This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft File: HWQu0o7OpfKqzzR7Fgl_nZJB120.mft (raw, json) Hash identifier: cL7ivA3eYiMhL6g1/Yvr032xqpweH92FW8B/DqDTcx4= Subject key identifier: 9F:E9:03:7D:EF:2E:32:77:80:9F:92:1F:13:AB:92:D4:FE:60:55:3E Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D Certificate issuer: /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft Manifest number: 03B8 Signing time: Mon 22 Dec 2025 23:42:18 +0000 Manifest this update: Mon 22 Dec 2025 23:42:18 +0000 Manifest next update: Mon 29 Dec 2025 23:42:18 +0000 Files and hashes: 1: HWQu0o7OpfKqzzR7Fgl_nZJB120.crl (hash: yUzAxFUTz+avODOlr4MTndY8eE/jw9Surp4yMF6zyRM=) 2: 05F74AC4B99C11ECA1344C85C4F9AE02.roa (hash: 8hUucYPHQ79ZY6uDpo1eHlNtJ78CYgic7xieJwMDGwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Validity Not Before: Dec 22 23:42:18 2025 GMT Not After : Dec 29 23:42:18 2025 GMT Subject: CN=6949d75a-3c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:c2:54:cb:7b:5b:c8:e1:e1:78:8f:64:fc: 44:c1:20:a2:ab:b0:86:d0:8d:14:1c:8c:4b:f4:96: 3c:b9:60:7d:4f:21:85:3d:57:67:26:43:4d:35:80: 5c:f0:60:39:aa:77:6c:f0:22:44:e2:4d:38:b9:30: 66:85:f1:82:59:9e:96:8a:97:be:17:30:d3:c0:7b: 3a:b2:64:d0:51:f4:6f:d4:45:3e:82:54:76:2f:af: 09:b2:2c:63:eb:bd:e2:0f:1f:0b:22:7a:e5:a5:3e: 07:6f:2d:ab:c3:fc:2a:45:bb:a6:59:c2:01:21:1b: b3:7b:7c:bd:c4:9a:38:a6:8b:b0:16:56:24:6e:ef: a5:0a:aa:88:7e:a9:e2:75:09:59:c9:f0:36:d8:19: 68:e3:ef:91:1b:f4:88:42:2f:6d:7b:fc:8d:bc:82: 2c:c2:97:a7:ba:90:20:0b:a2:74:51:69:3d:dc:5a: 85:2b:f3:50:51:95:7f:77:ff:c1:a9:4b:6c:f9:00: fb:36:ad:02:7b:72:79:07:6b:2a:ab:b8:87:28:45: 46:f1:2d:f4:4d:c0:32:72:93:77:fc:7f:16:c2:e0: 3b:10:a6:2f:09:59:63:03:9d:01:82:1f:21:ee:3d: 11:b5:4a:f5:b2:57:a8:e8:61:7a:ac:e1:fa:4b:4d: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E9:03:7D:EF:2E:32:77:80:9F:92:1F:13:AB:92:D4:FE:60:55:3E X509v3 Authority Key Identifier: keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e2:fa:66:01:0e:71:04:1a:4f:20:8a:5a:35:05:42:5c:86: 3b:11:2e:72:57:9d:65:ce:9f:1d:24:9f:cf:9a:a3:aa:66:51: 41:0b:c3:9e:55:00:02:8e:ef:2c:40:cf:3c:8f:98:e8:b6:63: a7:9d:f0:e6:3f:94:67:98:38:34:a8:48:39:bc:77:6b:bb:30: 16:2d:8a:50:12:60:73:69:b9:99:b4:01:bd:3a:2c:19:86:89: 5c:54:d2:49:39:a9:b0:73:96:9f:8e:04:95:88:ba:e7:eb:d1: 01:ca:c3:8f:a4:7a:98:ac:fb:e1:e9:1f:6c:2a:a0:49:96:c4: 76:1f:f8:42:fa:0e:bc:b5:9d:df:a0:bd:14:c3:b8:bf:d2:69: 06:6d:1e:23:4f:c3:b0:6d:c2:06:91:0a:1f:2a:fc:d9:12:bf: 13:31:ff:74:f1:d4:db:a5:a3:7a:f7:0b:28:73:9e:51:b1:5b: a9:a7:8f:4e:f8:11:b3:ff:85:a1:a8:93:22:1b:b8:97:97:92: f3:09:fb:78:90:38:1e:d1:64:1b:f0:bd:8c:19:52:86:7c:00: 9a:05:16:6c:eb:2d:f7:cc:d8:5d:90:aa:b0:b4:ca:71:12:95: b5:6e:d9:ac:5e:c1:ea:14:83:b3:ef:f1:70:84:27:3a:82:62: 71:b8:71:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFM0ExMTAvBgNVBAUTKDFENjQyRUQyOEVDRUE1RjJBQUNGMzQ3QjE2MDk3RjlE OTI0MUQ3NkQwHhcNMjUxMjIyMjM0MjE4WhcNMjUxMjI5MjM0MjE4WjAYMRYwFAYD VQQDDA02OTQ5ZDc1YS0zYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvzCVMt7W8jh4XiPZPxEwSCiq7CG0I0UHIxL9JY8uWB9TyGFPVdnJkNNNYBc 8GA5qnds8CJE4k04uTBmhfGCWZ6Wipe+FzDTwHs6smTQUfRv1EU+glR2L68Jsixj 673iDx8LInrlpT4Hby2rw/wqRbumWcIBIRuze3y9xJo4pouwFlYkbu+lCqqIfqni dQlZyfA22Blo4++RG/SIQi9te/yNvIIswpenupAgC6J0UWk93FqFK/NQUZV/d//B qUts+QD7Nq0Ce3J5B2sqq7iHKEVG8S30TcAycpN3/H8WwuA7EKYvCVljA50Bgh8h 7j0RtUr1sleo6GF6rOH6S03sOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/pA33v LjJ3gJ+SHxOrktT+YFU+MB8GA1UdIwQYMBaAFB1kLtKOzqXyqs80exYJf52SQddt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEUzQS9BN0FCMEE4QUI5 OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3BmS3F6elI3RmdsX25aSkIx MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXUXUwbzdPcGZLcXp6UjdGZ2xfblpKQjEyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEUzQS9BN0FCMEE4QUI5OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3Bm S3F6elI3RmdsX25aSkIxMjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn4vpmAQ5xBBpPIIpaNQVCXIY7ES5yV51lzp8dJJ/PmqOqZlFBC8Oe VQACju8sQM88j5jotmOnnfDmP5RnmDg0qEg5vHdruzAWLYpQEmBzabmZtAG9OiwZ holcVNJJOamwc5afjgSViLrn69EBysOPpHqYrPvh6R9sKqBJlsR2H/hC+g68tZ3f oL0Uw7i/0mkGbR4jT8OwbcIGkQofKvzZEr8TMf908dTbpaN69wsoc55RsVupp49O +BGz/4WhqJMiG7iXl5LzCft4kDge0WQb8L2MGVKGfACaBRZs6y33zNhdkKqwtMpx EpW1btmsXsHqFIOz7/FwhCc6gmJxuHHX -----END CERTIFICATE-----Generated at Wed Dec 24 14:07:09 2025 by rpki-client