This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft File: H50_mRdMazcKDlEAAMo997Z0DHs.mft (raw, json) Hash identifier: 9NSAmr5yxlBGcQmtt6EuqC+m6xVe2WdhH4JH+7PyS/o= Subject key identifier: 56:6A:76:BE:F2:34:73:E3:E7:5C:F6:FD:22:AD:FC:30:42:E9:43:B3 Authority key identifier: 1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B Certificate issuer: /CN=A9154388/serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft Manifest number: DD Signing time: Tue 23 Dec 2025 04:30:46 +0000 Manifest this update: Tue 23 Dec 2025 04:30:45 +0000 Manifest next update: Tue 30 Dec 2025 04:30:45 +0000 Files and hashes: 1: H50_mRdMazcKDlEAAMo997Z0DHs.crl (hash: xNvaqBClrIZh7DVlZIUcjE7yrYd/tNHSRbXwR+NKiho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154388, serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B Validity Not Before: Dec 23 04:30:45 2025 GMT Not After : Dec 30 04:30:45 2025 GMT Subject: CN=694a1af6-df31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:48:e6:e1:dd:e6:87:5d:8f:f4:25:40:31: 52:b0:4b:f5:11:b2:8b:a1:75:d0:90:8c:4f:44:84: 4d:70:2d:37:d9:ff:f4:fe:a3:8d:2f:97:f9:93:10: 21:87:58:ca:a8:50:08:b1:15:3a:2c:07:70:e4:15: c7:c2:55:a6:2f:0b:c3:bf:93:c7:a1:03:dc:e7:94: 79:d5:19:79:e8:e9:a4:fe:9e:95:50:53:e6:9c:9d: c7:1d:c6:16:ec:a2:3f:ca:61:96:f6:ee:14:9f:00: 38:9b:06:d4:5d:8e:0b:fc:75:eb:63:8f:87:01:fd: 3e:d9:21:fc:f1:30:7b:16:11:09:9e:c7:12:59:c9: 74:14:0e:ef:71:5d:20:34:d6:91:6e:34:89:a3:f8: b2:88:e5:e7:8a:04:9a:9d:d7:03:98:b7:e0:ef:9b: be:c4:bc:76:cb:70:29:6a:11:27:18:b7:6e:03:62: 91:1b:84:77:f8:68:3f:12:91:cb:e6:19:f0:ed:a3: 25:fb:b9:10:43:e5:aa:f2:05:07:dc:7b:11:71:c0: fc:22:94:8a:37:7e:3e:46:7f:b1:ac:03:e6:ee:be: 8d:d6:ab:f0:64:d9:86:cc:2c:a0:cc:bb:67:98:81: 50:c5:f8:0d:02:1d:7e:ba:3b:42:6a:08:d8:ce:5c: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6A:76:BE:F2:34:73:E3:E7:5C:F6:FD:22:AD:FC:30:42:E9:43:B3 X509v3 Authority Key Identifier: keyid:1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f9:d2:90:ef:f3:f5:56:24:4a:3b:13:c1:f7:ea:04:59:bf: 16:b3:63:63:d6:9d:9d:0d:15:45:79:e4:d9:b4:27:06:a9:94: c3:0a:7c:f8:e9:cd:61:f4:ab:59:c1:18:da:99:fd:97:17:27: c0:99:7f:4e:ed:62:2a:c1:d5:5d:6b:54:5b:ff:ab:66:06:53: 83:63:be:3b:6c:d7:75:60:27:93:ac:fc:e6:aa:5d:33:59:98: 4f:63:70:94:42:eb:d4:57:d4:e3:80:ca:df:15:22:9e:33:e8: 2f:b7:ab:02:c5:5d:21:d9:7a:b1:6d:de:4e:81:60:5a:47:62: 2c:64:d5:b0:0c:46:9d:48:ab:b5:2b:34:81:1c:fe:5d:c8:3b: bb:58:b8:1a:ae:ce:6d:2b:5d:14:66:51:eb:04:54:01:7a:56: c9:c8:f2:4d:0e:49:39:b5:e9:f7:17:10:22:94:86:91:81:1c: 6f:93:13:fa:aa:8a:e0:e1:b7:99:ec:52:18:36:c0:79:46:88: dd:6a:71:3f:eb:5a:74:1b:dd:52:31:a9:a0:2e:4e:08:fe:63: c0:ff:f1:db:04:db:03:d6:b8:28:76:5e:fa:b2:ea:81:ef:3b: cc:cf:6d:6c:2d:8f:af:c4:ae:2a:bb:f4:02:6a:51:d4:b5:89: 63:dd:b5:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzODgxMTAvBgNVBAUTKDFGOUQzRjk5MTc0QzZCMzcwQTBFNTEwMDAwQ0EzREY3 QjY3NDBDN0IwHhcNMjUxMjIzMDQzMDQ1WhcNMjUxMjMwMDQzMDQ1WjAYMRYwFAYD VQQDDA02OTRhMWFmNi1kZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7JI5uHd5oddj/QlQDFSsEv1EbKLoXXQkIxPRIRNcC032f/0/qONL5f5kxAh h1jKqFAIsRU6LAdw5BXHwlWmLwvDv5PHoQPc55R51Rl56Omk/p6VUFPmnJ3HHcYW 7KI/ymGW9u4UnwA4mwbUXY4L/HXrY4+HAf0+2SH88TB7FhEJnscSWcl0FA7vcV0g NNaRbjSJo/iyiOXnigSandcDmLfg75u+xLx2y3ApahEnGLduA2KRG4R3+Gg/EpHL 5hnw7aMl+7kQQ+Wq8gUH3HsRccD8IpSKN34+Rn+xrAPm7r6N1qvwZNmGzCygzLtn mIFQxfgNAh1+ujtCagjYzlwpXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZqdr7y NHPj51z2/SKt/DBC6UOzMB8GA1UdIwQYMBaAFB+dP5kXTGs3Cg5RAADKPfe2dAx7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM4OC80MTM5Rjg5NjhD MzcxMUVGODA5MDFDMkVDNEY5QUUwMi9INTBfbVJkTWF6Y0tEbEVBQU1vOTk3WjBE SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g1MF9tUmRNYXpjS0RsRUFBTW85OTdaMERIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM4OC80MTM5Rjg5NjhDMzcxMUVGODA5MDFDMkVDNEY5QUUwMi9INTBfbVJkTWF6 Y0tEbEVBQU1vOTk3WjBESHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs+dKQ7/P1ViRKOxPB9+oEWb8Ws2Nj1p2dDRVFeeTZtCcGqZTDCnz4 6c1h9KtZwRjamf2XFyfAmX9O7WIqwdVda1Rb/6tmBlODY747bNd1YCeTrPzmql0z WZhPY3CUQuvUV9TjgMrfFSKeM+gvt6sCxV0h2Xqxbd5OgWBaR2IsZNWwDEadSKu1 KzSBHP5dyDu7WLgars5tK10UZlHrBFQBelbJyPJNDkk5ten3FxAilIaRgRxvkxP6 qorg4beZ7FIYNsB5RojdanE/61p0G91SMamgLk4I/mPA//HbBNsD1rgodl76suqB 7zvMz21sLY+vxK4qu/QCalHUtYlj3bVj -----END CERTIFICATE-----Generated at Tue Dec 23 10:54:56 2025 by rpki-client