This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft File: rN0Hh_30YaFfcqHizj449FTtIHI.mft (raw, json) Hash identifier: mJTkXI1Ct0r0vGQgvOALTkonWuYpHk8Fb638OeQYOls= Subject key identifier: A4:32:F3:D0:91:8A:4B:5B:F4:45:72:41:3A:BF:B0:3B:9D:F4:02:34 Authority key identifier: AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72 Certificate issuer: /CN=A9116D68/serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072 Certificate serial: 0F6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft Manifest number: 1827 Signing time: Wed 24 Dec 2025 17:16:38 +0000 Manifest this update: Wed 24 Dec 2025 17:16:38 +0000 Manifest next update: Wed 31 Dec 2025 17:16:38 +0000 Files and hashes: 1: rN0Hh_30YaFfcqHizj449FTtIHI.crl (hash: jwHOxpuRwjTwC1q2/oSOaRidRbKC+T7ajFbct4yaQNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3950 (0xf6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072 Validity Not Before: Dec 24 17:16:38 2025 GMT Not After : Dec 31 17:16:38 2025 GMT Subject: CN=694c1ff6-c46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:41:34:cf:6f:b5:8f:8b:c5:eb:d5:cc:04: 72:cb:cc:20:c6:3b:5a:a8:e9:82:84:c3:a0:3f:75: a6:1b:e1:aa:65:18:02:34:fe:14:4b:41:c7:05:61: cc:02:62:7d:eb:ac:6b:ef:0c:c4:6c:05:fe:c1:21: 4b:7c:22:e7:38:b7:e9:68:44:02:bd:6c:2e:a6:5b: 8c:42:c5:a2:6b:44:c9:19:ac:82:1e:e5:c7:9c:28: fb:a0:3a:1f:7e:7b:bf:55:3f:b0:ef:66:35:03:99: 33:1e:62:66:55:4c:34:f4:60:4c:7a:3e:f6:c6:07: 7a:b4:b3:1c:a9:2c:3c:13:58:12:c3:62:89:c9:d8: 7f:83:2c:4c:f5:70:8f:2c:a9:27:2b:9b:8d:0d:fa: f0:7e:66:db:61:6e:89:29:91:14:b4:29:2e:db:45: 92:42:d8:6e:f6:fd:ee:82:ff:ba:b8:44:73:52:16: 4c:e6:a9:1e:2e:95:49:f5:e1:11:e2:93:a3:7e:c3: be:2d:39:64:f3:dc:16:a2:02:ea:83:31:ec:ee:39: 06:3d:dc:15:29:ed:40:6d:85:dc:ea:72:7b:6c:28: d7:e7:b8:c4:5c:3a:ad:01:80:27:4d:7a:5f:a2:bd: b2:88:0c:f4:4a:d4:fd:d0:0b:52:94:9b:90:53:96: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:32:F3:D0:91:8A:4B:5B:F4:45:72:41:3A:BF:B0:3B:9D:F4:02:34 X509v3 Authority Key Identifier: keyid:AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:05:86:6a:f3:69:05:71:1c:bc:9a:cd:f1:45:76:26:1a:98: 45:f1:43:f2:db:9d:d6:6f:06:52:7c:77:32:35:72:64:33:82: 16:10:c6:ef:e6:c0:b4:a1:7f:9a:11:db:80:99:b4:65:99:44: 8b:b9:96:b8:6e:65:c5:3c:c5:d6:b2:29:5a:56:15:24:85:26: 3b:86:44:ef:40:94:d7:ae:63:05:50:b3:e4:ac:7a:fd:5e:8f: 87:2e:ce:9a:db:0d:a3:b8:ce:cb:9d:32:f4:34:dc:2b:fa:b6: 9f:ad:dc:c9:37:e9:99:96:b9:37:cd:33:30:5f:00:e1:6a:a1: d9:9f:ea:4a:83:6a:7e:05:f7:47:39:d9:3a:69:81:8d:08:34: f1:50:e8:2c:49:20:fa:08:6f:ef:7b:86:55:c1:e0:41:e6:a0: a6:b1:51:1b:0d:1a:64:5e:72:ef:bb:b9:eb:26:63:08:b7:9a: 62:d8:a5:71:f8:6d:cb:cf:25:94:9c:ec:64:bc:c3:b0:cd:73: 91:e0:57:ac:a7:75:de:79:f5:a5:c8:f8:1d:72:0a:63:bc:30: c1:11:37:b3:a4:51:40:9b:8f:d7:de:09:a8:6e:65:23:1f:26: 32:bf:d1:71:25:03:a6:fe:ef:d5:1e:6b:0d:d2:50:9c:ca:11: 5b:15:6c:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKEFDREQwNzg3RkRGNDYxQTE1RjcyQTFFMkNFM0UzOEY0 NTRFRDIwNzIwHhcNMjUxMjI0MTcxNjM4WhcNMjUxMjMxMTcxNjM4WjAYMRYwFAYD VQQDDA02OTRjMWZmNi1jNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAze1BNM9vtY+LxevVzARyy8wgxjtaqOmChMOgP3WmG+GqZRgCNP4US0HHBWHM AmJ966xr7wzEbAX+wSFLfCLnOLfpaEQCvWwupluMQsWia0TJGayCHuXHnCj7oDof fnu/VT+w72Y1A5kzHmJmVUw09GBMej72xgd6tLMcqSw8E1gSw2KJydh/gyxM9XCP LKknK5uNDfrwfmbbYW6JKZEUtCku20WSQthu9v3ugv+6uERzUhZM5qkeLpVJ9eER 4pOjfsO+LTlk89wWogLqgzHs7jkGPdwVKe1AbYXc6nJ7bCjX57jEXDqtAYAnTXpf or2yiAz0StT90AtSlJuQU5akhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQy89CR iktb9EVyQTq/sDud9AI0MB8GA1UdIwQYMBaAFKzdB4f99GGhX3Kh4s4+OPRU7SBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9yTjBIaF8zMFlhRmZjcUhpemo0NDlGVHRJ SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOMEhoXzMwWWFGZmNxSGl6ajQ0OUZUdElISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9yTjBIaF8zMFlh RmZjcUhpemo0NDlGVHRJSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNBYZq82kFcRy8ms3xRXYmGphF8UPy253WbwZSfHcyNXJkM4IWEMbv 5sC0oX+aEduAmbRlmUSLuZa4bmXFPMXWsilaVhUkhSY7hkTvQJTXrmMFULPkrHr9 Xo+HLs6a2w2juM7LnTL0NNwr+rafrdzJN+mZlrk3zTMwXwDhaqHZn+pKg2p+BfdH Odk6aYGNCDTxUOgsSSD6CG/ve4ZVweBB5qCmsVEbDRpkXnLvu7nrJmMIt5pi2KVx +G3LzyWUnOxkvMOwzXOR4Fesp3XeefWlyPgdcgpjvDDBETezpFFAm4/X3gmobmUj HyYyv9FxJQOm/u/VHmsN0lCcyhFbFWxA -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:12 2025 by rpki-client