This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: AXFoTk3vfJ+xx/zgs53oVpjPVDMGDmxHGosxCUNfM2k= Subject key identifier: EE:00:24:B9:22:CB:86:A0:C2:EE:89:FE:4C:82:B0:09:A8:2A:F5:83 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 015A Signing time: Tue 23 Dec 2025 03:20:38 +0000 Manifest this update: Tue 23 Dec 2025 03:20:37 +0000 Manifest next update: Tue 30 Dec 2025 03:20:37 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: YQ81sSkokzbjWUDcp5nYH+WFGQKETrAAZG1T3VEYACc=) 2: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Zgo+bSd3ddxUsWa4WgDo/fUl+UPnYadDGveXRl2dsm4=) 3: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 1JT4JL5zieWvYxgXcbCI6LK5Unc1DnkiTfLB/8ABEcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Dec 23 03:20:37 2025 GMT Not After : Dec 30 03:20:37 2025 GMT Subject: CN=694a0a86-e9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:3e:c6:85:7a:81:22:73:7a:3b:f3:b9:69: 41:84:28:7f:ed:c3:22:0d:2d:46:8c:42:66:a8:04: 34:69:c8:e0:91:98:10:a9:dd:05:03:14:63:3d:f6: 25:af:06:fa:83:dc:bb:6e:64:96:a8:d3:bb:a3:e8: 55:8e:d0:01:82:11:00:47:10:89:75:be:04:25:c5: 99:ca:b7:12:3d:e6:06:25:f9:68:36:58:4c:e7:0f: e8:b9:98:1d:d4:05:42:71:a5:be:ac:bf:37:ac:22: 84:eb:8c:27:70:6e:f1:e2:8c:6e:08:0e:2a:c2:f3: 1a:04:c1:4d:dd:b9:9f:29:c1:16:eb:00:1f:91:f5: ed:96:01:44:6c:76:2e:e0:98:49:cb:44:87:62:1b: ba:96:a0:74:18:2a:49:b8:da:15:0a:67:39:ad:a2: cb:da:d2:4b:37:00:22:ec:24:5d:16:88:b4:1b:ee: 5b:cb:cf:38:35:f5:ca:9d:18:2f:98:30:e1:9f:b3: 72:fe:fe:ab:7d:ba:4e:6d:37:48:f2:ea:97:03:15: 65:70:2c:68:0a:4b:e9:50:c2:11:ab:59:ec:44:db: a9:40:bb:c3:66:86:fb:1d:6e:4a:d9:b9:64:b6:57: 9f:55:d4:70:ed:d6:f1:37:88:c5:ea:6b:11:18:90: 11:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:00:24:B9:22:CB:86:A0:C2:EE:89:FE:4C:82:B0:09:A8:2A:F5:83 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e9:86:12:36:2b:b3:55:64:b6:57:69:e2:9a:84:e0:d1:56: 26:7c:7d:06:68:80:95:48:6d:90:38:c1:6f:ad:83:82:6a:71: 21:d8:ef:5e:da:81:01:07:19:a8:9b:02:ec:9c:1c:45:ed:3c: 78:8a:47:74:cf:57:47:39:05:72:bf:02:34:90:38:81:4c:bf: 82:93:e6:0a:57:31:b3:ea:a7:7b:4e:61:81:ec:b9:39:c8:cb: 91:d9:3a:e0:fb:0f:d0:c7:cf:8d:36:76:7d:0e:8c:49:8c:53: d0:5b:0e:2d:c5:21:23:11:c2:67:c7:92:b6:d4:94:08:89:8a: 54:da:2c:92:d0:83:f8:5c:c3:a2:52:65:92:43:45:95:47:68: 61:17:32:f9:64:1a:58:0a:ea:b0:45:53:f5:a1:03:2d:c7:02: 52:dc:6c:96:69:4b:0a:a7:ea:29:29:73:1b:37:c7:67:5d:27: 43:22:b4:ba:70:1f:00:21:35:3e:7f:62:b8:26:81:07:b3:ae: 47:ab:d6:1a:ff:e1:6e:78:dc:0b:3b:0c:d4:58:ce:4a:c3:a8: d8:c2:a6:e6:76:a3:89:d9:4f:a1:d1:24:e6:21:ed:0c:60:5c: fd:0b:d9:cf:3e:12:b5:67:19:0f:a7:f6:e8:c7:5f:10:f6:dc: 95:30:42:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjUxMjIzMDMyMDM3WhcNMjUxMjMwMDMyMDM3WjAYMRYwFAYD VQQDDA02OTRhMGE4Ni1lOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzk+xoV6gSJzejvzuWlBhCh/7cMiDS1GjEJmqAQ0acjgkZgQqd0FAxRjPfYl rwb6g9y7bmSWqNO7o+hVjtABghEARxCJdb4EJcWZyrcSPeYGJfloNlhM5w/ouZgd 1AVCcaW+rL83rCKE64wncG7x4oxuCA4qwvMaBMFN3bmfKcEW6wAfkfXtlgFEbHYu 4JhJy0SHYhu6lqB0GCpJuNoVCmc5raLL2tJLNwAi7CRdFoi0G+5by884NfXKnRgv mDDhn7Ny/v6rfbpObTdI8uqXAxVlcCxoCkvpUMIRq1nsRNupQLvDZob7HW5K2blk tlefVdRw7dbxN4jF6msRGJAR7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4AJLki y4agwu6J/kyCsAmoKvWDMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi6YYSNiuzVWS2V2nimoTg0VYmfH0GaICVSG2QOMFvrYOCanEh2O9e 2oEBBxmomwLsnBxF7Tx4ikd0z1dHOQVyvwI0kDiBTL+Ck+YKVzGz6qd7TmGB7Lk5 yMuR2Trg+w/Qx8+NNnZ9DoxJjFPQWw4txSEjEcJnx5K21JQIiYpU2iyS0IP4XMOi UmWSQ0WVR2hhFzL5ZBpYCuqwRVP1oQMtxwJS3GyWaUsKp+opKXMbN8dnXSdDIrS6 cB8AITU+f2K4JoEHs65Hq9Ya/+FueNwLOwzUWM5Kw6jYwqbmdqOJ2U+h0STmIe0M YFz9C9nPPhK1ZxkPp/box18Q9tyVMEJu -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:15 2025 by rpki-client