This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json) Hash identifier: XW7yYhhqpbwi/hj2BLBCZC6N6ySBpSHPPuS88PGa9mI= Subject key identifier: A4:CD:01:48:12:E0:11:34:91:52:EE:99:8D:11:0F:E3:11:DD:6F:2E Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft Manifest number: 0164 Signing time: Sat 27 Dec 2025 03:02:38 +0000 Manifest this update: Sat 27 Dec 2025 03:02:38 +0000 Manifest next update: Sat 03 Jan 2026 03:02:38 +0000 Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: 4EDsdjo3cYKlU/i4xxp/NhPL7Q7KINMP1hB1T4ud+SQ=) 2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: 5W+7nQ6sUflibilCBlXCdge8iT2G6A6aLqY201MPVEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 03:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Validity Not Before: Dec 27 03:02:38 2025 GMT Not After : Jan 3 03:02:38 2026 GMT Subject: CN=694f4c4e-6954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:47:2e:4d:1b:e5:ed:03:e0:50:bc:97:42: 89:23:bd:a2:89:88:37:f5:0c:98:98:a5:c9:99:95: c4:75:a3:5a:46:eb:38:9e:60:95:6b:92:94:64:9d: c4:61:59:04:7b:f7:b1:24:b0:79:cf:47:23:53:bc: c1:84:79:fd:b5:3b:96:46:72:8e:7b:7f:2e:e8:c2: 82:ec:7a:77:51:52:da:f8:7a:51:74:d9:2d:9f:4a: 31:b0:cb:31:05:b9:02:5c:19:d2:12:ce:ca:03:06: c9:39:e0:5c:ab:e2:54:62:da:67:ef:84:40:6e:25: 6f:87:06:ca:6f:ef:a7:42:4e:6b:ff:e9:85:79:a7: a3:a3:12:a7:e4:6f:9e:9e:16:8a:01:7a:d8:36:eb: 7d:2a:38:9d:41:15:59:cc:32:3a:ad:a9:95:b0:08: 1c:a2:ef:30:fb:f8:ec:07:e1:56:90:0a:55:89:df: 09:ac:16:17:90:67:c8:d9:64:12:8b:76:d8:21:cf: 12:1d:af:2b:54:11:df:1a:b3:f1:9a:61:91:de:d3: 60:1d:5e:fb:24:6a:ed:cc:8e:a7:23:b4:df:f8:c5: 78:9b:2f:da:8d:ae:f5:95:56:98:bb:f2:a1:0e:b1: cc:ff:74:64:95:4f:98:6c:8f:fa:c6:31:06:54:5e: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CD:01:48:12:E0:11:34:91:52:EE:99:8D:11:0F:E3:11:DD:6F:2E X509v3 Authority Key Identifier: keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:43:86:fd:84:a1:d7:56:ef:56:7d:c7:03:28:98:3d:4e:2d: d0:0f:ae:12:49:f3:f3:b4:89:64:c6:6d:d4:39:8f:95:ba:39: 8b:66:e3:05:3f:3b:51:a2:fd:8b:26:84:48:ea:91:f7:45:88: ab:af:2e:2c:1d:61:b8:8d:37:32:d2:ab:d8:ce:29:74:44:2f: ca:d9:4b:50:59:c6:7c:11:c0:00:ca:69:19:9c:e5:9c:f4:0c: 1f:e0:d5:f8:cc:8b:39:34:18:c0:44:b0:42:5b:38:b2:fc:2a: ca:71:b3:67:04:ea:46:e0:7d:e4:c3:44:69:26:a9:d4:d5:ef: 40:ff:16:ff:93:9c:bb:ba:12:2c:ae:66:2a:8f:43:ea:79:ec: 77:ff:7d:83:fa:21:38:e3:76:be:4f:ac:11:3f:07:a1:a3:96: 38:06:46:33:ff:0a:6a:76:43:83:10:96:8e:63:be:dc:ff:db: 40:79:59:29:28:c8:a8:8b:c6:3e:3f:07:b9:4d:9b:2e:36:2e: 09:4a:d7:37:dd:3d:df:a3:ef:e4:a9:43:34:c6:ad:ea:2c:76: 0e:e8:13:32:aa:7d:7c:c0:f3:9f:31:84:9c:f6:92:a3:49:82: 61:22:a7:8d:4d:15:bc:5f:d2:63:5a:d8:da:ce:9b:b4:5d:52: 09:8a:1e:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKDFERjlDMENFRjlBNzdEQ0QxNUJCNTFGOTNGRDM0Mjk5 OUJFMTE2NTgwHhcNMjUxMjI3MDMwMjM4WhcNMjYwMTAzMDMwMjM4WjAYMRYwFAYD VQQDDA02OTRmNGM0ZS02OTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzNHLk0b5e0D4FC8l0KJI72iiYg39QyYmKXJmZXEdaNaRus4nmCVa5KUZJ3E YVkEe/exJLB5z0cjU7zBhHn9tTuWRnKOe38u6MKC7Hp3UVLa+HpRdNktn0oxsMsx BbkCXBnSEs7KAwbJOeBcq+JUYtpn74RAbiVvhwbKb++nQk5r/+mFeaejoxKn5G+e nhaKAXrYNut9KjidQRVZzDI6ramVsAgcou8w+/jsB+FWkApVid8JrBYXkGfI2WQS i3bYIc8SHa8rVBHfGrPxmmGR3tNgHV77JGrtzI6nI7Tf+MV4my/aja71lVaYu/Kh DrHM/3RklU+YbI/6xjEGVF4DZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTNAUgS 4BE0kVLumY0RD+MR3W8uMB8GA1UdIwQYMBaAFB35wM75p33NFbtR+T/TQpmb4RZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9DMjg2MDMyRUM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZjMFZ1MUg1UDlOQ21admhG bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmbkF6dm1uZmMwVnUxSDVQOU5DbVp2aEZsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9DMjg2MDMyRUM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZj MFZ1MUg1UDlOQ21admhGbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdQ4b9hKHXVu9WfccDKJg9Ti3QD64SSfPztIlkxm3UOY+VujmLZuMF PztRov2LJoRI6pH3RYirry4sHWG4jTcy0qvYzil0RC/K2UtQWcZ8EcAAymkZnOWc 9Awf4NX4zIs5NBjARLBCWziy/CrKcbNnBOpG4H3kw0RpJqnU1e9A/xb/k5y7uhIs rmYqj0Pqeex3/32D+iE443a+T6wRPweho5Y4BkYz/wpqdkODEJaOY77c/9tAeVkp KMioi8Y+Pwe5TZsuNi4JStc33T3fo+/kqUM0xq3qLHYO6BMyqn18wPOfMYSc9pKj SYJhIqeNTRW8X9JjWtjazpu0XVIJih6/ -----END CERTIFICATE-----Generated at Sun Dec 28 23:21:40 2025 by rpki-client