This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json) Hash identifier: ctNwBCO6//xQVHCdDfLTKthKJkJcEbi1jIUUALwsJ4o= Subject key identifier: FC:C3:47:DC:85:58:50:89:D7:01:31:7B:B6:E1:BB:BB:C4:55:F0:C7 Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft Manifest number: 0BC4 Signing time: Tue 30 Dec 2025 18:42:29 +0000 Manifest this update: Tue 30 Dec 2025 18:42:29 +0000 Manifest next update: Tue 06 Jan 2026 18:42:29 +0000 Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: g2ZZt/QcFPs4M5lHnxCugslJ08cdgKDtR/BP46gIHrs=) 2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: rsXupeO8EVGQ/M7qesQZfS0Ho6k/jy/+B1i/0dc3Rfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 18:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Validity Not Before: Dec 30 18:42:29 2025 GMT Not After : Jan 6 18:42:29 2026 GMT Subject: CN=69541d15-4352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:c7:e6:ae:e2:81:1d:97:49:9d:6f:1d:d0: 9a:a8:81:6d:d9:00:31:40:fc:b1:c8:0e:d6:43:d0: a8:d0:a7:a0:ce:31:a5:63:b3:be:c0:38:3e:7d:4e: 9d:f5:26:a3:51:28:5c:24:c0:03:54:5a:87:a3:3e: de:31:66:f8:41:f4:df:a7:df:85:f6:6a:56:e4:06: 2a:cb:77:c2:37:f3:56:5c:2a:7e:53:14:69:fe:dc: c1:e5:b0:54:ec:5a:ed:5d:9d:a9:ee:d8:83:61:2e: e3:70:4f:a8:38:d3:1f:51:8d:6a:06:5a:86:ca:79: 3c:57:8f:2a:e0:88:86:d5:3a:ef:d3:ed:0b:da:26: 70:33:c5:ef:25:b7:e5:e6:a2:4d:e4:5a:e2:22:7b: 0e:9b:72:06:06:41:84:02:18:35:9a:45:90:bc:96: 9c:e4:11:f9:d0:11:54:57:a2:1c:17:80:20:49:c0: ae:7e:25:56:2d:0d:36:c2:f9:a1:25:a9:6c:61:79: b0:e8:4f:d8:9d:03:55:8b:17:42:65:3d:5c:71:26: 1b:df:d0:d3:e2:11:b7:55:4e:86:e3:9e:71:15:6e: 76:44:fb:91:f3:b7:14:c2:7d:be:9e:0d:2d:a8:a7: 1b:1f:59:b8:a7:4b:e5:b5:56:b4:ad:79:ac:63:e5: 36:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C3:47:DC:85:58:50:89:D7:01:31:7B:B6:E1:BB:BB:C4:55:F0:C7 X509v3 Authority Key Identifier: keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:bf:78:c8:1e:bb:25:4b:03:0d:93:0f:0b:70:ef:bd:1a:c6: 9e:fe:36:f0:1a:87:ea:5d:56:32:11:19:44:4c:36:1e:13:8c: 33:e7:cd:99:28:cd:d8:83:1f:ca:6d:f6:08:07:a7:45:73:3c: c7:34:cc:66:62:c6:6a:ed:53:2a:97:fc:65:de:33:05:3b:9f: 60:90:33:04:e9:9b:17:ec:4e:60:ee:fe:b3:03:8f:bf:e2:dd: ac:ab:ce:2a:46:a2:3d:9d:2b:bf:6e:09:00:4f:8b:c3:c2:ad: 93:0e:6f:cc:2c:31:0a:b4:2b:78:32:00:b4:2c:ae:d4:dc:b2: 38:ac:16:55:24:f5:96:43:8c:4b:33:68:3b:2c:f4:24:3b:d3: d7:2b:ff:4a:27:95:57:0b:31:39:3a:ba:6b:44:30:03:20:ce: 8d:9b:b0:ad:c0:55:0d:3a:ae:05:53:b2:24:11:73:15:14:f0: 58:f8:00:6d:ac:9d:5b:50:e0:de:21:a6:91:09:63:de:44:df: 39:3c:97:06:8a:a8:e1:15:99:4a:cd:cb:83:a4:5a:50:ad:27: 31:5d:85:4b:2d:90:9a:c9:c1:53:b3:26:2b:35:40:ca:69:3f: 0c:4f:08:c2:e1:fc:48:e5:6a:1c:18:77:1b:a6:fe:8c:ad:dc: 15:4c:57:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUNFRjExMC8GA1UEBRMoODQ0QkQ2RDFBOTcyQ0ZEMkI2MEI4NERFMENCNjNFNUQ1 NEFGQThDRjAeFw0yNTEyMzAxODQyMjlaFw0yNjAxMDYxODQyMjlaMBgxFjAUBgNV BAMMDTY5NTQxZDE1LTQzNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW48fmruKBHZdJnW8d0JqogW3ZADFA/LHIDtZD0KjQp6DOMaVjs77AOD59Tp31 JqNRKFwkwANUWoejPt4xZvhB9N+n34X2albkBirLd8I381ZcKn5TFGn+3MHlsFTs Wu1dnanu2INhLuNwT6g40x9RjWoGWobKeTxXjyrgiIbVOu/T7QvaJnAzxe8lt+Xm ok3kWuIiew6bcgYGQYQCGDWaRZC8lpzkEfnQEVRXohwXgCBJwK5+JVYtDTbC+aEl qWxhebDoT9idA1WLF0JlPVxxJhvf0NPiEbdVTobjnnEVbnZE+5HztxTCfb6eDS2o pxsfWbinS+W1VrSteaxj5TYTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/MNH3IVY UInXATF7tuG7u8RV8McwHwYDVR0jBBgwFoAUhEvW0alyz9K2C4TeDLY+XVSvqM8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQ0VGLzlDRTUxMjU4NDU5 MTExRUFCRTZCOTMxQkM0RjlBRTAyL2hFdlcwYWx5ejlLMkM0VGVETFktWFZTdnFN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEV2VzBhbHl6OUsyQzRUZURMWS1YVlN2cU04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx Q0VGLzlDRTUxMjU4NDU5MTExRUFCRTZCOTMxQkM0RjlBRTAyL2hFdlcwYWx5ejlL MkM0VGVETFktWFZTdnFNOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIC/eMgeuyVLAw2TDwtw770axp7+NvAah+pdVjIRGURMNh4TjDPnzZko zdiDH8pt9ggHp0VzPMc0zGZixmrtUyqX/GXeMwU7n2CQMwTpmxfsTmDu/rMDj7/i 3ayrzipGoj2dK79uCQBPi8PCrZMOb8wsMQq0K3gyALQsrtTcsjisFlUk9ZZDjEsz aDss9CQ709cr/0onlVcLMTk6umtEMAMgzo2bsK3AVQ06rgVTsiQRcxUU8Fj4AG2s nVtQ4N4hppEJY95E3zk8lwaKqOEVmUrNy4OkWlCtJzFdhUstkJrJwVOzJis1QMpp PwxPCMLh/EjlahwYdxum/oyt3BVMVyo= -----END CERTIFICATE-----Generated at Wed Dec 31 08:01:06 2025 by rpki-client