This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json) Hash identifier: nrSMa4NUktki7tdE+Pd9UsjllWI8F59O93uX7P2Jefw= Subject key identifier: EF:36:B2:D2:B0:EF:1A:D6:27:77:01:67:56:01:41:AC:DD:43:AC:2A Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft Manifest number: 0226 Signing time: Fri 19 Dec 2025 01:18:58 +0000 Manifest this update: Fri 19 Dec 2025 01:18:57 +0000 Manifest next update: Fri 26 Dec 2025 01:18:57 +0000 Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: FpOs7zvcGhD79wJhztgd9wcUvwLEQ9KZTufMHPNF0QY=) 2: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: Rf57xWILJOvL68EEABL6r6dfZw+gyCnJxd924tHN+AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Validity Not Before: Dec 19 01:18:57 2025 GMT Not After : Dec 26 01:18:57 2025 GMT Subject: CN=6944a802-ab0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:74:cd:9e:72:6e:4a:21:3d:28:d9:61:eb:a2: a2:5a:a6:3d:6a:e0:5a:63:33:9f:65:8e:26:a2:00: a3:c6:77:ee:0b:eb:c9:4f:bc:97:cf:78:99:2c:cb: 18:07:7a:d3:6d:b8:3c:d9:31:b3:aa:22:d3:69:dd: 8b:93:bf:00:ea:8d:29:19:47:8c:b1:9f:fe:11:55: 49:a3:37:e0:bd:d1:82:d8:32:05:79:2a:25:4e:e8: 86:a6:be:6d:c6:76:ef:ac:65:25:a0:9d:dd:a6:9e: 7b:76:61:8a:59:3d:32:12:27:aa:52:16:dd:a8:64: f0:6b:c8:08:37:96:55:da:00:ba:6c:24:a0:71:e5: 94:6e:0d:ac:b0:f2:89:1a:82:f2:0a:6d:ae:f8:93: 02:31:23:a3:5d:35:bc:37:a5:e8:1b:53:bf:16:0b: d3:1b:a7:f2:99:c2:6d:00:7f:83:6c:13:86:ff:dd: b8:7d:ec:33:b7:f6:e1:b6:31:a0:67:10:e1:9a:5a: 42:3f:f2:b1:af:e3:1d:00:c4:17:52:43:fe:95:6d: ff:85:07:a9:87:21:4b:4d:d3:b6:69:06:d9:90:f9: f4:3c:62:09:2d:57:1a:34:2b:6a:d6:31:52:15:2e: a2:ef:c6:cc:b6:f9:6b:b8:06:a3:b0:d8:b4:01:7b: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:36:B2:D2:B0:EF:1A:D6:27:77:01:67:56:01:41:AC:DD:43:AC:2A X509v3 Authority Key Identifier: keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:0e:09:2f:14:82:82:4a:09:96:63:ed:de:05:03:8a:f0:4a: e3:c6:2f:43:8b:f4:9a:d5:db:f1:d1:98:a5:4b:22:70:be:08: b7:70:64:ca:28:44:7e:83:3d:65:3f:11:d7:85:49:04:35:a4: bc:8c:68:d1:ea:b4:57:97:5e:b6:17:c4:8d:5f:a3:56:95:42: 32:0e:b8:91:4d:00:d8:2a:73:d9:8b:5e:3e:ba:80:eb:cb:b6: 2a:c5:2a:65:84:38:ea:62:b6:68:ab:b0:f0:30:bc:85:de:06: 77:6f:d7:ad:21:81:1d:67:11:ee:2a:b2:3f:ee:a5:2f:2d:3c: 13:42:5a:67:85:c4:30:47:05:18:be:73:01:26:6e:ef:9e:05: b8:11:45:4b:56:d7:ec:cf:44:45:ad:57:06:ec:a2:51:56:d6: 8e:94:18:af:09:0d:c5:72:fd:1e:36:44:0a:1a:5f:3a:5a:69: cd:48:f8:72:a5:39:eb:6c:9a:d2:10:ee:09:3c:b1:23:36:33: 05:e9:f8:14:84:6b:e8:7d:f8:a3:cc:3a:72:26:95:98:4a:ad: 1d:99:ec:be:c0:0c:b7:b2:b1:6a:2c:db:61:2e:c6:c5:9d:43: e2:bd:1f:0f:0f:0a:1e:6b:da:ab:91:ef:4f:1c:de:ba:68:71: 26:af:e7:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF Q0M5RUU5NkMwHhcNMjUxMjE5MDExODU3WhcNMjUxMjI2MDExODU3WjAYMRYwFAYD VQQDDA02OTQ0YTgwMi1hYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3TNnnJuSiE9KNlh66KiWqY9auBaYzOfZY4mogCjxnfuC+vJT7yXz3iZLMsY B3rTbbg82TGzqiLTad2Lk78A6o0pGUeMsZ/+EVVJozfgvdGC2DIFeSolTuiGpr5t xnbvrGUloJ3dpp57dmGKWT0yEieqUhbdqGTwa8gIN5ZV2gC6bCSgceWUbg2ssPKJ GoLyCm2u+JMCMSOjXTW8N6XoG1O/FgvTG6fymcJtAH+DbBOG/924fewzt/bhtjGg ZxDhmlpCP/Kxr+MdAMQXUkP+lW3/hQephyFLTdO2aQbZkPn0PGIJLVcaNCtq1jFS FS6i78bMtvlruAajsNi0AXsUVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO82stKw 7xrWJ3cBZ1YBQazdQ6wqMB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzYwOS8yM0Y5RThCQThGREUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19t RFVzdjlmYkJKRkRzeWU2V3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGDgkvFIKCSgmWY+3eBQOK8Erjxi9Di/Sa1dvx0ZilSyJwvgi3cGTK KER+gz1lPxHXhUkENaS8jGjR6rRXl162F8SNX6NWlUIyDriRTQDYKnPZi14+uoDr y7YqxSplhDjqYrZoq7DwMLyF3gZ3b9etIYEdZxHuKrI/7qUvLTwTQlpnhcQwRwUY vnMBJm7vngW4EUVLVtfsz0RFrVcG7KJRVtaOlBivCQ3Fcv0eNkQKGl86WmnNSPhy pTnrbJrSEO4JPLEjNjMF6fgUhGvoffijzDpyJpWYSq0dmey+wAy3srFqLNthLsbF nUPivR8PDwoea9qrke9PHN66aHEmr+fi -----END CERTIFICATE-----Generated at Sat Dec 20 11:46:39 2025 by rpki-client