This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json) Hash identifier: gIDX4KERruiokSE96WBzX9jo3B3Kqefu3FQ0uj7rFu8= Subject key identifier: 40:D7:F4:CE:11:BC:3B:95:8F:E7:6B:03:C2:E2:BD:FA:6E:CE:3B:70 Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft Manifest number: 0528 Signing time: Thu 18 Dec 2025 22:52:09 +0000 Manifest this update: Thu 18 Dec 2025 22:52:09 +0000 Manifest next update: Thu 25 Dec 2025 22:52:09 +0000 Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: xmDs8spNyM9npdVu08r41BpTAEaFrL766OkiUqlQEEc=) 2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: mvzxmb3Ec77hzB5jBWCPOpL7XoHBd1oX7QkZWEGZOZU=) 3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: HOR2Uf7sxy7+iosGT3XdbxMdqbYBTIug6HOwedpjmIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Validity Not Before: Dec 18 22:52:09 2025 GMT Not After : Dec 25 22:52:09 2025 GMT Subject: CN=69448599-c612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bd:26:59:40:65:2e:09:fd:3b:a0:a2:4d:f3: 7f:5d:bb:4c:e6:46:22:ac:e0:60:d4:de:22:c0:2d: fc:15:fa:49:90:bb:d3:e0:e7:ea:44:a5:98:c6:95: ff:b5:8b:bd:67:86:5e:da:fe:68:4e:38:8e:2c:2c: b4:f1:b0:1e:6e:43:68:58:2e:7f:51:89:7c:3c:3c: ac:16:58:1c:8e:66:1f:42:3f:82:70:3e:7d:38:54: 85:f0:9e:20:9d:51:84:ca:b5:f0:a1:fa:81:bf:96: 38:26:55:5c:09:de:e7:9e:0b:2d:ef:d0:dc:10:9f: 20:f4:d2:19:3a:92:6d:7f:87:17:27:29:00:ea:21: ac:f0:5f:35:98:6f:c8:c2:3c:a1:af:82:99:2f:9d: 81:d7:27:bd:5a:ac:37:fe:63:15:a6:15:42:de:b9: 16:85:5a:92:40:4a:3d:8d:ff:f1:f1:ca:60:ca:a1: 2e:7a:9c:6f:3a:ec:37:db:10:d9:e2:99:d3:72:71: 2f:75:43:2c:7c:31:42:df:76:8c:c0:4a:31:f2:22: b2:76:08:2e:54:f7:91:e4:80:b9:48:b6:2e:0a:0f: b6:e3:6a:8e:cb:52:c5:18:6f:41:fb:98:7f:83:e1: fc:53:62:4d:d8:9d:5c:c0:14:6b:dd:78:69:f7:b5: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D7:F4:CE:11:BC:3B:95:8F:E7:6B:03:C2:E2:BD:FA:6E:CE:3B:70 X509v3 Authority Key Identifier: keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:21:05:dc:02:af:7e:74:f3:7d:fa:36:13:d9:be:01:3a:93: 0b:53:5d:01:8f:6a:26:94:9e:c8:89:0a:b5:dc:da:1c:9e:85: 9a:89:28:34:98:6f:2a:2f:8d:e2:1d:bf:ce:06:b1:05:0d:04: 7f:ee:17:19:b5:2c:b2:11:a2:ad:c3:d8:7a:d2:d7:ed:48:2d: f1:ca:42:78:a0:2b:ce:80:eb:e2:6e:7e:f3:38:a3:fb:6d:01: eb:45:2e:a3:b9:be:de:27:12:dd:c6:d5:d1:4b:dd:80:67:c0: 75:43:67:f9:da:0d:c9:4d:02:b4:7b:49:e7:83:41:0f:6e:55: 7a:01:3d:f1:fe:07:1b:f2:37:1b:f0:34:96:25:5b:86:fe:c3: 80:cd:3f:19:81:fc:d8:05:d2:89:8a:02:47:39:b6:f4:ed:f9: 16:4d:cf:c8:24:59:fc:0e:ac:57:3a:81:e6:1b:47:47:32:98: 4f:77:62:7a:83:55:0b:f7:81:2f:26:89:2e:b0:e6:c7:5b:5a: a4:23:de:fa:f3:c7:d7:45:07:31:d5:98:c0:bc:cb:7e:d3:c5: d2:f5:ad:cf:67:22:1f:78:f2:78:b3:63:a7:50:3b:40:6d:d7: fe:71:4d:bf:b7:1c:d0:bd:b0:a3:ef:71:6c:1b:34:b9:68:4b: 15:84:4a:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0MTIxMTAvBgNVBAUTKDI2Qzg3RDE5NjZFMkY4MzVGN0NDOEU5NjFEMDJGRjMw OUNFN0JEMjAwHhcNMjUxMjE4MjI1MjA5WhcNMjUxMjI1MjI1MjA5WjAYMRYwFAYD VQQDDA02OTQ0ODU5OS1jNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkb0mWUBlLgn9O6CiTfN/XbtM5kYirOBg1N4iwC38FfpJkLvT4OfqRKWYxpX/ tYu9Z4Ze2v5oTjiOLCy08bAebkNoWC5/UYl8PDysFlgcjmYfQj+CcD59OFSF8J4g nVGEyrXwofqBv5Y4JlVcCd7nngst79DcEJ8g9NIZOpJtf4cXJykA6iGs8F81mG/I wjyhr4KZL52B1ye9Wqw3/mMVphVC3rkWhVqSQEo9jf/x8cpgyqEuepxvOuw32xDZ 4pnTcnEvdUMsfDFC33aMwEox8iKydgguVPeR5IC5SLYuCg+242qOy1LFGG9B+5h/ g+H8U2JN2J1cwBRr3Xhp97V23wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDX9M4R vDuVj+drA8LivfpuzjtwMB8GA1UdIwQYMBaAFCbIfRlm4vg198yOlh0C/zCc570g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQxMi9CNjc2RUJFMDI4 QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1EWDN6STZXSFFMX01Kem52 U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzaDlHV2JpLURYM3pJNldIUUxfTUp6bnZTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQxMi9CNjc2RUJFMDI4QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1E WDN6STZXSFFMX01Kem52U0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbIQXcAq9+dPN9+jYT2b4BOpMLU10Bj2omlJ7IiQq13NocnoWaiSg0 mG8qL43iHb/OBrEFDQR/7hcZtSyyEaKtw9h60tftSC3xykJ4oCvOgOvibn7zOKP7 bQHrRS6jub7eJxLdxtXRS92AZ8B1Q2f52g3JTQK0e0nng0EPblV6AT3x/gcb8jcb 8DSWJVuG/sOAzT8ZgfzYBdKJigJHObb07fkWTc/IJFn8DqxXOoHmG0dHMphPd2J6 g1UL94EvJokusObHW1qkI97688fXRQcx1ZjAvMt+08XS9a3PZyIfePJ4s2OnUDtA bdf+cU2/txzQvbCj73FsGzS5aEsVhEr5 -----END CERTIFICATE-----Generated at Sat Dec 20 13:58:44 2025 by rpki-client