This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft File: HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft (raw, json) Hash identifier: bOsjG6iPWaGl6JyJmPbdOysTnhgDydV9B6Rfwd5jmjY= Subject key identifier: 05:CB:4D:8D:20:B5:DA:40:7E:41:9E:19:C5:63:10:16:61:67:49:6F Authority key identifier: 1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E Certificate issuer: /CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft Manifest number: DD Signing time: Wed 17 Dec 2025 05:13:33 +0000 Manifest this update: Wed 17 Dec 2025 05:13:33 +0000 Manifest next update: Wed 24 Dec 2025 05:13:33 +0000 Files and hashes: 1: HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl (hash: 5vVqlYI1lSjnJJz7PKhzoFahuutRAdECrsNYvOkl5xM=) 2: F0C8DB1CA54E11EF8592FD66C4F9AE02.roa (hash: pGqkeCwicqjTqpVAd+nv6sW9bSd6/F8SqrVl+2o3VCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 05:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D848, serialNumber=1DD1B8687886924C4613116050EE90E9D494269E Validity Not Before: Dec 17 05:13:33 2025 GMT Not After : Dec 24 05:13:33 2025 GMT Subject: CN=69423bfd-fada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:69:3c:fb:4f:f1:f2:9c:4a:40:12:d7:69:19: 03:0d:8f:97:62:2e:40:97:b9:bb:47:a0:2b:53:90: 04:ff:ee:f0:55:04:23:39:84:16:bf:2b:73:94:cd: 91:4e:7a:71:8a:e6:72:44:13:a7:5f:c4:d5:bb:35: a4:3d:c6:42:1b:66:a7:06:a1:cb:1d:eb:b9:d2:ae: 4f:71:e5:c2:9a:48:0d:55:8d:7e:eb:af:5f:cd:20: 37:ad:d8:2c:e3:33:87:c5:23:77:8b:f8:0b:cf:5e: 6e:4f:b0:da:ad:bf:50:df:26:0f:1b:5f:07:63:4c: bc:94:53:e9:8f:73:f2:c7:8f:0f:ec:3b:b0:a9:a1: af:64:54:db:13:dc:00:6b:37:df:90:08:98:9d:37: f7:f2:5e:40:6b:42:84:cc:5a:21:37:08:26:47:1f: 27:3b:f5:09:ad:5a:1b:17:f7:95:5f:6a:b4:94:d6: a9:f9:c1:e7:78:84:2f:67:63:4b:57:ee:47:36:07: 83:38:e3:c8:cf:b4:09:b7:97:ca:37:f8:c2:d4:96: e4:63:99:34:88:e3:23:b8:8d:7a:39:94:89:16:b0: 29:9c:fb:9e:26:43:2e:4a:5c:13:e5:c1:ab:5e:00: 5a:7d:c3:b5:51:6d:51:bc:47:29:7c:ed:78:de:5a: 3a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CB:4D:8D:20:B5:DA:40:7E:41:9E:19:C5:63:10:16:61:67:49:6F X509v3 Authority Key Identifier: keyid:1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:38:34:f5:8a:12:fc:85:f8:2e:96:5a:ca:5f:b5:6c:a2:34: 6b:5d:58:ed:87:30:6b:df:7c:ce:36:64:26:6d:d6:d7:bb:7d: a4:93:c7:2f:75:2f:8d:f2:bf:64:c4:78:09:3e:03:a6:cf:20: 03:76:42:34:e1:33:68:5c:f9:a3:a4:68:07:4e:2c:df:d3:eb: 6c:a4:a3:ad:4a:5c:8b:9d:7d:b4:25:01:f8:d3:0d:2b:bf:e2: 09:63:06:e8:2a:ce:c9:28:3b:66:b9:b7:29:4f:3a:a7:f3:a9: ef:9e:89:7c:3e:64:02:83:6b:f9:f4:0e:4a:1b:ee:c4:0d:1d: 3b:75:50:7c:d7:45:bc:ec:bd:0b:9b:b8:9f:19:96:e2:1f:37: ee:a1:cb:93:3c:8e:90:31:45:a6:93:04:36:11:5a:48:1f:de: f8:f1:b3:68:7f:c8:61:ee:24:b6:0b:a2:93:98:ed:d6:e2:37: 33:82:dc:2e:76:65:45:34:18:1f:da:37:df:7f:0f:a3:f4:84: 20:5b:13:aa:97:47:07:b4:55:42:42:fd:cd:b4:db:bc:a6:f4: eb:e0:7f:74:d0:90:1a:6e:5a:e9:47:5a:94:5e:57:f3:50:0c: 8d:c7:8c:75:b9:42:fa:2a:f7:bb:be:c2:37:6d:00:57:62:30: c3:a9:60:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4NDgxMTAvBgNVBAUTKDFERDFCODY4Nzg4NjkyNEM0NjEzMTE2MDUwRUU5MEU5 RDQ5NDI2OUUwHhcNMjUxMjE3MDUxMzMzWhcNMjUxMjI0MDUxMzMzWjAYMRYwFAYD VQQDDA02OTQyM2JmZC1mYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Wk8+0/x8pxKQBLXaRkDDY+XYi5Al7m7R6ArU5AE/+7wVQQjOYQWvytzlM2R TnpxiuZyRBOnX8TVuzWkPcZCG2anBqHLHeu50q5PceXCmkgNVY1+669fzSA3rdgs 4zOHxSN3i/gLz15uT7Darb9Q3yYPG18HY0y8lFPpj3Pyx48P7DuwqaGvZFTbE9wA azffkAiYnTf38l5Aa0KEzFohNwgmRx8nO/UJrVobF/eVX2q0lNap+cHneIQvZ2NL V+5HNgeDOOPIz7QJt5fKN/jC1JbkY5k0iOMjuI16OZSJFrApnPueJkMuSlwT5cGr XgBafcO1UW1RvEcpfO143lo6jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXLTY0g tdpAfkGeGcVjEBZhZ0lvMB8GA1UdIwQYMBaAFB3RuGh4hpJMRhMRYFDukOnUlCae MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg0OC9DMjUxQjVCMjlC MTAxMUVGQTcyQkEwMjBDNEY5QUUwMi9IZEc0YUhpR2treEdFeEZnVU82UTZkU1VK cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkRzRhSGlHa2t4R0V4RmdVTzZRNmRTVUpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDg0OC9DMjUxQjVCMjlCMTAxMUVGQTcyQkEwMjBDNEY5QUUwMi9IZEc0YUhpR2tr eEdFeEZnVU82UTZkU1VKcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMODT1ihL8hfgullrKX7VsojRrXVjthzBr33zONmQmbdbXu32kk8cv dS+N8r9kxHgJPgOmzyADdkI04TNoXPmjpGgHTizf0+tspKOtSlyLnX20JQH40w0r v+IJYwboKs7JKDtmubcpTzqn86nvnol8PmQCg2v59A5KG+7EDR07dVB810W87L0L m7ifGZbiHzfuocuTPI6QMUWmkwQ2EVpIH9748bNof8hh7iS2C6KTmO3W4jczgtwu dmVFNBgf2jfffw+j9IQgWxOql0cHtFVCQv3NtNu8pvTr4H900JAablrpR1qUXlfz UAyNx4x1uUL6Kve7vsI3bQBXYjDDqWBP -----END CERTIFICATE-----Generated at Wed Dec 17 19:08:28 2025 by rpki-client