This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: f+2KyiZzzIiZd6bZAxpxGMd3rsmRgSfZBLu4ZP+8l80= Subject key identifier: DD:A2:B3:A0:66:9F:45:B0:97:E7:91:2D:D0:24:B5:AD:0F:F7:1A:D8 Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 1194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 118C Signing time: Mon 22 Dec 2025 16:54:30 +0000 Manifest this update: Mon 22 Dec 2025 16:54:30 +0000 Manifest next update: Mon 29 Dec 2025 16:54:30 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: aOUyaSqVMKUvWeSzwutHREuDxth0x3SWpAGSsx/jYU4=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: gteMkfVnVg4ffsJGo4gzYRn2LBvsScWGIppneQ2BQXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4500 (0x1194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Dec 22 16:54:30 2025 GMT Not After : Dec 29 16:54:30 2025 GMT Subject: CN=694977c6-b427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:e9:b7:74:21:db:2f:52:b4:a0:a6:f7:0f: 56:a6:c3:ce:31:35:5d:6f:ff:2d:63:8c:2a:37:00: ec:48:95:d4:84:d8:f2:2c:47:b6:f3:6e:3d:87:31: 4b:87:b0:e5:54:06:9c:cc:20:c0:8d:f5:aa:89:69: 90:25:9c:c0:6a:a3:d7:4e:38:2d:32:9c:dd:c8:6a: 33:8c:5e:79:59:3b:18:71:68:d3:74:a1:37:ca:cc: e5:57:35:a2:66:bc:94:b0:d4:eb:4e:21:a8:ca:2a: d5:9f:c8:46:0b:ce:14:20:cb:f2:69:2b:93:fe:27: 9b:0f:be:ba:40:1c:26:56:ad:75:11:c0:03:b2:37: c9:98:35:80:5a:ca:88:bb:b3:31:43:49:c2:6b:8f: c0:69:9c:5c:f1:99:bc:3e:27:58:3a:8a:fe:f9:c8: b8:75:3f:bd:bd:7b:b2:8f:a6:e5:63:bd:6b:a6:b0: ff:10:8a:88:ce:25:70:d8:58:86:fe:9f:fd:fe:d6: 29:06:65:0b:f3:53:38:53:93:33:36:51:0a:96:2f: 7a:ef:f8:c7:0f:22:0d:0b:e8:14:d7:5e:1e:4b:44: 1e:f9:1d:d9:f2:9c:06:dd:1c:ea:1d:7e:11:6c:28: 4b:6b:c0:82:c8:3b:8c:57:a9:b7:f9:e7:15:5e:cd: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A2:B3:A0:66:9F:45:B0:97:E7:91:2D:D0:24:B5:AD:0F:F7:1A:D8 X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:38:5c:c5:06:4d:56:11:a7:52:71:64:87:35:da:f8:58:f0: f0:f5:24:e1:8b:ed:dd:0f:2b:43:4b:e2:78:c4:32:20:b5:e0: 68:df:d4:0a:d5:6b:45:f6:a4:23:76:a2:2f:8e:32:78:d0:4d: 92:4a:99:d9:73:f5:35:1d:6a:77:54:2f:c7:10:4d:6b:50:d7: 9b:94:9b:59:9d:42:cf:e0:d3:3b:42:d5:b2:7e:2c:d6:2f:94: c7:e8:63:69:8f:3e:cd:f3:92:af:f2:ef:51:37:f7:3f:09:85: b5:4b:d2:b9:b7:91:8a:a3:bb:f1:b8:81:11:3e:8f:eb:bd:ca: 35:54:e5:82:3c:84:df:94:cd:25:f9:42:71:00:b7:88:f7:94: d1:55:43:d0:62:be:b3:07:95:84:c6:5f:51:a5:77:e6:02:7d: 40:47:70:27:9d:47:fb:53:33:7a:4a:29:39:2a:c3:61:ac:76: 77:11:23:c7:dd:30:47:cd:d2:90:16:f1:42:08:3b:23:7e:86: c9:5b:7c:00:31:1c:7d:f0:3f:fb:62:88:c1:27:4b:27:ad:68: 56:62:d1:a3:74:5a:50:ca:2b:35:a6:02:bb:62:f0:92:16:9c: f1:c1:82:43:10:59:a8:d2:7b:bc:d4:d6:80:12:e0:61:a7:78: b2:42:27:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjUxMjIyMTY1NDMwWhcNMjUxMjI5MTY1NDMwWjAYMRYwFAYD VQQDDA02OTQ5NzdjNi1iNDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhnpt3Qh2y9StKCm9w9WpsPOMTVdb/8tY4wqNwDsSJXUhNjyLEe28249hzFL h7DlVAaczCDAjfWqiWmQJZzAaqPXTjgtMpzdyGozjF55WTsYcWjTdKE3yszlVzWi ZryUsNTrTiGoyirVn8hGC84UIMvyaSuT/iebD766QBwmVq11EcADsjfJmDWAWsqI u7MxQ0nCa4/AaZxc8Zm8PidYOor++ci4dT+9vXuyj6blY71rprD/EIqIziVw2FiG /p/9/tYpBmUL81M4U5MzNlEKli967/jHDyINC+gU114eS0Qe+R3Z8pwG3RzqHX4R bChLa8CCyDuMV6m3+ecVXs1gRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2is6Bm n0Wwl+eRLdAkta0P9xrYMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjOFzFBk1WEadScWSHNdr4WPDw9SThi+3dDytDS+J4xDIgteBo39QK 1WtF9qQjdqIvjjJ40E2SSpnZc/U1HWp3VC/HEE1rUNeblJtZnULP4NM7QtWyfizW L5TH6GNpjz7N85Kv8u9RN/c/CYW1S9K5t5GKo7vxuIERPo/rvco1VOWCPITflM0l +UJxALeI95TRVUPQYr6zB5WExl9RpXfmAn1AR3AnnUf7UzN6Sik5KsNhrHZ3ESPH 3TBHzdKQFvFCCDsjfobJW3wAMRx98D/7YojBJ0snrWhWYtGjdFpQyis1pgK7YvCS FpzxwYJDEFmo0nu81NaAEuBhp3iyQicM -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:13 2025 by rpki-client