This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json) Hash identifier: ijM4nVqf2+THEh6ovPb4PiHTgCW3ZFSKfu7brd4auRY= Subject key identifier: 2B:30:23:8D:50:D8:B0:27:E9:75:B6:3B:01:93:FC:22:93:2B:1D:BF Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft Manifest number: B3 Signing time: Tue 23 Dec 2025 04:58:46 +0000 Manifest this update: Tue 23 Dec 2025 04:58:45 +0000 Manifest next update: Tue 30 Dec 2025 04:58:45 +0000 Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: yjY0DJtoFHYyQB9nNsyjse5vEj5XmWFBFkcPKD2JOzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Validity Not Before: Dec 23 04:58:45 2025 GMT Not After : Dec 30 04:58:45 2025 GMT Subject: CN=694a2185-ebbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2f:98:72:3f:a3:fd:ee:37:9a:11:20:21:65: f6:80:e4:9c:e8:d2:37:07:7f:39:0c:a5:10:60:02: 0a:00:21:eb:f3:70:c6:5b:c6:16:01:e3:95:36:3e: 92:e3:c2:1c:4d:f2:99:4d:ca:34:ea:6a:97:4a:09: 86:ad:30:eb:20:19:4f:cf:69:e3:3a:41:52:a4:8b: 37:e6:b8:09:ec:29:2f:f8:b1:d6:81:c7:85:71:48: 9c:48:ee:e1:75:ec:8a:15:54:88:45:39:42:5f:04: f4:42:14:a7:f6:1a:5d:f7:0f:34:ec:97:c7:a6:ec: 40:c7:6b:17:46:9f:0d:7b:91:9d:6d:79:9c:8a:20: 61:b7:5b:b9:07:c9:4a:98:c7:ad:cd:ec:4c:4a:a6: 3b:75:b6:c1:33:90:33:04:20:c9:10:d2:3c:ad:f1: 02:3f:7f:b0:23:15:fc:56:08:8d:0e:ce:8c:05:26: 0a:c5:63:4e:41:16:8a:69:53:21:1a:a7:61:d4:64: cf:c0:d0:e2:3c:d4:68:83:7e:45:77:0f:6f:8f:bf: 7c:a2:de:af:7f:ed:12:2c:2b:88:38:bc:76:64:d0: 09:7c:cc:05:a6:29:32:d4:0e:22:c9:a8:87:15:a1: ca:ed:b3:8c:d6:a7:e8:25:41:2a:7c:61:6b:31:df: d8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:30:23:8D:50:D8:B0:27:E9:75:B6:3B:01:93:FC:22:93:2B:1D:BF X509v3 Authority Key Identifier: keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b0:2d:71:ea:13:5b:45:72:de:45:43:b3:2f:88:c7:26:66: e8:1f:de:ba:2e:40:7f:e7:fe:26:bd:cc:02:58:ab:cf:0a:ee: d9:f7:ca:7d:ae:99:db:ec:0c:f3:46:a9:16:94:72:bc:29:10: 4f:23:29:c2:14:99:e5:a8:7c:a9:45:5e:ab:c2:8e:61:0a:45: 72:41:bb:5c:3d:16:8e:ef:01:b9:51:e9:64:f9:3c:07:f7:e8: 0c:ed:4e:cf:8f:63:60:d2:17:10:50:a2:47:43:21:b1:e4:10: cf:6d:bc:69:7b:d6:5e:da:0a:a1:ad:7b:fb:31:0d:10:e2:9a: 9b:0e:fb:f8:fb:0c:80:14:3a:35:a4:44:b2:fe:0a:a6:fa:41: 87:78:0f:55:95:48:5f:74:ce:88:b8:6e:18:2e:5c:9f:20:1e: e5:1d:9b:58:b0:05:ca:f1:80:1a:99:2c:06:2f:85:c8:05:b9: c0:e0:4e:11:f8:a6:e4:1f:56:a2:5e:02:49:47:02:33:68:0c: 63:80:cd:a0:dc:75:48:d8:74:a2:6b:20:36:08:3d:50:f2:ba: cd:77:02:39:79:2a:9b:7f:ce:98:93:51:6b:d5:40:74:0b:f7: 3a:58:c2:c3:2d:e0:fc:d7:92:eb:30:d9:a5:ac:c9:73:ff:18: 73:8b:01:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEQ0ExMTAvBgNVBAUTKDg1QzU2NzI1OTEwM0Q5RTIyOTJFNjREQkZCNzlGRDM5 QjI1NkZERTQwHhcNMjUxMjIzMDQ1ODQ1WhcNMjUxMjMwMDQ1ODQ1WjAYMRYwFAYD VQQDDA02OTRhMjE4NS1lYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhi+Ycj+j/e43mhEgIWX2gOSc6NI3B385DKUQYAIKACHr83DGW8YWAeOVNj6S 48IcTfKZTco06mqXSgmGrTDrIBlPz2njOkFSpIs35rgJ7Ckv+LHWgceFcUicSO7h deyKFVSIRTlCXwT0QhSn9hpd9w807JfHpuxAx2sXRp8Ne5GdbXmciiBht1u5B8lK mMetzexMSqY7dbbBM5AzBCDJENI8rfECP3+wIxX8VgiNDs6MBSYKxWNOQRaKaVMh Gqdh1GTPwNDiPNRog35Fdw9vj798ot6vf+0SLCuIOLx2ZNAJfMwFpiky1A4iyaiH FaHK7bOM1qfoJUEqfGFrMd/YuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCswI41Q 2LAn6XW2OwGT/CKTKx2/MB8GA1UdIwQYMBaAFIXFZyWRA9niKS5k2/t5/TmyVv3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81ODNGRkM5NENC MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJlSXBMbVRiLTNuOU9iSldf ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRDQS81ODNGRkM5NENCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJl SXBMbVRiLTNuOU9iSldfZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAsC1x6hNbRXLeRUOzL4jHJmboH966LkB/5/4mvcwCWKvPCu7Z98p9 rpnb7AzzRqkWlHK8KRBPIynCFJnlqHypRV6rwo5hCkVyQbtcPRaO7wG5Uelk+TwH 9+gM7U7Pj2Ng0hcQUKJHQyGx5BDPbbxpe9Ze2gqhrXv7MQ0Q4pqbDvv4+wyAFDo1 pESy/gqm+kGHeA9VlUhfdM6IuG4YLlyfIB7lHZtYsAXK8YAamSwGL4XIBbnA4E4R +KbkH1aiXgJJRwIzaAxjgM2g3HVI2HSiayA2CD1Q8rrNdwI5eSqbf86Yk1Fr1UB0 C/c6WMLDLeD815LrMNmlrMlz/xhziwH5 -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:34 2025 by rpki-client