This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: ypHRJBgn3fNiLob31+Ikdkq0TKC02n6U5YUW8flczmA= Subject key identifier: F0:4C:E4:1A:A4:4B:26:3E:22:AF:D5:B3:80:D5:2D:0B:A5:FC:CF:18 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 0668 Signing time: Tue 30 Dec 2025 21:51:15 +0000 Manifest this update: Tue 30 Dec 2025 21:51:14 +0000 Manifest next update: Tue 06 Jan 2026 21:51:14 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: XcAai09vr9EhE17zBjJIdV28e85rnnXMTVtmjyL3Qzk=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=) 3: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=) 5: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=) 6: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 21:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Dec 30 21:51:14 2025 GMT Not After : Jan 6 21:51:14 2026 GMT Subject: CN=69544953-2400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:29:02:78:a9:27:d9:fc:cc:a1:3e:26:bb: 69:98:f9:fd:cf:42:a7:aa:ef:70:7e:c4:45:ca:ed: 9d:61:db:ef:79:68:2c:4f:08:f7:09:bd:e9:18:e2: 67:a1:c3:ea:fb:79:b6:a2:11:6b:0d:6a:76:68:65: ac:b1:9d:52:d2:a7:dd:d6:1f:1d:b6:8b:d6:18:4a: 4d:01:10:87:f5:8b:54:67:9e:e4:d5:36:a0:83:15: d2:fe:6f:79:0c:f5:72:84:fc:72:a2:ad:73:28:6f: 9d:5b:41:c4:87:47:d2:fc:99:ca:9a:9f:5c:e3:08: 7e:46:21:3a:7d:7b:2f:a6:b0:b1:b4:f5:12:65:c7: bc:77:59:1a:15:3c:c5:35:bf:61:9a:e1:15:78:76: 95:81:91:35:b9:39:3f:19:c0:dc:98:87:67:3b:78: 76:9c:10:f9:c6:d7:34:71:f4:72:bb:45:b1:ec:6c: 85:3c:f6:1b:20:21:d6:04:bf:a3:68:d3:5d:72:0d: 82:85:9f:ee:08:23:b2:61:ae:ca:f9:3b:bd:b4:86: ef:6a:fe:a1:c0:e0:fb:b2:71:dc:5e:71:48:7f:d2: a8:88:f1:49:66:c8:fc:3d:49:f6:f9:53:23:d3:64: 98:43:17:dd:65:8c:e3:02:b0:8c:f3:e9:12:6f:5d: 73:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4C:E4:1A:A4:4B:26:3E:22:AF:D5:B3:80:D5:2D:0B:A5:FC:CF:18 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:41:8a:2c:ff:ce:69:2f:c3:e3:5e:39:1a:c2:6d:fa:6b:16: 62:fd:dd:89:4b:8b:36:11:ce:bb:67:d8:a5:00:08:da:d4:f3: d4:5c:21:0a:b3:d6:5f:c3:a9:b6:16:a6:45:da:4a:36:2b:c7: 97:0f:64:92:01:1f:06:44:77:54:1c:46:9b:2a:0d:86:70:85: 5d:44:9c:1d:e8:2b:c6:1e:9a:71:95:97:b9:ce:bc:54:f0:48: 12:13:84:69:0f:41:d8:4e:fe:0c:72:9d:be:4a:65:30:93:ef: b9:dc:97:40:32:fb:4a:5a:e8:03:2d:51:79:e8:33:31:97:e5: b9:02:98:59:ff:f9:63:81:6c:79:0e:28:81:b5:f4:e7:8f:78: 8e:ee:ca:b5:69:93:16:8d:a7:4a:df:b6:72:e7:95:31:d7:74: 12:30:59:4e:b9:be:ef:62:07:8c:0f:af:c0:c9:10:be:3a:8c: 76:12:e0:11:25:ea:60:48:74:5e:cf:c7:77:f3:f9:04:1f:e6: 82:31:22:15:60:2f:b2:b9:f1:d7:91:6f:f5:81:ba:ab:4c:9d: 3d:8c:2c:9a:d4:62:e4:b3:17:d7:7c:10:8a:2d:b8:75:84:91: 96:c3:09:f0:30:f0:2f:13:02:aa:33:8d:1b:df:1f:eb:f4:bf: 64:14:a0:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjUxMjMwMjE1MTE0WhcNMjYwMTA2MjE1MTE0WjAYMRYwFAYD VQQDDA02OTU0NDk1My0yNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJopAnipJ9n8zKE+JrtpmPn9z0Knqu9wfsRFyu2dYdvveWgsTwj3Cb3pGOJn ocPq+3m2ohFrDWp2aGWssZ1S0qfd1h8dtovWGEpNARCH9YtUZ57k1TaggxXS/m95 DPVyhPxyoq1zKG+dW0HEh0fS/JnKmp9c4wh+RiE6fXsvprCxtPUSZce8d1kaFTzF Nb9hmuEVeHaVgZE1uTk/GcDcmIdnO3h2nBD5xtc0cfRyu0Wx7GyFPPYbICHWBL+j aNNdcg2ChZ/uCCOyYa7K+Tu9tIbvav6hwOD7snHcXnFIf9KoiPFJZsj8PUn2+VMj 02SYQxfdZYzjArCM8+kSb11zVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBM5Bqk SyY+Iq/Vs4DVLQul/M8YMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgQYos/85pL8PjXjkawm36axZi/d2JS4s2Ec67Z9ilAAja1PPUXCEK s9Zfw6m2FqZF2ko2K8eXD2SSAR8GRHdUHEabKg2GcIVdRJwd6CvGHppxlZe5zrxU 8EgSE4RpD0HYTv4Mcp2+SmUwk++53JdAMvtKWugDLVF56DMxl+W5AphZ//ljgWx5 DiiBtfTnj3iO7sq1aZMWjadK37Zy55Ux13QSMFlOub7vYgeMD6/AyRC+Oox2EuAR JepgSHRez8d38/kEH+aCMSIVYC+yufHXkW/1gbqrTJ09jCya1GLksxfXfBCKLbh1 hJGWwwnwMPAvEwKqM40b3x/r9L9kFKAy -----END CERTIFICATE-----Generated at Wed Dec 31 03:41:50 2025 by rpki-client