This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft File: hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json) Hash identifier: hNpSLjhKTw81a1zhraZh1e8utmMb1i2sr1Gbm3h7kpY= Subject key identifier: 7B:CE:BF:F6:4B:12:5E:72:2A:73:B0:FA:6B:CC:97:46:DE:A9:02:A4 Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Certificate serial: 06CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft Manifest number: 06C0 Signing time: Wed 24 Dec 2025 21:32:25 +0000 Manifest this update: Wed 24 Dec 2025 21:32:24 +0000 Manifest next update: Wed 31 Dec 2025 21:32:24 +0000 Files and hashes: 1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: AAmY6cjWnoxtLRpnFT50kDr5x3jzF6csZQ+JZtect3s=) 2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: hWP/crnjmiKRkQxu0624FvYvc5uF2iF9vYd33TXrr/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 21:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Validity Not Before: Dec 24 21:32:24 2025 GMT Not After : Dec 31 21:32:24 2025 GMT Subject: CN=694c5be9-cd4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:d1:e3:2b:c9:a7:8c:75:e2:cb:e8:0c:24: 06:db:65:81:8e:06:cc:4f:33:b8:9f:9b:a6:64:30: 45:15:45:ea:55:25:6e:54:23:b4:b7:00:65:5f:b0: dc:41:85:8f:31:3a:ba:8d:15:be:17:4b:ab:da:d6: 6d:fd:48:2f:0b:cc:2b:c4:97:5d:80:04:37:e4:3c: 60:00:8f:c7:43:a7:36:16:16:a3:d6:e3:1e:c0:88: 7c:da:55:93:c3:5e:d0:57:62:a5:88:a1:b3:27:04: 73:a6:b9:22:bd:a0:3b:d1:d6:b9:b5:96:d4:f8:9c: ba:ac:ec:e2:87:2a:dc:60:0b:97:9d:6f:42:ee:f8: 3d:c2:56:07:6c:f4:74:48:28:5a:7f:32:f6:6e:13: 59:45:dc:fb:d0:62:67:2b:93:41:2f:a8:be:86:0b: ce:e1:e9:6b:c8:15:46:42:87:0a:6b:b4:05:77:b0: 73:34:a4:56:d2:40:8b:01:c7:d6:0c:c5:a3:02:2a: 3d:04:51:96:bf:35:c0:4a:49:46:1f:9e:15:8e:59: 69:bf:66:f1:51:b8:3c:9e:d1:9c:63:4c:4b:43:e1: ef:51:8d:bf:8b:64:0a:7d:45:9e:53:c0:8e:06:de: 7f:28:79:8a:2d:ab:ac:39:fe:bd:7b:49:36:7f:24: c7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CE:BF:F6:4B:12:5E:72:2A:73:B0:FA:6B:CC:97:46:DE:A9:02:A4 X509v3 Authority Key Identifier: keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:8e:1d:f3:0b:4e:37:27:62:db:f4:a5:24:52:e1:d1:16:c7: 6e:67:3c:12:81:4d:71:68:f8:cd:dc:24:74:9c:1e:32:e9:e1: 22:5e:d5:cc:f9:ec:25:b8:5b:2e:01:01:99:70:67:14:fe:fe: 59:1b:de:f1:40:92:35:67:fe:52:cb:c2:f1:ba:93:0b:87:a3: 90:c0:1d:57:76:84:c0:1b:8f:e3:8a:95:cf:5b:8b:b2:7c:2c: cd:d6:3f:21:46:5d:6f:22:5d:6e:c3:82:9a:c3:a5:fc:ed:0b: df:7c:86:a2:3f:3c:ca:de:ce:e8:51:dc:5e:8f:cf:bd:af:6c: fb:96:25:ff:f6:48:89:b2:ae:08:83:92:c6:4d:9e:22:78:9b: 1d:ce:65:e8:d4:eb:d0:d1:94:f1:d5:1f:81:c3:7c:16:ee:05: 50:e8:8b:c2:94:a3:1c:65:6b:d3:59:26:d9:db:99:71:6a:f2: 2e:94:b1:a8:28:8a:c9:75:6b:a6:89:c2:8c:45:64:25:bb:c4: 4c:6e:f0:3a:9b:86:01:8d:8d:fe:3f:b8:c9:cb:08:29:ed:f2: 4b:7a:d8:aa:ab:ef:50:ce:86:ef:4f:7e:d4:7a:73:3d:7a:18: e6:9a:93:62:45:39:80:cd:8c:7b:b0:1c:ae:3c:7b:c4:23:cf: 8b:ef:0f:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyMjUxMTAvBgNVBAUTKDg1RDZGMTg0OTNEOEEwOENDNzJCMUIwOTFENEFGNTRG OEYwQTI4QjMwHhcNMjUxMjI0MjEzMjI0WhcNMjUxMjMxMjEzMjI0WjAYMRYwFAYD VQQDDA02OTRjNWJlOS1jZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPjR4yvJp4x14svoDCQG22WBjgbMTzO4n5umZDBFFUXqVSVuVCO0twBlX7Dc QYWPMTq6jRW+F0ur2tZt/UgvC8wrxJddgAQ35DxgAI/HQ6c2Fhaj1uMewIh82lWT w17QV2KliKGzJwRzprkivaA70da5tZbU+Jy6rOzihyrcYAuXnW9C7vg9wlYHbPR0 SChafzL2bhNZRdz70GJnK5NBL6i+hgvO4elryBVGQocKa7QFd7BzNKRW0kCLAcfW DMWjAio9BFGWvzXASklGH54Vjllpv2bxUbg8ntGcY0xLQ+HvUY2/i2QKfUWeU8CO Bt5/KHmKLausOf69e0k2fyTH+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvOv/ZL El5yKnOw+mvMl0beqQKkMB8GA1UdIwQYMBaAFIXW8YST2KCMxysbCR1K9U+PCiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTIyNS9DQTY5MDQ0MjhB OUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9JekhLeHNKSFVyMVQ0OEtL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hkYnhoSlBZb0l6SEt4c0pIVXIxVDQ4S0tMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTIyNS9DQTY5MDQ0MjhBOUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9J ekhLeHNKSFVyMVQ0OEtLTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyjh3zC043J2Lb9KUkUuHRFsduZzwSgU1xaPjN3CR0nB4y6eEiXtXM +ewluFsuAQGZcGcU/v5ZG97xQJI1Z/5Sy8LxupMLh6OQwB1XdoTAG4/jipXPW4uy fCzN1j8hRl1vIl1uw4Kaw6X87QvffIaiPzzK3s7oUdxej8+9r2z7liX/9kiJsq4I g5LGTZ4ieJsdzmXo1OvQ0ZTx1R+Bw3wW7gVQ6IvClKMcZWvTWSbZ25lxavIulLGo KIrJdWumicKMRWQlu8RMbvA6m4YBjY3+P7jJywgp7fJLetiqq+9QzobvT37UenM9 ehjmmpNiRTmAzYx7sByuPHvEI8+L7w+F -----END CERTIFICATE-----Generated at Thu Dec 25 16:02:38 2025 by rpki-client