This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft File: jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json) Hash identifier: zk7F9n3vAhxydwQ6v7aLP0FEciHym0fV2idR41OlBow= Subject key identifier: 51:10:29:6B:6D:9C:7B:01:BA:4A:92:EE:35:31:30:D4:F8:C3:CF:AD Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 Certificate issuer: /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft Manifest number: BD Signing time: Fri 05 Dec 2025 03:56:50 +0000 Manifest this update: Fri 05 Dec 2025 03:56:49 +0000 Manifest next update: Fri 12 Dec 2025 03:56:49 +0000 Files and hashes: 1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: YDMQphmbXPnUhpNrAfG/vQHWzB+pvsRuQh/Ure7ptEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Validity Not Before: Dec 5 03:56:49 2025 GMT Not After : Dec 12 03:56:49 2025 GMT Subject: CN=69325802-6fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:11:a0:3b:af:37:9a:b7:8b:cd:1b:8d:fe: 79:e0:ef:03:8a:cc:21:b9:a6:70:d4:21:92:af:77: 6c:9f:7b:d6:29:f1:6c:7f:16:ec:38:60:6e:e3:81: f1:b6:5a:ed:25:ae:ae:03:92:6e:28:38:62:21:08: 0d:0d:94:5a:2d:71:5a:8f:34:23:67:e8:d6:4e:24: 8f:81:8a:44:13:9c:4a:0e:30:da:e0:bf:df:8f:8d: 13:a4:cb:69:cf:d7:f2:82:6f:47:89:ff:69:43:b5: f5:b8:41:de:dc:6f:d4:79:26:5f:6d:4b:35:90:ff: 12:20:95:f4:de:28:d4:dc:ea:59:b1:60:10:cd:04: fd:dd:fd:13:14:bf:ca:87:f9:4c:3b:1d:af:3f:45: f6:ee:5e:a8:b9:40:15:5a:3e:71:cf:29:a0:dd:92: 2c:dc:1f:02:98:63:fd:b8:fe:40:14:69:b3:7d:8e: a7:31:71:8a:96:f6:ec:cc:97:67:c2:1b:0b:0a:43: e1:ea:4b:f1:90:f3:c7:cc:d6:2f:41:81:5c:22:f5: bd:5e:5e:06:63:a9:3c:4b:35:b7:04:0b:6f:0c:04: 19:6f:ae:2b:68:75:a3:9b:2f:62:ab:fb:2f:c0:f0: f0:ca:fc:51:60:a7:bb:b7:c6:49:bd:90:0c:1b:8c: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:10:29:6B:6D:9C:7B:01:BA:4A:92:EE:35:31:30:D4:F8:C3:CF:AD X509v3 Authority Key Identifier: keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:84:87:5b:a9:27:8d:67:9d:64:6f:d1:1e:1c:96:3e:9b:9c: d9:54:f0:37:49:ca:21:67:70:21:a0:a6:de:c9:2c:30:e5:a1: f6:7f:9b:be:00:21:37:7a:eb:fa:ce:a2:04:3d:6e:e4:c6:17: 48:1f:93:81:30:07:a6:cb:d9:35:02:d1:9c:cc:99:05:76:d3: 81:d1:30:1b:57:83:80:25:7e:0a:43:4d:30:63:69:62:84:dc: c5:42:32:41:b4:6a:4b:36:28:ad:13:2f:7a:97:74:0c:4c:1d: 14:03:22:a8:96:d3:ef:00:fa:c7:63:75:08:4e:dd:41:a8:1c: 02:3e:c5:03:07:74:21:73:86:fb:27:44:1e:0c:03:92:c5:c8: 5d:69:1d:19:fb:84:d9:7d:d3:1b:27:ef:11:b7:67:9a:11:ad: cd:2a:a6:e4:36:d0:b8:2b:00:60:84:70:10:21:f3:07:1b:19: 51:ca:b4:4e:7c:5a:8f:74:63:eb:98:b3:9a:db:ea:c5:dd:ac: 5b:3b:fd:78:c6:6d:bb:7e:86:79:58:55:0b:1e:95:fe:2c:65: 99:48:84:ab:a7:57:18:4b:4f:51:3e:77:5f:27:6a:04:75:3c: 05:20:36:e1:a9:97:91:95:7d:c7:fa:0c:5c:51:a1:8e:c1:3d: f7:cc:f4:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYzNjMxMTAvBgNVBAUTKDhFMUNDMURCRkFCRDQwQjY0MTRDMjNFM0RGRDg5MTQ1 NTI3REYzMjEwHhcNMjUxMjA1MDM1NjQ5WhcNMjUxMjEyMDM1NjQ5WjAYMRYwFAYD VQQDEw02OTMyNTgwMi02ZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeERoDuvN5q3i80bjf554O8DiswhuaZw1CGSr3dsn3vWKfFsfxbsOGBu44Hx tlrtJa6uA5JuKDhiIQgNDZRaLXFajzQjZ+jWTiSPgYpEE5xKDjDa4L/fj40TpMtp z9fygm9Hif9pQ7X1uEHe3G/UeSZfbUs1kP8SIJX03ijU3OpZsWAQzQT93f0TFL/K h/lMOx2vP0X27l6ouUAVWj5xzymg3ZIs3B8CmGP9uP5AFGmzfY6nMXGKlvbszJdn whsLCkPh6kvxkPPHzNYvQYFcIvW9Xl4GY6k8SzW3BAtvDAQZb64raHWjmy9iq/sv wPDwyvxRYKe7t8ZJvZAMG4zCTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEQKWtt nHsBukqS7jUxMNT4w8+tMB8GA1UdIwQYMBaAFI4cwdv6vUC2QUwj49/YkUVSffMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM2My9CRDg2M0Q3MkFG QUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9qaHpCMl9xOVFMWkJUQ1BqMzlpUlJWSjk4 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poekIyX3E5UUxaQlRDUGozOWlSUlZKOTh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjM2My9CRDg2M0Q3MkFGQUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9qaHpCMl9xOVFM WkJUQ1BqMzlpUlJWSjk4eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKhIdbqSeNZ51kb9EeHJY+m5zZVPA3ScohZ3AhoKbeySww5aH2f5u+ ACE3euv6zqIEPW7kxhdIH5OBMAemy9k1AtGczJkFdtOB0TAbV4OAJX4KQ00wY2li hNzFQjJBtGpLNiitEy96l3QMTB0UAyKoltPvAPrHY3UITt1BqBwCPsUDB3Qhc4b7 J0QeDAOSxchdaR0Z+4TZfdMbJ+8Rt2eaEa3NKqbkNtC4KwBghHAQIfMHGxlRyrRO fFqPdGPrmLOa2+rF3axbO/14xm27foZ5WFULHpX+LGWZSISrp1cYS09RPndfJ2oE dTwFIDbhqZeRlX3H+gxcUaGOwT33zPQe -----END CERTIFICATE-----Generated at Sat Dec 6 17:43:41 2025 by rpki-client