This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: H05T10yOkf2Nff/DvAeAKejxarDERlxdKLUxzHszGDk= Subject key identifier: 03:31:55:6F:C3:90:F7:B5:B5:B0:33:B9:74:34:62:34:97:AA:E7:93 Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 0874 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 131A Signing time: Fri 26 Dec 2025 18:57:23 +0000 Manifest this update: Fri 26 Dec 2025 18:57:23 +0000 Manifest next update: Fri 02 Jan 2026 18:57:23 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: Hcmgnlkv/Vg/C8k3cFZRIPdbVy8tva104bNuRxY7Y0A=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: E328j+fp8f6dEpnkUoVG1DilnqBamfwHF17LQ6P3KGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 18:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: Dec 26 18:57:23 2025 GMT Not After : Jan 2 18:57:23 2026 GMT Subject: CN=694eda93-95d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:31:60:3c:cd:c2:d6:4a:25:59:2f:6e:85: d6:47:ce:62:75:13:59:98:17:ea:06:fc:dd:a9:e4: 87:2f:eb:7c:80:9f:4a:26:d0:2a:3e:1a:d6:56:43: 21:cb:db:15:94:a1:c8:81:29:23:ed:99:6e:e7:61: 37:de:e2:14:50:73:8e:ad:1c:ca:26:37:01:7c:31: cb:c7:69:7f:5d:b4:96:0a:53:3e:d9:f5:c7:a0:6a: 89:6d:b7:fe:47:6b:6e:d3:25:9c:8d:31:af:14:75: a4:a6:78:be:87:bd:8c:82:db:bc:70:c6:08:62:13: f8:74:9e:e7:cb:10:bb:9c:48:d9:d8:b8:e8:ed:36: 20:3d:6f:eb:83:6f:0e:fd:bc:19:bc:e4:11:5e:dc: 33:07:9a:2a:3c:12:76:5c:fe:a4:a4:93:72:01:a3: 1f:2b:49:95:ab:4c:29:8a:1d:68:f6:2e:83:5b:4f: c9:57:d9:ed:99:1f:ec:45:68:62:4d:2b:4b:59:00: 19:1a:2b:62:10:f9:11:a9:25:87:47:1f:88:73:39: cb:d6:2f:e4:1a:86:9a:97:18:39:46:cd:a7:a1:47: 58:a7:29:2d:6c:2a:46:f0:a1:90:70:ee:b1:d3:8f: 84:86:69:5b:63:4d:d8:68:38:2a:90:7f:69:9c:bc: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:31:55:6F:C3:90:F7:B5:B5:B0:33:B9:74:34:62:34:97:AA:E7:93 X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:22:ce:b4:8d:27:a9:8b:70:39:54:d0:41:e4:6f:90:cf:95: d6:2f:e1:74:64:49:85:27:e3:1b:a4:91:df:1d:4f:f1:67:8d: e4:2d:bf:5d:37:c6:59:05:b6:32:55:05:db:09:14:78:ce:f4: e5:9e:3c:6d:b9:19:19:47:59:31:6f:c5:cd:dc:7e:b4:05:f2: cb:6b:a6:13:cf:c4:08:07:22:5a:50:4e:59:4c:59:80:12:69: 50:e9:17:4d:d1:ba:e2:6e:09:cb:49:4d:c1:54:5d:db:c0:d0: 45:6d:0c:e3:33:80:c3:11:1e:40:a8:c4:07:da:ad:fb:69:a0: 57:ab:a9:5b:7a:3e:2a:15:c6:d0:c2:da:b1:53:0b:9c:24:6e: 0f:23:f9:d9:d2:32:5b:b8:fc:16:cc:a5:3f:be:e2:0c:b1:3a: bb:24:e5:ac:62:0f:d1:c2:19:9a:8e:49:de:f7:97:fd:18:38: ab:26:e9:d7:20:8b:34:35:14:4a:b1:4d:95:ad:d4:94:5e:76: 5c:d0:3c:48:70:95:50:9c:74:97:1b:a4:40:58:93:d3:41:fc: 1c:f6:0f:55:c1:f4:d3:1f:2d:78:8b:79:36:33:9f:59:0f:20: 06:a2:b1:8c:a5:28:1a:be:50:cb:1b:9b:72:4f:a7:a0:16:cc: be:fe:cf:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjUxMjI2MTg1NzIzWhcNMjYwMTAyMTg1NzIzWjAYMRYwFAYD VQQDDA02OTRlZGE5My05NWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSwxYDzNwtZKJVkvboXWR85idRNZmBfqBvzdqeSHL+t8gJ9KJtAqPhrWVkMh y9sVlKHIgSkj7Zlu52E33uIUUHOOrRzKJjcBfDHLx2l/XbSWClM+2fXHoGqJbbf+ R2tu0yWcjTGvFHWkpni+h72Mgtu8cMYIYhP4dJ7nyxC7nEjZ2Ljo7TYgPW/rg28O /bwZvOQRXtwzB5oqPBJ2XP6kpJNyAaMfK0mVq0wpih1o9i6DW0/JV9ntmR/sRWhi TStLWQAZGitiEPkRqSWHRx+IcznL1i/kGoaalxg5Rs2noUdYpyktbCpG8KGQcO6x 04+EhmlbY03YaDgqkH9pnLx2fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMxVW/D kPe1tbAzuXQ0YjSXqueTMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAIs60jSepi3A5VNBB5G+Qz5XWL+F0ZEmFJ+MbpJHfHU/xZ43kLb9d N8ZZBbYyVQXbCRR4zvTlnjxtuRkZR1kxb8XN3H60BfLLa6YTz8QIByJaUE5ZTFmA EmlQ6RdN0bribgnLSU3BVF3bwNBFbQzjM4DDER5AqMQH2q37aaBXq6lbej4qFcbQ wtqxUwucJG4PI/nZ0jJbuPwWzKU/vuIMsTq7JOWsYg/Rwhmajkne95f9GDirJunX IIs0NRRKsU2VrdSUXnZc0DxIcJVQnHSXG6RAWJPTQfwc9g9VwfTTHy14i3k2M59Z DyAGorGMpSgavlDLG5tyT6egFsy+/s/b -----END CERTIFICATE-----Generated at Fri Dec 26 21:12:04 2025 by rpki-client