This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: yHT/KIHvTNOpNRMALcPJ925HHsD9lxFABPiX2bwd8jk= Subject key identifier: 00:86:EE:11:E5:AF:F6:86:04:57:59:6D:ED:A6:92:FA:E9:6F:FC:B3 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 066B Signing time: Sun 04 Jan 2026 21:44:52 +0000 Manifest this update: Sun 04 Jan 2026 21:44:51 +0000 Manifest next update: Sun 11 Jan 2026 21:44:51 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: R/H2/IafIRIN4MOMOAJlCD1FckDXKdrUicUcDWXw8Hg=) 2: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=) 4: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=) 6: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Jan 2026 21:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Jan 4 21:44:51 2026 GMT Not After : Jan 11 21:44:51 2026 GMT Subject: CN=695adf53-5a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:36:fa:b2:1b:75:c6:f6:07:10:01:f2:a0: 5c:8e:5a:0d:b0:51:a3:ad:19:5c:26:7d:96:72:18: a2:28:b1:ed:fd:11:9b:df:15:3d:a6:8c:6b:d7:81: ac:21:a0:0e:b2:19:b1:3e:a5:eb:20:97:12:12:a9: 23:76:98:af:27:c6:1d:d4:e9:63:08:1d:fe:ca:2a: 2b:9b:01:f8:1d:11:65:e8:44:77:69:b1:19:0c:50: ef:ff:86:24:b1:ae:9b:a5:a7:38:fb:a9:8a:1e:16: 37:16:92:e8:9c:9a:e8:12:e5:6e:e7:90:22:20:c1: 62:06:44:cd:9d:65:48:2e:e5:42:e0:8a:11:41:30: 55:00:ce:d9:d1:47:86:4c:09:fa:78:47:bc:5d:61: 49:54:3d:69:dc:9d:fb:99:f4:6f:e2:00:54:3f:d3: d4:20:31:2d:b1:3a:1d:cb:a4:c0:7a:48:1a:aa:12: 0e:0d:96:2e:69:b4:7c:8e:e2:97:eb:3e:e6:43:67: 8c:bd:1c:30:8e:0e:02:50:f5:e9:b9:79:41:53:7a: de:1f:1e:a7:5a:80:54:df:02:24:ee:04:4d:14:5b: d3:36:0d:c2:aa:a5:4c:dd:03:44:7a:a7:2b:49:f0: cc:42:19:30:f9:49:80:06:1d:3b:5a:b7:2d:a0:ec: 38:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:86:EE:11:E5:AF:F6:86:04:57:59:6D:ED:A6:92:FA:E9:6F:FC:B3 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4d:0c:4f:ac:02:74:0c:5b:69:85:40:82:dc:a5:10:78:6c: d1:16:ed:69:66:96:b9:9d:b3:8e:2f:3e:36:3f:d4:32:84:43: 95:44:8d:0d:7f:8e:80:ea:b6:9e:f3:ae:a1:e7:96:ab:b1:15: 66:2c:72:57:ba:49:c2:ec:bb:a9:c4:e6:ce:11:8e:46:a5:af: 14:8a:5f:a3:a0:6e:4a:07:2e:f7:24:dd:28:6c:e0:6e:f1:0f: cf:d1:46:b7:60:2e:18:5d:93:12:22:ac:bc:ef:71:30:4a:84: 13:6b:17:30:81:78:bc:98:bc:c9:42:0b:af:a1:6f:4b:49:de: 92:e1:1d:ba:15:66:95:05:b4:ed:df:c4:08:0d:d7:ce:f8:75: 28:3b:17:39:ab:05:13:a1:2d:0d:d2:c5:7e:c5:15:ed:7d:66: bc:24:0a:0f:ce:da:d5:a1:a8:92:fd:6e:8c:9a:4e:44:25:74: 7c:43:4f:1b:24:df:d2:ac:7b:99:71:e1:dc:35:64:9b:07:2c: c3:30:f4:07:f9:79:03:25:a5:9f:0d:47:f7:35:cc:80:18:68: 0f:23:83:7d:0f:5f:95:ff:49:ce:1f:b6:c7:b6:eb:f9:9d:3b: 22:1d:45:36:c0:c6:a2:0a:57:95:82:7b:c6:e9:26:99:88:a6: 81:ee:d4:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjYwMTA0MjE0NDUxWhcNMjYwMTExMjE0NDUxWjAYMRYwFAYD VQQDDA02OTVhZGY1My01YTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOY2+rIbdcb2BxAB8qBcjloNsFGjrRlcJn2WchiiKLHt/RGb3xU9poxr14Gs IaAOshmxPqXrIJcSEqkjdpivJ8Yd1OljCB3+yiormwH4HRFl6ER3abEZDFDv/4Yk sa6bpac4+6mKHhY3FpLonJroEuVu55AiIMFiBkTNnWVILuVC4IoRQTBVAM7Z0UeG TAn6eEe8XWFJVD1p3J37mfRv4gBUP9PUIDEtsTody6TAekgaqhIODZYuabR8juKX 6z7mQ2eMvRwwjg4CUPXpuXlBU3reHx6nWoBU3wIk7gRNFFvTNg3CqqVM3QNEeqcr SfDMQhkw+UmABh07WrctoOw4fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACG7hHl r/aGBFdZbe2mkvrpb/yzMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLTQxPrAJ0DFtphUCC3KUQeGzRFu1pZpa5nbOOLz42P9QyhEOVRI0N f46A6rae866h55arsRVmLHJXuknC7LupxObOEY5Gpa8Uil+joG5KBy73JN0obOBu 8Q/P0Ua3YC4YXZMSIqy873EwSoQTaxcwgXi8mLzJQguvoW9LSd6S4R26FWaVBbTt 38QIDdfO+HUoOxc5qwUToS0N0sV+xRXtfWa8JAoPztrVoaiS/W6Mmk5EJXR8Q08b JN/SrHuZceHcNWSbByzDMPQH+XkDJaWfDUf3NcyAGGgPI4N9D1+V/0nOH7bHtuv5 nTsiHUU2wMaiCleVgnvG6SaZiKaB7tSy -----END CERTIFICATE-----Generated at Mon Jan 5 06:45:03 2026 by rpki-client