This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: WDjgPUxZUt1ORgGdRPGrqAFR+mZPsjIrBWTYQ81DSs8= Subject key identifier: 4E:B3:34:F1:69:74:77:FA:9B:1C:A8:F2:D8:AD:A2:22:F0:6B:21:3B Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0AEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0ADF Signing time: Thu 18 Dec 2025 19:03:03 +0000 Manifest this update: Thu 18 Dec 2025 19:03:03 +0000 Manifest next update: Thu 25 Dec 2025 19:03:03 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: eeVJpv/ys3JP5InrgIqfcf80cL1yySEnaFXtBw4tIFk=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: t6+QHhHKWbDZoxFsvhT+y8k66KeW3LrS7MegiCYm79I=) 3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: itui9dWg0G04SAz0tNGsUM1LVCVeybo3ZddvvnrIfd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2796 (0xaec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Dec 18 19:03:03 2025 GMT Not After : Dec 25 19:03:03 2025 GMT Subject: CN=69444fe7-1d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:64:60:54:cb:d1:db:70:ca:3f:04:ae:64: 81:91:cd:a7:46:2a:50:93:1c:6c:35:54:64:24:86: 14:82:74:b6:ff:17:9a:4a:9b:2f:94:38:9e:45:9b: 51:05:fb:6e:27:ae:13:cd:05:83:6a:95:19:17:83: a2:2f:17:ed:1c:77:1a:ef:b2:d0:fe:b5:4c:f1:4a: 9c:1c:21:40:98:38:1e:78:0d:ea:cd:9c:36:c7:fc: b4:c7:f7:64:4d:f7:98:c1:76:fd:42:ed:15:d3:24: ea:c4:a6:08:42:f1:ae:7c:8e:38:2d:21:6f:27:4f: a8:9f:9f:cd:49:5c:8a:b7:b6:8f:83:33:a1:aa:52: 7b:b5:86:b6:e7:f2:90:64:44:0b:71:36:72:65:a4: b0:8d:3d:c7:cb:39:64:e2:77:ac:ae:da:d0:7a:10: 5f:be:da:db:1b:06:0c:a8:f7:f0:e7:c4:0c:45:de: 83:77:8c:b4:45:a1:13:bb:1b:a5:29:6c:1b:4e:61: c7:2d:8d:18:e3:b1:7d:90:b4:5b:23:f2:88:1e:47: 2b:ad:ef:59:e5:05:64:6a:ba:a6:b1:f0:49:eb:81: 18:2e:89:ff:39:d4:45:09:2e:b3:d0:67:43:e6:58: 9e:4f:b8:f2:02:d6:85:66:c7:24:e9:9b:da:0e:03: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B3:34:F1:69:74:77:FA:9B:1C:A8:F2:D8:AD:A2:22:F0:6B:21:3B X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:ad:07:3f:f4:f9:a9:fa:c4:a3:89:ed:07:d1:84:2b:20:27: 78:5f:c5:29:36:1f:36:bb:b6:26:48:1d:30:e6:d9:15:36:53: 1e:52:6b:cc:3d:24:f7:08:41:19:53:be:fe:f4:4f:ae:81:ad: e6:8c:8a:15:a9:01:f1:b5:8e:83:e8:c5:f6:bf:da:d3:24:32: 8a:eb:37:a2:8a:29:ea:e0:c2:67:f2:14:d4:58:c0:30:5f:a5: ab:0b:6d:c9:48:d8:a2:c5:d5:f0:5c:87:6e:5c:8d:90:c4:d9: 54:91:58:78:4f:1f:15:cb:d5:9d:d2:7f:86:d5:0b:70:4e:0a: 8c:d4:dc:f8:15:6e:34:b5:7e:6f:7a:f6:25:a3:8b:1a:c5:11: ff:fe:2c:de:d6:52:bb:8a:3f:c1:f6:39:4a:a6:bf:8e:d7:c9: cc:08:14:de:d1:9d:de:56:af:23:41:e1:69:2d:37:2e:a1:1e: 42:16:1d:b3:43:b3:d7:f8:d6:b5:e6:33:d8:b6:9c:37:01:9f: 20:9d:98:7f:1b:c3:81:a5:72:66:8e:e0:16:ab:66:50:45:5e: 33:19:7a:06:44:7d:fd:08:e2:c8:4d:1e:b2:74:99:ce:cf:9c: 38:69:9d:9b:87:06:39:c5:05:ef:da:0e:8a:45:36:1e:05:bf: 52:d9:3f:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjUxMjE4MTkwMzAzWhcNMjUxMjI1MTkwMzAzWjAYMRYwFAYD VQQDDA02OTQ0NGZlNy0xZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOVkYFTL0dtwyj8ErmSBkc2nRipQkxxsNVRkJIYUgnS2/xeaSpsvlDieRZtR BftuJ64TzQWDapUZF4OiLxftHHca77LQ/rVM8UqcHCFAmDgeeA3qzZw2x/y0x/dk TfeYwXb9Qu0V0yTqxKYIQvGufI44LSFvJ0+on5/NSVyKt7aPgzOhqlJ7tYa25/KQ ZEQLcTZyZaSwjT3Hyzlk4nesrtrQehBfvtrbGwYMqPfw58QMRd6Dd4y0RaETuxul KWwbTmHHLY0Y47F9kLRbI/KIHkcrre9Z5QVkarqmsfBJ64EYLon/OdRFCS6z0GdD 5lieT7jyAtaFZsck6ZvaDgO6BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6zNPFp dHf6mxyo8titoiLwayE7MB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+rQc/9Pmp+sSjie0H0YQrICd4X8UpNh82u7YmSB0w5tkVNlMeUmvM PST3CEEZU77+9E+uga3mjIoVqQHxtY6D6MX2v9rTJDKK6zeiiinq4MJn8hTUWMAw X6WrC23JSNiixdXwXIduXI2QxNlUkVh4Tx8Vy9Wd0n+G1QtwTgqM1Nz4FW40tX5v evYlo4saxRH//ize1lK7ij/B9jlKpr+O18nMCBTe0Z3eVq8jQeFpLTcuoR5CFh2z Q7PX+Na15jPYtpw3AZ8gnZh/G8OBpXJmjuAWq2ZQRV4zGXoGRH39COLITR6ydJnO z5w4aZ2bhwY5xQXv2g6KRTYeBb9S2T/9 -----END CERTIFICATE-----Generated at Fri Dec 19 23:58:55 2025 by rpki-client