This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: 9jOtSYJ+Lrp5SW/xilm67DCMChe7Yq9OqO3y+/fV0O0= Subject key identifier: 66:21:A5:61:95:A1:0D:E2:47:A6:DA:78:D7:13:CB:06:A1:4C:DE:29 Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: 0153 Signing time: Thu 01 Jan 2026 04:09:29 +0000 Manifest this update: Thu 01 Jan 2026 04:09:28 +0000 Manifest next update: Thu 08 Jan 2026 04:09:28 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: 6s/lPwwnzqk0EHQpB4sN6mXRi2J/v6Uo47awnrlnnyE=) 2: EEC42F86232311EFAF815012C4F9AE02.roa (hash: dmDX5d8Ee6EDnk/9c9IbholerFQLcJ0sPLUNE3zziAE=) 3: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: +l7KzNw3VW+RHOqRN7o7MYFbDiz9Uue5nL0WGR6JFyA=) 4: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: UX1cRz51Yc/EPgI7Avdxh/+oTCoX8i2QidlgdW8Epmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 04:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: Jan 1 04:09:28 2026 GMT Not After : Jan 8 04:09:28 2026 GMT Subject: CN=6955f379-e950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:82:6d:5a:33:ec:a0:59:bc:50:9a:da:f6: 7e:cc:fb:10:c8:f4:72:0f:5e:a0:24:86:9f:b0:ac: 6f:29:a6:e9:df:e5:f8:0a:5c:aa:42:ab:a8:1d:ec: a1:0a:f8:90:22:11:9c:19:9d:bc:e5:9e:bd:c8:33: 0e:b8:24:66:a2:02:22:7c:4c:8f:9f:22:e8:c1:7f: a8:47:be:51:51:49:51:1d:93:29:32:3e:00:9a:d8: d3:04:78:cf:ee:0b:18:5a:2c:16:91:b9:67:49:99: a1:2d:62:d1:97:85:30:bc:ec:81:68:86:d3:a6:33: 4d:30:3a:75:ff:80:6f:34:85:79:13:6b:d2:dc:35: 9e:b2:4a:91:8e:b8:59:d2:48:fc:a7:5b:91:5b:0a: 10:65:25:6d:aa:2d:e8:4e:a0:b0:c3:7b:c6:7d:2f: 20:44:a6:72:3f:fc:53:bb:e6:8a:e2:c4:5a:44:0d: ed:3f:b7:d9:1f:bd:26:a0:d6:cb:42:1b:7a:17:38: ec:5c:71:20:57:25:0c:bd:bc:fc:bc:d1:64:b7:10: fc:a4:94:31:48:aa:40:5c:99:9d:9b:6f:d8:c1:d0: 48:3f:2e:cd:4f:58:2c:f4:a7:31:81:94:b7:8c:96: 2b:38:67:00:0b:7e:72:43:a8:db:5e:9f:be:a3:d0: cb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:21:A5:61:95:A1:0D:E2:47:A6:DA:78:D7:13:CB:06:A1:4C:DE:29 X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:7e:7b:b0:fc:15:94:fe:7a:11:b7:c5:33:0d:c8:c4:00:49: a3:6b:88:9c:2d:a2:1e:6c:e6:5e:4b:9f:d7:ad:39:05:40:73: 6d:0a:86:a6:93:8f:3f:83:9e:12:09:72:1e:b2:28:4c:15:65: c9:72:46:4f:24:c5:4c:73:9e:07:60:04:08:ff:e0:e7:80:04: 7f:21:86:c4:f3:37:68:14:ad:fb:34:27:76:87:cb:81:2d:71: 21:e8:96:f7:eb:bd:c5:1f:75:11:23:e3:d1:7e:25:65:a9:e3: 4a:de:1e:ba:08:65:b4:9b:4c:26:4a:1f:1d:b0:23:e9:54:03: de:c0:04:08:59:80:b2:cd:56:a2:a7:0e:72:b9:bf:08:7c:01: 2a:3d:cb:61:fa:12:11:86:18:8c:e1:6e:c4:58:1b:34:36:b6: 08:95:1f:32:d4:1b:63:3d:87:a8:33:5b:b8:31:69:45:6c:c9: 82:43:58:f0:5f:28:82:bd:fd:25:75:13:d5:ed:4d:31:fe:02: 62:af:be:29:6f:a4:96:99:2b:95:de:60:be:18:6a:0f:66:a4: af:6a:5e:aa:39:e6:7b:eb:13:e4:d0:7e:f7:2d:67:f5:90:f6: 3b:cd:3a:e0:bb:9b:92:b7:11:da:8f:b3:23:d4:e2:4b:02:74: c3:0c:c7:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjYwMTAxMDQwOTI4WhcNMjYwMTA4MDQwOTI4WjAYMRYwFAYD VQQDDA02OTU1ZjM3OS1lOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8eCbVoz7KBZvFCa2vZ+zPsQyPRyD16gJIafsKxvKabp3+X4ClyqQquoHeyh CviQIhGcGZ285Z69yDMOuCRmogIifEyPnyLowX+oR75RUUlRHZMpMj4AmtjTBHjP 7gsYWiwWkblnSZmhLWLRl4UwvOyBaIbTpjNNMDp1/4BvNIV5E2vS3DWeskqRjrhZ 0kj8p1uRWwoQZSVtqi3oTqCww3vGfS8gRKZyP/xTu+aK4sRaRA3tP7fZH70moNbL Qht6FzjsXHEgVyUMvbz8vNFktxD8pJQxSKpAXJmdm2/YwdBIPy7NT1gs9KcxgZS3 jJYrOGcAC35yQ6jbXp++o9DLnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYhpWGV oQ3iR6baeNcTywahTN4pMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgfnuw/BWU/noRt8UzDcjEAEmja4icLaIebOZeS5/XrTkFQHNtCoam k48/g54SCXIesihMFWXJckZPJMVMc54HYAQI/+DngAR/IYbE8zdoFK37NCd2h8uB LXEh6Jb3673FH3URI+PRfiVlqeNK3h66CGW0m0wmSh8dsCPpVAPewAQIWYCyzVai pw5yub8IfAEqPcth+hIRhhiM4W7EWBs0NrYIlR8y1BtjPYeoM1u4MWlFbMmCQ1jw XyiCvf0ldRPV7U0x/gJir74pb6SWmSuV3mC+GGoPZqSval6qOeZ76xPk0H73LWf1 kPY7zTrgu5uStxHaj7Mj1OJLAnTDDMeD -----END CERTIFICATE-----Generated at Fri Jan 2 11:21:10 2026 by rpki-client