This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft File: hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft (raw, json) Hash identifier: bTPk4KThovChIw3H6WwyJh5h7MufCABOScB29MJmRVo= Subject key identifier: DD:0E:01:08:9A:59:00:8D:CD:1A:49:ED:C8:26:9B:61:AB:F8:B1:47 Authority key identifier: 85:5E:11:FA:51:BC:26:10:82:C3:DF:B5:5A:86:D5:D8:27:3F:39:D1 Certificate issuer: /CN=A9191136/serialNumber=855E11FA51BC261082C3DFB55A86D5D8273F39D1 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hV4R-lG8JhCCw9-1WobV2Cc_OdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft Manifest number: 2E Signing time: Tue 23 Dec 2025 06:27:52 +0000 Manifest this update: Tue 23 Dec 2025 06:27:52 +0000 Manifest next update: Tue 30 Dec 2025 06:27:52 +0000 Files and hashes: 1: hV4R-lG8JhCCw9-1WobV2Cc_OdE.crl (hash: OOfNrR1eFFA/YyYkLvOZIe7YIzOthvwpP6YiLVXYHNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.crl rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hV4R-lG8JhCCw9-1WobV2Cc_OdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191136, serialNumber=855E11FA51BC261082C3DFB55A86D5D8273F39D1 Validity Not Before: Dec 23 06:27:52 2025 GMT Not After : Dec 30 06:27:52 2025 GMT Subject: CN=694a3668-dd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:68:4e:7a:6e:cc:d8:6b:5d:bf:56:47:da: 75:e2:b5:e4:b2:81:1b:b1:91:09:a4:07:71:88:68: f2:03:40:5c:04:de:b5:3a:b6:e4:17:fa:22:0d:05: 7b:03:eb:2b:03:3e:6e:58:45:c8:67:c5:b1:a8:36: 4b:6f:2e:48:75:06:2f:67:e5:6b:a9:26:40:ce:75: 1d:6c:78:84:06:5c:b7:db:b7:d7:93:02:ce:45:87: 3c:fc:bc:3d:80:05:51:f4:70:d6:c9:42:5e:89:be: e4:b0:06:9b:e0:7f:34:f0:6b:1d:34:e7:61:b2:77: 8d:8a:57:4a:ab:7b:3c:cf:4f:ed:db:43:bf:e8:dd: 86:06:14:39:0e:80:22:ca:91:e3:35:24:5c:8e:32: 1c:80:94:71:18:a0:83:eb:d9:b5:a3:52:8b:36:79: 30:0f:8c:e1:c9:88:21:f4:85:8e:a5:1c:0f:c2:82: 1e:0e:66:b4:a8:15:68:d3:39:e0:54:68:76:bf:59: b6:ae:f9:0f:37:66:10:04:a1:22:40:ca:92:a3:a1: 08:74:4e:21:34:a5:67:7a:42:54:01:be:7f:24:56: 08:9d:7d:cd:55:e9:21:ff:54:dc:a6:ee:68:81:34: ef:38:dc:2e:e4:2b:4f:9e:d9:fd:fb:4c:e0:49:b6: 35:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0E:01:08:9A:59:00:8D:CD:1A:49:ED:C8:26:9B:61:AB:F8:B1:47 X509v3 Authority Key Identifier: keyid:85:5E:11:FA:51:BC:26:10:82:C3:DF:B5:5A:86:D5:D8:27:3F:39:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hV4R-lG8JhCCw9-1WobV2Cc_OdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:d8:34:52:e3:92:72:e8:29:e3:23:0e:78:61:93:bb:50:c7: 5e:48:35:dc:01:d0:6a:b5:a8:c2:e0:c4:87:5d:51:d2:da:cc: 05:ef:ef:2c:f8:05:99:56:b4:45:b2:cb:bb:e7:8e:f6:cd:9c: d5:13:ef:e8:ac:1a:16:e0:fd:be:5d:e9:62:91:03:34:3e:16: 05:5f:3f:5a:76:03:cb:5e:27:b0:7c:20:ca:2c:3a:b2:a4:6a: b6:09:36:7a:5a:63:51:f6:82:db:8e:b4:48:cb:9b:d0:27:9a: 3e:3c:df:c4:ca:e5:3c:3a:2b:d9:8e:b5:63:62:98:d8:00:21: 6d:d9:dc:2e:7c:55:d7:ea:71:74:b5:d0:70:ea:b2:b5:a6:99: 78:0f:f1:b9:d1:d5:3d:8e:b6:e3:20:b0:21:1e:fb:10:7a:4a: a0:52:f4:e8:47:77:34:cd:96:c4:d8:5b:34:d4:34:c3:bb:98: be:cb:0a:97:c7:fd:89:4f:a8:fe:fd:d5:90:bb:86:97:aa:67: 9f:3d:9f:c5:57:64:49:b4:df:4b:ff:b2:70:ae:af:7e:5b:13: 56:b0:f1:ff:cd:3c:ec:a7:5e:0e:88:a7:2b:8e:0e:27:df:08: 15:b3:45:37:51:34:34:a8:80:45:fe:a4:cc:28:1c:57:ad:c9: 05:00:54:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTEzNjExMC8GA1UEBRMoODU1RTExRkE1MUJDMjYxMDgyQzNERkI1NUE4NkQ1RDgy NzNGMzlEMTAeFw0yNTEyMjMwNjI3NTJaFw0yNTEyMzAwNjI3NTJaMBgxFjAUBgNV BAMMDTY5NGEzNjY4LWRkMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBwWhOem7M2Gtdv1ZH2nXiteSygRuxkQmkB3GIaPIDQFwE3rU6tuQX+iINBXsD 6ysDPm5YRchnxbGoNktvLkh1Bi9n5WupJkDOdR1seIQGXLfbt9eTAs5Fhzz8vD2A BVH0cNbJQl6JvuSwBpvgfzTwax0052Gyd42KV0qrezzPT+3bQ7/o3YYGFDkOgCLK keM1JFyOMhyAlHEYoIPr2bWjUos2eTAPjOHJiCH0hY6lHA/Cgh4OZrSoFWjTOeBU aHa/Wbau+Q83ZhAEoSJAypKjoQh0TiE0pWd6QlQBvn8kVgidfc1V6SH/VNym7miB NO843C7kK0+e2f37TOBJtjX9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3Q4BCJpZ AI3NGkntyCabYav4sUcwHwYDVR0jBBgwFoAUhV4R+lG8JhCCw9+1WobV2Cc/OdEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMTM2LzBDOTYwNzg0OUFB OTExRjA5NUFBMDQ4MEM0RjlBRTAyL2hWNFItbEc4SmhDQ3c5LTFXb2JWMkNjX09k RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFY0Ui1sRzhKaENDdzktMVdvYlYyQ2NfT2RFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx MTM2LzBDOTYwNzg0OUFBOTExRjA5NUFBMDQ4MEM0RjlBRTAyL2hWNFItbEc4SmhD Q3c5LTFXb2JWMkNjX09kRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN7YNFLjknLoKeMjDnhhk7tQx15INdwB0Gq1qMLgxIddUdLazAXv7yz4 BZlWtEWyy7vnjvbNnNUT7+isGhbg/b5d6WKRAzQ+FgVfP1p2A8teJ7B8IMosOrKk arYJNnpaY1H2gtuOtEjLm9Anmj4838TK5Tw6K9mOtWNimNgAIW3Z3C58VdfqcXS1 0HDqsrWmmXgP8bnR1T2OtuMgsCEe+xB6SqBS9OhHdzTNlsTYWzTUNMO7mL7LCpfH /YlPqP791ZC7hpeqZ589n8VXZEm030v/snCur35bE1aw8f/NPOynXg6IpyuODiff CBWzRTdRNDSogEX+pMwoHFetyQUAVEc= -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:43 2025 by rpki-client