This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json) Hash identifier: 4RwRovHZIBXkpg4P2LMEbTNgU24baBVvsIIcOBiJr8U= Subject key identifier: E4:16:CB:8C:08:87:FB:3D:71:78:86:C7:B1:20:7B:4C:94:C3:32:EE Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0F17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft Manifest number: 0EF5 Signing time: Thu 18 Dec 2025 17:26:33 +0000 Manifest this update: Thu 18 Dec 2025 17:26:33 +0000 Manifest next update: Thu 25 Dec 2025 17:26:33 +0000 Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: 2Q2cTUiNxf+nxr1mi2guhSTNcjeYnL49fvQ3Gd6H4LI=) 2: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: nERwHYLrCQbTGbVdhkuVu4DLbRWJapvf+ehHeDcqXoI=) 3: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: 2l3pLCgtvIHc/+HLPDdULsr+5gl+RLvHUNSD8p67gig=) 4: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: 5Mh91OkrfeMvxN8zUlmhEA/cU28vfWanQEE4gEKGkZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3863 (0xf17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: Dec 18 17:26:33 2025 GMT Not After : Dec 25 17:26:33 2025 GMT Subject: CN=69443949-6ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:39:e2:c2:20:cd:f7:95:ae:e8:0a:2a:67:f6: f8:77:17:b6:9e:7c:92:c8:89:98:20:82:78:52:e8: 73:2a:35:d5:51:27:ec:9d:ed:71:65:c4:80:1a:c1: 51:9c:c9:8b:c4:aa:93:a2:81:60:c5:a4:3c:9b:8f: 9e:68:05:64:ef:e3:08:03:ab:f6:44:0d:ee:3c:ca: 20:55:08:30:1f:37:39:df:f0:ad:16:f7:f8:ad:cf: 2a:94:09:8b:14:e0:cc:de:aa:81:0c:cd:6f:18:a1: 3e:a9:46:7f:4b:83:81:7c:01:73:fa:cf:08:52:60: de:ec:0d:8d:de:1c:ae:13:e9:38:85:de:16:98:8c: fa:dd:18:6c:7d:be:c1:9f:9c:e8:3b:35:ee:fb:c5: 4f:fc:85:e9:d3:89:ad:0d:f4:64:31:b8:db:7c:77: 5f:99:64:8e:d1:60:f4:69:07:ce:04:b2:af:e7:8f: ce:63:40:0b:67:31:fc:2c:1d:a7:15:f3:a7:38:99: 71:f1:6f:c5:29:25:e0:be:af:4a:f2:1d:ba:e2:ab: 65:00:2a:54:9b:fa:69:91:ba:a4:c1:dd:e3:cb:40: 68:01:97:5a:fb:c3:e0:2b:57:80:af:fc:17:dd:a9: bc:2b:e7:c9:a0:db:1e:a8:34:be:d1:49:19:ec:df: 22:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:16:CB:8C:08:87:FB:3D:71:78:86:C7:B1:20:7B:4C:94:C3:32:EE X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:b0:57:99:4e:7d:36:6f:ce:36:7a:9f:ab:df:25:b1:c2:ee: 7a:92:d9:3a:0e:75:e7:f8:ce:e0:1a:b9:db:e8:75:51:64:bf: 95:6c:65:9d:f5:1a:08:ca:e4:33:5b:0d:03:7b:ef:e7:81:5f: 16:ec:55:02:90:73:02:49:2b:8c:c9:55:7a:88:dd:ba:17:3c: d1:00:fb:03:97:05:b3:25:01:be:6d:5d:e6:93:f4:83:29:43: 81:66:a4:9e:49:f2:7c:48:e4:07:1e:e6:7f:e4:eb:f1:20:4e: 4c:96:d6:56:f6:33:51:80:93:76:d8:c5:c4:97:ee:10:fb:2a: 96:73:71:4c:fc:b4:fd:36:b3:48:e5:68:b9:d5:fb:7e:e1:cc: 62:51:3b:8e:bb:84:02:08:2f:69:d4:87:bd:95:82:aa:83:ad: 74:fd:53:a4:66:90:9b:fe:e0:93:71:6c:db:af:63:33:a8:a9: bc:0f:ab:54:eb:36:af:ed:30:be:c5:13:cc:3b:48:d8:14:be: 8d:6a:18:e3:da:6f:a2:11:c9:cb:e5:1c:ae:68:b8:66:da:7d: 9b:f9:dd:24:5f:41:05:65:3b:3d:39:17:7d:5e:4a:ba:70:e9: 40:36:3e:8f:f6:3e:df:73:2d:f1:ad:a1:f7:4c:39:5c:ab:90: 42:a0:3d:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjUxMjE4MTcyNjMzWhcNMjUxMjI1MTcyNjMzWjAYMRYwFAYD VQQDDA02OTQ0Mzk0OS02YWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjniwiDN95Wu6AoqZ/b4dxe2nnySyImYIIJ4UuhzKjXVUSfsne1xZcSAGsFR nMmLxKqTooFgxaQ8m4+eaAVk7+MIA6v2RA3uPMogVQgwHzc53/CtFvf4rc8qlAmL FODM3qqBDM1vGKE+qUZ/S4OBfAFz+s8IUmDe7A2N3hyuE+k4hd4WmIz63Rhsfb7B n5zoOzXu+8VP/IXp04mtDfRkMbjbfHdfmWSO0WD0aQfOBLKv54/OY0ALZzH8LB2n FfOnOJlx8W/FKSXgvq9K8h264qtlACpUm/ppkbqkwd3jy0BoAZda+8PgK1eAr/wX 3am8K+fJoNseqDS+0UkZ7N8iaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQWy4wI h/s9cXiGx7Ege0yUwzLuMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWsFeZTn02b842ep+r3yWxwu56ktk6DnXn+M7gGrnb6HVRZL+VbGWd 9RoIyuQzWw0De+/ngV8W7FUCkHMCSSuMyVV6iN26FzzRAPsDlwWzJQG+bV3mk/SD KUOBZqSeSfJ8SOQHHuZ/5OvxIE5MltZW9jNRgJN22MXEl+4Q+yqWc3FM/LT9NrNI 5Wi51ft+4cxiUTuOu4QCCC9p1Ie9lYKqg610/VOkZpCb/uCTcWzbr2MzqKm8D6tU 6zav7TC+xRPMO0jYFL6Nahjj2m+iEcnL5RyuaLhm2n2b+d0kX0EFZTs9ORd9Xkq6 cOlANj6P9j7fcy3xraH3TDlcq5BCoD0R -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:08 2025 by rpki-client