This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: GXbVV2lQKMRN8mySY+1713dUqro35YSAMWO9NyIN/WI= Subject key identifier: A8:DE:3F:B7:05:6A:E2:19:1B:5B:8A:EE:1C:54:E4:50:51:1C:12:7A Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: F2 Signing time: Fri 19 Dec 2025 04:29:55 +0000 Manifest this update: Fri 19 Dec 2025 04:29:55 +0000 Manifest next update: Fri 26 Dec 2025 04:29:55 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: UteudB+XPHkJuGDd8mQVq0n8OfL3JRCiXO07WuoWA4U=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: CyE/igdPfW2RYSF3wOEJ7cJivf90Ng4geSYtO0ZaU/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: Dec 19 04:29:55 2025 GMT Not After : Dec 26 04:29:55 2025 GMT Subject: CN=6944d4c3-0c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:01:5f:ba:60:d3:57:81:de:54:94:cf:20: 76:fa:4b:5e:45:2d:dd:bb:1c:66:12:0e:ac:3b:29: 5a:35:bd:84:de:f8:5f:df:65:ba:0b:82:ed:eb:3a: 9e:a3:b6:7a:f1:1d:84:9c:48:77:7a:5b:32:e7:34: 09:f6:7c:3f:8e:5d:da:93:35:05:eb:83:99:34:95: 59:d7:7f:14:bd:f1:5a:21:15:fe:be:b8:17:fb:d4: 01:6a:3e:1d:2b:60:e0:b3:d0:25:eb:66:68:da:c6: ef:0f:f2:ef:57:a3:ec:03:03:18:51:bd:72:92:b2: 82:28:18:86:98:14:e4:9c:b3:b6:be:43:f3:42:ca: 83:67:95:aa:c3:6c:2a:71:9f:88:66:2e:cf:92:ff: a1:22:a8:ef:83:5d:00:b7:63:b3:0a:ab:8c:35:bb: 1d:31:50:25:42:ff:c1:3f:d1:49:98:28:a2:35:7c: 91:11:ca:6d:58:c5:fa:06:0c:79:4a:1c:f6:7f:72: 25:95:b8:2f:3e:52:4c:42:84:d9:e6:57:2e:42:10: c5:d1:a9:a7:3e:94:ac:c8:5c:c2:12:11:83:69:55: 80:a6:af:19:3f:9e:01:f4:eb:2a:80:33:ae:d6:a3: d3:e8:0d:a5:19:7d:a5:84:78:9f:da:29:1b:2a:99: a1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DE:3F:B7:05:6A:E2:19:1B:5B:8A:EE:1C:54:E4:50:51:1C:12:7A X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:90:95:6b:08:60:55:32:a0:fe:c0:fd:5b:66:75:e7:30:b9: 06:21:ea:43:0c:57:dd:67:e1:09:23:59:5e:91:76:15:67:fa: 95:dc:f9:33:54:1e:fe:ac:87:09:28:a2:a2:05:dc:72:95:fb: 44:9f:6e:71:ee:d4:89:db:22:c6:55:b8:09:0c:54:1e:6b:5a: dc:d2:de:b4:b0:ac:58:66:06:c3:88:be:a0:10:96:c5:d0:62: 9c:07:4f:13:fd:57:a8:1a:a6:c6:7a:ef:b5:9c:d2:7d:72:61: 9c:ec:75:21:82:3c:bb:dd:35:fd:df:d9:04:88:f3:45:42:8e: 9d:99:e9:47:56:63:92:8b:47:76:6f:be:5e:5d:0d:61:44:2a: d7:63:13:ac:bf:57:b2:20:88:c1:b8:6e:66:9a:76:c4:ba:fc: a9:aa:f8:87:b6:77:62:08:cf:56:a7:82:12:2e:ba:3a:78:5d: 52:ed:5b:ad:fe:fb:0e:7d:f7:62:30:5a:c0:75:af:b9:70:d0: 6a:fd:bc:b8:31:63:06:d2:ca:a7:0c:26:cc:a4:dc:ff:b9:ef: 71:da:71:dd:a0:8c:9d:56:12:11:b2:b2:4e:de:23:68:f2:01: a0:19:3b:9d:92:a4:10:07:63:ee:51:65:b5:6e:4a:d6:bc:df: e6:eb:6c:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjUxMjE5MDQyOTU1WhcNMjUxMjI2MDQyOTU1WjAYMRYwFAYD VQQDDA02OTQ0ZDRjMy0wYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLwBX7pg01eB3lSUzyB2+kteRS3duxxmEg6sOylaNb2E3vhf32W6C4Lt6zqe o7Z68R2EnEh3elsy5zQJ9nw/jl3akzUF64OZNJVZ138UvfFaIRX+vrgX+9QBaj4d K2Dgs9Al62Zo2sbvD/LvV6PsAwMYUb1ykrKCKBiGmBTknLO2vkPzQsqDZ5Wqw2wq cZ+IZi7Pkv+hIqjvg10At2OzCquMNbsdMVAlQv/BP9FJmCiiNXyREcptWMX6Bgx5 Shz2f3IllbgvPlJMQoTZ5lcuQhDF0amnPpSsyFzCEhGDaVWApq8ZP54B9OsqgDOu 1qPT6A2lGX2lhHif2ikbKpmhWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjeP7cF auIZG1uK7hxU5FBRHBJ6MB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0kJVrCGBVMqD+wP1bZnXnMLkGIepDDFfdZ+EJI1lekXYVZ/qV3Pkz VB7+rIcJKKKiBdxylftEn25x7tSJ2yLGVbgJDFQea1rc0t60sKxYZgbDiL6gEJbF 0GKcB08T/VeoGqbGeu+1nNJ9cmGc7HUhgjy73TX939kEiPNFQo6dmelHVmOSi0d2 b75eXQ1hRCrXYxOsv1eyIIjBuG5mmnbEuvypqviHtndiCM9Wp4ISLro6eF1S7Vut /vsOffdiMFrAda+5cNBq/by4MWMG0sqnDCbMpNz/ue9x2nHdoIydVhIRsrJO3iNo 8gGgGTudkqQQB2PuUWW1bkrWvN/m62yu -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:19 2025 by rpki-client