This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft File: hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json) Hash identifier: F4pEnTqWc9+QkRCZ7PmTriyxGCTOaR9oF79bxPugr8Y= Subject key identifier: 42:A6:A6:1E:F5:C6:09:CE:C4:DA:58:09:56:47:66:44:B9:6C:60:92 Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft Manifest number: 38 Signing time: Mon 29 Dec 2025 06:29:33 +0000 Manifest this update: Mon 29 Dec 2025 06:29:33 +0000 Manifest next update: Mon 05 Jan 2026 06:29:33 +0000 Files and hashes: 1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: xSeZgKux1U8FRS5DZD6P+H0KOFfY4OCzUTD+djAJLN0=) 2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: 5FblCrC5z4khMAdynBGpl1OeK8F3ELtDOlzocALKnPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 06:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Validity Not Before: Dec 29 06:29:33 2025 GMT Not After : Jan 5 06:29:33 2026 GMT Subject: CN=69521fcd-d8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:35:94:13:74:31:02:79:26:3e:46:fc:1f: a8:13:b2:ae:ad:4a:75:d0:34:a5:af:69:de:cd:6c: 44:96:88:75:62:10:ad:2a:7c:75:8b:dd:c5:87:d7: a1:51:76:9c:e2:f7:e7:77:47:d5:4e:c0:12:f9:1b: 4a:61:3e:27:e5:d4:a2:5d:18:b0:ad:41:d7:2f:a8: 9c:98:90:5c:2d:e9:eb:3a:fd:07:11:06:29:a3:a1: 09:62:6c:df:ef:49:03:e0:24:9d:b1:67:f2:34:b8: c3:9f:54:56:e6:69:ee:b9:e7:fb:a6:14:d6:09:d5: 28:db:09:8d:88:7c:a8:23:37:5d:0c:d8:61:89:1e: 80:be:3d:1a:c7:2a:6f:18:63:29:2c:6f:21:fc:ce: 9c:9f:f0:2f:43:66:ea:e1:2d:63:f9:df:e8:fc:6f: 14:17:9b:9c:50:44:e4:9b:89:2f:e6:07:5f:53:0e: f0:10:4f:c4:8e:25:20:1f:44:92:28:c5:01:b7:4f: ef:53:15:07:60:26:bd:dc:6b:16:19:9e:63:f3:bc: af:55:2d:9c:c3:61:05:e0:38:11:f6:43:0e:46:36: a4:a3:3f:9a:2b:c8:17:02:57:1a:d5:ed:7d:01:e2: b0:ea:7c:01:39:9b:9f:14:e6:a5:31:f7:53:07:b6: 58:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A6:A6:1E:F5:C6:09:CE:C4:DA:58:09:56:47:66:44:B9:6C:60:92 X509v3 Authority Key Identifier: keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:02:ad:50:bb:29:45:76:1b:58:e0:88:6e:d9:a1:50:b9:72: 6f:08:53:6e:bf:94:6e:b0:0f:93:63:8a:25:2b:3f:b0:5d:dc: 5d:9b:3d:8a:de:29:23:b6:35:90:f9:0f:39:d1:97:d2:28:1a: ff:39:b1:4b:4d:25:8c:b5:89:c2:65:30:05:2f:74:03:7a:43: 91:0b:c2:5c:66:3d:59:09:1f:0d:ee:b7:24:c7:ab:0f:99:f2: cd:50:2d:27:4b:3d:f8:33:4d:24:07:8d:61:14:f2:4d:59:70: 93:dd:d6:4d:f2:64:e4:3d:3f:83:16:8b:1a:f7:f8:b4:0b:90: 8d:3f:2a:58:46:33:0a:cd:e7:ce:b1:72:0c:62:b5:47:0f:44: 8c:8c:ba:52:50:b4:50:35:ad:7a:6d:d8:f4:c1:8a:6f:be:4b: 20:7f:5e:e6:a2:63:55:38:3d:1f:99:29:48:b7:b0:ec:92:f1: d1:0d:ad:c6:47:25:c6:ef:1c:db:74:6c:0e:ba:ba:8f:37:98: cf:c2:37:56:63:ad:98:87:44:50:7e:59:3b:b3:81:5d:7d:6f: e6:8a:29:e7:a1:47:ff:ab:57:f9:e0:51:09:b4:72:13:b3:9c: e7:72:ff:6c:a8:ca:b5:40:72:ad:4c:00:27:83:8c:5a:9e:11: d5:51:20:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0RBQzExMC8GA1UEBRMoODQ3RjJFMTJFQUI1MDZBNTAxMDk5NDQyMDdCMUQ3MDI2 Njc3RjA5QjAeFw0yNTEyMjkwNjI5MzNaFw0yNjAxMDUwNjI5MzNaMBgxFjAUBgNV BAMMDTY5NTIxZmNkLWQ4Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8STWUE3QxAnkmPkb8H6gTsq6tSnXQNKWvad7NbESWiHViEK0qfHWL3cWH16FR dpzi9+d3R9VOwBL5G0phPifl1KJdGLCtQdcvqJyYkFwt6es6/QcRBimjoQlibN/v SQPgJJ2xZ/I0uMOfVFbmae655/umFNYJ1SjbCY2IfKgjN10M2GGJHoC+PRrHKm8Y YyksbyH8zpyf8C9DZurhLWP53+j8bxQXm5xQROSbiS/mB19TDvAQT8SOJSAfRJIo xQG3T+9TFQdgJr3caxYZnmPzvK9VLZzDYQXgOBH2Qw5GNqSjP5oryBcCVxrV7X0B 4rDqfAE5m58U5qUx91MHtlj1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQqamHvXG Cc7E2lgJVkdmRLlsYJIwHwYDVR0jBBgwFoAUhH8uEuq1BqUBCZRCB7HXAmZ38Jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzcyNjBGQzBDOEYz OTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFVQkNaUkNCN0hYQW1aMzhK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvaEg4dUV1cTFCcVVCQ1pSQ0I3SFhBbVozOEpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD REFDLzcyNjBGQzBDOEYzOTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFV QkNaUkNCN0hYQW1aMzhKcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACgCrVC7KUV2G1jgiG7ZoVC5cm8IU26/lG6wD5NjiiUrP7Bd3F2bPYre KSO2NZD5DznRl9IoGv85sUtNJYy1icJlMAUvdAN6Q5ELwlxmPVkJHw3utyTHqw+Z 8s1QLSdLPfgzTSQHjWEU8k1ZcJPd1k3yZOQ9P4MWixr3+LQLkI0/KlhGMwrN586x cgxitUcPRIyMulJQtFA1rXpt2PTBim++SyB/XuaiY1U4PR+ZKUi3sOyS8dENrcZH JcbvHNt0bA66uo83mM/CN1ZjrZiHRFB+WTuzgV19b+aKKeehR/+rV/ngUQm0chOz nOdy/2yoyrVAcq1MACeDjFqeEdVRIO4= -----END CERTIFICATE-----Generated at Tue Dec 30 16:27:16 2025 by rpki-client