This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft File: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft (raw, json) Hash identifier: MFYp+XI1dqvnvnn86RW6/0HdoEqeX9YVYODH7UwEqkA= Subject key identifier: B3:EE:B1:E3:06:31:79:12:03:FF:E7:E3:26:B1:BE:F0:E6:F3:2A:6A Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC Certificate issuer: /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft Manifest number: 09 Signing time: Tue 23 Dec 2025 06:55:15 +0000 Manifest this update: Tue 23 Dec 2025 06:55:15 +0000 Manifest next update: Tue 30 Dec 2025 06:55:15 +0000 Files and hashes: 1: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl (hash: Uky0NZzf/YAmRld/6x/GPryLGeipGKnqp8ZYLEQiKeg=) 2: C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (hash: UQqZB27tXe9lrZzq0AP0ajBaHWQmUOmhOsTlBf5Xzg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC Validity Not Before: Dec 23 06:55:15 2025 GMT Not After : Dec 30 06:55:15 2025 GMT Subject: CN=694a3cd3-edb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8e:1a:a0:0f:35:ba:fd:d9:2b:0a:48:14:1b: 78:f1:57:2d:25:ad:1e:d1:69:0a:bb:22:c6:df:da: e0:96:a2:3e:16:ac:a3:fd:dd:bb:3f:7d:97:5a:74: 79:a0:bd:b2:f1:49:72:29:e8:7e:e5:a2:03:a5:aa: a9:10:c1:98:52:f7:64:ff:07:c1:c2:31:ab:de:28: 2d:2c:8c:f0:bf:16:d0:0d:53:de:d5:45:d9:01:02: 3c:d2:9c:9a:89:a5:61:6f:19:52:8c:3b:7c:5d:13: 59:4f:af:64:cb:d5:25:81:7d:89:4d:d2:2f:fd:4c: c5:6e:6c:0f:39:ba:fa:4a:5d:18:cc:b6:33:83:c5: 90:e1:99:26:9a:ea:75:c7:35:63:92:34:ff:24:0d: f1:fd:0b:63:d0:d3:e5:f1:bc:04:3c:26:02:63:82: 8d:06:ae:70:dd:44:58:b5:e8:5f:cc:73:8a:d6:89: 9f:06:91:7a:92:76:cb:84:81:bb:57:c8:fa:29:6c: 94:9c:2f:38:a0:10:01:1b:d0:1e:7c:d1:30:ab:df: a1:bd:09:1e:6a:5c:63:6d:8c:4f:f9:ed:ae:eb:d4: 8d:40:19:38:bb:55:d6:b6:43:50:59:7d:97:53:78: 1b:94:b7:c4:d5:fd:2b:63:6f:99:6f:1a:62:85:26: cc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EE:B1:E3:06:31:79:12:03:FF:E7:E3:26:B1:BE:F0:E6:F3:2A:6A X509v3 Authority Key Identifier: keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d3:b0:b8:26:9c:08:7a:2e:d9:f3:09:1a:02:39:e2:b1:42: ec:fc:b9:3f:7b:08:20:10:b9:2d:20:13:75:db:33:c4:9d:73: 71:74:8a:fd:00:ba:ae:b8:a6:83:b5:f7:01:c7:15:14:c9:0d: 54:79:b0:ca:6e:1c:8e:5b:e5:57:24:34:ac:dd:0f:b8:14:bc: 27:7e:e4:ad:be:e3:ad:e9:ab:4e:81:ac:bb:dc:c5:0e:27:88: 9c:b3:52:2c:c4:8c:da:a4:8d:6a:51:9e:52:a1:81:a7:c0:02: fa:98:b3:da:7e:17:97:7e:18:bb:02:08:b9:1f:8c:38:ec:d8: cb:c5:51:64:a1:e2:6e:f7:97:de:f0:2f:16:db:0f:86:3e:ef: 96:cd:b1:e2:3f:4c:3f:4b:09:bf:9c:66:2f:d0:1f:0c:b9:9e: 93:5b:0a:0c:fd:81:90:50:e7:91:3e:1e:d8:bf:95:29:3f:39: 00:34:15:27:44:ee:f0:47:08:3d:28:c0:ab:bf:ec:3d:07:e8: fa:a4:14:aa:19:05:a8:25:09:b2:4f:12:d0:60:37:92:ba:e0: 30:cf:d0:3e:f9:3b:d0:7f:66:a1:9e:49:be:cd:dd:08:93:e7: 36:f1:f8:4f:fc:47:c4:7e:0e:03:27:10:21:23:1e:ea:67:79: 40:72:e8:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODY4MjExMC8GA1UEBRMoMjNFMUU0MjU5RkFCQ0Q0OUZENThDQ0Q0NkNGMjAwQ0Qx MjFFMkVBQzAeFw0yNTEyMjMwNjU1MTVaFw0yNTEyMzAwNjU1MTVaMBgxFjAUBgNV BAMMDTY5NGEzY2QzLWVkYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOjhqgDzW6/dkrCkgUG3jxVy0lrR7RaQq7Isbf2uCWoj4WrKP93bs/fZdadHmg vbLxSXIp6H7logOlqqkQwZhS92T/B8HCMaveKC0sjPC/FtANU97VRdkBAjzSnJqJ pWFvGVKMO3xdE1lPr2TL1SWBfYlN0i/9TMVubA85uvpKXRjMtjODxZDhmSaa6nXH NWOSNP8kDfH9C2PQ0+XxvAQ8JgJjgo0GrnDdRFi16F/Mc4rWiZ8GkXqSdsuEgbtX yPopbJScLzigEAEb0B580TCr36G9CR5qXGNtjE/57a7r1I1AGTi7Vda2Q1BZfZdT eBuUt8TV/Stjb5lvGmKFJsyFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs+6x4wYx eRID/+fjJrG+8ObzKmowHwYDVR0jBBgwFoAUI+HkJZ+rzUn9WMzUbPIAzRIeLqww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NjgyLzA3MjlERDJFRDVC QTExRjBBQjkwREE3Q0M0RjlBRTAyL0ktSGtKWi1yelVuOVdNelViUElBelJJZUxx dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSS1Ia0paLXJ6VW45V016VWJQSUF6UkllTHF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NjgyLzA3MjlERDJFRDVCQTExRjBBQjkwREE3Q0M0RjlBRTAyL0ktSGtKWi1yelVu OVdNelViUElBelJJZUxxdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD3TsLgmnAh6LtnzCRoCOeKxQuz8uT97CCAQuS0gE3XbM8Sdc3F0iv0A uq64poO19wHHFRTJDVR5sMpuHI5b5VckNKzdD7gUvCd+5K2+463pq06BrLvcxQ4n iJyzUizEjNqkjWpRnlKhgafAAvqYs9p+F5d+GLsCCLkfjDjs2MvFUWSh4m73l97w LxbbD4Y+75bNseI/TD9LCb+cZi/QHwy5npNbCgz9gZBQ55E+Hti/lSk/OQA0FSdE 7vBHCD0owKu/7D0H6PqkFKoZBaglCbJPEtBgN5K64DDP0D75O9B/ZqGeSb7N3QiT 5zbx+E/8R8R+DgMnECEjHupneUBy6NQ= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:32 2025 by rpki-client