This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json) Hash identifier: wie7w6u2XRRuH4M1UUSkc90Hkdy63dHZj3N+60F4ncU= Subject key identifier: B3:4F:EF:73:5E:BC:05:83:A7:DB:09:79:46:4A:AE:F3:CA:6F:56:51 Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Certificate serial: 1E3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft Manifest number: 1E2F Signing time: Mon 22 Dec 2025 15:53:32 +0000 Manifest this update: Mon 22 Dec 2025 15:53:32 +0000 Manifest next update: Mon 29 Dec 2025 15:53:32 +0000 Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: TphvkLxVz3+4Fc6AzU//J8qqXnhJ+2sdDvqOqS3t/2Y=) 2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: WtW7MaINV2ct1TbshV/6OrkYfiug7pmKoz4c9cKXHaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7742 (0x1e3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Validity Not Before: Dec 22 15:53:32 2025 GMT Not After : Dec 29 15:53:32 2025 GMT Subject: CN=6949697c-3e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bc:28:5a:33:bb:f5:03:0e:a1:87:e1:32:6a: 67:49:a3:ad:16:f2:56:3e:fe:1a:70:be:1c:d7:9f: 7e:36:5a:f6:e0:9d:50:39:e2:99:de:c2:8f:f6:b6: 43:93:a4:21:79:0a:b1:e5:51:42:fc:b7:38:39:b2: 3c:6a:95:f5:ac:5a:de:5b:80:75:87:84:8c:b2:04: 14:e1:c6:c8:6a:27:27:32:b6:1d:bb:54:88:63:f6: 67:7d:eb:9f:36:22:d6:9c:2f:2f:28:e7:a1:1c:f9: 97:56:2e:79:61:2b:d3:01:3f:90:5b:4b:7f:91:ef: 59:ff:26:a9:9a:08:ef:26:34:07:74:3d:1e:5d:1a: d7:30:e9:82:b9:29:1b:95:05:69:60:c2:1e:24:54: 40:dd:a7:8d:35:25:3b:83:29:89:61:54:28:5f:b9: 36:1b:5a:f2:cb:56:0a:9a:41:51:8b:1e:26:d9:2e: 9c:a5:7b:6b:7f:fa:5a:d5:e7:ec:ef:34:cc:99:fe: 2b:1f:c4:db:66:cf:3d:c2:70:b3:c9:54:3d:75:84: bc:f1:45:05:e1:53:33:ed:61:90:9a:32:c3:7a:15: 04:70:e5:71:55:f2:f7:fe:4d:2e:a3:e7:f2:df:ff: 1d:54:0f:fb:60:cf:0f:47:11:a4:5e:c9:eb:1f:3c: 1d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4F:EF:73:5E:BC:05:83:A7:DB:09:79:46:4A:AE:F3:CA:6F:56:51 X509v3 Authority Key Identifier: keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:1e:ed:e7:d0:15:f6:5c:4a:d0:ac:d3:3a:44:7e:6d:99:a5: 76:d2:71:03:7d:a0:c3:96:73:fd:88:80:b1:82:d5:34:c6:86: 88:8d:7d:05:fa:23:a8:1e:4e:47:0a:36:e6:1d:6e:15:9e:02: d9:1a:df:16:dc:c3:06:82:19:ee:44:be:48:9c:d1:61:54:28: 00:4b:1b:6e:0e:a8:0c:c5:4f:9c:f1:fc:0b:be:3d:02:d9:1c: bd:8b:b8:74:b3:d1:98:8f:a7:c1:25:e6:42:a4:f1:49:59:9e: 2f:5e:b0:ae:9c:bc:da:e2:90:8d:9a:24:99:15:de:58:09:f4: 24:0f:c9:ae:7b:d8:ab:cd:87:5a:48:ef:c8:25:56:66:97:51: fb:6d:8b:dd:bc:05:61:4c:f4:b1:15:76:69:5d:39:70:99:25: 99:c5:ca:f2:cc:c1:85:a0:5e:e8:73:d8:75:cf:85:f0:4d:69: 17:11:ff:5f:3f:f5:5f:12:bf:57:90:34:1e:1a:b9:b4:77:0a: 49:35:35:44:9d:e8:bd:ef:ff:0a:ba:26:cd:d2:04:a1:19:8b: 81:0b:4a:32:45:bc:ad:1c:20:30:cf:7f:0d:dd:d7:37:f6:b6: 03:7f:7b:ec:03:a0:c1:63:21:fd:bc:6d:42:bb:3d:dd:12:0f: 04:80:0d:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx Q0I0NUQxNzEwHhcNMjUxMjIyMTU1MzMyWhcNMjUxMjI5MTU1MzMyWjAYMRYwFAYD VQQDDA02OTQ5Njk3Yy0zZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbwoWjO79QMOoYfhMmpnSaOtFvJWPv4acL4c159+Nlr24J1QOeKZ3sKP9rZD k6QheQqx5VFC/Lc4ObI8apX1rFreW4B1h4SMsgQU4cbIaicnMrYdu1SIY/Znfeuf NiLWnC8vKOehHPmXVi55YSvTAT+QW0t/ke9Z/yapmgjvJjQHdD0eXRrXMOmCuSkb lQVpYMIeJFRA3aeNNSU7gymJYVQoX7k2G1ryy1YKmkFRix4m2S6cpXtrf/pa1efs 7zTMmf4rH8TbZs89wnCzyVQ9dYS88UUF4VMz7WGQmjLDehUEcOVxVfL3/k0uo+fy 3/8dVA/7YM8PRxGkXsnrHzwdrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNP73Ne vAWDp9sJeUZKrvPKb1ZRMB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1 QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjAxRC8yMTkyOTUxNjk1QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVL elFBaERqVjk2YWdjdEYwWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAHu3n0BX2XErQrNM6RH5tmaV20nEDfaDDlnP9iICxgtU0xoaIjX0F +iOoHk5HCjbmHW4VngLZGt8W3MMGghnuRL5InNFhVCgASxtuDqgMxU+c8fwLvj0C 2Ry9i7h0s9GYj6fBJeZCpPFJWZ4vXrCunLza4pCNmiSZFd5YCfQkD8mue9irzYda SO/IJVZml1H7bYvdvAVhTPSxFXZpXTlwmSWZxcryzMGFoF7oc9h1z4XwTWkXEf9f P/VfEr9XkDQeGrm0dwpJNTVEnei97/8KuibN0gShGYuBC0oyRbytHCAwz38N3dc3 9rYDf3vsA6DBYyH9vG1Cuz3dEg8EgA2u -----END CERTIFICATE-----Generated at Tue Dec 23 15:52:58 2025 by rpki-client