This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json) Hash identifier: MLcAciTFabw/WqWdikDXlUNbITo7clR4Z6WAVLMXOcY= Subject key identifier: E6:E3:DF:29:48:97:61:08:08:24:BD:1E:28:BB:A0:C5:77:FD:2D:F1 Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft Manifest number: CA Signing time: Tue 23 Dec 2025 04:50:25 +0000 Manifest this update: Tue 23 Dec 2025 04:50:25 +0000 Manifest next update: Tue 30 Dec 2025 04:50:25 +0000 Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: QKRWRbVYVpwbnr7pu6V+dQD5VpGDtsdUbTLByYTAW4Q=) 2: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: cRwLsutqQVxWT3ZK97DqtNM6mPPtYnnF8FmbKFlWINg=) 3: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: wDnirQsBVGr2+TbqtsfsrtJW3jBHzGAZ6azL84nOZGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Validity Not Before: Dec 23 04:50:25 2025 GMT Not After : Dec 30 04:50:25 2025 GMT Subject: CN=694a1f91-85e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:57:05:66:81:7d:1f:91:91:3a:04:25:6f: fd:80:b6:0f:aa:e6:32:3a:ee:37:b7:f0:53:3e:00: c3:25:ed:05:26:d1:a8:f8:1d:9e:67:fd:88:d6:79: 27:a8:b1:92:b5:dd:c5:a0:14:66:7b:63:67:46:ef: 77:14:62:d1:5e:5f:d9:ec:91:9c:8f:28:0d:a0:d7: cc:f1:2c:2d:8d:7c:ed:a2:1c:43:0d:43:b7:80:5f: bd:47:c9:cc:76:c9:2a:52:94:85:75:ea:ed:a4:98: a8:6c:29:e7:9f:74:63:57:de:04:40:36:25:8b:9d: f0:b9:c0:5e:b4:c1:f4:92:e3:93:2b:33:13:ef:13: fc:80:44:b2:f0:b6:3f:b0:c5:f3:c6:c1:1e:9b:46: e8:c0:6d:9c:31:7b:39:66:35:3e:64:45:e5:53:17: 93:bb:3f:40:82:fe:5e:8f:2a:50:67:82:42:3c:a7: dd:05:e4:29:03:eb:7b:9d:c0:81:ae:78:ed:b3:10: 95:c0:b2:a5:93:a5:be:52:01:43:b1:c0:77:2f:80: d7:35:02:71:ea:81:7c:5b:f7:30:4e:37:b6:6d:7e: a8:1a:55:82:46:48:69:48:31:0d:42:8a:a0:9a:8c: e1:03:a3:2b:21:32:f9:1e:9c:b9:b9:74:58:93:b0: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E3:DF:29:48:97:61:08:08:24:BD:1E:28:BB:A0:C5:77:FD:2D:F1 X509v3 Authority Key Identifier: keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f6:8d:68:e3:b7:2b:b6:bb:12:f6:bc:32:7a:a8:9b:c5:2b: 1c:64:cf:79:4f:24:a3:60:cd:82:9c:83:36:e5:c5:33:89:f8: 18:d4:8c:5b:24:a6:ac:6f:1c:24:60:71:5a:1f:5f:2d:c5:63: 20:b1:ad:9b:b7:7f:43:f5:bf:bd:f8:e1:c1:e4:a5:e0:a4:6d: 3d:a9:59:3a:73:59:68:19:57:a1:5f:4b:73:75:da:fd:cc:e0: 97:5b:b8:c8:d8:ce:bb:de:3f:ea:e4:f5:42:4a:3f:6d:a4:b3: 2e:9f:27:ad:f8:61:a9:fb:7a:9c:67:06:00:49:8c:1c:c2:ca: d6:09:d8:19:2e:75:6f:15:8a:15:53:ba:75:c6:1a:bf:04:81: 99:87:2b:4e:a2:a5:f8:c5:9f:39:b2:0c:db:3d:de:ac:d9:14: ac:1c:d5:6a:65:b1:96:10:22:3e:cb:ef:02:ab:be:00:a8:3d: 91:44:72:f4:e4:b0:c6:a9:7f:4e:f8:ae:df:67:54:c9:ea:f6: d4:2f:3d:4a:89:72:70:8f:20:e9:6a:df:fc:1e:ad:15:c4:7a: d8:33:4b:8d:c0:e2:16:ec:7b:ad:3d:8a:c6:d1:41:55:35:59: ac:7d:f0:3b:4b:8b:97:ea:a3:d6:0e:69:f5:7a:be:9e:a3:82: ff:bc:c9:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM0OEQxMTAvBgNVBAUTKDg2NDQ0QTMzNDkxNTEyMTRCNEYyNzExQjJDNURBMENC OTlFNTBGMTMwHhcNMjUxMjIzMDQ1MDI1WhcNMjUxMjMwMDQ1MDI1WjAYMRYwFAYD VQQDDA02OTRhMWY5MS04NWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV9XBWaBfR+RkToEJW/9gLYPquYyOu43t/BTPgDDJe0FJtGo+B2eZ/2I1nkn qLGStd3FoBRme2NnRu93FGLRXl/Z7JGcjygNoNfM8SwtjXztohxDDUO3gF+9R8nM dskqUpSFdertpJiobCnnn3RjV94EQDYli53wucBetMH0kuOTKzMT7xP8gESy8LY/ sMXzxsEem0bowG2cMXs5ZjU+ZEXlUxeTuz9Agv5ejypQZ4JCPKfdBeQpA+t7ncCB rnjtsxCVwLKlk6W+UgFDscB3L4DXNQJx6oF8W/cwTje2bX6oGlWCRkhpSDENQoqg mozhA6MrITL5Hpy5uXRYk7CqOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObj3ylI l2EICCS9Hii7oMV3/S3xMB8GA1UdIwQYMBaAFIZESjNJFRIUtPJxGyxdoMuZ5Q8T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ4RC8wQzIxNThCMkIy QzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVoUzA4bkViTEYyZ3k1bmxE eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hrUktNMGtWRWhTMDhuRWJMRjJneTVubER4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzQ4RC8wQzIxNThCMkIyQzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVo UzA4bkViTEYyZ3k1bmxEeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD9o1o47crtrsS9rwyeqibxSscZM95TySjYM2CnIM25cUzifgY1Ixb JKasbxwkYHFaH18txWMgsa2bt39D9b+9+OHB5KXgpG09qVk6c1loGVehX0tzddr9 zOCXW7jI2M673j/q5PVCSj9tpLMunyet+GGp+3qcZwYASYwcwsrWCdgZLnVvFYoV U7p1xhq/BIGZhytOoqX4xZ85sgzbPd6s2RSsHNVqZbGWECI+y+8Cq74AqD2RRHL0 5LDGqX9O+K7fZ1TJ6vbULz1KiXJwjyDpat/8Hq0VxHrYM0uNwOIW7HutPYrG0UFV NVmsffA7S4uX6qPWDmn1er6eo4L/vMls -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:42 2025 by rpki-client