This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft File: jhITFCkXlrLlK4nYfE7W2dz6Uks.mft (raw, json) Hash identifier: kJuAFKvNLJoPwOnn5FVvLSjKzvkHltBg6VaOgjK6M40= Subject key identifier: 5A:36:2B:EB:7F:1E:A9:46:F9:B1:AC:8B:57:FF:F1:F2:6E:E1:17:28 Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B Certificate issuer: /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft Manifest number: 1F Signing time: Mon 15 Dec 2025 07:21:02 +0000 Manifest this update: Mon 15 Dec 2025 07:21:02 +0000 Manifest next update: Mon 22 Dec 2025 07:21:02 +0000 Files and hashes: 1: jhITFCkXlrLlK4nYfE7W2dz6Uks.crl (hash: trlM+KXCqetAPAA+ftzlM5dkTh+IfS2JeQEmtzgv6xU=) 2: B753A48EC6C711F09BF6A518C4F9AE02.roa (hash: Y96pVTrMdeKkXESI3mBfKCnkNu7eLETGHBB6EtnJI3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 07:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B Validity Not Before: Dec 15 07:21:02 2025 GMT Not After : Dec 22 07:21:02 2025 GMT Subject: CN=693fb6de-95e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bf:aa:07:6a:ef:6a:a8:95:e7:13:c0:b2:f5: 82:05:8f:63:50:0d:e1:c2:9e:d2:0e:fb:29:36:c4: 65:34:bd:6d:14:ab:a3:57:22:54:49:38:72:be:03: a5:3c:a4:db:52:8c:fc:08:f8:54:fb:71:6c:96:17: 79:95:49:97:92:19:52:3a:81:1a:15:e8:3d:9c:64: e6:f3:e1:06:dd:60:14:46:6d:97:e3:c6:68:1c:cd: 61:1e:dc:3d:63:b6:25:f6:c2:a3:8f:27:ae:76:64: a6:19:66:f6:c8:1b:d8:63:c4:ce:79:05:cb:39:02: 11:53:f0:d1:6f:7c:3e:b1:ae:27:9c:34:fc:2a:5c: 2e:e3:68:ee:41:5e:70:44:bd:08:7e:0a:a3:55:b8: da:16:1d:e5:5d:9c:20:c0:94:3f:e2:eb:e4:c0:50: c0:53:88:97:65:69:32:e6:46:a1:7f:cb:00:52:44: 1e:32:ad:d7:a1:83:a6:e9:10:9e:1c:4f:67:f9:c1: a1:4a:03:d3:c7:ad:99:6f:59:59:a1:7b:f1:ce:a3: 94:5c:0e:b2:a7:9d:b2:64:00:04:56:49:ff:1a:e7: 68:fa:2e:87:1b:06:b7:16:9b:47:69:5a:8b:fc:05: 7b:8f:b1:5b:3f:4d:26:aa:d3:3d:4f:04:9d:0c:e8: de:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:36:2B:EB:7F:1E:A9:46:F9:B1:AC:8B:57:FF:F1:F2:6E:E1:17:28 X509v3 Authority Key Identifier: keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f4:1e:c3:c0:0c:91:af:93:87:59:0b:48:1c:78:c7:0d:6c: 89:06:82:5f:91:86:1b:66:5d:7d:9e:2c:8c:af:3d:d5:a5:c2: 37:eb:65:4d:d7:7d:38:07:7f:e2:90:8f:4e:64:37:3d:77:2d: 75:7d:0f:50:5b:2d:b9:95:7a:85:99:35:d8:5e:b8:fd:23:2c: da:7b:08:36:a8:af:47:12:62:92:5f:54:2c:c5:a8:ae:2b:f9: a8:3d:b9:66:de:8e:e7:32:0d:80:44:9c:ce:d9:1d:d6:61:30: 39:89:a4:1d:fd:c7:39:58:2d:2e:99:2d:9f:f9:a1:55:81:aa: 80:f2:4a:d9:45:98:06:51:fa:cd:78:bf:4c:75:f6:48:3a:2b: 33:f3:bc:65:e8:d4:e1:5e:20:e2:8a:e8:e9:b0:65:8b:8c:6e: 3e:56:fa:bd:5d:de:9b:24:19:db:2f:d1:66:e2:c9:19:bf:73: 66:5e:02:75:bc:12:83:f2:ee:bb:18:36:80:6a:5d:13:49:01: b4:5f:15:5c:5f:6f:43:68:64:6f:1b:51:e8:2c:ae:eb:be:01: 93:51:a8:b1:28:77:c1:93:83:c4:03:d1:4e:79:47:77:98:33: 44:b2:06:64:63:87:66:55:8e:dd:2a:3d:26:16:f8:1b:57:83: 64:2e:ce:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkREMDExMC8GA1UEBRMoOEUxMjEzMTQyOTE3OTZCMkU1MkI4OUQ4N0M0RUQ2RDlE Q0ZBNTI0QjAeFw0yNTEyMTUwNzIxMDJaFw0yNTEyMjIwNzIxMDJaMBgxFjAUBgNV BAMMDTY5M2ZiNmRlLTk1ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChv6oHau9qqJXnE8Cy9YIFj2NQDeHCntIO+yk2xGU0vW0Uq6NXIlRJOHK+A6U8 pNtSjPwI+FT7cWyWF3mVSZeSGVI6gRoV6D2cZObz4QbdYBRGbZfjxmgczWEe3D1j tiX2wqOPJ652ZKYZZvbIG9hjxM55Bcs5AhFT8NFvfD6xriecNPwqXC7jaO5BXnBE vQh+CqNVuNoWHeVdnCDAlD/i6+TAUMBTiJdlaTLmRqF/ywBSRB4yrdehg6bpEJ4c T2f5waFKA9PHrZlvWVmhe/HOo5RcDrKnnbJkAARWSf8a52j6LocbBrcWm0dpWov8 BXuPsVs/TSaq0z1PBJ0M6N4vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWjYr638e qUb5sayLV//x8m7hFygwHwYDVR0jBBgwFoAUjhITFCkXlrLlK4nYfE7W2dz6Uksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2REQwL0MxQzdDQzE0QzQ3 MDExRjA5NDVENjIzOUM0RjlBRTAyL2poSVRGQ2tYbHJMbEs0bllmRTdXMmR6NlVr cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvamhJVEZDa1hsckxsSzRuWWZFN1cyZHo2VWtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 REQwL0MxQzdDQzE0QzQ3MDExRjA5NDVENjIzOUM0RjlBRTAyL2poSVRGQ2tYbHJM bEs0bllmRTdXMmR6NlVrcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHD0HsPADJGvk4dZC0gceMcNbIkGgl+RhhtmXX2eLIyvPdWlwjfrZU3X fTgHf+KQj05kNz13LXV9D1BbLbmVeoWZNdheuP0jLNp7CDaor0cSYpJfVCzFqK4r +ag9uWbejucyDYBEnM7ZHdZhMDmJpB39xzlYLS6ZLZ/5oVWBqoDyStlFmAZR+s14 v0x19kg6KzPzvGXo1OFeIOKK6OmwZYuMbj5W+r1d3pskGdsv0WbiyRm/c2ZeAnW8 EoPy7rsYNoBqXRNJAbRfFVxfb0NoZG8bUegsruu+AZNRqLEod8GTg8QD0U55R3eY M0SyBmRjh2ZVjt0qPSYW+BtXg2Quzm8= -----END CERTIFICATE-----Generated at Tue Dec 16 12:52:52 2025 by rpki-client