This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: n83TXEvRqFW80w+IBxwmvB7Nr/1w8n73+9cbDmot2Jk= Subject key identifier: F9:1C:7F:F1:5D:D3:4F:88:AF:FA:A0:E4:E0:2B:3F:0D:AE:04:5A:8E Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0CC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0CC0 Signing time: Sat 06 Dec 2025 17:35:45 +0000 Manifest this update: Sat 06 Dec 2025 17:35:45 +0000 Manifest next update: Sat 13 Dec 2025 17:35:45 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: /OsyivYlSePU9qc4IW49VVHDKR1TqTLpa7NMdbSdo4Y=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: 38J2MM7f9ujaRxSK9Wf5Oifb+Q5gxrpsn27nhrXs2/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3273 (0xcc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: Dec 6 17:35:45 2025 GMT Not After : Dec 13 17:35:45 2025 GMT Subject: CN=69346971-e38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:0c:95:99:1e:4b:e5:d8:f2:9c:22:32:7c: ea:3f:25:5c:bc:ed:20:22:3f:d1:5b:87:a9:3a:1c: 56:dd:a3:f2:d0:c1:ec:7e:0c:8e:5f:b3:0b:5c:2c: e3:cb:4b:51:ca:03:b5:a0:90:d7:48:f9:74:12:be: a7:09:bf:f4:27:e5:0b:eb:5a:63:15:a1:4b:b9:ee: be:55:26:e3:0f:1a:42:ef:07:5b:e6:3f:79:97:a7: 46:b9:06:ef:78:b6:18:03:df:a8:3e:cf:56:31:42: 6e:d4:59:70:12:0a:2f:16:76:6e:b1:0b:d9:d9:7e: 61:88:b8:ea:62:90:60:a4:b4:44:dc:fb:c2:ea:d2: 98:ec:02:1e:b7:92:62:d7:38:e4:93:bc:f9:ea:d2: c9:fb:fc:26:74:67:8f:fe:08:20:66:0f:f2:af:a0: c2:65:ad:2e:57:52:99:86:95:08:96:53:f9:5e:85: d8:e4:b3:fb:cc:af:16:e8:31:32:7a:0b:29:cc:85: fc:b0:6a:32:bc:d0:1d:46:cb:3f:d7:dd:c4:72:eb: f5:9f:94:29:e9:d1:e8:9a:ef:06:58:c0:e4:16:45: b4:4b:82:28:66:20:b9:4b:01:a4:73:f3:78:25:e7: 9b:1b:43:bc:f4:08:7c:3a:a3:56:f5:6b:e1:68:e4: b8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1C:7F:F1:5D:D3:4F:88:AF:FA:A0:E4:E0:2B:3F:0D:AE:04:5A:8E X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ad:f5:50:4a:d5:3c:01:95:23:ef:e5:3d:8e:c1:cb:03:1a: 1b:0d:c1:80:30:ba:89:f0:01:4d:87:ea:98:77:c5:3e:f9:60: c7:f2:65:8a:76:62:cc:50:44:e4:79:18:a5:76:95:13:1c:18: 89:6c:54:06:ed:f3:3b:b5:c9:ff:15:04:94:83:e6:e7:34:df: 55:33:f6:07:f0:5c:8a:84:44:ac:46:a6:b9:92:e9:60:61:f8: 81:cc:f2:49:27:74:4e:9e:13:fb:b2:bd:a9:9e:48:e8:23:02: ff:49:b3:e4:84:a2:05:61:07:1c:48:82:1c:48:f9:cd:8d:f2: aa:c6:d1:7b:aa:73:26:13:c2:e4:35:3f:76:9a:95:4e:b4:06: b7:bd:a3:81:3f:69:a1:c7:9f:2e:61:ca:60:3a:ed:4f:9f:69: 0f:86:92:60:32:2d:63:57:34:e4:d6:50:5a:2f:ec:16:7e:00: d0:77:6a:61:82:b7:be:f7:97:d0:b6:a0:32:fe:41:71:c6:aa: a4:fc:dd:f8:c0:03:cb:e5:f4:3f:43:22:f4:dd:6c:7a:cd:41: 87:51:c4:01:a6:af:85:13:36:be:7b:70:a0:32:31:a5:af:62: 39:57:ae:20:f1:36:5d:90:bb:de:fd:2d:8d:c3:ba:c5:6f:f8: 3c:a0:d9:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjUxMjA2MTczNTQ1WhcNMjUxMjEzMTczNTQ1WjAYMRYwFAYD VQQDEw02OTM0Njk3MS1lMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso8MlZkeS+XY8pwiMnzqPyVcvO0gIj/RW4epOhxW3aPy0MHsfgyOX7MLXCzj y0tRygO1oJDXSPl0Er6nCb/0J+UL61pjFaFLue6+VSbjDxpC7wdb5j95l6dGuQbv eLYYA9+oPs9WMUJu1FlwEgovFnZusQvZ2X5hiLjqYpBgpLRE3PvC6tKY7AIet5Ji 1zjkk7z56tLJ+/wmdGeP/gggZg/yr6DCZa0uV1KZhpUIllP5XoXY5LP7zK8W6DEy egspzIX8sGoyvNAdRss/193Ecuv1n5Qp6dHomu8GWMDkFkW0S4IoZiC5SwGkc/N4 JeebG0O89Ah8OqNW9WvhaOS4FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkcf/Fd 00+Ir/qg5OArPw2uBFqOMB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3rfVQStU8AZUj7+U9jsHLAxobDcGAMLqJ8AFNh+qYd8U++WDH8mWK dmLMUETkeRildpUTHBiJbFQG7fM7tcn/FQSUg+bnNN9VM/YH8FyKhESsRqa5kulg YfiBzPJJJ3ROnhP7sr2pnkjoIwL/SbPkhKIFYQccSIIcSPnNjfKqxtF7qnMmE8Lk NT92mpVOtAa3vaOBP2mhx58uYcpgOu1Pn2kPhpJgMi1jVzTk1lBaL+wWfgDQd2ph gre+95fQtqAy/kFxxqqk/N34wAPL5fQ/QyL03Wx6zUGHUcQBpq+FEza+e3CgMjGl r2I5V64g8TZdkLve/S2Nw7rFb/g8oNnc -----END CERTIFICATE-----Generated at Sun Dec 7 09:02:05 2025 by rpki-client