This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json) Hash identifier: R8A+RHHS0Z1jxrCD52xCxPkNU7ZjRLbkiKCeFYSm/0g= Subject key identifier: 5D:DD:92:C9:3D:B9:74:9A:0C:68:EF:6C:9A:05:BA:5C:0F:6B:26:97 Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft Manifest number: 0240 Signing time: Tue 23 Dec 2025 00:55:51 +0000 Manifest this update: Tue 23 Dec 2025 00:55:51 +0000 Manifest next update: Tue 30 Dec 2025 00:55:51 +0000 Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: QtU5QM1Jm4I7fAV3Q1zGvpUEjqOw/gNdP0jQqJNT++4=) 2: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: 7DBUlgP8v5IgYY+9/FfywQ3V9EL4ijwYsqyqQSQjJ3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: Dec 23 00:55:51 2025 GMT Not After : Dec 30 00:55:51 2025 GMT Subject: CN=6949e897-b8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:1f:5d:c5:7b:20:ac:90:bf:5d:c0:74:19: 68:fd:c6:72:92:b0:ee:41:92:f5:2d:5f:d2:9a:ff: cf:34:f6:a8:a0:4f:72:c2:58:c9:36:c7:b3:f0:d6: 15:6d:5d:ea:b4:43:9b:2b:24:58:a7:26:08:13:a2: f5:91:7e:15:01:43:16:a3:d4:5d:c8:3c:0f:00:56: 92:47:70:ce:58:4b:2d:e9:34:e9:77:ec:b6:83:26: 88:dc:6b:bb:92:05:8d:77:92:8d:ec:c3:a8:12:19: e3:ad:d2:9c:ea:71:55:3b:b9:db:df:ec:f8:bd:27: 97:36:13:5a:9c:d5:02:39:1c:95:fb:8f:ed:88:22: 7d:ae:00:3c:99:3d:a0:38:25:d8:da:0f:b3:eb:c1: b5:55:b5:66:07:3e:5b:92:ce:2f:d8:65:7b:0e:53: bc:e9:a0:03:7d:b5:d3:53:b8:5d:7c:36:6d:f3:a7: 2e:7b:1f:a1:25:13:dc:3c:a6:6b:a9:c6:f0:02:53: d5:66:5e:79:14:e2:79:e3:4e:52:94:a2:96:0c:42: 60:d6:97:ff:62:18:12:a0:46:64:89:a7:7c:e5:b0: 87:17:e9:45:e8:67:7c:3e:91:09:df:eb:bc:e6:a0: 84:54:fd:ed:5a:de:3f:55:df:98:6b:e0:24:b9:b3: d3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DD:92:C9:3D:B9:74:9A:0C:68:EF:6C:9A:05:BA:5C:0F:6B:26:97 X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:0b:4e:41:89:ee:62:06:bc:8d:c3:51:b7:af:e2:f4:18:66: 22:82:d9:9c:6e:8a:37:19:aa:66:74:89:21:f1:7a:e0:b8:97: 19:9a:7c:6a:35:de:7f:0c:1e:87:dd:67:58:27:2b:8d:49:40: 03:cf:28:ae:70:53:03:8e:d4:72:68:75:91:7e:ee:46:1a:dd: d2:6a:3a:ac:06:4b:18:4e:14:17:b7:7a:2a:26:25:db:22:45: 0c:64:31:a9:fe:4d:1f:68:c1:0e:b2:2d:35:87:71:59:a2:75: 22:cc:ad:1b:cf:1b:87:31:18:6e:2b:41:38:b7:95:fb:13:3c: e0:76:2e:9d:a3:1c:9a:b1:09:b9:a3:46:7f:0c:9a:2d:ea:ef: d6:77:08:83:c8:c9:c9:3f:8e:74:3b:b2:1a:c2:d8:e5:fc:85: 27:93:17:01:c2:d7:36:93:8e:70:10:ca:97:16:aa:72:c0:14: 32:1d:31:24:01:cb:b9:ef:45:86:85:76:f3:b9:fa:20:04:b3: 60:b1:3d:1b:58:63:dd:9e:47:74:b8:3d:b9:25:5a:03:5f:ef: 21:71:db:87:81:26:c2:97:be:6c:97:16:74:34:35:63:97:57: eb:65:93:37:c2:3f:a0:52:7b:39:83:18:fb:80:c4:ad:cb:91: a2:df:50:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjUxMjIzMDA1NTUxWhcNMjUxMjMwMDA1NTUxWjAYMRYwFAYD VQQDDA02OTQ5ZTg5Ny1iOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmw8fXcV7IKyQv13AdBlo/cZykrDuQZL1LV/Smv/PNPaooE9ywljJNsez8NYV bV3qtEObKyRYpyYIE6L1kX4VAUMWo9RdyDwPAFaSR3DOWEst6TTpd+y2gyaI3Gu7 kgWNd5KN7MOoEhnjrdKc6nFVO7nb3+z4vSeXNhNanNUCORyV+4/tiCJ9rgA8mT2g OCXY2g+z68G1VbVmBz5bks4v2GV7DlO86aADfbXTU7hdfDZt86cuex+hJRPcPKZr qcbwAlPVZl55FOJ5405SlKKWDEJg1pf/YhgSoEZkiad85bCHF+lF6Gd8PpEJ3+u8 5qCEVP3tWt4/Vd+Ya+AkubPTVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3dksk9 uXSaDGjvbJoFulwPayaXMB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ZGNS8zRkU1Q0E4RTcyNDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5 ek92NWxMa3lYem91X256TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARC05Bie5iBryNw1G3r+L0GGYigtmcboo3GapmdIkh8XrguJcZmnxq Nd5/DB6H3WdYJyuNSUADzyiucFMDjtRyaHWRfu5GGt3SajqsBksYThQXt3oqJiXb IkUMZDGp/k0faMEOsi01h3FZonUizK0bzxuHMRhuK0E4t5X7Ezzgdi6doxyasQm5 o0Z/DJot6u/WdwiDyMnJP450O7Iawtjl/IUnkxcBwtc2k45wEMqXFqpywBQyHTEk Acu570WGhXbzufogBLNgsT0bWGPdnkd0uD25JVoDX+8hcduHgSbCl75slxZ0NDVj l1frZZM3wj+gUns5gxj7gMSty5Gi31CN -----END CERTIFICATE-----Generated at Wed Dec 24 21:21:30 2025 by rpki-client