This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft File: JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json) Hash identifier: OKIaIDrwzN4DxWP5iyCwMSA5gThHLnw0cyTYiB/HHQM= Subject key identifier: 33:B8:BF:33:0C:EE:D8:76:25:E9:7A:AA:D0:14:D9:DF:4C:4A:73:5A Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA Certificate issuer: /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft Manifest number: B2 Signing time: Sat 27 Dec 2025 04:59:36 +0000 Manifest this update: Sat 27 Dec 2025 04:59:35 +0000 Manifest next update: Sat 03 Jan 2026 04:59:35 +0000 Files and hashes: 1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: JXmebUujxWoxRS5LKZr0lkFLJTVSluJZ5OLJrsPrM2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 04:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91186C2, serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA Validity Not Before: Dec 27 04:59:35 2025 GMT Not After : Jan 3 04:59:35 2026 GMT Subject: CN=694f67b7-db69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:14:c9:c9:17:5d:7b:53:99:66:9b:ae:58:be: e6:c8:dc:1c:61:cb:fb:32:4e:7c:96:c8:a7:05:0b: b6:9b:dd:68:ca:1e:cf:03:ed:80:cf:db:d5:e1:26: 77:94:96:09:99:97:d7:17:f0:78:98:c8:5c:54:52: 24:2d:6b:8b:ae:64:71:48:cc:24:b0:a5:de:bb:68: d9:40:78:51:b5:d5:55:e7:68:33:c1:51:0d:0f:1f: 7d:a5:97:c3:af:a6:7b:af:98:73:ea:ea:90:1c:cb: a7:a4:d0:e8:5d:b7:fb:98:23:12:58:9f:83:68:08: 95:06:f6:51:d9:b2:2c:5d:8d:3b:9a:9d:ab:d9:21: 09:a8:fe:99:60:c4:c2:85:d5:d6:2c:31:83:c2:15: 1c:94:39:ee:cd:1d:9b:35:3a:5d:af:e0:04:24:07: 3f:ab:9f:dd:ed:37:4a:a1:9c:b1:4e:e0:85:7b:6b: bb:a4:d9:a5:6d:ad:2a:79:ea:67:9e:a0:7f:28:04: 03:a7:d9:6b:a1:b8:38:08:8d:bd:b7:38:06:ec:ad: f9:3b:91:c0:bd:3b:85:c1:5c:4f:f4:6e:60:e2:34: 8e:69:c5:42:cf:b3:cd:21:64:34:b0:ff:62:c5:3f: 14:60:3a:88:a5:c2:30:05:fe:17:21:3b:60:48:ef: e0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B8:BF:33:0C:EE:D8:76:25:E9:7A:AA:D0:14:D9:DF:4C:4A:73:5A X509v3 Authority Key Identifier: keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6c:b6:50:63:93:1b:c7:70:44:8c:9e:a7:51:cd:8b:fe:f4: 0d:9c:55:2c:b5:ae:66:b3:3a:db:8c:b3:a7:56:31:47:43:bc: 9e:c5:95:62:67:4e:68:2b:37:74:76:09:5e:dc:86:1b:60:3c: bb:d4:ae:fc:61:fc:27:83:aa:30:6e:c6:25:6a:e7:4a:cd:aa: a8:2f:76:d6:29:22:01:73:62:60:1c:eb:1d:b3:f8:89:4c:b8: 80:61:89:bb:ff:4c:d1:26:99:16:5b:5c:9a:8c:e5:b6:cc:fb: a6:74:1d:dc:ea:6f:cd:8a:1f:04:00:46:d8:b0:51:52:7c:af: d9:8f:9c:60:1f:83:f8:bb:ef:bb:bd:43:b7:7f:ff:91:46:fb: ed:22:5f:6d:7c:e0:99:d6:6f:33:58:ac:f0:8d:11:99:bb:5a: 42:9f:cd:39:d4:0f:9e:5e:a6:b8:88:9e:cf:3a:03:72:0a:98: 32:38:9d:f6:fd:18:8a:5d:0f:7b:3f:39:34:4e:83:bb:1b:08: 09:d9:c4:12:de:81:03:f9:28:af:9c:95:1c:4f:a1:56:3f:78: 1c:70:25:10:ae:eb:cb:69:0f:bf:12:71:75:0f:f2:1d:3f:db: f3:9a:5e:6d:34:c0:8b:1c:c6:3a:1c:48:7a:d2:c8:c6:22:4d: 03:80:a2:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg2QzIxMTAvBgNVBAUTKDI0NzIyRDMxQzI1MTNFNEU3Rjg3RURCNzBERkU5REM5 NEY4NDY4QkEwHhcNMjUxMjI3MDQ1OTM1WhcNMjYwMTAzMDQ1OTM1WjAYMRYwFAYD VQQDDA02OTRmNjdiNy1kYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhTJyRdde1OZZpuuWL7myNwcYcv7Mk58lsinBQu2m91oyh7PA+2Az9vV4SZ3 lJYJmZfXF/B4mMhcVFIkLWuLrmRxSMwksKXeu2jZQHhRtdVV52gzwVENDx99pZfD r6Z7r5hz6uqQHMunpNDoXbf7mCMSWJ+DaAiVBvZR2bIsXY07mp2r2SEJqP6ZYMTC hdXWLDGDwhUclDnuzR2bNTpdr+AEJAc/q5/d7TdKoZyxTuCFe2u7pNmlba0qeepn nqB/KAQDp9lrobg4CI29tzgG7K35O5HAvTuFwVxP9G5g4jSOacVCz7PNIWQ0sP9i xT8UYDqIpcIwBf4XITtgSO/gowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDO4vzMM 7th2Jel6qtAU2d9MSnNaMB8GA1UdIwQYMBaAFCRyLTHCUT5Of4fttw3+nclPhGi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODZDMi8yNTU1QkYwNkQx N0YxMUVGQjM4NDY5MjhDNEY5QUUwMi9KSEl0TWNKUlBrNV9oLTIzRGY2ZHlVLUVh TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pISXRNY0pSUGs1X2gtMjNEZjZkeVUtRWFMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODZDMi8yNTU1QkYwNkQxN0YxMUVGQjM4NDY5MjhDNEY5QUUwMi9KSEl0TWNKUlBr NV9oLTIzRGY2ZHlVLUVhTG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7bLZQY5Mbx3BEjJ6nUc2L/vQNnFUsta5mszrbjLOnVjFHQ7yexZVi Z05oKzd0dgle3IYbYDy71K78Yfwng6owbsYlaudKzaqoL3bWKSIBc2JgHOsds/iJ TLiAYYm7/0zRJpkWW1yajOW2zPumdB3c6m/Nih8EAEbYsFFSfK/Zj5xgH4P4u++7 vUO3f/+RRvvtIl9tfOCZ1m8zWKzwjRGZu1pCn8051A+eXqa4iJ7POgNyCpgyOJ32 /RiKXQ97Pzk0ToO7GwgJ2cQS3oED+SivnJUcT6FWP3gccCUQruvLaQ+/EnF1D/Id P9vzml5tNMCLHMY6HEh60sjGIk0DgKKk -----END CERTIFICATE-----Generated at Sun Dec 28 23:43:47 2025 by rpki-client