This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft File: hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json) Hash identifier: IMfGYal43MapnXmxxBIk+q/ZNjgCLfNR3ssLWx73zRY= Subject key identifier: 4C:B1:51:8F:F1:5F:9F:80:05:90:D2:BA:7E:9F:77:47:D7:5D:A1:EC Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft Manifest number: 33 Signing time: Fri 19 Dec 2025 06:29:40 +0000 Manifest this update: Fri 19 Dec 2025 06:29:40 +0000 Manifest next update: Fri 26 Dec 2025 06:29:40 +0000 Files and hashes: 1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: 6PbnsWMXRD1QGhftbRNJ84DTTdS4cuWsdKu1EN72r2s=) 2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: 5FblCrC5z4khMAdynBGpl1OeK8F3ELtDOlzocALKnPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Validity Not Before: Dec 19 06:29:40 2025 GMT Not After : Dec 26 06:29:40 2025 GMT Subject: CN=6944f0d4-aa84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:b0:a4:57:86:6c:82:a7:f1:aa:97:58:e9: 69:ed:cb:99:a5:66:e2:ab:3a:f0:ac:6d:69:7b:a7: d7:e7:86:4a:71:3c:c4:bd:32:4a:da:43:43:74:a8: fe:40:d0:31:87:7a:0b:84:78:4e:cf:1c:69:bb:36: d3:37:de:04:9e:bf:d6:68:5e:2b:dc:7c:3c:76:66: 23:ec:22:fd:50:3e:dd:67:eb:aa:b1:23:8a:92:38: 1b:a7:15:2b:b5:62:e4:54:b9:40:3c:c0:d7:9d:a5: b7:5c:c0:ef:53:36:c4:90:ae:79:37:bc:71:bc:2a: a2:72:78:b0:55:db:8c:61:03:47:34:c5:a8:be:90: ed:34:7d:5c:99:c5:bb:9e:4a:b8:15:9e:62:d1:e2: 52:17:a7:e7:34:46:17:5e:c9:d3:7d:e0:04:2f:8d: 5c:ba:6d:02:96:13:41:f5:ab:6f:7f:78:17:9a:e3: b3:9b:f9:13:2c:fa:75:db:29:63:24:35:53:d9:13: ff:b8:44:56:4d:74:d2:19:de:41:cc:a2:b9:cf:f6: e7:74:99:19:ee:a1:bb:f1:d8:e4:e8:eb:b3:a7:24: 2c:6f:6e:9e:fd:82:45:48:db:62:bb:dd:b3:e8:46: 43:31:4f:33:c0:11:35:20:82:a3:60:e1:b4:3e:78: 1a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B1:51:8F:F1:5F:9F:80:05:90:D2:BA:7E:9F:77:47:D7:5D:A1:EC X509v3 Authority Key Identifier: keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:26:99:83:a5:48:90:93:41:79:83:4e:86:05:9b:99:65:02: ee:94:15:7d:01:91:c8:40:49:6a:0d:9f:16:e9:f4:a0:fb:75: ba:d0:4b:94:ce:65:86:a2:c2:e1:e3:ff:30:8f:4b:d0:db:ef: 2d:7a:8d:53:99:94:98:0b:80:24:a6:81:24:94:24:11:9b:ba: 6e:af:d2:9a:55:08:07:67:f6:b4:2b:84:3a:91:67:fa:77:b9: 3d:34:af:2f:3b:77:87:43:03:b0:da:86:92:26:7b:1f:86:12: 45:2b:07:28:ac:f7:5a:98:36:92:c6:cb:30:1c:c0:59:b5:b9: a7:5e:22:13:ee:23:18:ac:77:2f:fd:bf:bb:d2:27:8f:5f:ad: 13:b8:6a:24:88:40:5f:d9:34:44:ef:5f:9a:9d:74:38:61:32: 9c:fe:4f:8b:6f:c3:c6:c3:ed:72:f3:3d:45:f8:2f:9c:73:22: a2:91:3b:f9:45:f3:a8:0c:39:bb:1f:7b:be:b8:6e:c2:88:bd: be:03:8d:ee:93:67:21:2a:20:60:95:84:a6:8c:9e:f4:7b:23: 50:84:2a:13:21:93:0c:41:54:a6:11:3f:0c:7f:31:b2:c2:a2: 72:41:b7:0e:f3:3f:a7:3c:21:1c:27:6d:1f:76:8f:8c:66:d2: d4:82:08:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0RBQzExMC8GA1UEBRMoODQ3RjJFMTJFQUI1MDZBNTAxMDk5NDQyMDdCMUQ3MDI2 Njc3RjA5QjAeFw0yNTEyMTkwNjI5NDBaFw0yNTEyMjYwNjI5NDBaMBgxFjAUBgNV BAMMDTY5NDRmMGQ0LWFhODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCszLCkV4ZsgqfxqpdY6Wnty5mlZuKrOvCsbWl7p9fnhkpxPMS9MkraQ0N0qP5A 0DGHeguEeE7PHGm7NtM33gSev9ZoXivcfDx2ZiPsIv1QPt1n66qxI4qSOBunFSu1 YuRUuUA8wNedpbdcwO9TNsSQrnk3vHG8KqJyeLBV24xhA0c0xai+kO00fVyZxbue SrgVnmLR4lIXp+c0RhdeydN94AQvjVy6bQKWE0H1q29/eBea47Ob+RMs+nXbKWMk NVPZE/+4RFZNdNIZ3kHMornP9ud0mRnuobvx2OTo67OnJCxvbp79gkVI22K73bPo RkMxTzPAETUggqNg4bQ+eBq/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTLFRj/Ff n4AFkNK6fp93R9ddoewwHwYDVR0jBBgwFoAUhH8uEuq1BqUBCZRCB7HXAmZ38Jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzcyNjBGQzBDOEYz OTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFVQkNaUkNCN0hYQW1aMzhK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvaEg4dUV1cTFCcVVCQ1pSQ0I3SFhBbVozOEpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD REFDLzcyNjBGQzBDOEYzOTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFV QkNaUkNCN0hYQW1aMzhKcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJQmmYOlSJCTQXmDToYFm5llAu6UFX0BkchASWoNnxbp9KD7dbrQS5TO ZYaiwuHj/zCPS9Db7y16jVOZlJgLgCSmgSSUJBGbum6v0ppVCAdn9rQrhDqRZ/p3 uT00ry87d4dDA7DahpImex+GEkUrByis91qYNpLGyzAcwFm1uadeIhPuIxisdy/9 v7vSJ49frRO4aiSIQF/ZNETvX5qddDhhMpz+T4tvw8bD7XLzPUX4L5xzIqKRO/lF 86gMObsfe764bsKIvb4Dje6TZyEqIGCVhKaMnvR7I1CEKhMhkwxBVKYRPwx/MbLC onJBtw7zP6c8IRwnbR92j4xm0tSCCMc= -----END CERTIFICATE-----Generated at Sun Dec 21 03:56:51 2025 by rpki-client