This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json) Hash identifier: 68Su/dEuDKVgilqFzEPWBiqet0u+rV3NpShK1KAOss4= Subject key identifier: E8:6A:B7:4E:AA:E3:E5:FF:42:0B:C3:07:EE:B0:B5:4E:5B:23:59:62 Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Certificate serial: 052B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft Manifest number: 0521 Signing time: Thu 04 Dec 2025 22:08:46 +0000 Manifest this update: Thu 04 Dec 2025 22:08:46 +0000 Manifest next update: Thu 11 Dec 2025 22:08:46 +0000 Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: ovYo0n329znqGr9XqhuxQ5DGRjJbU1u/qT4+IeuIR6E=) 2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: mvzxmb3Ec77hzB5jBWCPOpL7XoHBd1oX7QkZWEGZOZU=) 3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: HOR2Uf7sxy7+iosGT3XdbxMdqbYBTIug6HOwedpjmIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1323 (0x52b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Validity Not Before: Dec 4 22:08:46 2025 GMT Not After : Dec 11 22:08:46 2025 GMT Subject: CN=6932066e-6d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:24:12:d2:18:48:3f:f2:ce:99:71:df:3f: 49:c2:82:a7:5a:9a:e8:bf:3e:b6:c5:6c:fb:54:c6: 6f:8c:2e:90:9f:16:70:51:b7:f9:ea:7a:96:89:b4: ab:58:34:65:80:76:fc:ed:20:86:cb:8a:20:f4:08: b1:c5:e4:b9:cd:fe:8f:64:47:aa:6f:e2:31:7c:b6: 9a:17:0b:1b:5a:bb:07:91:ec:16:d7:c3:a1:07:45: d3:72:15:8c:6a:02:cd:b9:85:bf:ba:87:98:b6:b4: 37:60:55:87:53:5b:1b:7b:7b:6c:22:f4:b5:34:91: 98:b5:08:cc:0d:ee:c5:52:ea:f5:f7:79:7d:93:a9: 9f:6c:7f:18:c8:7f:3f:1c:f1:b5:b9:73:c9:4e:77: 61:90:53:eb:80:21:0e:eb:b8:44:5a:ed:ba:25:0c: 1e:e3:c9:92:7d:c8:ed:06:59:90:bc:95:b4:d8:cb: 39:b6:08:dd:99:12:a2:bc:4e:9e:ec:45:74:35:18: ce:23:35:a4:d3:d3:3a:59:10:91:fb:99:4f:b9:7a: f4:67:2f:a3:42:98:8e:1b:4f:92:ea:d1:8b:43:17: 4f:80:4c:87:c4:af:06:87:be:df:54:5c:58:ee:24: 5d:30:e2:7a:3c:63:5c:91:9d:33:7b:f6:1b:95:56: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6A:B7:4E:AA:E3:E5:FF:42:0B:C3:07:EE:B0:B5:4E:5B:23:59:62 X509v3 Authority Key Identifier: keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:96:b9:ae:6f:ad:1a:76:ab:b2:03:0a:8b:e2:12:c3:ff:09: a1:aa:e8:7a:c2:92:d6:32:ab:4c:2d:56:56:2b:d0:12:7d:a5: ee:e6:9e:e1:d7:48:bb:e1:b0:3e:ad:76:ba:25:54:df:f7:59: ab:95:f6:37:04:58:de:de:79:2d:6c:95:67:f6:cf:0b:d7:86: 3c:99:82:a9:07:3d:db:13:6c:21:56:a8:27:3f:cc:4d:d6:81: f0:3f:76:cb:b9:b6:2a:54:84:b9:b3:88:06:94:5b:f6:42:ba: e6:2a:e7:f2:71:fd:31:05:37:68:b2:64:56:86:45:54:0f:02: db:d9:be:aa:24:2c:fa:62:1a:fa:fd:2a:01:db:92:ce:aa:9b: 27:25:b4:c2:6c:31:61:2c:ce:5b:21:8f:d6:1f:5f:ab:90:61: 10:a2:44:64:03:67:f7:15:4c:95:3a:48:95:3f:b5:fa:94:fb: 64:58:1a:41:77:e6:4d:77:4f:7c:37:5b:e6:94:e0:c6:5a:65: 5c:b2:bd:87:27:03:59:8e:68:1b:56:62:e7:31:f0:71:bd:b3: 9e:f6:de:f3:50:bc:93:30:ee:e1:37:4f:13:15:85:f9:48:eb: 4d:f7:48:1e:66:c1:3a:c6:4a:f4:08:e8:91:54:30:cc:7c:da: 00:ef:9a:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0MTIxMTAvBgNVBAUTKDI2Qzg3RDE5NjZFMkY4MzVGN0NDOEU5NjFEMDJGRjMw OUNFN0JEMjAwHhcNMjUxMjA0MjIwODQ2WhcNMjUxMjExMjIwODQ2WjAYMRYwFAYD VQQDEw02OTMyMDY2ZS02ZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJokEtIYSD/yzplx3z9JwoKnWprovz62xWz7VMZvjC6QnxZwUbf56nqWibSr WDRlgHb87SCGy4og9AixxeS5zf6PZEeqb+IxfLaaFwsbWrsHkewW18OhB0XTchWM agLNuYW/uoeYtrQ3YFWHU1sbe3tsIvS1NJGYtQjMDe7FUur193l9k6mfbH8YyH8/ HPG1uXPJTndhkFPrgCEO67hEWu26JQwe48mSfcjtBlmQvJW02Ms5tgjdmRKivE6e 7EV0NRjOIzWk09M6WRCR+5lPuXr0Zy+jQpiOG0+S6tGLQxdPgEyHxK8Gh77fVFxY 7iRdMOJ6PGNckZ0ze/YblVZ5JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhqt06q 4+X/QgvDB+6wtU5bI1liMB8GA1UdIwQYMBaAFCbIfRlm4vg198yOlh0C/zCc570g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQxMi9CNjc2RUJFMDI4 QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1EWDN6STZXSFFMX01Kem52 U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzaDlHV2JpLURYM3pJNldIUUxfTUp6bnZTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQxMi9CNjc2RUJFMDI4QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1E WDN6STZXSFFMX01Kem52U0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0lrmub60adquyAwqL4hLD/wmhquh6wpLWMqtMLVZWK9ASfaXu5p7h 10i74bA+rXa6JVTf91mrlfY3BFje3nktbJVn9s8L14Y8mYKpBz3bE2whVqgnP8xN 1oHwP3bLubYqVIS5s4gGlFv2QrrmKufycf0xBTdosmRWhkVUDwLb2b6qJCz6Yhr6 /SoB25LOqpsnJbTCbDFhLM5bIY/WH1+rkGEQokRkA2f3FUyVOkiVP7X6lPtkWBpB d+ZNd098N1vmlODGWmVcsr2HJwNZjmgbVmLnMfBxvbOe9t7zULyTMO7hN08TFYX5 SOtN90geZsE6xkr0COiRVDDMfNoA75rf -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:46 2025 by rpki-client