This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json) Hash identifier: fGG48mnKWVrTH0uZc6gyImzFaSI5BrVQvysk0gmxn3A= Subject key identifier: B4:9D:9D:8D:85:2A:67:55:E7:9F:DD:09:DE:B1:B2:0F:7D:B0:E9:CB Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft Manifest number: 0165 Signing time: Fri 09 Jan 2026 03:19:13 +0000 Manifest this update: Fri 09 Jan 2026 03:19:12 +0000 Manifest next update: Fri 16 Jan 2026 03:19:12 +0000 Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: 6MewZzkcwv9Mog+fnGDenKvt4LLodTfXZ1vJRxNYzP4=) 2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: F4PEaJfd6HP1/7qcDw3hvzZGyQ0ocll5S0CbxU1lwXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 03:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: Jan 9 03:19:12 2026 GMT Not After : Jan 16 03:19:12 2026 GMT Subject: CN=696073b1-4f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:1d:bf:42:f8:26:ba:f7:b3:76:77:19:5d: 18:4b:8f:ad:eb:98:9c:97:9d:cd:03:2d:02:bf:4c: 39:7b:60:d9:23:8d:07:78:af:39:9d:f5:c5:72:4b: 1f:29:6f:07:1d:7f:8d:ca:52:6e:75:a4:72:31:0f: 1b:bc:09:cd:02:72:c6:6e:ba:20:29:f9:97:a3:d1: 58:d1:6f:d3:0a:09:7a:5d:f3:b3:66:73:58:85:50: bb:f7:de:ab:1c:f7:a7:9b:db:c7:da:16:af:a9:16: b5:97:b8:9b:d2:b0:46:ea:02:98:73:fa:60:6e:1c: f7:6e:dd:e5:e1:fa:2a:f7:60:59:0f:40:b5:b7:cf: 95:0b:43:aa:3c:b0:aa:91:ce:40:3e:cb:6e:ab:8e: 45:3e:2b:69:cb:62:e4:a9:85:2c:c2:54:11:13:e8: 39:0f:8f:52:ab:3c:88:fd:53:18:9a:ef:da:91:5f: 72:62:26:19:0c:07:e8:83:24:80:71:ca:bc:f5:dd: 53:f1:f2:85:99:01:0b:be:8a:4d:9b:0f:df:09:e9: ee:f1:76:7b:ac:88:08:f8:d1:4f:5f:c6:b1:54:04: 64:1b:cc:63:47:bd:0f:59:d8:f5:be:2c:15:7d:50: 74:37:a6:09:02:27:90:71:c7:79:ac:40:cd:2b:ef: f3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9D:9D:8D:85:2A:67:55:E7:9F:DD:09:DE:B1:B2:0F:7D:B0:E9:CB X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:8b:ee:f1:87:6c:f9:ed:84:1a:04:87:72:3f:60:6e:d3:85: e2:b7:dd:1c:f4:2c:28:e8:c9:97:ee:a8:8f:4c:1d:ec:9e:68: f4:7f:7f:a4:27:0f:4f:9f:b2:f6:69:6d:a4:3b:79:a5:da:7f: d2:35:04:ec:87:72:80:00:53:8f:1e:3f:f9:11:f8:ec:49:80: 70:37:20:8b:9b:78:20:bd:06:c4:e1:45:cf:ee:72:b8:d3:83: 70:39:9f:8f:14:6e:71:67:75:f4:00:b4:49:2f:a4:80:01:f1: 92:18:52:0b:8b:f1:e1:4f:32:f4:62:21:5e:54:8d:21:f8:36: 56:51:84:10:d3:36:8e:c7:36:fc:b1:19:af:2f:73:f1:e2:f3: 81:0a:b0:dd:71:c9:e6:da:d3:09:ea:70:aa:02:3d:78:b9:7d: 1b:92:dc:50:31:4b:50:c3:77:4f:59:61:52:2a:fc:0f:31:17: dd:6e:a7:00:91:6d:9e:54:f1:d3:f2:f4:88:42:b1:f8:ba:32: 3f:fc:88:13:26:2c:f9:5f:3d:33:11:47:5f:59:1e:6b:0d:01: f2:09:d5:5a:ac:a7:7d:ca:fc:ba:55:91:9c:91:3c:12:aa:8c: e6:15:cf:90:dd:e8:8c:79:63:f1:ef:ed:b0:2f:61:8f:56:94: a3:7d:e8:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5 NTREREMwRTUwHhcNMjYwMTA5MDMxOTEyWhcNMjYwMTE2MDMxOTEyWjAYMRYwFAYD VQQDDA02OTYwNzNiMS00ZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hIdv0L4Jrr3s3Z3GV0YS4+t65icl53NAy0Cv0w5e2DZI40HeK85nfXFcksf KW8HHX+NylJudaRyMQ8bvAnNAnLGbrogKfmXo9FY0W/TCgl6XfOzZnNYhVC7996r HPenm9vH2havqRa1l7ib0rBG6gKYc/pgbhz3bt3l4foq92BZD0C1t8+VC0OqPLCq kc5APstuq45FPitpy2LkqYUswlQRE+g5D49SqzyI/VMYmu/akV9yYiYZDAfogySA ccq89d1T8fKFmQELvopNmw/fCenu8XZ7rIgI+NFPX8axVARkG8xjR70PWdj1viwV fVB0N6YJAieQccd5rEDNK+/zSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSdnY2F KmdV55/dCd6xsg99sOnLMB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3 T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VC YkNCa3BXNVRnODJWVGR3T1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDi+7xh2z57YQaBIdyP2Bu04Xit90c9Cwo6MmX7qiPTB3snmj0f3+k Jw9Pn7L2aW2kO3ml2n/SNQTsh3KAAFOPHj/5EfjsSYBwNyCLm3ggvQbE4UXP7nK4 04NwOZ+PFG5xZ3X0ALRJL6SAAfGSGFILi/HhTzL0YiFeVI0h+DZWUYQQ0zaOxzb8 sRmvL3Px4vOBCrDdccnm2tMJ6nCqAj14uX0bktxQMUtQw3dPWWFSKvwPMRfdbqcA kW2eVPHT8vSIQrH4ujI//IgTJiz5Xz0zEUdfWR5rDQHyCdVarKd9yvy6VZGckTwS qozmFc+Q3eiMeWPx7+2wL2GPVpSjfeh8 -----END CERTIFICATE-----Generated at Fri Jan 9 09:38:53 2026 by rpki-client