This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft File: hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft (raw, json) Hash identifier: 7j7NhMhhsBjMn4zgZaI8DRV7xeOVybEVCLNTKYpcmEo= Subject key identifier: 13:25:4F:96:D5:23:62:19:C4:71:5F:89:90:E7:E3:11:43:A5:BE:B6 Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D Certificate issuer: /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft Manifest number: 018C Signing time: Tue 23 Dec 2025 02:36:21 +0000 Manifest this update: Tue 23 Dec 2025 02:36:20 +0000 Manifest next update: Tue 30 Dec 2025 02:36:20 +0000 Files and hashes: 1: hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl (hash: L4TE0mjFAqI1DGT05DygdKuLfJEsHYdheqI5zTdR57s=) 2: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (hash: eDj76E11Nc1+IGlyzMBJDLm0PsvVUG2jJEzd62VT4NI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198767, serialNumber=8468B02197FC9B770AF840557BF415A0B613820D Validity Not Before: Dec 23 02:36:20 2025 GMT Not After : Dec 30 02:36:20 2025 GMT Subject: CN=694a0025-06c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:ec:25:c3:ab:da:38:ef:c2:20:e1:97:2b: f1:bd:dd:0b:3f:c6:76:fd:b7:02:eb:20:75:51:86: c2:d1:79:57:c6:92:40:d1:54:3c:63:11:66:94:35: 03:99:f1:cd:09:e7:55:ad:b7:07:f5:61:7f:69:1b: fa:b4:3b:71:83:64:56:43:1f:9c:87:52:b7:fd:fc: f1:a2:0c:d2:d3:5e:73:a9:49:4d:54:6b:c8:9a:a5: 77:b6:f7:00:00:08:b3:9f:3b:a6:79:e0:8e:6c:66: 50:55:9e:79:83:34:d8:4a:66:13:6f:f4:43:1c:e8: 40:29:76:86:e7:6f:e8:7b:cf:65:92:d8:00:aa:73: 90:6b:45:bf:07:46:93:3f:09:d2:d6:50:01:4b:cc: 37:19:0d:bc:a7:14:9f:04:b7:7c:e3:9e:1c:f5:5d: c2:79:6f:ce:80:cd:bc:2b:e9:61:f0:f9:33:0a:61: 7c:fe:f9:40:34:81:8a:92:cc:81:8e:25:6a:74:ee: 5e:96:2e:30:d8:4a:1b:69:84:73:55:4b:bd:1b:2d: a4:15:d7:11:c8:af:bd:f6:bc:86:86:79:c8:38:36: 4a:ee:1d:43:41:8b:37:5f:db:55:f7:e5:f5:b2:99: 6d:53:82:95:37:4b:50:20:5c:ab:62:22:86:a2:70: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:25:4F:96:D5:23:62:19:C4:71:5F:89:90:E7:E3:11:43:A5:BE:B6 X509v3 Authority Key Identifier: keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ec:fd:47:98:7f:43:23:6c:7e:d8:d3:7f:7a:82:1f:73:24: fe:61:de:f5:25:f5:9d:d4:13:ff:4b:0a:2a:27:a4:6c:e4:28: 6f:c3:8a:6d:49:60:7e:a5:73:28:1c:88:a1:de:c6:e0:03:60: eb:30:d7:21:2f:d7:52:21:e0:d0:e6:6b:a6:bf:5d:e0:38:95: 82:10:a7:72:a7:eb:4b:4f:5a:72:60:bd:73:1d:fb:4b:94:9e: c6:92:c5:b3:d5:02:30:59:0e:29:7e:af:da:07:28:c7:2c:43: 79:4f:7a:e5:11:89:8d:8b:9b:90:4d:4a:bc:94:21:d0:07:32: f2:80:68:5d:f8:40:12:d1:54:6b:60:04:e1:83:48:fd:74:04: d0:d7:2b:73:f5:05:d2:52:52:b0:00:c9:e4:45:8a:e3:84:cd: ea:5a:55:1f:0d:a0:f8:ff:f0:b8:25:d3:16:ed:f1:ab:5e:54: 47:aa:59:09:29:e4:25:da:b8:e5:42:64:0d:21:f9:be:2a:e1: e6:e9:e5:98:28:6a:b9:4f:d4:2b:31:b6:a4:05:5a:d9:df:20: fe:e5:da:6c:6b:8f:b5:2b:dd:c1:63:66:95:08:a4:43:30:df: 96:83:52:76:8e:de:fa:40:0b:79:20:85:a5:28:d0:7c:e3:e4: 43:68:88:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3NjcxMTAvBgNVBAUTKDg0NjhCMDIxOTdGQzlCNzcwQUY4NDA1NTdCRjQxNUEw QjYxMzgyMEQwHhcNMjUxMjIzMDIzNjIwWhcNMjUxMjMwMDIzNjIwWjAYMRYwFAYD VQQDDA02OTRhMDAyNS0wNmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVTsJcOr2jjvwiDhlyvxvd0LP8Z2/bcC6yB1UYbC0XlXxpJA0VQ8YxFmlDUD mfHNCedVrbcH9WF/aRv6tDtxg2RWQx+ch1K3/fzxogzS015zqUlNVGvImqV3tvcA AAiznzumeeCObGZQVZ55gzTYSmYTb/RDHOhAKXaG52/oe89lktgAqnOQa0W/B0aT PwnS1lABS8w3GQ28pxSfBLd8454c9V3CeW/OgM28K+lh8PkzCmF8/vlANIGKksyB jiVqdO5eli4w2EobaYRzVUu9Gy2kFdcRyK+99ryGhnnIODZK7h1DQYs3X9tV9+X1 spltU4KVN0tQIFyrYiKGonD+/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMlT5bV I2IZxHFfiZDn4xFDpb62MB8GA1UdIwQYMBaAFIRosCGX/Jt3CvhAVXv0FaC2E4IN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc2Ny83QkM2MUQ4Mjg4 NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0zY0stRUJWZV9RVm9MWVRn ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHaXdJWmY4bTNjSy1FQlZlX1FWb0xZVGdnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODc2Ny83QkM2MUQ4Mjg4NEIxMUVFODE3RkI2N0ZDNEY5QUUwMi9oR2l3SVpmOG0z Y0stRUJWZV9RVm9MWVRnZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs7P1HmH9DI2x+2NN/eoIfcyT+Yd71JfWd1BP/SwoqJ6Rs5Chvw4pt SWB+pXMoHIih3sbgA2DrMNchL9dSIeDQ5mumv13gOJWCEKdyp+tLT1pyYL1zHftL lJ7GksWz1QIwWQ4pfq/aByjHLEN5T3rlEYmNi5uQTUq8lCHQBzLygGhd+EAS0VRr YAThg0j9dATQ1ytz9QXSUlKwAMnkRYrjhM3qWlUfDaD4//C4JdMW7fGrXlRHqlkJ KeQl2rjlQmQNIfm+KuHm6eWYKGq5T9QrMbakBVrZ3yD+5dpsa4+1K93BY2aVCKRD MN+Wg1J2jt76QAt5IIWlKNB84+RDaIiP -----END CERTIFICATE-----Generated at Wed Dec 24 16:00:38 2025 by rpki-client