This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: Kk0QbhEpZEHn6bsGyQTrqo8UxYNO5V5uH7oVqVyZj1Y= Subject key identifier: ED:9A:FE:72:DC:08:9A:67:CE:03:9A:6E:B3:85:E6:39:29:C2:A3:59 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 066C Signing time: Tue 06 Jan 2026 21:52:43 +0000 Manifest this update: Tue 06 Jan 2026 21:52:43 +0000 Manifest next update: Tue 13 Jan 2026 21:52:43 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: ne2jQHfGMzHAkTiFwpkY0fyZ6KvMJqpTmAKK1oQtY8s=) 2: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=) 3: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=) 5: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=) 6: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 21:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Jan 6 21:52:43 2026 GMT Not After : Jan 13 21:52:43 2026 GMT Subject: CN=695d842b-414d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:c8:8d:e9:6f:37:00:c0:0b:37:36:4c:13: bc:ac:3f:60:56:54:54:c0:fb:27:49:f1:07:58:63: b4:1f:f5:cc:c8:e8:f5:1b:f7:d9:d2:ca:3a:4d:ac: 2f:fc:9e:b7:e5:41:ad:62:fd:7e:8f:35:bf:f7:03: 3a:79:26:20:a9:c4:f1:4b:5b:fa:eb:61:45:c4:31: e8:4f:71:8c:87:33:5b:21:db:f5:ef:e9:28:b1:08: be:c9:56:54:61:87:5a:fd:ce:8c:9f:7f:2c:f9:bf: dd:37:a8:f4:2b:0a:85:bb:9c:11:fa:dc:97:17:fe: f2:7d:ca:2e:36:40:ba:8d:6e:91:11:2a:07:e9:f0: e8:fa:ff:47:0a:11:f2:c2:f9:8e:a1:eb:01:46:40: 6a:70:29:89:56:e9:56:93:f3:83:e5:aa:9f:73:86: 63:7b:63:bb:f7:15:81:55:df:32:5d:b3:d8:f3:58: fd:fb:43:5b:8c:10:dc:e7:ee:ee:ec:46:a5:a0:ac: 1d:25:41:5a:cc:2e:8e:8d:f8:e6:dc:93:73:59:1d: 3a:a0:dc:f8:e6:2f:49:20:f9:d8:7f:55:dd:10:5f: 2d:ae:b1:c8:07:cc:41:fa:24:b1:a1:87:14:52:87: e6:4f:ce:72:6c:17:5e:4a:85:63:2e:0b:a6:0b:6d: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9A:FE:72:DC:08:9A:67:CE:03:9A:6E:B3:85:E6:39:29:C2:A3:59 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:cc:61:10:25:90:7d:69:b7:de:73:21:a3:ad:8a:c3:e3:03: 8b:4e:e7:95:12:4e:96:64:4a:83:eb:93:96:ee:09:7d:59:60: 18:f1:97:f2:a2:4e:58:a6:c4:ef:04:3e:41:33:4d:df:01:12: 14:f1:ce:15:30:54:30:6d:98:27:a8:53:9d:b6:fe:5d:07:88: ea:b4:ee:76:ea:ca:c6:d8:38:54:92:ac:78:a0:a0:6c:c5:7f: c5:63:f4:48:7e:07:59:1f:a5:47:09:1a:9c:62:c6:14:82:83: 57:ff:a8:fe:92:15:b6:bd:42:18:50:90:66:d6:fa:2a:7b:5d: b8:c2:0b:95:33:78:15:4c:18:59:b0:8a:03:9a:5b:f2:b1:74: c9:6a:12:ef:ef:f5:ff:6d:bb:87:ff:68:3a:e8:4c:b9:78:f3: ef:1a:bd:eb:95:25:91:6d:08:1a:16:47:13:10:b7:41:6d:53: b2:65:b0:f7:0c:fc:50:60:c0:10:a7:a3:fe:3b:0f:71:b0:94: 2c:42:2b:94:10:93:53:6d:66:d2:83:30:53:d5:0b:65:66:be: 0f:3c:04:4a:19:51:e5:1e:32:cf:57:57:53:6d:d8:58:ae:ba: 22:05:93:f4:1c:d8:db:81:4c:2c:17:5c:31:27:42:36:b3:da: 41:a5:e7:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjYwMTA2MjE1MjQzWhcNMjYwMTEzMjE1MjQzWjAYMRYwFAYD VQQDDA02OTVkODQyYi00MTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PDIjelvNwDACzc2TBO8rD9gVlRUwPsnSfEHWGO0H/XMyOj1G/fZ0so6Tawv /J635UGtYv1+jzW/9wM6eSYgqcTxS1v662FFxDHoT3GMhzNbIdv17+kosQi+yVZU YYda/c6Mn38s+b/dN6j0KwqFu5wR+tyXF/7yfcouNkC6jW6RESoH6fDo+v9HChHy wvmOoesBRkBqcCmJVulWk/OD5aqfc4Zje2O79xWBVd8yXbPY81j9+0NbjBDc5+7u 7EaloKwdJUFazC6Ojfjm3JNzWR06oNz45i9JIPnYf1XdEF8trrHIB8xB+iSxoYcU UofmT85ybBdeSoVjLgumC22BJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2a/nLc CJpnzgOabrOF5jkpwqNZMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgzGEQJZB9abfecyGjrYrD4wOLTueVEk6WZEqD65OW7gl9WWAY8Zfy ok5YpsTvBD5BM03fARIU8c4VMFQwbZgnqFOdtv5dB4jqtO526srG2DhUkqx4oKBs xX/FY/RIfgdZH6VHCRqcYsYUgoNX/6j+khW2vUIYUJBm1voqe124wguVM3gVTBhZ sIoDmlvysXTJahLv7/X/bbuH/2g66Ey5ePPvGr3rlSWRbQgaFkcTELdBbVOyZbD3 DPxQYMAQp6P+Ow9xsJQsQiuUEJNTbWbSgzBT1QtlZr4PPARKGVHlHjLPV1dTbdhY rroiBZP0HNjbgUwsF1wxJ0I2s9pBpecf -----END CERTIFICATE-----Generated at Wed Jan 7 17:17:10 2026 by rpki-client