This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft File: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json) Hash identifier: W1M8uh5tzYgXgNZwOvzt+E943487OMbaMA2O25Q5EUk= Subject key identifier: EC:D6:55:DA:65:F1:CB:7A:C1:69:19:0E:63:65:09:B2:7A:E8:C9:F0 Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94 Certificate issuer: /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494 Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft Manifest number: 03C9 Signing time: Mon 22 Dec 2025 23:40:00 +0000 Manifest this update: Mon 22 Dec 2025 23:40:00 +0000 Manifest next update: Mon 29 Dec 2025 23:40:00 +0000 Files and hashes: 1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: qRNrdaxAC4IjttC6UxV0sr02aUMkly/1sThmU/gjU7Q=) 2: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: oywLtrB7Dks1CdJjkD2xhNPjQlapRspAyRegZBX074I=) 3: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: dAddIv0JPSHHamMka9fq5eu7LbrsYsvnj5ro8P4sxvE=) 4: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: 1PytUGKxFSlnKa32cmpuSKajNJ5x4qip8klGcU604cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494 Validity Not Before: Dec 22 23:40:00 2025 GMT Not After : Dec 29 23:40:00 2025 GMT Subject: CN=6949d6d0-36e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:21:27:01:9b:42:56:ca:8e:c3:9b:1a:25: 42:f1:d3:14:f2:c2:80:13:68:64:75:01:2b:2a:a8: 23:6b:e7:9a:ab:08:28:69:98:b2:14:a3:4d:42:30: d3:83:92:c7:b9:9b:6c:f0:d4:aa:ce:54:d8:89:b9: bd:67:c4:b1:9a:09:8c:33:f9:12:cd:a4:94:56:4f: 21:8e:55:9e:dc:20:7e:40:12:5d:c3:c6:c2:75:e7: 6b:53:10:be:e5:2b:6a:0a:01:56:c4:28:3a:4c:dd: b9:3a:3d:63:67:53:c5:33:0f:91:3c:1b:bb:28:41: e1:bb:a4:e8:b4:6e:61:54:26:c0:f2:20:64:81:42: f5:a9:c0:cf:71:9b:57:2f:ec:f3:40:12:55:35:95: a6:e9:bb:6d:7e:07:b1:d0:6b:1c:4c:4f:32:63:81: 9b:e4:71:c0:de:80:d1:a0:e4:bc:b7:cc:6b:b3:c7: 5c:47:ca:37:3b:a6:d3:75:28:6e:5f:e0:57:73:49: 9f:a5:1f:c2:eb:8c:e5:fe:5f:dd:3e:ef:fe:bd:7f: 10:3a:7b:ea:1b:18:b2:47:60:66:e1:18:6c:d6:20: e7:79:08:17:b6:b7:6c:1e:cf:39:ef:88:1b:ea:9f: c2:d7:36:d8:5b:d2:f3:56:e4:01:38:3d:46:3e:18: 45:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D6:55:DA:65:F1:CB:7A:C1:69:19:0E:63:65:09:B2:7A:E8:C9:F0 X509v3 Authority Key Identifier: keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:84:5e:23:9c:0e:9d:3c:33:20:ab:20:e9:5a:6c:23:60:8c: e7:24:1f:1b:52:35:92:82:c3:94:6e:a9:3f:d2:a4:4b:5f:f2: ae:db:fb:9b:d8:20:b9:e0:80:1d:84:75:43:56:a7:5c:5e:7e: 8d:98:5b:f3:3c:3a:6a:b7:d5:95:ac:6c:48:be:09:a8:c9:51: d5:84:22:f3:7f:4f:26:d6:3a:e1:a0:6d:28:2e:13:0f:e4:5d: dd:a6:13:16:eb:05:34:2b:1c:83:6c:9e:ee:59:5e:b2:82:87: 94:1c:ca:84:6f:e3:ed:d7:b4:6c:e9:cd:56:1f:cb:46:ee:ea: c7:6a:7d:5f:e3:2c:49:2b:c7:0d:35:66:77:ab:b0:0c:5e:4b: e6:31:2b:6e:99:b3:0f:01:9b:c2:a8:a4:6f:12:2e:d6:39:8a: 63:a2:4e:4e:a2:0e:46:c2:be:03:8e:85:0d:a2:05:d9:da:20: fd:08:eb:1e:f6:60:71:dd:a9:c1:56:06:0e:f8:da:76:86:29: 7c:98:b4:74:80:ed:8a:d9:44:00:ef:0d:e0:8f:a9:4f:f0:45: be:e8:81:00:4b:96:c6:de:25:62:bf:60:06:f4:ad:bf:b4:23: 67:36:9e:87:47:37:72:d7:f0:14:55:e8:7e:19:4b:2a:d8:d4: 3d:3a:6d:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDMkYxMTAvBgNVBAUTKEZFMTk3NzhBMEQwN0JEREI1RkY2QjlGMDVCRTJENTQ1 NTIwRUM0OTQwHhcNMjUxMjIyMjM0MDAwWhcNMjUxMjI5MjM0MDAwWjAYMRYwFAYD VQQDDA02OTQ5ZDZkMC0zNmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOUhJwGbQlbKjsObGiVC8dMU8sKAE2hkdQErKqgja+eaqwgoaZiyFKNNQjDT g5LHuZts8NSqzlTYibm9Z8SxmgmMM/kSzaSUVk8hjlWe3CB+QBJdw8bCdedrUxC+ 5StqCgFWxCg6TN25Oj1jZ1PFMw+RPBu7KEHhu6TotG5hVCbA8iBkgUL1qcDPcZtX L+zzQBJVNZWm6bttfgex0GscTE8yY4Gb5HHA3oDRoOS8t8xrs8dcR8o3O6bTdShu X+BXc0mfpR/C64zl/l/dPu/+vX8QOnvqGxiyR2Bm4Rhs1iDneQgXtrdsHs8574gb 6p/C1zbYW9LzVuQBOD1GPhhFSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzWVdpl 8ct6wWkZDmNlCbJ66MnwMB8GA1UdIwQYMBaAFP4Zd4oNB73bX/a58Fvi1UVSDsSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkMyRi83NzNEMzlCNkIz NDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZkdGY5cm53Vy1MVlJWSU94 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obDNpZzBIdmR0ZjlybndXLUxWUlZJT3hKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkMyRi83NzNEMzlCNkIzNDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZk dGY5cm53Vy1MVlJWSU94SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEhF4jnA6dPDMgqyDpWmwjYIznJB8bUjWSgsOUbqk/0qRLX/Ku2/ub 2CC54IAdhHVDVqdcXn6NmFvzPDpqt9WVrGxIvgmoyVHVhCLzf08m1jrhoG0oLhMP 5F3dphMW6wU0KxyDbJ7uWV6ygoeUHMqEb+Pt17Rs6c1WH8tG7urHan1f4yxJK8cN NWZ3q7AMXkvmMStumbMPAZvCqKRvEi7WOYpjok5Oog5Gwr4DjoUNogXZ2iD9COse 9mBx3anBVgYO+Np2hil8mLR0gO2K2UQA7w3gj6lP8EW+6IEAS5bG3iViv2AG9K2/ tCNnNp6HRzdy1/AUVeh+GUsq2NQ9Om3D -----END CERTIFICATE-----Generated at Tue Dec 23 14:40:17 2025 by rpki-client