This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json) Hash identifier: oCKoAqv04B1776CVZDy425tWaQIGWgNm4lfKwM6DvMA= Subject key identifier: 35:18:40:43:E9:A5:6F:08:A2:DE:4B:E8:3E:32:69:A2:BD:A7:0F:E2 Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft Manifest number: 0235 Signing time: Fri 05 Dec 2025 00:18:02 +0000 Manifest this update: Fri 05 Dec 2025 00:18:01 +0000 Manifest next update: Fri 12 Dec 2025 00:18:01 +0000 Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: zTDNokzWWOlk2nzcllayzQ8lQvVpMvC0zqcmJBUu5e4=) 2: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: LBGA7uPNm5y2jKoMvMcCypIR4652t0Rg8FNArTxs7js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: Dec 5 00:18:01 2025 GMT Not After : Dec 12 00:18:01 2025 GMT Subject: CN=693224ba-77a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7e:96:41:2a:39:fd:63:ce:1f:d0:4a:16:6f: 8e:c8:86:3a:c2:ef:45:47:33:9b:25:6a:4d:75:27: 1e:58:9e:ee:2a:49:9f:45:9e:ba:92:6b:88:50:f1: f7:c3:4f:00:94:13:e7:72:43:13:36:74:31:64:1e: 94:1c:29:ac:f9:be:26:e9:75:c3:ff:50:81:73:1e: 7a:17:a7:82:a9:51:1a:b0:1e:1e:5d:c8:88:de:9f: 8c:ff:c3:65:43:cc:da:3f:06:c5:10:28:fc:75:eb: 67:71:8a:55:68:c3:3d:b6:8e:46:b3:91:77:97:68: 0f:a0:1e:50:11:1a:dd:62:d7:c1:0a:6c:68:16:16: cf:c6:32:df:91:49:61:43:78:cd:45:09:d3:11:4e: c8:7e:5b:42:b0:af:a6:aa:cf:d1:51:17:96:53:17: 89:8d:34:9d:c4:86:9c:1a:6e:d8:fc:ff:8c:45:fd: 73:e0:6a:1b:f5:aa:83:58:eb:9f:ba:f7:65:56:7e: 40:a1:0c:50:7a:c6:a7:d6:42:52:06:ce:2d:cb:fd: db:df:39:cf:8f:52:07:4b:b9:97:6f:7e:0f:f4:d4: 66:07:e5:01:77:0e:29:ed:23:e8:34:d1:da:18:40: 9d:fd:7e:6d:26:8a:11:9c:de:15:e7:1b:0e:85:7d: 84:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:18:40:43:E9:A5:6F:08:A2:DE:4B:E8:3E:32:69:A2:BD:A7:0F:E2 X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:f0:cc:7f:dc:69:9b:b3:2d:fc:04:52:9a:5d:88:35:77:52: 71:73:4c:b3:d1:7f:b7:bb:58:1b:bb:43:5c:ec:a9:41:89:64: 65:41:5a:f8:5a:29:5b:dc:e8:3e:03:c7:a6:66:ba:8a:9d:dd: 6c:3f:71:cd:e4:bf:88:0b:be:c2:d3:a2:fb:8d:eb:13:d4:fa: 14:89:c6:01:dd:06:9b:0d:44:0d:1d:ed:3b:0e:16:0a:e2:82: b9:e1:d3:65:ad:e7:58:68:9f:ff:a0:35:1a:db:98:9a:21:b5: aa:60:74:fa:d0:6d:49:9e:c2:59:20:5a:41:d2:da:1b:f9:22: d3:5b:25:e3:f4:50:a1:98:72:5b:1c:aa:ee:71:ed:79:45:89: 1c:13:75:ba:cb:1d:f8:85:ec:30:08:18:35:36:01:c5:ca:eb: 40:fc:16:5e:2e:91:9a:f6:f3:36:d2:5c:a1:0c:40:03:4d:d8: 07:9c:69:c1:0e:2f:5e:de:47:6d:7a:34:a1:67:14:82:3e:0a: 57:04:88:07:c9:a6:be:93:74:20:f1:cb:77:de:4e:62:7c:dc: a2:13:03:71:3a:5a:59:c9:1a:25:4c:49:d7:2c:96:15:36:9b: e1:d5:62:97:6e:0f:0c:a5:df:cc:45:e0:f0:b9:fb:8d:4d:c4: 1d:aa:43:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjUxMjA1MDAxODAxWhcNMjUxMjEyMDAxODAxWjAYMRYwFAYD VQQDEw02OTMyMjRiYS03N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo36WQSo5/WPOH9BKFm+OyIY6wu9FRzObJWpNdSceWJ7uKkmfRZ66kmuIUPH3 w08AlBPnckMTNnQxZB6UHCms+b4m6XXD/1CBcx56F6eCqVEasB4eXciI3p+M/8Nl Q8zaPwbFECj8detncYpVaMM9to5Gs5F3l2gPoB5QERrdYtfBCmxoFhbPxjLfkUlh Q3jNRQnTEU7IfltCsK+mqs/RUReWUxeJjTSdxIacGm7Y/P+MRf1z4Gob9aqDWOuf uvdlVn5AoQxQesan1kJSBs4ty/3b3znPj1IHS7mXb34P9NRmB+UBdw4p7SPoNNHa GECd/X5tJooRnN4V5xsOhX2EKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUYQEPp pW8Iot5L6D4yaaK9pw/iMB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ZGNS8zRkU1Q0E4RTcyNDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5 ek92NWxMa3lYem91X256TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/8Mx/3Gmbsy38BFKaXYg1d1Jxc0yz0X+3u1gbu0Nc7KlBiWRlQVr4 Wilb3Og+A8emZrqKnd1sP3HN5L+IC77C06L7jesT1PoUicYB3QabDUQNHe07DhYK 4oK54dNlredYaJ//oDUa25iaIbWqYHT60G1JnsJZIFpB0tob+SLTWyXj9FChmHJb HKruce15RYkcE3W6yx34hewwCBg1NgHFyutA/BZeLpGa9vM20lyhDEADTdgHnGnB Di9e3kdtejShZxSCPgpXBIgHyaa+k3Qg8ct33k5ifNyiEwNxOlpZyRolTEnXLJYV Npvh1WKXbg8Mpd/MReDwufuNTcQdqkNL -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:08 2025 by rpki-client