This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: 20LQ7Clny/i3IieIiMjZ6lZ4sFcIe7Y9njQjRSn1VuQ= Subject key identifier: F1:49:04:B5:96:C8:39:FF:75:51:AB:0D:38:E9:9E:ED:8E:28:55:22 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 0660 Signing time: Sun 14 Dec 2025 21:56:54 +0000 Manifest this update: Sun 14 Dec 2025 21:56:54 +0000 Manifest next update: Sun 21 Dec 2025 21:56:54 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: 85+uzH9hvyB42dF5BowToZNm8/ZCjdGb1SUXQzlt7U8=) 2: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=) 3: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=) 4: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=) 5: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=) 6: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 21:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Dec 14 21:56:54 2025 GMT Not After : Dec 21 21:56:54 2025 GMT Subject: CN=693f32a6-e730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:ad:be:d0:5f:5a:26:90:f3:6d:b2:eb:1e: 31:d7:ad:d4:f4:65:21:63:2c:b0:36:43:ad:09:20: cc:ca:92:72:6d:2d:20:e9:e3:09:97:c0:f1:eb:ed: f4:55:df:db:e3:f9:2d:a0:f8:51:b4:a2:15:48:1f: b0:50:f7:d2:e3:b5:94:4e:4a:b3:cd:39:56:15:47: 98:47:26:55:94:76:9a:c7:13:1f:fd:12:89:ff:14: ab:b5:2c:62:c5:3e:12:02:bc:8f:47:0c:7a:3c:7f: 73:17:fd:94:61:48:dd:39:88:64:96:7e:2a:9f:df: 75:14:04:60:97:d0:79:30:ce:ce:aa:2c:34:89:c5: 50:41:1e:cb:23:98:57:08:b3:ad:fe:a7:c4:03:53: b3:d7:7c:90:09:01:25:a9:c1:4f:9c:20:b5:fe:2d: 99:81:27:06:89:22:78:55:8a:48:b7:2c:ec:6b:c2: 8e:52:bd:1f:18:ee:c4:d3:0e:e1:6e:c1:ce:15:ee: 82:88:99:83:09:fb:96:8b:87:f3:be:e3:d6:9a:1e: 74:c9:b3:f1:ac:b6:d5:7a:54:d8:07:60:a9:14:7b: 70:84:77:7e:6e:fd:3f:57:65:9e:d4:7a:1f:a5:5d: 9f:a7:75:f8:16:bb:88:d8:db:9c:bf:2a:a5:c4:d1: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:49:04:B5:96:C8:39:FF:75:51:AB:0D:38:E9:9E:ED:8E:28:55:22 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:3c:b1:06:cd:38:6d:f6:d0:cb:29:35:17:6c:db:c5:d5:35: 27:80:d3:04:9c:40:59:2c:6e:13:54:79:1b:fe:55:9a:8a:6b: 60:a1:42:e8:2c:fb:26:47:ba:ed:e0:9f:04:b5:61:d1:db:3f: 41:b6:11:f8:98:8b:f7:23:25:b7:66:fa:0b:71:9b:ae:01:c1: b4:74:f2:bb:53:7c:d9:84:89:76:7f:7d:3d:ec:33:41:86:2b: a2:21:c2:7e:fa:9e:4d:9b:95:e4:10:39:27:15:f1:39:62:32: 8e:9b:c3:3a:4d:81:67:df:9d:17:60:d9:5e:6d:03:75:23:0a: 32:da:08:81:ca:76:b0:f2:78:3b:43:82:9f:64:e9:4d:64:a8: 20:39:82:e8:b7:de:d2:5e:0e:de:1e:bc:0d:88:65:78:3d:50: 85:42:eb:4d:a9:b7:27:26:d9:e1:6b:9d:3f:51:77:26:c2:e1: 55:3b:be:53:c1:0a:9c:80:30:03:00:eb:45:9d:88:bc:93:f4: 5f:08:f7:06:42:50:7b:2d:ab:8b:a8:78:60:60:0f:22:a0:41: 9e:81:4a:b3:05:84:30:25:23:8a:93:b3:5b:75:e4:f4:e2:bd: bc:2a:4d:b2:dc:e6:00:a5:ca:a7:23:2b:5f:74:bf:fd:93:34: 73:61:db:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjUxMjE0MjE1NjU0WhcNMjUxMjIxMjE1NjU0WjAYMRYwFAYD VQQDDA02OTNmMzJhNi1lNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9etvtBfWiaQ822y6x4x163U9GUhYyywNkOtCSDMypJybS0g6eMJl8Dx6+30 Vd/b4/ktoPhRtKIVSB+wUPfS47WUTkqzzTlWFUeYRyZVlHaaxxMf/RKJ/xSrtSxi xT4SAryPRwx6PH9zF/2UYUjdOYhkln4qn991FARgl9B5MM7Oqiw0icVQQR7LI5hX CLOt/qfEA1Oz13yQCQElqcFPnCC1/i2ZgScGiSJ4VYpItyzsa8KOUr0fGO7E0w7h bsHOFe6CiJmDCfuWi4fzvuPWmh50ybPxrLbVelTYB2CpFHtwhHd+bv0/V2We1Hof pV2fp3X4FruI2NucvyqlxNFPcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFJBLWW yDn/dVGrDTjpnu2OKFUiMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgPLEGzTht9tDLKTUXbNvF1TUngNMEnEBZLG4TVHkb/lWaimtgoULo LPsmR7rt4J8EtWHR2z9BthH4mIv3IyW3ZvoLcZuuAcG0dPK7U3zZhIl2f3097DNB hiuiIcJ++p5Nm5XkEDknFfE5YjKOm8M6TYFn350XYNlebQN1Iwoy2giBynaw8ng7 Q4KfZOlNZKggOYLot97SXg7eHrwNiGV4PVCFQutNqbcnJtnha50/UXcmwuFVO75T wQqcgDADAOtFnYi8k/RfCPcGQlB7LauLqHhgYA8ioEGegUqzBYQwJSOKk7NbdeT0 4r28Kk2y3OYApcqnIytfdL/9kzRzYdtf -----END CERTIFICATE-----Generated at Mon Dec 15 01:36:40 2025 by rpki-client