This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft File: hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json) Hash identifier: ZYTCcD0pCxPPYut/jDse6MElNG9k6LQxI/ZCTO0ih2o= Subject key identifier: 19:17:34:A2:48:0F:3E:EA:67:C3:7B:ED:7B:93:A9:63:19:56:BE:4C Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1A8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft Manifest number: 1A84 Signing time: Sat 20 Dec 2025 16:07:50 +0000 Manifest this update: Sat 20 Dec 2025 16:07:49 +0000 Manifest next update: Sat 27 Dec 2025 16:07:49 +0000 Files and hashes: 1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: 7T8e0WomV/Wqvxzs4UmnmDrLc4xfscABds16qg91R5o=) 2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: gmxypZgEWPdJyaxL0d+DHAXn8CkOhTwU8vnSEJsmC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6797 (0x1a8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Dec 20 16:07:49 2025 GMT Not After : Dec 27 16:07:49 2025 GMT Subject: CN=6946c9d6-c6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:c5:70:39:8a:c7:55:df:57:9f:3f:85:da: bd:cf:cd:22:ba:00:b5:22:25:04:58:21:7b:d4:31: 62:3d:77:75:eb:22:a8:df:94:88:45:e4:d1:5d:b5: c8:33:96:e2:a6:49:f7:4d:7a:cf:b2:f6:36:19:02: bd:bf:fb:76:e6:34:f1:45:5e:aa:f6:11:20:51:b7: 5f:b5:21:2d:52:ad:90:f2:ba:cb:1c:f2:32:53:98: 29:77:76:a7:a5:16:36:df:6b:a7:1f:23:61:0b:d7: f4:49:40:23:25:60:c4:d3:36:e8:a8:e1:5c:78:65: 9c:62:43:64:d5:6f:82:3e:f0:ec:98:e1:4c:d0:ce: 8c:01:a1:54:6b:af:dc:5e:70:c3:5a:7a:39:38:1d: b1:76:dd:ff:9d:da:f9:c1:a7:a6:20:3f:56:22:86: 3d:d9:d7:fe:25:aa:c4:7b:98:df:ae:e8:29:48:de: 0d:84:b5:3e:d2:44:6d:12:b9:42:a4:88:61:b7:a2: a4:cb:f1:a9:b2:b7:e3:c4:da:2f:05:78:58:10:56: e3:d5:ca:d5:8a:bc:2c:a2:56:ce:5b:98:c8:78:3d: 3c:4c:5b:60:9e:4b:7e:33:e7:c0:11:5f:e8:65:20: aa:b6:00:1a:56:a8:d7:1e:0e:ed:b6:ba:b3:1e:e3: ca:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:17:34:A2:48:0F:3E:EA:67:C3:7B:ED:7B:93:A9:63:19:56:BE:4C X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:13:cc:05:09:a9:bb:73:01:f3:7e:da:21:cf:c7:3e:a1:cc: f6:f4:7e:42:b3:fb:9d:69:3a:7a:ee:38:e2:b8:9b:8c:35:9b: 7c:63:a7:30:5d:96:2c:f0:a1:38:f3:f1:7f:13:77:16:5b:00: 1d:a9:0f:a4:f6:04:23:1c:eb:51:75:1a:4a:6b:b9:a9:0e:e2: 32:0c:4e:31:28:26:48:1a:d3:5c:b1:74:a7:88:2e:e3:86:dc: 40:b5:b4:62:ff:9d:e1:7f:9f:cf:ac:55:c4:76:b1:73:bf:18: 4f:f2:23:be:e9:74:eb:88:a9:12:67:91:c4:34:e8:c2:5a:c7: f5:e8:c4:46:5d:0c:70:e4:62:d7:cc:64:13:cb:c5:dd:fb:a5: 7d:ca:25:3e:aa:7e:a0:1a:33:1f:8a:7c:02:4e:b4:bb:65:d7: 0e:c7:5c:6a:00:fc:69:de:92:f9:35:7c:ff:3f:6f:8e:a4:22: bf:3c:11:7a:bd:bd:7a:e9:aa:2c:31:96:28:c5:0c:72:78:78: fa:bb:c4:9a:89:55:4c:ff:93:8d:ba:81:b2:f6:08:97:0d:25: 8b:bf:87:43:7e:da:27:05:08:6f:f8:a4:6d:26:99:13:5b:b2: b0:8b:41:3f:81:2d:2a:29:a8:9f:dc:06:f3:b3:e0:0e:bc:2d: 9c:02:b2:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjUxMjIwMTYwNzQ5WhcNMjUxMjI3MTYwNzQ5WjAYMRYwFAYD VQQDDA02OTQ2YzlkNi1jNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGDFcDmKx1XfV58/hdq9z80iugC1IiUEWCF71DFiPXd16yKo35SIReTRXbXI M5bipkn3TXrPsvY2GQK9v/t25jTxRV6q9hEgUbdftSEtUq2Q8rrLHPIyU5gpd3an pRY232unHyNhC9f0SUAjJWDE0zboqOFceGWcYkNk1W+CPvDsmOFM0M6MAaFUa6/c XnDDWno5OB2xdt3/ndr5waemID9WIoY92df+JarEe5jfrugpSN4NhLU+0kRtErlC pIhht6Kky/GpsrfjxNovBXhYEFbj1crVirwsolbOW5jIeD08TFtgnkt+M+fAEV/o ZSCqtgAaVqjXHg7ttrqzHuPKuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkXNKJI Dz7qZ8N77XuTqWMZVr5MMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDVBQi8wNTI0M0FDNjRDMjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81 NV9hRnhCcmhaamNNYlhlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1E8wFCam7cwHzftohz8c+ocz29H5Cs/udaTp67jjiuJuMNZt8Y6cw XZYs8KE48/F/E3cWWwAdqQ+k9gQjHOtRdRpKa7mpDuIyDE4xKCZIGtNcsXSniC7j htxAtbRi/53hf5/PrFXEdrFzvxhP8iO+6XTriKkSZ5HENOjCWsf16MRGXQxw5GLX zGQTy8Xd+6V9yiU+qn6gGjMfinwCTrS7ZdcOx1xqAPxp3pL5NXz/P2+OpCK/PBF6 vb166aosMZYoxQxyeHj6u8SaiVVM/5ONuoGy9giXDSWLv4dDftonBQhv+KRtJpkT W7Kwi0E/gS0qKaif3Abzs+AOvC2cArKf -----END CERTIFICATE-----Generated at Mon Dec 22 11:34:17 2025 by rpki-client