This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json) Hash identifier: HbogOqkVVyGgi/eXhLYEXJIHmL0JGpjZR5Hqm+3a2z8= Subject key identifier: 0E:BC:18:86:70:34:14:B6:7F:96:CC:28:36:F8:88:BE:69:8D:58:59 Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft Manifest number: 0529 Signing time: Sat 20 Dec 2025 22:48:41 +0000 Manifest this update: Sat 20 Dec 2025 22:48:40 +0000 Manifest next update: Sat 27 Dec 2025 22:48:40 +0000 Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: MvnJtzZerR1bffgEXZ1fWxt3UJugYlezww9xVuc4xWM=) 2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: mvzxmb3Ec77hzB5jBWCPOpL7XoHBd1oX7QkZWEGZOZU=) 3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: HOR2Uf7sxy7+iosGT3XdbxMdqbYBTIug6HOwedpjmIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Validity Not Before: Dec 20 22:48:40 2025 GMT Not After : Dec 27 22:48:40 2025 GMT Subject: CN=694727c9-b715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d3:34:57:00:45:7d:15:f5:db:88:0f:92:a8: 8a:96:bd:61:76:33:2c:24:c9:34:af:b7:e5:95:8b: e2:6b:d6:0d:0c:a2:66:03:9b:5c:6f:63:1a:97:76: df:a6:a2:cc:65:4f:a6:eb:74:05:dd:44:fb:2c:ce: 44:e1:76:19:f1:ec:a0:8e:1a:0b:0b:5e:5b:ec:53: 8b:18:50:ab:bc:34:08:01:80:5a:47:cc:a7:00:ab: 65:a7:dd:3e:e1:df:71:e5:77:99:9f:21:be:3b:47: 80:1d:2c:ea:75:a0:47:e5:0d:75:c0:d7:3b:32:fd: 44:e7:6b:39:34:d0:1f:62:77:af:33:f2:53:7d:8d: 97:e1:a0:04:27:ef:e8:bc:72:52:3d:57:13:f1:2b: 31:63:75:68:12:36:aa:6e:07:f7:74:4c:a1:80:bd: 32:1a:58:b6:4f:b8:77:2c:ef:3c:b7:a6:4d:5c:25: 3c:8d:29:0e:be:92:7c:db:94:73:f8:fc:61:50:07: 9d:ea:a8:a3:d6:56:e6:39:ad:ca:56:e3:92:c8:3e: a9:75:41:1d:f2:5c:5b:31:ca:19:83:c6:69:e2:33: 73:a7:07:6c:c2:47:bb:b3:8b:13:ae:64:9f:7d:8c: 84:ba:f8:6a:02:86:02:51:e0:23:54:c7:94:85:77: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BC:18:86:70:34:14:B6:7F:96:CC:28:36:F8:88:BE:69:8D:58:59 X509v3 Authority Key Identifier: keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:13:bc:06:24:cb:87:d3:ad:d1:97:84:3e:6d:5c:f2:13:09: 01:48:0b:17:da:ba:ab:f8:30:50:f9:d3:81:a1:ba:ba:3d:00: ef:7a:3c:d4:95:d7:9b:9e:bf:ee:94:37:6d:75:5f:be:de:2f: 39:80:37:6c:7c:6d:23:b5:1b:25:89:ec:14:9e:86:98:c9:85: 9f:31:1f:ba:f0:a3:07:e9:e3:ff:cb:34:ac:c5:fe:36:70:52: a0:17:ed:e8:d4:fa:7a:2a:9c:79:26:28:7e:e9:bb:fd:98:50: c3:bb:99:1e:c5:47:f5:c3:54:02:e6:0e:1b:48:b4:7e:83:ce: e5:11:25:fe:74:a1:ff:19:0e:b8:5a:f5:35:7a:c2:16:8f:a4: 81:09:f4:b9:53:c9:57:49:6b:72:20:b2:be:f8:5f:4d:9e:83: 06:33:a9:32:d5:0e:9f:6f:62:98:64:f4:ed:47:97:72:4c:98: 34:6f:ab:bd:91:33:70:27:b1:97:b8:5f:7f:77:d9:9b:68:f7: a5:7b:ba:68:c4:c1:ee:34:9c:6c:ae:4d:a1:68:a6:7a:6f:5d: 2d:65:54:c9:05:7a:d9:ac:77:8d:e4:bf:6d:45:e5:eb:e5:b1: 4c:3e:3a:06:cb:20:ed:ee:9e:52:06:52:0a:db:b0:ee:88:57: 88:f9:c7:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0MTIxMTAvBgNVBAUTKDI2Qzg3RDE5NjZFMkY4MzVGN0NDOEU5NjFEMDJGRjMw OUNFN0JEMjAwHhcNMjUxMjIwMjI0ODQwWhcNMjUxMjI3MjI0ODQwWjAYMRYwFAYD VQQDDA02OTQ3MjdjOS1iNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dM0VwBFfRX124gPkqiKlr1hdjMsJMk0r7fllYvia9YNDKJmA5tcb2Mal3bf pqLMZU+m63QF3UT7LM5E4XYZ8eygjhoLC15b7FOLGFCrvDQIAYBaR8ynAKtlp90+ 4d9x5XeZnyG+O0eAHSzqdaBH5Q11wNc7Mv1E52s5NNAfYnevM/JTfY2X4aAEJ+/o vHJSPVcT8SsxY3VoEjaqbgf3dEyhgL0yGli2T7h3LO88t6ZNXCU8jSkOvpJ825Rz +PxhUAed6qij1lbmOa3KVuOSyD6pdUEd8lxbMcoZg8Zp4jNzpwdswke7s4sTrmSf fYyEuvhqAoYCUeAjVMeUhXdtXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA68GIZw NBS2f5bMKDb4iL5pjVhZMB8GA1UdIwQYMBaAFCbIfRlm4vg198yOlh0C/zCc570g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQxMi9CNjc2RUJFMDI4 QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1EWDN6STZXSFFMX01Kem52 U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzaDlHV2JpLURYM3pJNldIUUxfTUp6bnZTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQxMi9CNjc2RUJFMDI4QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1E WDN6STZXSFFMX01Kem52U0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbE7wGJMuH063Rl4Q+bVzyEwkBSAsX2rqr+DBQ+dOBobq6PQDvejzU ldebnr/ulDdtdV++3i85gDdsfG0jtRsliewUnoaYyYWfMR+68KMH6eP/yzSsxf42 cFKgF+3o1Pp6Kpx5Jih+6bv9mFDDu5kexUf1w1QC5g4bSLR+g87lESX+dKH/GQ64 WvU1esIWj6SBCfS5U8lXSWtyILK++F9NnoMGM6ky1Q6fb2KYZPTtR5dyTJg0b6u9 kTNwJ7GXuF9/d9mbaPele7poxMHuNJxsrk2haKZ6b10tZVTJBXrZrHeN5L9tReXr 5bFMPjoGyyDt7p5SBlIK27DuiFeI+cfH -----END CERTIFICATE-----Generated at Sun Dec 21 00:14:36 2025 by rpki-client