This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft File: H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json) Hash identifier: HnJQ7uZn1mJU8uMudPHasC50l/8FWDjTV8fOAEUEQjk= Subject key identifier: FC:00:E1:8A:CF:6B:AD:48:3B:9A:5A:E2:45:FA:A9:9E:2D:74:E0:DF Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 Certificate issuer: /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft Manifest number: 97 Signing time: Tue 23 Dec 2025 05:23:55 +0000 Manifest this update: Tue 23 Dec 2025 05:23:54 +0000 Manifest next update: Tue 30 Dec 2025 05:23:54 +0000 Files and hashes: 1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: 9KUQEl12oD755MFnVy4jWOdmWDj2kl5Q/FlQo/q1pew=) 2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: qw98EXKpwezEJaUdjFxnME0guuBGI/INe4GkxMZV/98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24 Validity Not Before: Dec 23 05:23:54 2025 GMT Not After : Dec 30 05:23:54 2025 GMT Subject: CN=694a276a-1120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:d7:e3:cb:a2:ae:e2:2f:e1:fa:5d:10:d8: f1:6c:78:d4:82:17:c3:0b:a9:e3:81:46:15:87:99: 6c:cf:6e:fc:a2:b4:f9:c1:aa:03:fa:3f:d1:28:d7: 57:79:d8:5f:2a:ee:8f:78:a6:fe:b7:65:60:fc:af: 36:62:d3:1d:d9:e0:57:ac:53:5c:d5:85:d7:58:10: 86:64:26:8b:8d:73:4a:ab:19:d5:c3:7c:58:8f:fa: a3:a7:84:56:5d:94:d9:99:c1:f8:1f:81:23:77:59: 6a:02:50:4b:d4:ea:0a:e8:81:86:a3:54:8f:2b:03: ef:73:8a:77:e7:4b:76:e2:d6:b5:20:c2:d8:29:ee: 07:ac:07:cb:1e:97:20:3f:97:19:1b:ea:cb:c6:80: a7:45:88:d2:ac:d3:d6:1c:f1:5b:36:51:69:2d:24: 7b:e4:18:94:9a:f2:72:79:60:f4:ef:6e:3d:47:2e: f8:55:8e:ca:eb:81:8a:85:29:a2:b5:0a:97:94:c3: 00:44:2d:f5:67:d9:e6:3e:aa:ef:3b:2f:b9:30:b0: c9:7f:1c:c7:63:32:49:ed:2d:7d:bd:64:cb:0e:ae: 6b:18:e3:46:4e:61:79:c7:63:02:78:4e:cd:d2:83: 1b:f4:16:9d:1c:1c:20:2d:03:21:46:fb:75:3b:13: 94:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:00:E1:8A:CF:6B:AD:48:3B:9A:5A:E2:45:FA:A9:9E:2D:74:E0:DF X509v3 Authority Key Identifier: keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:af:81:70:f5:2e:bc:c6:46:be:ca:d1:bc:4f:2c:00:2f:14: 72:b3:ee:d2:ed:af:c4:99:2b:f9:ab:63:b2:7c:39:b9:56:c2: a9:12:b9:d1:4d:1f:8c:c7:48:a7:01:41:73:8e:c3:57:08:8c: 55:23:f6:a8:9e:ce:96:e1:ff:94:ea:4c:19:bf:4b:ec:23:65: 42:8b:dd:4c:78:1f:1a:0f:3b:36:0d:2a:bb:28:1b:fd:90:1a: cf:8a:1f:2e:5a:5d:b5:37:4a:c2:71:ca:56:39:7a:a1:40:47: 0f:60:c1:9e:fd:ee:5e:d3:41:49:1d:79:98:59:43:d9:78:a4: b1:14:ed:6b:a2:21:f5:1a:86:84:5f:7e:53:d1:81:90:92:6a: 4d:88:98:c3:7d:27:a6:33:45:f8:b0:4d:45:d7:7d:4d:50:d7: 48:94:93:fd:34:ab:0a:9d:5d:99:cf:1b:32:0f:ff:e4:61:cd: e1:2f:18:9d:80:f8:76:02:ca:d5:ee:5c:6f:9d:23:79:2f:68: 8d:bd:4a:9c:f3:bc:5b:ec:42:48:9f:2f:22:d2:0c:b4:e7:ef: 15:18:30:b4:25:ec:34:ba:09:d3:39:a7:8c:f3:80:e0:30:50: 4f:5a:7d:84:c5:aa:98:6a:09:2c:e7:63:14:1c:af:1d:89:2a: 7a:60:5d:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyODIxMTAvBgNVBAUTKDFGNERDRTM0MzlCMUY0MDM1RkZGOEM3MUNFMzU5RTVE MjBFNjlBMjQwHhcNMjUxMjIzMDUyMzU0WhcNMjUxMjMwMDUyMzU0WjAYMRYwFAYD VQQDDA02OTRhMjc2YS0xMTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEPX48uiruIv4fpdENjxbHjUghfDC6njgUYVh5lsz278orT5waoD+j/RKNdX edhfKu6PeKb+t2Vg/K82YtMd2eBXrFNc1YXXWBCGZCaLjXNKqxnVw3xYj/qjp4RW XZTZmcH4H4Ejd1lqAlBL1OoK6IGGo1SPKwPvc4p350t24ta1IMLYKe4HrAfLHpcg P5cZG+rLxoCnRYjSrNPWHPFbNlFpLSR75BiUmvJyeWD07249Ry74VY7K64GKhSmi tQqXlMMARC31Z9nmPqrvOy+5MLDJfxzHYzJJ7S19vWTLDq5rGONGTmF5x2MCeE7N 0oMb9BadHBwgLQMhRvt1OxOU/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwA4YrP a61IO5pa4kX6qZ4tdODfMB8GA1UdIwQYMBaAFB9NzjQ5sfQDX/+Mcc41nl0g5pok MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODI4Mi8yRjI1M0MxQUZC RkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9IMDNPTkRteDlBTmZfNHh4empXZVhTRG1t aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0gwM09ORG14OUFOZl80eHh6aldlWFNEbW1pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODI4Mi8yRjI1M0MxQUZCRkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9IMDNPTkRteDlB TmZfNHh4empXZVhTRG1taVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUr4Fw9S68xka+ytG8TywALxRys+7S7a/EmSv5q2OyfDm5VsKpErnR TR+Mx0inAUFzjsNXCIxVI/aons6W4f+U6kwZv0vsI2VCi91MeB8aDzs2DSq7KBv9 kBrPih8uWl21N0rCccpWOXqhQEcPYMGe/e5e00FJHXmYWUPZeKSxFO1roiH1GoaE X35T0YGQkmpNiJjDfSemM0X4sE1F131NUNdIlJP9NKsKnV2ZzxsyD//kYc3hLxid gPh2AsrV7lxvnSN5L2iNvUqc87xb7EJIny8i0gy05+8VGDC0Jew0ugnTOaeM84Dg MFBPWn2ExaqYagks52MUHK8diSp6YF0p -----END CERTIFICATE-----Generated at Tue Dec 23 14:55:49 2025 by rpki-client