This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json) Hash identifier: 4oXzDUaxD+c8qTYmnhu9w4xea0eF+fwpnPSlsnOjWDU= Subject key identifier: 06:C6:8C:06:40:C8:EB:DD:6F:29:94:81:0B:24:EA:76:0B:E0:62:80 Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft Manifest number: 01F4 Signing time: Tue 23 Dec 2025 01:42:00 +0000 Manifest this update: Tue 23 Dec 2025 01:41:59 +0000 Manifest next update: Tue 30 Dec 2025 01:41:59 +0000 Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: KhroK04MGJlYvpRN5SnvdIWH22YPZwoSUXgtsqg7lso=) 2: 3681B720B2D611EF9B481340C4F9AE02.roa (hash: Aaq+TCQ/KTzVoqOiGqBuyk59qeKatX9nZx11XR64nYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Validity Not Before: Dec 23 01:41:59 2025 GMT Not After : Dec 30 01:41:59 2025 GMT Subject: CN=6949f368-c542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:8e:77:bb:2c:7e:1b:c7:e9:7b:f8:24:b2: 44:c9:13:20:41:e4:f5:68:05:b4:c5:ae:2e:c8:43: 54:5a:38:d5:31:2e:47:27:9d:45:5f:a7:08:56:6f: 9f:a5:22:ec:e2:49:df:98:3a:d3:95:5c:e0:9d:2b: 29:bc:e5:e7:cc:36:fc:d6:aa:65:78:96:84:a4:98: 9b:bf:07:b8:24:8c:3d:0e:b2:c6:df:2b:5c:af:4d: b6:4d:71:22:61:3b:d9:a5:d7:9c:b8:ff:c1:0f:f6: a6:d8:09:24:62:91:2c:08:21:70:ed:fe:a3:3a:c0: 76:14:dc:d1:1b:82:26:33:39:0a:85:69:8c:01:b8: 96:55:f3:6e:75:ad:e9:28:c5:b9:c2:81:57:17:7c: 40:39:20:e9:17:f2:72:ba:55:ba:50:26:db:cb:b0: b4:43:d7:29:af:77:b3:2e:c8:2f:42:8c:bf:96:cb: 0c:76:45:37:7b:88:ab:d4:60:dc:a1:06:a0:88:a6: d2:73:9a:0d:e9:bc:61:83:c1:a2:ae:30:d1:09:14: 65:c6:74:93:b0:db:b4:d9:c0:f6:ca:03:e7:bb:5f: c0:0d:4d:aa:d4:51:a0:88:f2:e6:54:0b:ad:63:4d: 9a:4a:1a:5d:c3:08:3d:ed:85:eb:74:6e:a6:f3:1b: ac:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C6:8C:06:40:C8:EB:DD:6F:29:94:81:0B:24:EA:76:0B:E0:62:80 X509v3 Authority Key Identifier: keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:7e:32:ca:51:04:c6:88:2d:4d:bd:d1:00:4b:0b:e5:5f:1d: eb:0d:7d:ff:7a:4f:75:53:9d:5d:c3:77:cf:fb:15:26:bd:39: e1:72:32:db:a4:58:41:dd:19:04:2c:36:0e:f5:6e:e1:f4:00: ac:c6:25:1a:74:c1:7f:04:f2:39:43:f0:f9:2f:e0:67:f5:0a: 41:a8:5b:35:d4:35:6e:8d:9a:9b:9e:f9:b7:9e:37:24:56:13: d5:ab:80:de:65:a8:79:7f:86:13:c5:65:ea:12:b9:92:40:84: 8d:6a:68:56:e7:ac:01:59:c6:e3:7b:30:b7:05:fc:c1:b7:16: 6c:9b:ee:76:cd:ec:75:dd:09:cd:89:18:06:c3:e6:ae:f1:30: 74:b1:8f:c0:05:46:1c:57:fe:be:b7:de:bc:c5:91:ff:f4:d3: 33:1e:1e:18:40:f3:f6:8f:9b:07:4c:c2:e8:8a:4e:95:40:e0: f0:93:cb:41:5c:2b:a6:6a:5e:10:f4:99:0b:e6:df:aa:f5:21: ef:f8:1e:69:37:e6:9b:e6:d8:dd:52:60:ba:27:e4:50:af:2f: 87:32:be:78:5b:8b:b8:8f:ef:33:bd:43:8c:42:78:02:88:88: 1b:fa:aa:da:51:40:93:08:f9:0b:ff:4b:a0:00:c7:08:b6:73: 79:3c:4f:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy REVGNEMyMzQwHhcNMjUxMjIzMDE0MTU5WhcNMjUxMjMwMDE0MTU5WjAYMRYwFAYD VQQDDA02OTQ5ZjM2OC1jNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2KOd7ssfhvH6Xv4JLJEyRMgQeT1aAW0xa4uyENUWjjVMS5HJ51FX6cIVm+f pSLs4knfmDrTlVzgnSspvOXnzDb81qpleJaEpJibvwe4JIw9DrLG3ytcr022TXEi YTvZpdecuP/BD/am2AkkYpEsCCFw7f6jOsB2FNzRG4ImMzkKhWmMAbiWVfNuda3p KMW5woFXF3xAOSDpF/JyulW6UCbby7C0Q9cpr3ezLsgvQoy/lssMdkU3e4ir1GDc oQagiKbSc5oN6bxhg8GirjDRCRRlxnSTsNu02cD2ygPnu1/ADU2q1FGgiPLmVAut Y02aShpdwwg97YXrdG6m8xusawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbGjAZA yOvdbymUgQsk6nYL4GKAMB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi dXowcGd0eHZ1Y0V0NzB3alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBfjLKUQTGiC1NvdEASwvlXx3rDX3/ek91U51dw3fP+xUmvTnhcjLb pFhB3RkELDYO9W7h9ACsxiUadMF/BPI5Q/D5L+Bn9QpBqFs11DVujZqbnvm3njck VhPVq4DeZah5f4YTxWXqErmSQISNamhW56wBWcbjezC3BfzBtxZsm+52zex13QnN iRgGw+au8TB0sY/ABUYcV/6+t968xZH/9NMzHh4YQPP2j5sHTMLoik6VQODwk8tB XCumal4Q9JkL5t+q9SHv+B5pN+ab5tjdUmC6J+RQry+HMr54W4u4j+8zvUOMQngC iIgb+qraUUCTCPkL/0ugAMcItnN5PE/t -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:21 2025 by rpki-client