This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: KY1yK4pAYF6z6p+NKN2x3OXJLGXEiRcqp8fq7HEiQnA= Subject key identifier: E7:EF:20:74:B7:B7:5D:EA:79:EE:7E:96:0D:7B:78:22:9B:9D:04:6B Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 065A Signing time: Tue 02 Dec 2025 21:41:08 +0000 Manifest this update: Tue 02 Dec 2025 21:41:07 +0000 Manifest next update: Tue 09 Dec 2025 21:41:07 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: dJOZJly3p9BWZUjtcpTeE1FwEOaf4DHh3zZEe1tf+Do=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 21:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Dec 2 21:41:07 2025 GMT Not After : Dec 9 21:41:07 2025 GMT Subject: CN=692f5cf4-8189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:84:df:c2:26:51:ce:03:17:00:80:75:6e: 5e:fb:d7:81:7f:58:c5:9b:e9:c1:37:68:87:bd:a0: 2f:d3:5e:5b:21:83:6e:bd:36:fa:14:b8:17:b7:0c: 12:7a:97:27:52:cc:41:2e:3d:e8:10:d5:30:a7:d2: 8d:35:b6:43:82:58:12:5b:1f:c4:d7:17:da:57:b4: 72:d9:eb:0e:3d:8d:55:5a:04:f8:23:99:1e:36:af: ce:c9:85:f5:13:d4:d6:6b:7b:bd:a7:9c:8a:91:59: 45:70:aa:e6:9f:24:4d:8a:f5:51:ad:30:0a:2b:38: 5c:f7:df:08:fa:bb:31:60:1d:e9:68:f3:bf:84:47: 0b:d5:d8:a6:5a:03:44:70:15:2f:ca:cd:18:39:f1: 0f:23:a8:2d:84:fe:3a:56:f8:21:87:ba:bc:08:3b: 32:17:50:79:fe:c4:3e:85:0d:98:5c:fb:04:e3:d9: 39:d5:34:79:62:15:e7:49:af:53:10:6e:d2:1e:2a: 9b:58:cf:4b:b8:d9:62:53:27:b5:6c:5f:ac:ce:3c: ef:5c:69:8b:79:e1:60:a5:b6:e4:fd:e1:ba:9f:1f: cb:7c:ed:8b:7e:6a:8a:62:7c:b4:34:9d:0c:4c:fd: 54:48:61:63:dc:6b:b4:e6:f5:c1:0b:6b:6c:4d:e2: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EF:20:74:B7:B7:5D:EA:79:EE:7E:96:0D:7B:78:22:9B:9D:04:6B X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:88:56:05:e0:8a:af:d6:8b:3a:66:c1:a2:93:39:d5:46:a0: dc:eb:4d:2e:e7:4c:56:58:c5:20:48:9b:df:82:ba:7c:3f:55: 73:8b:3d:d6:d2:9e:b0:b4:8f:4a:f5:5d:df:79:67:52:63:20: 7d:7e:1c:9e:18:25:f3:70:2b:a6:03:bf:32:15:d6:ba:c2:aa: fd:16:14:56:50:ef:a5:cc:dc:ea:dc:06:4b:dd:aa:15:22:08: 90:81:a2:a5:cd:66:65:47:db:c6:ba:cc:da:13:a4:01:4c:ef: 84:33:04:ce:01:41:68:e4:4b:f9:1f:06:7a:c2:0e:94:e4:ba: 01:74:5a:7f:6c:95:09:1d:a9:b6:56:07:c8:d9:96:a7:74:0a: 2f:78:a6:95:c6:d5:41:31:a8:a7:4d:d9:99:8f:8a:33:10:ae: 09:26:7f:f1:a1:ec:45:a1:7f:8a:79:a1:81:e3:ea:dd:62:ae: 3b:84:9b:49:96:79:57:fe:5b:56:c2:f1:ee:36:39:2d:5f:6f: 26:09:7c:81:13:b4:64:e6:73:6b:7f:26:3f:b1:6d:92:8d:4a: 07:d0:fe:be:9e:43:96:fe:99:aa:8f:71:18:58:2a:82:29:34: 05:9f:56:8f:93:ec:75:7a:08:13:a9:ff:b3:e3:26:8e:57:9e: 69:f4:8b:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjUxMjAyMjE0MTA3WhcNMjUxMjA5MjE0MTA3WjAYMRYwFAYD VQQDEw02OTJmNWNmNC04MTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3qE38ImUc4DFwCAdW5e+9eBf1jFm+nBN2iHvaAv015bIYNuvTb6FLgXtwwS epcnUsxBLj3oENUwp9KNNbZDglgSWx/E1xfaV7Ry2esOPY1VWgT4I5keNq/OyYX1 E9TWa3u9p5yKkVlFcKrmnyRNivVRrTAKKzhc998I+rsxYB3paPO/hEcL1dimWgNE cBUvys0YOfEPI6gthP46Vvghh7q8CDsyF1B5/sQ+hQ2YXPsE49k51TR5YhXnSa9T EG7SHiqbWM9LuNliUye1bF+szjzvXGmLeeFgpbbk/eG6nx/LfO2LfmqKYny0NJ0M TP1USGFj3Gu05vXBC2tsTeJuFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfvIHS3 t13qee5+lg17eCKbnQRrMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIiFYF4Iqv1os6ZsGikznVRqDc600u50xWWMUgSJvfgrp8P1Vziz3W 0p6wtI9K9V3feWdSYyB9fhyeGCXzcCumA78yFda6wqr9FhRWUO+lzNzq3AZL3aoV IgiQgaKlzWZlR9vGuszaE6QBTO+EMwTOAUFo5Ev5HwZ6wg6U5LoBdFp/bJUJHam2 VgfI2ZandAoveKaVxtVBMainTdmZj4ozEK4JJn/xoexFoX+KeaGB4+rdYq47hJtJ lnlX/ltWwvHuNjktX28mCXyBE7Rk5nNrfyY/sW2SjUoH0P6+nkOW/pmqj3EYWCqC KTQFn1aPk+x1eggTqf+z4yaOV55p9Ivg -----END CERTIFICATE-----Generated at Thu Dec 4 04:47:12 2025 by rpki-client