This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft File: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json) Hash identifier: 9khKYFaLJEMJk9A1CTcZiIsXK7Af3uYsBuhqsWnhA0E= Subject key identifier: D7:C7:D2:99:5A:DD:D5:EC:B0:D8:DF:6D:57:97:8D:62:08:4F:B9:D7 Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 Certificate issuer: /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft Manifest number: 018E Signing time: Tue 23 Dec 2025 02:32:42 +0000 Manifest this update: Tue 23 Dec 2025 02:32:41 +0000 Manifest next update: Tue 30 Dec 2025 02:32:41 +0000 Files and hashes: 1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: akWTtiSiNeSvUBDApn6f9SFw729oCDm8fyV8O+AfMdQ=) 2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: lQYmsDBc3UpFQI5bvRZLM1pLBA2w7erJcueIAfvmPc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Validity Not Before: Dec 23 02:32:41 2025 GMT Not After : Dec 30 02:32:41 2025 GMT Subject: CN=6949ff49-8af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:c4:bd:e4:14:33:b5:d2:9d:9a:b2:63:f0: c1:8e:83:32:1a:3c:1c:19:d7:ea:9b:94:55:77:5b: a7:16:ca:5f:4a:28:08:dd:22:5b:a6:3b:bb:56:64: 34:ef:ae:90:d6:8c:d4:af:42:71:32:e0:0d:d9:4c: 7b:71:0f:fe:c0:44:e8:cd:ad:48:70:96:21:90:34: f9:e4:ee:af:d4:79:13:90:0a:42:f3:12:bd:ae:ee: c9:34:2b:42:39:f1:2d:35:6f:40:72:a7:37:82:8e: 93:68:a6:59:ad:91:98:fc:59:27:4a:63:7b:78:78: 85:72:2d:2a:55:93:f1:1c:c7:da:7b:e2:d4:2f:a0: 1e:69:17:22:64:23:20:59:7e:18:72:a0:6b:87:47: 54:8a:5e:74:03:dc:50:ac:97:8d:74:67:83:9c:c2: 06:fa:4a:6f:d3:61:40:1a:73:1a:fc:0b:78:93:43: 83:08:b2:8a:f6:3a:06:89:c4:df:6b:02:78:e0:96: f5:c2:cc:10:22:23:97:d6:dd:25:86:d8:0f:92:3a: f0:ee:e7:bd:8d:d7:ae:65:96:ae:8a:18:50:94:da: a6:21:6d:35:bc:cc:1b:b3:16:e5:aa:ec:6a:f4:29: 9c:dc:ce:58:e7:ec:58:63:5b:3d:7b:8f:0f:36:c9: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C7:D2:99:5A:DD:D5:EC:B0:D8:DF:6D:57:97:8D:62:08:4F:B9:D7 X509v3 Authority Key Identifier: keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:e1:6d:f8:9f:e4:27:1b:e8:d3:59:3c:fe:91:a2:61:50:88: 5e:e1:f1:41:e7:ca:cf:52:d1:47:91:34:5b:fa:41:8e:a6:e2: e5:8d:79:22:d0:d9:f6:7c:2b:f3:b8:dd:c8:31:52:c5:c4:ea: d0:c3:39:ef:e9:11:8c:89:6a:fc:cd:01:08:36:86:3b:5e:f3: 79:db:db:0c:85:70:52:b4:a2:bd:ea:7e:af:e0:2d:9f:28:a1: b4:63:16:83:09:be:0a:b6:a3:68:9c:1a:fa:6f:84:43:25:c4: cd:4f:f8:50:29:12:0f:ab:ed:1c:6e:17:de:43:75:6c:3d:c1: d3:25:ea:6d:03:85:71:16:c2:c8:77:83:4b:11:79:79:77:70: bb:fc:77:da:7c:51:56:b4:4c:9a:64:06:22:44:e2:77:ec:5a: e6:d7:63:38:8c:17:a7:ac:4e:0e:10:8a:fc:0f:df:bb:ab:3b: d2:ef:5d:3e:b8:7f:97:36:0a:da:cd:a7:9e:c1:b4:6c:7d:79: 2f:3a:2b:f5:b9:2e:4a:cb:ae:03:2e:b5:b9:c4:f7:5f:dc:de: 9c:d8:3a:b2:00:55:0d:b1:37:c5:62:9e:74:d3:93:76:c8:57: 30:19:13:0c:b7:b8:d1:50:1d:31:9d:97:41:6a:9f:7f:26:d3: 01:d8:e0:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwMkYxMTAvBgNVBAUTKDg3RjMxQjIwMUJERDE4NzU4MTU0MEM1QjhCODY0NDM4 QzI5OTkwQjkwHhcNMjUxMjIzMDIzMjQxWhcNMjUxMjMwMDIzMjQxWjAYMRYwFAYD VQQDDA02OTQ5ZmY0OS04YWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVzEveQUM7XSnZqyY/DBjoMyGjwcGdfqm5RVd1unFspfSigI3SJbpju7VmQ0 766Q1ozUr0JxMuAN2Ux7cQ/+wEToza1IcJYhkDT55O6v1HkTkApC8xK9ru7JNCtC OfEtNW9Acqc3go6TaKZZrZGY/FknSmN7eHiFci0qVZPxHMfae+LUL6AeaRciZCMg WX4YcqBrh0dUil50A9xQrJeNdGeDnMIG+kpv02FAGnMa/At4k0ODCLKK9joGicTf awJ44Jb1wswQIiOX1t0lhtgPkjrw7ue9jdeuZZauihhQlNqmIW01vMwbsxblquxq 9Cmc3M5Y5+xYY1s9e48PNskEmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfH0pla 3dXssNjfbVeXjWIIT7nXMB8GA1UdIwQYMBaAFIfzGyAb3Rh1gVQMW4uGRDjCmZC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjAyRi9EN0MzM0FCODdG QkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdIV0JWQXhiaTRaRU9NS1pr TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfTWJJQnZkR0hXQlZBeGJpNFpFT01LWmtMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjAyRi9EN0MzM0FCODdGQkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdI V0JWQXhiaTRaRU9NS1prTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI4W34n+QnG+jTWTz+kaJhUIhe4fFB58rPUtFHkTRb+kGOpuLljXki 0Nn2fCvzuN3IMVLFxOrQwznv6RGMiWr8zQEINoY7XvN529sMhXBStKK96n6v4C2f KKG0YxaDCb4KtqNonBr6b4RDJcTNT/hQKRIPq+0cbhfeQ3VsPcHTJeptA4VxFsLI d4NLEXl5d3C7/HfafFFWtEyaZAYiROJ37Frm12M4jBenrE4OEIr8D9+7qzvS710+ uH+XNgrazaeewbRsfXkvOiv1uS5Ky64DLrW5xPdf3N6c2DqyAFUNsTfFYp5005N2 yFcwGRMMt7jRUB0xnZdBap9/JtMB2OAz -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:30 2025 by rpki-client