This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json) Hash identifier: RSntWATxTb+l2hz1Me39yotjLe3MHSRKNwaqABIKI7E= Subject key identifier: F1:4B:7A:4E:3B:C9:98:8C:AD:C2:8F:F6:0F:01:44:A4:E8:D2:3D:02 Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft Manifest number: B8 Signing time: Sun 21 Dec 2025 05:08:48 +0000 Manifest this update: Sun 21 Dec 2025 05:08:48 +0000 Manifest next update: Sun 28 Dec 2025 05:08:48 +0000 Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: yDUlbyk9etjzWhj0cEWcEvkPPMk+4yKxZjAS/BXiaMQ=) 2: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: HYfNBrw+oBYJTv3EK6ZW0QGVMQFBO/Tp09If6c2XiUQ=) 3: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: smhXonMxctlF/fMtWQXaFUBBXx8Ym0WOVFbM4hK9hVk=) 4: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: 3Rxi2WwZpfu8F7jhnMuFGFa5sVmkxpF3HfYHLo71KOI=) 5: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: LPMf8e8oe7ripTj9cOjgsGbklShL3L+ImY+41IEZRaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Validity Not Before: Dec 21 05:08:48 2025 GMT Not After : Dec 28 05:08:48 2025 GMT Subject: CN=694780e0-c21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c0:62:f6:ca:02:19:32:ae:a3:0f:7d:89:c2: c3:a4:dd:28:55:98:0f:cc:54:1a:f0:40:d0:7e:60: aa:d0:93:5a:db:20:a9:3c:cd:f5:40:32:0c:1c:aa: dc:23:06:6d:af:e3:6f:15:68:98:bb:70:55:e2:5d: 86:35:48:7a:95:ac:80:5f:f9:0f:8c:31:b7:85:ef: e4:1c:97:e8:9b:5a:0d:9d:74:10:35:d3:cc:3c:7e: a2:7e:5b:3d:b9:32:03:96:47:00:0f:bc:01:d0:6b: ba:ec:a0:bc:26:5e:21:97:ee:2c:47:af:73:77:df: f4:e5:b5:c3:dc:c7:25:f6:34:f8:12:21:13:ac:9e: cd:ac:48:c2:63:d7:38:05:4d:1f:89:fb:4a:2b:be: 98:be:4c:eb:e9:4d:0c:b0:e7:74:c5:d3:c2:9d:b7: a3:c5:a1:ea:07:dc:6c:47:15:6d:8a:cb:0b:e0:4b: fe:bb:40:a2:e1:83:f0:0b:55:b6:00:5a:95:85:01: 95:58:5a:21:0b:7c:28:11:e3:07:94:af:53:cc:7d: d3:55:c4:4d:0c:bf:54:b1:53:52:67:f3:cc:1d:ab: fa:18:c9:07:04:20:43:94:b1:f1:ab:a6:2a:b1:65: 83:aa:8a:c1:e7:5c:9f:8c:d6:ba:88:b3:b0:a0:33: db:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4B:7A:4E:3B:C9:98:8C:AD:C2:8F:F6:0F:01:44:A4:E8:D2:3D:02 X509v3 Authority Key Identifier: keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:73:c8:62:e2:19:40:0f:33:7a:71:bb:f8:c9:07:6d:fd:b9: ac:3a:f4:21:3e:7d:78:9a:71:50:78:4f:ad:f0:54:01:41:3a: f9:5f:01:76:1a:c3:98:dd:ed:d6:d3:15:53:10:e8:91:44:3c: b5:f0:c2:71:4c:97:5d:1f:09:c8:3f:bc:3b:49:25:03:a2:7d: d0:07:26:53:9c:00:f3:a3:c9:b4:4f:89:b7:31:b1:a5:42:7f: c7:64:b9:51:7e:2f:72:e9:08:14:05:ec:37:0d:a7:8b:75:29: 5a:da:ac:74:c2:e3:4d:57:a1:fd:90:51:e7:5b:ae:74:38:af: 86:04:0c:a2:06:6e:4d:11:fd:e0:ba:12:c5:b5:f0:0e:50:16: f6:17:96:9e:55:80:7d:9b:c6:21:d5:af:65:3b:08:3b:86:63: b4:71:8e:3e:e1:83:96:91:bb:d1:5d:f0:7d:75:b7:83:29:a1: c6:86:fa:79:34:ec:0f:3b:c2:d3:e0:e8:04:4f:ef:67:ea:47: a3:14:33:97:07:bd:a0:d4:c3:13:67:83:e5:c1:26:08:20:46: 95:af:2a:fc:ed:e0:95:2d:4f:e7:4d:2b:98:b5:88:5d:fb:14: f4:0d:ca:f7:bc:ca:21:bf:61:59:5a:ed:f7:20:7a:30:ac:d5: 3a:79:0f:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1 MTNERjZCRDcwHhcNMjUxMjIxMDUwODQ4WhcNMjUxMjI4MDUwODQ4WjAYMRYwFAYD VQQDDA02OTQ3ODBlMC1jMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsBi9soCGTKuow99icLDpN0oVZgPzFQa8EDQfmCq0JNa2yCpPM31QDIMHKrc IwZtr+NvFWiYu3BV4l2GNUh6layAX/kPjDG3he/kHJfom1oNnXQQNdPMPH6ifls9 uTIDlkcAD7wB0Gu67KC8Jl4hl+4sR69zd9/05bXD3Mcl9jT4EiETrJ7NrEjCY9c4 BU0fiftKK76Yvkzr6U0MsOd0xdPCnbejxaHqB9xsRxVtissL4Ev+u0Ci4YPwC1W2 AFqVhQGVWFohC3woEeMHlK9TzH3TVcRNDL9UsVNSZ/PMHav6GMkHBCBDlLHxq6Yq sWWDqorB51yfjNa6iLOwoDPbGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFLek47 yZiMrcKP9g8BRKTo0j0CMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5 MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhBNS9EMTUwMzEzNkM5MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1Vv V1pCaTBJeTV5NTFSUGZhOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnc8hi4hlADzN6cbv4yQdt/bmsOvQhPn14mnFQeE+t8FQBQTr5XwF2 GsOY3e3W0xVTEOiRRDy18MJxTJddHwnIP7w7SSUDon3QByZTnADzo8m0T4m3MbGl Qn/HZLlRfi9y6QgUBew3DaeLdSla2qx0wuNNV6H9kFHnW650OK+GBAyiBm5NEf3g uhLFtfAOUBb2F5aeVYB9m8Yh1a9lOwg7hmO0cY4+4YOWkbvRXfB9dbeDKaHGhvp5 NOwPO8LT4OgET+9n6kejFDOXB72g1MMTZ4PlwSYIIEaVryr87eCVLU/nTSuYtYhd +xT0Dcr3vMohv2FZWu33IHowrNU6eQ/N -----END CERTIFICATE-----Generated at Mon Dec 22 10:59:05 2025 by rpki-client