This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json) Hash identifier: 2um99siizaNUpZPRUSCrV4p+2zN7f8QFwKYhgXShafM= Subject key identifier: E7:A9:56:CA:B6:96:E0:12:0A:C7:4C:4A:82:BD:20:2E:1A:08:67:9E Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft Manifest number: B7 Signing time: Fri 19 Dec 2025 05:08:21 +0000 Manifest this update: Fri 19 Dec 2025 05:08:20 +0000 Manifest next update: Fri 26 Dec 2025 05:08:20 +0000 Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: x95RuGsGSPhHonf8x+CO/r6TsD7P3J6OJo5oKkiiDn4=) 2: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: HYfNBrw+oBYJTv3EK6ZW0QGVMQFBO/Tp09If6c2XiUQ=) 3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: LPMf8e8oe7ripTj9cOjgsGbklShL3L+ImY+41IEZRaQ=) 4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: smhXonMxctlF/fMtWQXaFUBBXx8Ym0WOVFbM4hK9hVk=) 5: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: 3Rxi2WwZpfu8F7jhnMuFGFa5sVmkxpF3HfYHLo71KOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Validity Not Before: Dec 19 05:08:20 2025 GMT Not After : Dec 26 05:08:20 2025 GMT Subject: CN=6944ddc5-9cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5a:54:5c:19:a9:27:ec:e6:86:67:62:7f:8c: 00:b0:2a:8b:db:d2:ee:dc:8b:3f:c1:ed:9b:6a:60: 6c:49:eb:e1:61:aa:e3:f8:06:b0:ae:52:67:64:77: 27:db:db:aa:27:9f:e2:48:d4:d2:2a:0d:19:de:b5: 19:0c:5e:cf:dd:6d:50:cd:de:78:58:f5:b0:de:89: 80:5c:2e:b9:92:53:be:27:a1:68:ef:5d:04:a5:ae: bb:ba:ad:84:e4:05:2c:e2:c6:83:dd:30:37:b5:d2: 32:26:74:86:6f:f2:bf:30:bc:4a:46:54:a9:68:8d: 8e:2d:c0:63:7d:4d:e7:51:ca:90:f0:3e:fd:e3:98: 59:04:e5:67:f7:f0:8e:fc:97:de:8a:5c:27:18:34: b5:8b:e9:9f:ac:f6:51:85:c6:dc:63:03:a0:54:ab: 6b:f3:59:e8:bd:37:e9:ac:f5:f5:1b:63:66:f0:dd: 34:9f:74:6b:cb:f7:b7:ac:b0:70:77:40:75:d8:88: 50:34:c7:fb:d9:21:d1:05:7e:b8:ab:c1:97:08:ee: fd:4a:c3:b8:7b:6b:38:39:dc:3f:3d:eb:ad:22:bd: 83:5d:ba:83:77:fc:1c:5b:1f:c0:f4:04:ca:2a:3d: 01:24:24:9f:3e:3a:ea:e7:dc:8b:cd:27:b6:9c:7d: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A9:56:CA:B6:96:E0:12:0A:C7:4C:4A:82:BD:20:2E:1A:08:67:9E X509v3 Authority Key Identifier: keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:21:84:3a:a2:74:93:5f:fd:89:84:6e:8d:7b:54:3d:37:b5: 4e:06:e7:7e:75:46:6b:f1:1e:71:65:bd:3a:6e:a0:b5:b1:11: dd:ae:a5:3e:d9:f0:eb:7e:1b:ab:2d:e0:36:f3:8c:3b:df:88: e6:ff:54:ca:1c:13:8d:80:54:a7:f5:a8:8a:68:23:1a:96:ce: bb:db:84:55:e4:d0:7a:2c:d9:57:22:2c:c3:2b:d3:58:ac:c2: 58:6f:3d:2c:1c:2e:c5:d9:b5:60:bb:8c:31:59:6a:b2:fa:18: 81:5d:a6:9d:3d:44:6c:ba:74:db:5f:d5:08:a9:c7:88:76:ee: 09:3a:8b:ce:75:54:ac:90:22:e0:fa:77:33:84:51:b7:ed:64: 7b:58:bb:96:7c:07:50:92:15:94:21:b7:86:33:52:e4:76:52: c5:4a:69:1e:25:be:07:10:32:e9:db:ac:32:e4:84:b7:2a:cb: 76:a3:3d:02:c9:09:96:ca:dd:a1:3f:00:08:8d:88:01:7d:b1: 81:d3:3c:5f:4b:c9:ff:e2:7d:b0:4f:30:62:17:83:6f:e9:54: 57:f2:37:d3:16:fe:a0:d0:f8:01:86:80:cf:fb:d5:a4:92:bf: 7a:2d:f5:24:e3:c1:14:d4:fc:1a:45:86:77:f9:34:66:f0:8f: 67:24:a4:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1 MTNERjZCRDcwHhcNMjUxMjE5MDUwODIwWhcNMjUxMjI2MDUwODIwWjAYMRYwFAYD VQQDDA02OTQ0ZGRjNS05Y2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VpUXBmpJ+zmhmdif4wAsCqL29Lu3Is/we2bamBsSevhYarj+AawrlJnZHcn 29uqJ5/iSNTSKg0Z3rUZDF7P3W1Qzd54WPWw3omAXC65klO+J6Fo710Epa67uq2E 5AUs4saD3TA3tdIyJnSGb/K/MLxKRlSpaI2OLcBjfU3nUcqQ8D7945hZBOVn9/CO /JfeilwnGDS1i+mfrPZRhcbcYwOgVKtr81novTfprPX1G2Nm8N00n3Rry/e3rLBw d0B12IhQNMf72SHRBX64q8GXCO79SsO4e2s4Odw/PeutIr2DXbqDd/wcWx/A9ATK Kj0BJCSfPjrq59yLzSe2nH1LZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOepVsq2 luASCsdMSoK9IC4aCGeeMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5 MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhBNS9EMTUwMzEzNkM5MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1Vv V1pCaTBJeTV5NTFSUGZhOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKIYQ6onSTX/2JhG6Ne1Q9N7VOBud+dUZr8R5xZb06bqC1sRHdrqU+ 2fDrfhurLeA284w734jm/1TKHBONgFSn9aiKaCMals6724RV5NB6LNlXIizDK9NY rMJYbz0sHC7F2bVgu4wxWWqy+hiBXaadPURsunTbX9UIqceIdu4JOovOdVSskCLg +nczhFG37WR7WLuWfAdQkhWUIbeGM1LkdlLFSmkeJb4HEDLp26wy5IS3Kst2oz0C yQmWyt2hPwAIjYgBfbGB0zxfS8n/4n2wTzBiF4Nv6VRX8jfTFv6g0PgBhoDP+9Wk kr96LfUk48EU1PwaRYZ3+TRm8I9nJKRS -----END CERTIFICATE-----Generated at Sat Dec 20 10:40:13 2025 by rpki-client