This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft File: jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json) Hash identifier: hE64GKjZNVcOo0GCgK02kcLCrrCyUK3UIK0fHuLCXN4= Subject key identifier: C9:21:ED:D4:D0:C0:22:2B:DA:75:7D:27:B5:42:29:D3:D6:E0:40:29 Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B Certificate issuer: /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft Manifest number: 19 Signing time: Wed 03 Dec 2025 06:10:36 +0000 Manifest this update: Wed 03 Dec 2025 06:10:36 +0000 Manifest next update: Wed 10 Dec 2025 06:10:36 +0000 Files and hashes: 1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: WJyXppAz1ccf3hPQYDZzcOc6WBCMC8qG8sS/Zmre/VU=) 2: B753A48EC6C711F09BF6A518C4F9AE02.roa (hash: Y96pVTrMdeKkXESI3mBfKCnkNu7eLETGHBB6EtnJI3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B Validity Not Before: Dec 3 06:10:36 2025 GMT Not After : Dec 10 06:10:36 2025 GMT Subject: CN=692fd45c-f23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:7b:a0:71:a8:c7:32:b7:6f:8c:57:56:2f: 3c:ac:7b:b4:68:c1:10:6b:10:37:fa:a9:22:e1:6b: ee:1a:0d:95:8c:fe:61:47:cf:55:6c:2b:d3:52:6c: ce:48:f3:63:97:17:65:c7:cc:f7:51:d6:86:d5:9f: 3a:a1:7f:3c:f1:57:46:da:e6:45:fa:ed:c8:04:e9: 16:ff:33:ca:da:60:2f:76:96:aa:e9:04:5c:b5:40: c1:9b:ed:72:30:7e:da:ee:e1:7e:11:a0:32:97:1e: 3f:e9:63:53:79:7d:37:4b:8d:91:7f:8d:cf:27:4f: b7:f1:12:45:93:e3:03:26:61:4b:76:55:6c:91:02: 4d:67:60:9c:98:94:8a:73:3f:45:c1:07:86:e8:be: ec:4b:76:55:dd:ae:5a:c2:8a:fa:4f:9c:a4:cb:6c: 09:ab:ad:40:9f:21:89:1d:d1:05:4b:08:1a:56:3b: 8c:56:b9:cd:bf:18:1f:a8:05:cb:76:b9:71:88:30: 3d:72:b7:d5:54:48:a8:d1:a8:fb:2f:4a:65:6a:08: 47:b2:0b:4b:80:65:c0:e7:04:56:9c:ec:4c:3a:84: ec:9b:32:d0:13:fe:9b:bf:f5:3b:1c:98:38:18:ff: 53:9e:c5:3e:78:f5:66:e9:e7:e0:60:81:c2:f7:89: 78:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:21:ED:D4:D0:C0:22:2B:DA:75:7D:27:B5:42:29:D3:D6:E0:40:29 X509v3 Authority Key Identifier: keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:53:f4:6d:87:e0:a2:e6:b0:27:fa:bf:e8:59:aa:f1:e9:07: 56:1d:30:ff:90:8e:57:99:4e:06:02:5a:84:22:48:df:69:bf: 91:04:ee:13:4a:26:08:07:77:4d:56:63:25:3a:d4:2d:2a:08: 02:a8:a2:b7:73:45:f4:41:bd:89:34:b4:06:33:7a:a9:c9:fa: 4e:71:dd:d0:90:f0:fd:0a:6f:2f:5e:e4:da:e6:16:27:0f:e4: f8:68:1a:eb:86:96:48:3c:9e:60:a8:44:6d:1a:45:3a:25:96: 04:00:2f:3b:7c:92:c3:99:20:3a:d0:79:b0:76:d2:0b:c3:0a: 63:c0:28:c8:46:23:cd:89:99:09:b3:87:c1:85:62:99:7f:cd: 0f:2e:7a:46:0f:a5:08:01:71:ef:c5:81:68:c0:db:0a:ff:e0: f2:5f:1f:96:25:20:79:b4:cb:fe:3a:3b:ae:1a:e9:df:db:c4: 94:7c:f3:68:c2:c9:74:51:0b:20:26:3b:ff:47:f8:84:04:02: f7:ca:04:0a:ab:f8:84:90:39:2e:6e:12:ff:b8:7e:a4:f9:3d: f1:39:78:38:65:ac:e9:18:22:ca:4e:b9:c1:9e:f0:b8:e1:4d: cf:cc:89:21:18:1d:b1:bb:38:51:bb:36:d7:e7:c9:52:b1:ba: e4:5f:75:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkREMDExMC8GA1UEBRMoOEUxMjEzMTQyOTE3OTZCMkU1MkI4OUQ4N0M0RUQ2RDlE Q0ZBNTI0QjAeFw0yNTEyMDMwNjEwMzZaFw0yNTEyMTAwNjEwMzZaMBgxFjAUBgNV BAMTDTY5MmZkNDVjLWYyM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+cHugcajHMrdvjFdWLzyse7RowRBrEDf6qSLha+4aDZWM/mFHz1VsK9NSbM5I 82OXF2XHzPdR1obVnzqhfzzxV0ba5kX67cgE6Rb/M8raYC92lqrpBFy1QMGb7XIw ftru4X4RoDKXHj/pY1N5fTdLjZF/jc8nT7fxEkWT4wMmYUt2VWyRAk1nYJyYlIpz P0XBB4bovuxLdlXdrlrCivpPnKTLbAmrrUCfIYkd0QVLCBpWO4xWuc2/GB+oBct2 uXGIMD1yt9VUSKjRqPsvSmVqCEeyC0uAZcDnBFac7Ew6hOybMtAT/pu/9TscmDgY /1OexT549Wbp5+BggcL3iXgHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUySHt1NDA IivadX0ntUIp09bgQCkwHwYDVR0jBBgwFoAUjhITFCkXlrLlK4nYfE7W2dz6Uksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2REQwL0MxQzdDQzE0QzQ3 MDExRjA5NDVENjIzOUM0RjlBRTAyL2poSVRGQ2tYbHJMbEs0bllmRTdXMmR6NlVr cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvamhJVEZDa1hsckxsSzRuWWZFN1cyZHo2VWtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 REQwL0MxQzdDQzE0QzQ3MDExRjA5NDVENjIzOUM0RjlBRTAyL2poSVRGQ2tYbHJM bEs0bllmRTdXMmR6NlVrcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFlT9G2H4KLmsCf6v+hZqvHpB1YdMP+QjleZTgYCWoQiSN9pv5EE7hNK JggHd01WYyU61C0qCAKoordzRfRBvYk0tAYzeqnJ+k5x3dCQ8P0Kby9e5NrmFicP 5PhoGuuGlkg8nmCoRG0aRTollgQALzt8ksOZIDrQebB20gvDCmPAKMhGI82JmQmz h8GFYpl/zQ8uekYPpQgBce/FgWjA2wr/4PJfH5YlIHm0y/46O64a6d/bxJR882jC yXRRCyAmO/9H+IQEAvfKBAqr+ISQOS5uEv+4fqT5PfE5eDhlrOkYIspOucGe8Ljh Tc/MiSEYHbG7OFG7NtfnyVKxuuRfdfI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:17 2025 by rpki-client