This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json) Hash identifier: 9b/xoZrm7lU3ybQ2984m1ZkBoumEe8C8h2tMme0Nsfg= Subject key identifier: C5:5E:1A:76:E7:CE:E6:E1:9A:50:7A:DE:CC:7B:5A:5E:28:38:80:C0 Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft Manifest number: 0120 Signing time: Tue 23 Dec 2025 04:02:23 +0000 Manifest this update: Tue 23 Dec 2025 04:02:22 +0000 Manifest next update: Tue 30 Dec 2025 04:02:22 +0000 Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: i+CYY4ODftMsxS3VOIcaYf2xygCtSn9QnTUL7T2PTao=) 2: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: RrYkG8pDF5vbjVAvZp/A25BQbDhS8Q7IHXBpjDj5Bzw=) 3: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: xQbbLUx7h7kk+H0WrJFv17LPnpfULHNjuw2xaAYsdzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Validity Not Before: Dec 23 04:02:22 2025 GMT Not After : Dec 30 04:02:22 2025 GMT Subject: CN=694a144e-6911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:e7:93:7b:b2:d9:fb:e8:e5:2b:ac:aa:47: c0:ce:a5:20:31:73:57:98:2b:6f:b4:ac:ab:31:1f: 2c:0b:31:45:56:8e:c9:ec:63:2e:cb:a0:f8:fd:68: 01:48:79:3e:f1:b5:e4:34:cc:80:8d:0c:0a:cc:d4: 83:9a:4f:fe:bf:cb:56:f1:46:af:0e:1c:11:8a:33: 0c:32:99:b6:09:f5:e5:3d:83:37:8f:70:aa:1a:91: 4b:71:bf:d5:03:7f:bf:56:f1:e5:7d:8b:e4:b4:e9: 61:99:e2:56:13:b5:77:3f:93:d2:88:ee:fe:a8:a8: 0f:a7:93:0c:24:cc:be:e8:1c:2e:03:b2:27:04:30: 81:ae:c5:2a:bd:ea:fb:97:de:1a:e4:6e:fd:7d:28: ab:88:1f:d7:ba:65:47:3e:c2:78:62:cb:ad:49:94: c3:3f:80:fd:3e:aa:80:79:51:7e:69:3e:de:1a:3c: da:25:77:c0:9d:39:1b:36:cb:b3:3f:0b:76:d9:0f: 0a:65:d0:53:69:fb:f6:68:5a:32:71:c4:55:45:c0: 44:95:d7:b8:e8:b3:40:82:43:25:1f:f5:67:a6:b9: a2:81:05:d4:3c:50:63:de:33:6e:89:95:7c:aa:fc: 20:73:2b:95:dd:13:51:eb:0b:ce:d7:30:0e:fa:e5: 8d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5E:1A:76:E7:CE:E6:E1:9A:50:7A:DE:CC:7B:5A:5E:28:38:80:C0 X509v3 Authority Key Identifier: keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1b:5a:52:a9:cc:51:2a:ca:16:3b:9b:a5:ef:7d:36:b2:c0: 0a:3b:0a:91:9f:41:28:8f:09:14:55:ca:14:fc:2d:b1:82:5a: ea:2b:96:03:9f:a3:aa:dc:4f:60:dd:d1:e3:19:35:9a:36:41: ba:4a:20:c6:b9:12:fa:90:ff:7d:64:f7:a5:99:4e:47:28:6d: e4:0b:a9:b3:9c:e0:05:37:e7:10:40:31:72:bf:db:b1:6b:51: 13:ac:2d:6f:8b:c2:2b:cd:ad:87:97:41:fe:bd:54:89:6e:ae: 0f:0d:b4:7e:5e:47:c2:50:8e:90:01:38:c5:3e:95:84:b5:fd: 8a:f5:00:24:64:21:4c:e5:10:07:a0:f6:17:7f:98:69:4d:fd: c5:9e:50:65:b8:a9:ec:bb:3e:f5:f1:f6:58:9b:86:aa:99:02: c2:7b:52:e5:2b:7c:58:91:a5:65:83:cb:db:50:42:a4:97:a4: 8f:be:6a:33:e3:1d:c4:a9:8a:c6:20:b7:97:c9:72:8f:32:69: 37:7a:fa:66:88:3b:b8:97:52:da:34:4e:3c:fb:0c:8c:45:f4: 10:46:a7:d0:c8:73:fd:60:d0:36:14:f2:d1:ec:f7:ce:e7:9c: 22:7b:6e:ee:4b:71:5e:52:70:e4:3a:d3:ee:02:e2:81:90:5f: b4:81:74:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMxMzQxMTAvBgNVBAUTKDg0NDJEQzQ2MDI0MDA2MDExQUQ1Q0Y0OENEN0U0QzQ4 QkI5N0ExMUUwHhcNMjUxMjIzMDQwMjIyWhcNMjUxMjMwMDQwMjIyWjAYMRYwFAYD VQQDDA02OTRhMTQ0ZS02OTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPPnk3uy2fvo5SusqkfAzqUgMXNXmCtvtKyrMR8sCzFFVo7J7GMuy6D4/WgB SHk+8bXkNMyAjQwKzNSDmk/+v8tW8UavDhwRijMMMpm2CfXlPYM3j3CqGpFLcb/V A3+/VvHlfYvktOlhmeJWE7V3P5PSiO7+qKgPp5MMJMy+6BwuA7InBDCBrsUqver7 l94a5G79fSiriB/XumVHPsJ4YsutSZTDP4D9PqqAeVF+aT7eGjzaJXfAnTkbNsuz Pwt22Q8KZdBTafv2aFoyccRVRcBElde46LNAgkMlH/VnprmigQXUPFBj3jNuiZV8 qvwgcyuV3RNR6wvO1zAO+uWN5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVeGnbn zubhmlB63sx7Wl4oOIDAMB8GA1UdIwQYMBaAFIRC3EYCQAYBGtXPSM1+TEi7l6Ee MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzEzNC9FNjVGQThBMDU0 NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJnRWExYzlJelg1TVNMdVhv UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFTGNSZ0pBQmdFYTFjOUl6WDVNU0x1WG9SNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzEzNC9FNjVGQThBMDU0NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJn RWExYzlJelg1TVNMdVhvUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9G1pSqcxRKsoWO5ul7302ssAKOwqRn0EojwkUVcoU/C2xglrqK5YD n6Oq3E9g3dHjGTWaNkG6SiDGuRL6kP99ZPelmU5HKG3kC6mznOAFN+cQQDFyv9ux a1ETrC1vi8Irza2Hl0H+vVSJbq4PDbR+XkfCUI6QATjFPpWEtf2K9QAkZCFM5RAH oPYXf5hpTf3FnlBluKnsuz718fZYm4aqmQLCe1LlK3xYkaVlg8vbUEKkl6SPvmoz 4x3EqYrGILeXyXKPMmk3evpmiDu4l1LaNE48+wyMRfQQRqfQyHP9YNA2FPLR7PfO 55wie27uS3FeUnDkOtPuAuKBkF+0gXQO -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:49 2025 by rpki-client