This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json) Hash identifier: 9RIJpRnizMaS1SLde/iYTt17k1vDwy8RM0XQEw6TimA= Subject key identifier: 2F:94:64:28:5C:4C:DA:52:F0:62:80:12:6C:37:42:E7:42:25:FE:ED Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Certificate serial: 03A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft Manifest number: 039D Signing time: Thu 18 Dec 2025 23:59:08 +0000 Manifest this update: Thu 18 Dec 2025 23:59:07 +0000 Manifest next update: Thu 25 Dec 2025 23:59:07 +0000 Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: 7Yc06xAro0En+fMTpaZEMP/pjPrPyZRdShXfjCTc8ZQ=) 2: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: iCw79y4BWdxeg4SkApinNCBIqylm75Jz7mdMCrDh0eI=) 3: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: fD9tz1Cxj0LH2YQosk7eVSKaAn/WfIdEtafahpCOyrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 933 (0x3a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Validity Not Before: Dec 18 23:59:07 2025 GMT Not After : Dec 25 23:59:07 2025 GMT Subject: CN=6944954b-3b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:ac:96:f6:99:e4:e9:f2:5d:f4:e9:b4:3a: 79:b4:f3:1a:78:56:2a:94:f0:f6:fb:6a:63:5c:78: e1:b6:0b:15:a5:f3:aa:c0:4b:37:66:63:69:cc:8f: 95:77:b2:30:b1:a3:f7:5e:39:b2:f5:78:08:c3:a0: e6:0f:7f:58:87:52:f5:b7:89:7e:0a:9a:34:68:66: 01:49:69:3a:9a:01:09:f7:22:d7:7b:71:fd:e7:74: 2b:b2:9e:fa:62:ad:dc:75:48:20:47:8c:76:6e:56: df:25:f2:1f:8f:5f:81:b9:55:0a:e2:e7:23:d7:7c: 47:45:c6:09:a4:a7:9a:e9:22:a1:b5:aa:3c:1c:65: 3f:d3:97:93:8f:f1:cf:78:a7:a3:58:82:28:27:f6: 6b:27:c3:5d:b4:11:d1:32:29:12:d4:9d:75:db:3d: f9:b6:13:fb:01:da:59:bd:23:30:f3:3b:e4:64:40: 2d:aa:f4:4c:85:46:0c:a7:bd:bc:bb:74:c6:6a:74: 13:7f:17:39:4d:79:2d:5f:11:15:1b:75:5f:7b:08: 94:c6:bb:55:ac:40:57:5c:ae:db:71:4c:5c:92:3c: ed:5a:cf:64:0f:f2:10:53:4a:61:fd:cc:4b:7e:74: e0:06:13:76:eb:3a:63:7e:2c:13:78:c6:5a:36:53: ab:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:94:64:28:5C:4C:DA:52:F0:62:80:12:6C:37:42:E7:42:25:FE:ED X509v3 Authority Key Identifier: keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ff:b0:8d:fa:db:a7:70:ed:33:90:10:23:20:e4:79:dc:6a: 54:78:92:6d:db:e0:31:32:ba:00:9d:85:cb:6a:4f:fa:95:67: b4:e4:db:29:a7:17:29:06:69:dd:93:af:83:04:d3:0f:99:58: 19:d0:ea:2a:a7:19:5a:09:07:e2:e0:fb:5c:13:6b:4d:11:5a: fa:4c:55:c9:8d:90:73:55:c2:5b:16:08:b2:83:c0:9e:d3:fb: da:4e:09:9c:50:83:67:3a:ad:ba:7f:85:a4:4f:a4:69:f7:5f: 12:70:a2:cd:3c:a9:97:c2:c0:77:c2:36:62:ea:65:c5:8b:a9: 66:75:57:7c:33:06:e4:70:85:db:35:66:71:f9:4a:a2:18:92: ec:b7:2d:65:0c:84:c4:80:6e:ec:87:58:e1:38:2c:64:e3:99: 66:12:a9:e6:96:a0:fd:4d:39:40:5b:1d:3d:1f:13:bd:f9:f7: 0f:47:dd:96:a1:38:fd:f8:1a:49:61:f6:fe:e3:f4:f7:c3:c6: 71:7a:89:0f:07:95:4b:83:1c:45:ad:7b:e8:6a:42:53:33:05: 47:3a:5c:90:bd:37:be:cc:46:c9:d6:d4:52:80:67:2b:d7:87: f8:05:4b:5b:68:ba:8a:1f:47:94:06:68:f2:7d:73:3a:6b:e4: c1:9b:9b:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzOUIxMTAvBgNVBAUTKEQyMTAyMkMwMEYwREJCRTU4QTk5QTFFNjczRDNBRTFD NURGRENCODkwHhcNMjUxMjE4MjM1OTA3WhcNMjUxMjI1MjM1OTA3WjAYMRYwFAYD VQQDDA02OTQ0OTU0Yi0zYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0SslvaZ5OnyXfTptDp5tPMaeFYqlPD2+2pjXHjhtgsVpfOqwEs3ZmNpzI+V d7IwsaP3Xjmy9XgIw6DmD39Yh1L1t4l+Cpo0aGYBSWk6mgEJ9yLXe3H953Qrsp76 Yq3cdUggR4x2blbfJfIfj1+BuVUK4ucj13xHRcYJpKea6SKhtao8HGU/05eTj/HP eKejWIIoJ/ZrJ8NdtBHRMikS1J112z35thP7AdpZvSMw8zvkZEAtqvRMhUYMp728 u3TGanQTfxc5TXktXxEVG3VfewiUxrtVrEBXXK7bcUxckjztWs9kD/IQU0ph/cxL fnTgBhN26zpjfiwTeMZaNlOrwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+UZChc TNpS8GKAEmw3QudCJf7tMB8GA1UdIwQYMBaAFNIQIsAPDbvlipmh5nPTrhxd/cuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDM5Qi85OUY1NDQ3OEMx MzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUtV0ttYUhtYzlPdUhGMzl5 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBoQWl3QThOdS1XS21hSG1jOU91SEYzOXk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDM5Qi85OUY1NDQ3OEMxMzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUt V0ttYUhtYzlPdUhGMzl5NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL/7CN+tuncO0zkBAjIOR53GpUeJJt2+AxMroAnYXLak/6lWe05Nsp pxcpBmndk6+DBNMPmVgZ0OoqpxlaCQfi4PtcE2tNEVr6TFXJjZBzVcJbFgiyg8Ce 0/vaTgmcUINnOq26f4WkT6Rp918ScKLNPKmXwsB3wjZi6mXFi6lmdVd8MwbkcIXb NWZx+UqiGJLsty1lDITEgG7sh1jhOCxk45lmEqnmlqD9TTlAWx09HxO9+fcPR92W oTj9+BpJYfb+4/T3w8ZxeokPB5VLgxxFrXvoakJTMwVHOlyQvTe+zEbJ1tRSgGcr 14f4BUtbaLqKH0eUBmjyfXM6a+TBm5vk -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:00 2025 by rpki-client