This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft File: H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json) Hash identifier: A15asqqkC1GMhcJFiJ7p0yImt34hLp//5KTzbwTXOug= Subject key identifier: EF:27:88:3B:02:AD:1D:B7:8E:4D:4D:73:9E:03:7B:F2:68:53:79:F8 Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 Certificate issuer: /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Certificate serial: 0469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft Manifest number: 0463 Signing time: Mon 22 Dec 2025 23:12:47 +0000 Manifest this update: Mon 22 Dec 2025 23:12:46 +0000 Manifest next update: Mon 29 Dec 2025 23:12:46 +0000 Files and hashes: 1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: v7pH1+mZU+4GGaPRgMlU/Gl5Z2rHRdbq6uCUJFP6i5w=) 2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: 3YCl3ruDz9pGROpd+e7K4Njtxira0+jtHnGSU4G+bG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1129 (0x469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Validity Not Before: Dec 22 23:12:46 2025 GMT Not After : Dec 29 23:12:46 2025 GMT Subject: CN=6949d06e-5832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:7b:7b:ac:43:6f:b3:ab:71:38:de:3b:09: c2:3d:f8:7f:ec:0e:18:91:2f:ad:d2:d0:07:5b:f5: 3f:5c:70:59:98:fb:7d:6d:68:b0:1e:8b:e5:be:f7: 5e:a9:d8:43:96:e2:eb:a4:27:dd:7c:42:72:18:d2: 7d:ae:f7:e4:50:98:ad:52:d1:59:33:e9:2c:93:ac: 1b:e1:fe:cc:0d:5f:79:9d:f5:59:87:b6:67:01:ce: 0f:bd:64:dc:c4:8f:a8:67:59:be:ab:cc:93:da:2e: ed:62:b5:96:63:f9:d5:3a:db:aa:c4:cb:4d:c8:40: 1c:fb:2f:3b:b5:fa:3b:ad:f0:27:10:ba:54:81:15: 1d:80:0d:ff:e5:c1:89:43:ba:0c:50:a8:7c:97:a1: ca:47:6d:b6:98:01:46:16:88:6b:76:58:0c:6e:24: 3e:6d:6a:32:a1:a1:f9:ce:e4:30:36:bd:50:35:3a: e9:2a:0a:1a:4e:57:b9:e6:6d:53:7c:f5:3a:e9:79: f1:4f:8c:94:2b:61:94:9e:24:ce:97:40:2a:7d:3c: 00:e4:29:80:c5:60:1b:08:d5:bf:76:d9:5c:b9:45: cb:b7:d9:19:86:dd:ea:aa:19:be:6f:7c:73:44:c4: 26:41:07:9d:b8:8b:fc:70:1f:9b:fa:ae:4f:46:17: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:27:88:3B:02:AD:1D:B7:8E:4D:4D:73:9E:03:7B:F2:68:53:79:F8 X509v3 Authority Key Identifier: keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6e:d7:68:cb:ba:35:b3:cd:8b:22:a2:a2:65:92:9d:b4:e0: 61:b7:13:08:d4:3b:44:f9:63:0d:9c:a2:63:3a:50:e0:2a:d0: 61:55:50:47:6b:9f:10:39:6e:88:d6:8e:15:33:77:4f:25:30: 81:ca:e5:59:ee:05:a3:7c:dc:1c:df:9d:8e:31:1b:1b:8b:24: b1:42:93:c3:b5:02:a1:2a:01:da:e1:93:d8:c2:96:05:42:ee: 06:83:18:16:b6:93:34:7d:2f:75:4c:04:84:a3:58:7e:54:b4: a5:f0:a5:a6:02:69:fa:ee:79:79:18:21:f7:26:e9:a9:eb:bd: ad:05:d4:2f:b2:3d:bf:cf:09:00:2c:95:44:0a:7e:0a:c9:2f: b1:90:cd:4a:68:9c:4e:c7:19:18:5d:24:b2:14:25:f4:bd:17: d8:59:b6:f6:e2:f5:a6:f2:4d:14:7c:86:f4:94:d9:20:72:54: bc:7a:1f:a6:aa:14:f1:0c:67:80:45:e1:08:50:40:2a:02:e3: d2:0a:32:ab:0a:2e:3c:b7:c6:df:87:5a:4b:fd:64:29:78:9d: d2:fd:c6:4b:9e:35:d0:50:55:3e:ef:3d:e6:0e:e9:3e:2a:6e: ce:57:ea:52:3f:af:6a:b1:7f:79:9a:3c:0c:59:a9:f0:0b:d0: 5b:18:54:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2 QTM0NkY2QTQwHhcNMjUxMjIyMjMxMjQ2WhcNMjUxMjI5MjMxMjQ2WjAYMRYwFAYD VQQDDA02OTQ5ZDA2ZS01ODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5V7e6xDb7OrcTjeOwnCPfh/7A4YkS+t0tAHW/U/XHBZmPt9bWiwHovlvvde qdhDluLrpCfdfEJyGNJ9rvfkUJitUtFZM+ksk6wb4f7MDV95nfVZh7ZnAc4PvWTc xI+oZ1m+q8yT2i7tYrWWY/nVOtuqxMtNyEAc+y87tfo7rfAnELpUgRUdgA3/5cGJ Q7oMUKh8l6HKR222mAFGFohrdlgMbiQ+bWoyoaH5zuQwNr1QNTrpKgoaTle55m1T fPU66XnxT4yUK2GUniTOl0AqfTwA5CmAxWAbCNW/dtlcuUXLt9kZht3qqhm+b3xz RMQmQQeduIv8cB+b+q5PRhcxVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8niDsC rR23jk1Nc54De/JoU3n4MB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3 NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8btdoy7o1s82LIqKiZZKdtOBhtxMI1DtE+WMNnKJjOlDgKtBhVVBH a58QOW6I1o4VM3dPJTCByuVZ7gWjfNwc352OMRsbiySxQpPDtQKhKgHa4ZPYwpYF Qu4GgxgWtpM0fS91TASEo1h+VLSl8KWmAmn67nl5GCH3Jump672tBdQvsj2/zwkA LJVECn4KyS+xkM1KaJxOxxkYXSSyFCX0vRfYWbb24vWm8k0UfIb0lNkgclS8eh+m qhTxDGeAReEIUEAqAuPSCjKrCi48t8bfh1pL/WQpeJ3S/cZLnjXQUFU+7z3mDuk+ Km7OV+pSP69qsX95mjwMWanwC9BbGFQC -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:56 2025 by rpki-client