This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json) Hash identifier: cpBYGI2IIumH2KlBrLRdMYt3tLiZjDg6CGHVHbDvS/0= Subject key identifier: D0:30:AE:9F:4E:20:51:F0:8A:2C:C7:55:43:46:32:1C:CA:FD:B5:F8 Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft Manifest number: B0 Signing time: Fri 05 Dec 2025 04:07:15 +0000 Manifest this update: Fri 05 Dec 2025 04:07:14 +0000 Manifest next update: Fri 12 Dec 2025 04:07:14 +0000 Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: 7tiUUxkwLFsJ3eGECFOC+c+3fAJRtOzXsxz6afvl+24=) 2: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: 3Rxi2WwZpfu8F7jhnMuFGFa5sVmkxpF3HfYHLo71KOI=) 3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: LPMf8e8oe7ripTj9cOjgsGbklShL3L+ImY+41IEZRaQ=) 4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: smhXonMxctlF/fMtWQXaFUBBXx8Ym0WOVFbM4hK9hVk=) 5: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: HYfNBrw+oBYJTv3EK6ZW0QGVMQFBO/Tp09If6c2XiUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Validity Not Before: Dec 5 04:07:14 2025 GMT Not After : Dec 12 04:07:14 2025 GMT Subject: CN=69325a73-4048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:cc:b4:ca:a6:ad:e8:4c:ac:bc:a2:d6:58: 1b:34:ad:26:66:17:8b:61:6c:03:76:c7:a8:52:3d: 28:8b:90:0f:94:c0:4b:67:62:67:9f:03:7d:ce:33: 9b:38:99:53:4d:d7:9d:ec:95:d5:00:32:26:c8:57: da:d3:fb:9d:bc:3d:b2:3f:f3:e1:e2:09:f8:57:a2: 10:b2:35:71:01:35:5d:f5:43:cf:22:46:88:dc:d0: 7a:6a:0c:fb:a4:fa:68:bd:e3:61:f9:4d:08:dd:57: 1e:ae:11:d1:39:90:97:d9:50:3d:91:2d:76:a2:c4: 75:07:3e:d8:58:0f:eb:2e:da:0c:f1:e2:ff:4a:1b: 43:ee:cf:99:fa:5d:0e:5e:25:96:85:ba:8b:0e:8c: 7a:2f:ff:de:9b:df:bb:ff:0b:d7:74:cf:67:3d:9d: 9b:36:ee:73:5a:37:07:47:87:ee:44:00:44:c4:8f: 35:0a:5c:7b:1c:cf:fc:46:db:33:5a:3a:57:c8:8c: f5:ca:cc:ea:f3:38:59:18:5b:c8:19:7f:58:41:a3: b4:45:5e:10:a9:73:78:26:9c:e8:5b:91:95:2a:0a: d0:28:f2:ce:01:f1:9c:60:af:1f:c0:04:b5:2d:db: 1a:d7:11:07:72:df:76:3e:5f:d7:63:08:a3:eb:e5: ca:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:30:AE:9F:4E:20:51:F0:8A:2C:C7:55:43:46:32:1C:CA:FD:B5:F8 X509v3 Authority Key Identifier: keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:20:fa:da:05:87:b9:fd:1b:b7:52:11:c7:98:5a:64:9a:21: 7e:c4:3e:c7:e2:a2:f8:f6:e7:41:c0:5a:f0:ad:fe:76:94:1b: 24:b7:67:d3:4b:ad:d6:87:0f:3e:c8:f0:32:9f:52:43:51:29: 7e:9f:0e:ce:ac:c9:6c:02:e2:73:41:9d:8f:96:6c:a1:df:e5: 69:18:72:18:9b:4c:da:c2:e3:6f:08:2f:ad:35:11:c4:23:8e: 44:b3:18:77:92:af:05:82:6e:c8:89:1d:07:b5:fa:9d:7a:d2: 53:6e:87:97:c8:f8:4e:a8:c7:dd:8b:eb:2b:99:74:e9:de:bf: 76:4b:20:11:7a:23:1f:49:0e:b3:a9:ff:c9:c6:d0:b6:aa:d8: 56:dd:09:ef:a7:a1:b9:4b:44:66:b9:f1:34:cd:ff:d6:47:76: f5:b3:01:e4:27:19:59:41:9d:80:60:07:16:93:78:0a:d6:a3: 85:be:64:72:9b:ae:29:46:99:4f:96:72:f6:31:cb:e3:53:94: 52:55:5e:53:66:56:17:0e:a7:c3:b9:ee:f2:97:ca:f7:de:12: ed:d4:6b:f2:b2:1a:f4:81:89:a9:66:c8:4d:48:f4:f2:dc:73: be:2a:56:45:4b:82:f6:54:5d:1e:7d:27:28:18:36:a0:02:59: 45:5e:2e:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1 MTNERjZCRDcwHhcNMjUxMjA1MDQwNzE0WhcNMjUxMjEyMDQwNzE0WjAYMRYwFAYD VQQDEw02OTMyNWE3My00MDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09/MtMqmrehMrLyi1lgbNK0mZheLYWwDdseoUj0oi5APlMBLZ2JnnwN9zjOb OJlTTded7JXVADImyFfa0/udvD2yP/Ph4gn4V6IQsjVxATVd9UPPIkaI3NB6agz7 pPpoveNh+U0I3VcerhHROZCX2VA9kS12osR1Bz7YWA/rLtoM8eL/ShtD7s+Z+l0O XiWWhbqLDox6L//em9+7/wvXdM9nPZ2bNu5zWjcHR4fuRABExI81Clx7HM/8Rtsz WjpXyIz1yszq8zhZGFvIGX9YQaO0RV4QqXN4JpzoW5GVKgrQKPLOAfGcYK8fwAS1 Ldsa1xEHct92Pl/XYwij6+XKJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAwrp9O IFHwiizHVUNGMhzK/bX4MB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5 MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhBNS9EMTUwMzEzNkM5MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1Vv V1pCaTBJeTV5NTFSUGZhOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEIPraBYe5/Ru3UhHHmFpkmiF+xD7H4qL49udBwFrwrf52lBskt2fT S63Whw8+yPAyn1JDUSl+nw7OrMlsAuJzQZ2Plmyh3+VpGHIYm0zawuNvCC+tNRHE I45Esxh3kq8Fgm7IiR0HtfqdetJTboeXyPhOqMfdi+srmXTp3r92SyAReiMfSQ6z qf/JxtC2qthW3Qnvp6G5S0RmufE0zf/WR3b1swHkJxlZQZ2AYAcWk3gK1qOFvmRy m64pRplPlnL2McvjU5RSVV5TZlYXDqfDue7yl8r33hLt1Gvyshr0gYmpZshNSPTy 3HO+KlZFS4L2VF0efScoGDagAllFXi5L -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:53 2025 by rpki-client