This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft File: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft (raw, json) Hash identifier: bfV51pZKJjkg5ZNm3FrJeIkLk38J8Cva7vJZB/9a3CY= Subject key identifier: 7A:A5:13:1D:D3:45:14:5E:65:1A:8F:DA:A2:30:F8:F2:5D:30:EC:C7 Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A Certificate issuer: /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A Certificate serial: 0AE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft Manifest number: 0AE1 Signing time: Sat 20 Dec 2025 18:55:16 +0000 Manifest this update: Sat 20 Dec 2025 18:55:16 +0000 Manifest next update: Sat 27 Dec 2025 18:55:16 +0000 Files and hashes: 1: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl (hash: MW8nL4aekvK9mDn05WTScLUTgNIBy8zvyTsRL8DYKFE=) 2: BF77D1785DCB11EA880A7643C4F9AE02.roa (hash: H4kc+9yjECNKJF53s7PJuRCRHGgJ3Wfs6TYEVDFyAU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2791 (0xae7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A Validity Not Before: Dec 20 18:55:16 2025 GMT Not After : Dec 27 18:55:16 2025 GMT Subject: CN=6946f114-daeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:db:06:04:fb:88:e5:17:ac:c3:a8:e2:e9: fd:6c:16:30:ff:85:19:1e:15:d3:5f:f1:56:57:e5: f2:f1:3f:d1:e7:35:65:20:33:65:96:3b:d6:14:76: e8:49:43:0a:17:a1:de:a8:47:e0:af:8f:2c:b1:fe: 54:72:1e:04:84:c9:be:04:45:45:56:8f:19:84:63: 40:b5:d0:64:89:fb:7e:24:44:64:3e:e4:b5:21:29: 81:cb:fc:18:91:56:d0:5d:e4:95:52:3c:36:17:ab: ee:8d:ff:56:45:e5:73:c1:46:ed:d8:6d:56:35:08: 52:3a:11:90:1f:e7:d0:98:1c:09:d0:4b:17:9c:3a: e3:b6:0f:e8:a1:18:46:76:6d:7f:b5:6b:08:53:8f: aa:37:ae:65:3d:fc:52:8a:da:f1:cb:5f:67:43:77: e4:00:38:da:6b:55:5a:ac:31:14:0c:cb:5e:61:41: f2:9e:d3:9c:cb:b5:8c:e6:d4:49:75:15:ba:a5:8f: 6c:17:12:91:c1:db:66:6f:e8:5e:a4:54:e9:83:1f: 3f:2d:2d:b7:17:3c:f1:31:5f:1d:36:dd:ef:02:79: 26:0b:5f:f4:c9:fc:56:b7:6e:3e:d0:ae:b7:c0:a5: a5:0e:d0:48:13:ea:d0:d7:61:fc:52:93:29:32:b6: 50:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A5:13:1D:D3:45:14:5E:65:1A:8F:DA:A2:30:F8:F2:5D:30:EC:C7 X509v3 Authority Key Identifier: keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:aa:09:7c:9d:73:2e:05:d2:12:3e:80:d3:89:69:86:6a:83: 5a:32:13:19:ed:07:ab:f8:8a:99:13:8a:33:d2:8d:75:5b:96: 95:ef:58:48:29:16:51:c2:c2:7c:c8:ed:f1:a8:61:b5:25:f3: c1:23:c2:e4:82:30:c3:8f:f8:1a:dd:c0:69:3d:d7:e3:ae:2e: 6e:98:48:89:9a:4c:12:ec:d3:79:b2:bc:c7:d8:76:18:f5:db: ec:f4:00:68:c1:63:83:f0:11:8e:e8:b1:b9:ce:c7:31:0a:ed: 00:3c:6e:3d:2a:a6:c5:2e:b9:34:5a:3f:db:c3:91:a6:b6:09: 46:f8:b9:4c:63:d7:e5:c2:77:c7:83:fa:7a:2c:11:4f:5d:75: 1f:88:ea:fc:a2:36:dc:49:77:30:0f:c9:81:9e:71:56:9d:71: f1:95:b0:d7:3a:63:6f:c6:78:57:05:1d:f0:f7:3e:00:b2:f7: 4b:4d:66:96:e1:d2:5f:82:c1:45:5a:dc:43:31:a9:05:5f:31: f1:f1:f4:05:d9:45:ad:85:13:b9:1d:b9:f6:21:c0:26:86:3a: 2f:07:69:45:af:d2:37:e6:b7:b0:d2:b5:0e:77:b4:ea:4a:26: fa:55:28:b5:9d:52:32:4d:d4:28:16:dd:ab:a3:e0:e7:e2:aa: c9:17:bf:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDNzgxMTAvBgNVBAUTKDg0OEE3OUFCNTA0MUU3MUNFNjIyNTBCNTdGQzFFMEY1 NDk3OEM5M0EwHhcNMjUxMjIwMTg1NTE2WhcNMjUxMjI3MTg1NTE2WjAYMRYwFAYD VQQDDA02OTQ2ZjExNC1kYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5nbBgT7iOUXrMOo4un9bBYw/4UZHhXTX/FWV+Xy8T/R5zVlIDNlljvWFHbo SUMKF6HeqEfgr48ssf5Uch4EhMm+BEVFVo8ZhGNAtdBkift+JERkPuS1ISmBy/wY kVbQXeSVUjw2F6vujf9WReVzwUbt2G1WNQhSOhGQH+fQmBwJ0EsXnDrjtg/ooRhG dm1/tWsIU4+qN65lPfxSitrxy19nQ3fkADjaa1VarDEUDMteYUHyntOcy7WM5tRJ dRW6pY9sFxKRwdtmb+hepFTpgx8/LS23FzzxMV8dNt3vAnkmC1/0yfxWt24+0K63 wKWlDtBIE+rQ12H8UpMpMrZQlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqlEx3T RRReZRqP2qIw+PJdMOzHMB8GA1UdIwQYMBaAFISKeatQQecc5iJQtX/B4PVJeMk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM3OC8xOTJFRkYwODVE Q0IxMUVBODRFMDI5NDNDNEY5QUUwMi9oSXA1cTFCQjV4em1JbEMxZjhIZzlVbDR5 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJcDVxMUJCNXh6bUlsQzFmOEhnOVVsNHlUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM3OC8xOTJFRkYwODVEQ0IxMUVBODRFMDI5NDNDNEY5QUUwMi9oSXA1cTFCQjV4 em1JbEMxZjhIZzlVbDR5VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeqgl8nXMuBdISPoDTiWmGaoNaMhMZ7Qer+IqZE4oz0o11W5aV71hI KRZRwsJ8yO3xqGG1JfPBI8LkgjDDj/ga3cBpPdfjri5umEiJmkwS7NN5srzH2HYY 9dvs9ABowWOD8BGO6LG5zscxCu0APG49KqbFLrk0Wj/bw5GmtglG+LlMY9flwnfH g/p6LBFPXXUfiOr8ojbcSXcwD8mBnnFWnXHxlbDXOmNvxnhXBR3w9z4AsvdLTWaW 4dJfgsFFWtxDMakFXzHx8fQF2UWthRO5Hbn2IcAmhjovB2lFr9I35rew0rUOd7Tq Sib6VSi1nVIyTdQoFt2ro+Dn4qrJF795 -----END CERTIFICATE-----Generated at Mon Dec 22 12:55:40 2025 by rpki-client