This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: 24X9YWmJttMJ7EBsWp2YAprSFWk2ZyeEAifZY7XuzwA= Subject key identifier: D7:32:69:94:02:BB:B3:A3:38:18:D8:A5:21:9E:A4:83:FF:F5:F1:FB Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 0662 Signing time: Thu 18 Dec 2025 21:58:49 +0000 Manifest this update: Thu 18 Dec 2025 21:58:48 +0000 Manifest next update: Thu 25 Dec 2025 21:58:48 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: qQzCDWZFO9wdscd3AZYkgAhb8RB79ecNPUgFx/y/4LU=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=) 3: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=) 4: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=) 5: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Dec 18 21:58:48 2025 GMT Not After : Dec 25 21:58:48 2025 GMT Subject: CN=69447919-6177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:60:09:11:8f:3e:36:33:cf:8a:ca:06:59:86: a9:41:ff:32:e5:5d:fb:80:5d:81:d8:17:6f:7d:9d: ee:2d:c9:fa:a6:ec:b0:88:50:33:6b:ea:ab:94:da: e1:fe:51:a4:c8:1e:b6:49:30:8d:91:58:93:8b:b9: 35:32:9d:90:ff:ce:3b:6b:ec:b0:c8:b9:f1:bb:3a: 51:ec:6b:96:77:80:a8:c1:12:02:9c:e9:a0:0a:46: 6e:ec:00:ee:52:2c:3d:1e:9c:61:62:cb:0a:27:b8: 93:04:1c:f9:8f:63:33:cb:7c:bc:4b:80:ea:f0:df: 06:03:53:ce:1b:09:5f:36:12:20:85:4a:d8:88:58: eb:45:8f:0c:a0:a7:4e:0f:9d:4b:14:18:30:4f:ce: 6d:d8:0c:32:88:50:fa:a5:8b:9c:ef:af:fa:88:7f: d4:2e:ec:8e:0f:2f:d3:0d:f1:09:92:40:12:61:09: 70:67:05:0f:6c:d0:35:de:53:b6:57:05:83:1c:b7: f7:5c:65:1d:8d:44:c1:cf:a4:ba:6b:f4:52:ad:f5: e5:32:28:f6:eb:d9:18:7c:d3:a2:26:b5:c1:6c:61: 52:2c:17:a2:3b:00:71:33:93:0b:24:94:ad:8c:1b: 97:a3:0c:3f:d4:fa:49:f8:ca:a9:e2:75:13:78:84: 68:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:32:69:94:02:BB:B3:A3:38:18:D8:A5:21:9E:A4:83:FF:F5:F1:FB X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:46:8c:cd:62:30:83:ee:c6:07:a6:11:c2:21:15:ea:05:28: e4:f0:73:95:18:08:28:af:9e:5c:f6:42:f8:9a:52:f5:ac:c2: da:6c:a6:b3:3f:90:09:56:56:b1:2d:16:ad:ef:fe:89:eb:55: 94:34:1b:a5:69:e2:92:36:1c:34:65:bb:7f:06:b8:2d:cb:df: 1e:56:54:8f:2e:9b:1a:52:5d:9c:f3:46:7f:e9:93:e8:42:e0: a6:ca:cb:9f:ed:d9:1a:4d:26:87:d8:25:59:29:a7:9b:83:fc: 3e:7c:2b:f9:8a:3a:ca:c3:c2:6e:a3:72:db:34:76:ff:29:cb: dc:85:c2:53:96:06:23:d3:e6:fb:b7:00:e4:13:c5:f4:4e:68: c5:1c:f4:d7:82:d3:f7:1f:08:b5:4d:a8:7a:69:c6:31:c5:d2: 7d:50:56:13:04:c7:a2:f8:20:2e:46:76:f5:5f:e4:43:5e:98: 7f:ee:20:a7:ec:6e:d5:40:b6:1a:ff:c0:17:d2:c2:bc:13:b1: 4d:02:b4:76:d1:41:45:6a:56:62:e7:76:33:02:36:b5:e2:61: 0f:d5:bf:83:87:bb:bd:cd:51:2d:b7:40:08:40:73:80:2b:d8: f1:e4:4f:e7:d8:b9:bf:9d:08:3a:c3:f1:52:da:d2:93:5c:d2: f5:6a:f9:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjUxMjE4MjE1ODQ4WhcNMjUxMjI1MjE1ODQ4WjAYMRYwFAYD VQQDDA02OTQ0NzkxOS02MTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+mAJEY8+NjPPisoGWYapQf8y5V37gF2B2BdvfZ3uLcn6puywiFAza+qrlNrh /lGkyB62STCNkViTi7k1Mp2Q/847a+ywyLnxuzpR7GuWd4CowRICnOmgCkZu7ADu Uiw9HpxhYssKJ7iTBBz5j2Mzy3y8S4Dq8N8GA1POGwlfNhIghUrYiFjrRY8MoKdO D51LFBgwT85t2AwyiFD6pYuc76/6iH/ULuyODy/TDfEJkkASYQlwZwUPbNA13lO2 VwWDHLf3XGUdjUTBz6S6a/RSrfXlMij269kYfNOiJrXBbGFSLBeiOwBxM5MLJJSt jBuXoww/1PpJ+Mqp4nUTeIRo8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcyaZQC u7OjOBjYpSGepIP/9fH7MB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9RozNYjCD7sYHphHCIRXqBSjk8HOVGAgor55c9kL4mlL1rMLabKaz P5AJVlaxLRat7/6J61WUNBulaeKSNhw0Zbt/Brgty98eVlSPLpsaUl2c80Z/6ZPo QuCmysuf7dkaTSaH2CVZKaebg/w+fCv5ijrKw8Juo3LbNHb/KcvchcJTlgYj0+b7 twDkE8X0TmjFHPTXgtP3Hwi1Tah6acYxxdJ9UFYTBMei+CAuRnb1X+RDXph/7iCn 7G7VQLYa/8AX0sK8E7FNArR20UFFalZi53YzAja14mEP1b+Dh7u9zVEtt0AIQHOA K9jx5E/n2Lm/nQg6w/FS2tKTXNL1avmy -----END CERTIFICATE-----Generated at Fri Dec 19 00:32:06 2025 by rpki-client