xdwtfNzC7Ys7WF7cz+nnLKv3zGVR10t9 -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:49 2025 by rpki-client