This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json) Hash identifier: A//Fa+EcebjZ34VuZbi/PqHSW6HdF8QlLjtvlS6BsNk= Subject key identifier: 2E:93:59:D8:2E:75:14:50:49:68:46:45:3F:5B:AB:87:B0:EB:68:93 Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft Manifest number: 015C Signing time: Tue 23 Dec 2025 03:05:01 +0000 Manifest this update: Tue 23 Dec 2025 03:05:01 +0000 Manifest next update: Tue 30 Dec 2025 03:05:01 +0000 Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: 52s8jKW1rEDri7SBYvOMrtOV0Joq97HB7YzU5pZ8Fs8=) 2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: F4PEaJfd6HP1/7qcDw3hvzZGyQ0ocll5S0CbxU1lwXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: Dec 23 03:05:01 2025 GMT Not After : Dec 30 03:05:01 2025 GMT Subject: CN=694a06dd-467d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:39:da:c1:2d:3a:34:74:d1:2f:cb:67:db:95: 44:9e:7d:2a:a2:de:96:4d:1d:5e:8f:ac:1f:4b:14: 92:13:34:7c:b4:c8:c5:c3:15:73:ac:c8:23:d7:80: 22:87:d9:b3:96:61:c8:5e:fb:34:3c:e3:27:1f:83: 1e:bc:d8:77:e5:e4:c4:64:6e:b1:fd:42:ad:77:fd: 40:25:1e:e6:a9:88:43:34:d2:5f:40:52:db:55:92: cb:66:26:66:64:b4:05:db:cd:e7:b6:b1:51:b6:93: 0f:84:f3:47:e1:53:75:93:2d:7b:8b:2f:64:fc:71: c4:74:82:c6:d0:a2:70:62:3c:33:3c:e0:dc:7d:68: 84:2c:f3:05:4c:1f:57:9a:3c:4e:c9:cb:ef:2d:8c: 1f:c2:09:30:d0:1c:2a:bb:c0:ed:b0:de:bf:5d:53: 82:bf:4b:fc:90:c6:fb:ec:c8:45:e0:07:1a:70:ff: cf:47:b5:59:f3:0c:50:67:40:84:f3:60:47:e2:2e: b0:a9:7a:45:3f:d5:33:eb:fb:41:2c:c9:06:41:dd: 46:8d:26:f9:45:70:87:1b:7d:d7:59:ee:a5:8c:ac: 69:23:21:ce:f4:4f:ae:d0:39:e9:ea:59:4d:08:76: f5:ba:9c:9f:80:f9:bd:23:33:53:68:c6:7f:31:4c: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:93:59:D8:2E:75:14:50:49:68:46:45:3F:5B:AB:87:B0:EB:68:93 X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3c:f7:f3:71:80:43:f0:78:b9:0d:f7:b3:30:f9:93:2e:10: cc:fe:01:ae:f3:63:9c:8c:e8:d3:f4:34:81:a6:57:66:e6:58: 19:95:40:f5:02:d2:0c:40:ac:61:4d:31:5c:92:bb:a6:56:82: ce:17:c8:d9:74:39:67:d3:d0:5e:68:fd:d6:b6:dd:e1:00:7e: 8e:05:18:2c:ae:6b:ec:71:67:34:8f:a4:8a:0d:b5:b6:20:aa: a5:53:84:a2:59:cc:84:86:b7:6d:0b:f4:ef:96:76:70:bf:b4: 5f:29:b7:46:96:44:3b:53:f4:59:ed:bf:b6:f5:aa:ba:da:ce: 17:66:8c:a4:97:d5:b7:ff:52:7b:4d:14:bd:52:0d:3b:20:f5: f9:47:44:b4:f9:bb:75:de:98:4b:af:a6:d9:83:65:a4:38:d5: 8c:74:f6:d1:db:dc:2d:fd:45:90:f2:83:af:cb:1f:15:62:4b: 78:65:9b:55:90:57:b5:ae:72:e4:b7:b1:c7:ac:98:5c:df:68: 38:1c:65:97:3d:fb:ef:ff:78:b8:18:9d:dc:dd:65:ba:39:10: 1d:41:73:f7:33:95:2c:aa:f1:97:3b:cf:24:ea:cc:86:2d:db: 2e:18:99:57:c3:79:7f:38:ee:6f:0d:78:a1:49:21:e3:31:3f: 6c:5d:74:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5 NTREREMwRTUwHhcNMjUxMjIzMDMwNTAxWhcNMjUxMjMwMDMwNTAxWjAYMRYwFAYD VQQDDA02OTRhMDZkZC00NjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jnawS06NHTRL8tn25VEnn0qot6WTR1ej6wfSxSSEzR8tMjFwxVzrMgj14Ai h9mzlmHIXvs0POMnH4MevNh35eTEZG6x/UKtd/1AJR7mqYhDNNJfQFLbVZLLZiZm ZLQF283ntrFRtpMPhPNH4VN1ky17iy9k/HHEdILG0KJwYjwzPODcfWiELPMFTB9X mjxOycvvLYwfwgkw0Bwqu8DtsN6/XVOCv0v8kMb77MhF4AcacP/PR7VZ8wxQZ0CE 82BH4i6wqXpFP9Uz6/tBLMkGQd1GjSb5RXCHG33XWe6ljKxpIyHO9E+u0Dnp6llN CHb1upyfgPm9IzNTaMZ/MUxYqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6TWdgu dRRQSWhGRT9bq4ew62iTMB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3 T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VC YkNCa3BXNVRnODJWVGR3T1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiPPfzcYBD8Hi5DfezMPmTLhDM/gGu82OcjOjT9DSBpldm5lgZlUD1 AtIMQKxhTTFckrumVoLOF8jZdDln09BeaP3Wtt3hAH6OBRgsrmvscWc0j6SKDbW2 IKqlU4SiWcyEhrdtC/TvlnZwv7RfKbdGlkQ7U/RZ7b+29aq62s4XZoykl9W3/1J7 TRS9Ug07IPX5R0S0+bt13phLr6bZg2WkONWMdPbR29wt/UWQ8oOvyx8VYkt4ZZtV kFe1rnLkt7HHrJhc32g4HGWXPfvv/3i4GJ3c3WW6ORAdQXP3M5UsqvGXO88k6syG LdsuGJlXw3l/OO5vDXihSSHjMT9sXXQb -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:48 2025 by rpki-client