This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: xRI0BCWfzm/oE+KN39RnwLi1qdcQ44p9kzZrXjuZ6WA= Subject key identifier: DC:A8:DE:D7:7E:A4:E8:90:C2:09:BE:08:C7:63:C3:77:C0:17:43:15 Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 064A Signing time: Mon 22 Dec 2025 21:51:31 +0000 Manifest this update: Mon 22 Dec 2025 21:51:31 +0000 Manifest next update: Mon 29 Dec 2025 21:51:31 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: wkl3IFwmWcZZ0YYOgxqlVMXePqeqtGe+o9bxuI6djyk=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: nOPRhOoqijOGYbrCca4anAG0eCBEskX4mBeZ7DWXSH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: Dec 22 21:51:31 2025 GMT Not After : Dec 29 21:51:31 2025 GMT Subject: CN=6949bd63-0231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:54:0a:27:c9:4f:a9:84:e9:e9:36:e0:f6:6d: dd:1d:b6:ca:3e:ab:f3:08:92:e7:0a:d2:30:53:79: 04:c8:55:15:d7:b5:7e:63:b1:25:10:fe:f6:5a:9f: f2:e0:f4:fd:ac:6a:9b:98:b5:81:4b:7c:69:ba:45: 97:61:bb:f1:09:4f:45:28:0e:6f:d6:20:74:eb:fb: 4c:7a:1b:a5:84:f7:37:bc:95:8f:64:3c:9f:ee:c7: 4a:8d:a7:c0:c8:66:ba:dd:3f:06:0d:ff:61:d6:87: 0d:02:90:ab:ea:19:c7:bb:1f:13:5e:77:3c:96:27: e2:a1:a5:05:e9:7e:e2:4d:6b:cb:48:1a:24:cb:b9: 8b:22:99:42:5a:b2:e1:5a:ef:ea:d8:48:33:21:c7: a3:40:ec:24:ad:48:6f:94:b8:42:7d:4c:7b:74:b7: 74:94:23:a0:13:06:ed:e4:55:fe:9f:19:76:f1:5d: a3:3e:16:d9:33:a7:79:f7:88:3d:b7:e7:be:1a:8e: 12:60:ec:41:89:0b:21:66:8e:d6:36:48:60:de:7b: 82:9e:19:be:79:67:1a:82:dc:1d:4b:be:a6:0c:db: 31:25:78:fb:77:e3:b9:86:58:ba:fc:02:38:dd:d9: 49:07:05:76:0b:52:dd:b0:d4:c6:fd:24:94:71:14: 20:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A8:DE:D7:7E:A4:E8:90:C2:09:BE:08:C7:63:C3:77:C0:17:43:15 X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c9:85:22:b1:45:12:8c:9a:a2:3a:4d:78:12:05:4a:ba:08: 3f:6a:a8:e3:5a:86:9f:e6:d5:13:1d:ad:6d:57:2d:47:4f:4b: 91:f0:55:89:c4:e8:d0:f4:3b:96:90:f6:d5:11:1f:8f:4f:52: 7d:c9:a2:c1:c7:39:f1:24:f9:1f:19:3d:5d:c9:fa:b1:0b:e0: 93:c0:e8:56:ce:f2:d3:46:91:89:67:af:e6:b0:c5:4b:ea:39: 00:e6:ea:2b:6d:22:79:81:5c:cd:88:f7:3a:6e:66:92:2a:d8: aa:2e:45:d5:fe:fd:9a:4c:61:80:80:9d:39:38:39:9d:23:59: 5d:e5:13:cc:6c:9a:d1:e5:4a:f3:f8:b0:0a:45:f6:fd:06:ba: 96:00:ce:33:4d:ad:05:ad:fc:a6:9d:ef:55:36:03:85:75:53: a7:98:15:6e:33:eb:09:d4:31:45:7c:a7:45:66:30:b0:e4:31: 57:59:6b:04:32:ca:3e:68:e3:03:d3:11:dc:e0:62:73:71:2d: 78:ec:68:2a:f3:fc:e4:76:4e:da:41:dc:fa:92:9e:99:80:39: c8:32:ea:c4:91:da:8f:35:49:ae:61:ab:2b:a7:43:a3:26:60: 2f:55:be:28:08:e4:e8:69:a9:90:fe:19:35:5d:a2:74:e4:80: 6d:1e:d0:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjUxMjIyMjE1MTMxWhcNMjUxMjI5MjE1MTMxWjAYMRYwFAYD VQQDDA02OTQ5YmQ2My0wMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVQKJ8lPqYTp6Tbg9m3dHbbKPqvzCJLnCtIwU3kEyFUV17V+Y7ElEP72Wp/y 4PT9rGqbmLWBS3xpukWXYbvxCU9FKA5v1iB06/tMehulhPc3vJWPZDyf7sdKjafA yGa63T8GDf9h1ocNApCr6hnHux8TXnc8lifioaUF6X7iTWvLSBoky7mLIplCWrLh Wu/q2EgzIcejQOwkrUhvlLhCfUx7dLd0lCOgEwbt5FX+nxl28V2jPhbZM6d594g9 t+e+Go4SYOxBiQshZo7WNkhg3nuCnhm+eWcagtwdS76mDNsxJXj7d+O5hli6/AI4 3dlJBwV2C1LdsNTG/SSUcRQgdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyo3td+ pOiQwgm+CMdjw3fAF0MVMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByyYUisUUSjJqiOk14EgVKugg/aqjjWoaf5tUTHa1tVy1HT0uR8FWJ xOjQ9DuWkPbVER+PT1J9yaLBxznxJPkfGT1dyfqxC+CTwOhWzvLTRpGJZ6/msMVL 6jkA5uorbSJ5gVzNiPc6bmaSKtiqLkXV/v2aTGGAgJ05ODmdI1ld5RPMbJrR5Urz +LAKRfb9BrqWAM4zTa0Frfymne9VNgOFdVOnmBVuM+sJ1DFFfKdFZjCw5DFXWWsE Mso+aOMD0xHc4GJzcS147Ggq8/zkdk7aQdz6kp6ZgDnIMurEkdqPNUmuYasrp0Oj JmAvVb4oCOToaamQ/hk1XaJ05IBtHtAP -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:31 2025 by rpki-client