This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: 64aZmuW2+9rB96tzPkxHadac5CoqzFE+luYMevfpVZk= Subject key identifier: 3B:E4:5E:51:1C:F5:26:FA:05:A8:0B:6B:F4:40:3B:90:07:F8:A8:E6 Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 0648 Signing time: Thu 18 Dec 2025 22:03:02 +0000 Manifest this update: Thu 18 Dec 2025 22:03:01 +0000 Manifest next update: Thu 25 Dec 2025 22:03:01 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: FzShUhaQo4Te2O6vkSHk5lqZF4nPU3wICmeHPy6XDYU=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: nOPRhOoqijOGYbrCca4anAG0eCBEskX4mBeZ7DWXSH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: Dec 18 22:03:01 2025 GMT Not After : Dec 25 22:03:01 2025 GMT Subject: CN=69447a15-c823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:36:2c:72:22:25:89:e2:81:97:b6:a8:e6: 08:54:e9:f3:be:dc:40:87:d6:ef:3b:bc:8b:81:0f: cc:a4:22:3d:3d:88:18:70:25:3e:83:38:3a:c0:62: 1d:a7:f9:77:d5:87:35:0d:86:07:09:38:c0:0d:04: b0:6b:86:14:8c:e6:4f:08:e0:d7:b0:dd:b7:38:9b: 90:3e:47:4a:4f:9d:b9:da:46:90:ec:8c:0b:8a:d4: 81:2b:b7:af:77:ba:88:0a:7f:13:67:90:dc:06:69: 7a:5f:19:35:9d:69:0c:68:2d:7f:7f:81:55:cd:08: 0c:c4:43:f5:41:67:78:a1:72:4e:8f:15:61:96:e5: 24:5c:d3:2e:e5:dc:0b:03:89:c2:e7:8b:ef:e1:d0: 0b:67:f5:cb:37:3c:62:f1:0f:88:8f:e7:6a:3a:6c: 25:91:05:64:f3:18:41:88:8b:7b:37:1c:d8:e6:4a: 9f:29:9b:1f:b5:92:a5:64:b7:66:fa:61:48:1d:d4: 36:b1:e8:dd:cf:fc:7d:bb:b3:ba:f7:b4:48:83:bc: 98:d6:ca:bb:09:f0:fe:e6:c8:0e:3c:83:6e:22:3a: 8a:cc:3d:c5:8d:b3:d5:19:9d:4f:30:cf:3d:66:b5: e8:0c:38:e6:fa:7d:c1:39:85:eb:a5:6c:48:0a:36: 3c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E4:5E:51:1C:F5:26:FA:05:A8:0B:6B:F4:40:3B:90:07:F8:A8:E6 X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:10:8d:16:61:23:0f:11:38:4e:ec:39:80:6e:d8:31:04:95: e2:70:37:d2:e8:36:a8:dd:c8:51:16:0b:a3:21:19:e8:ee:4d: 2c:31:c7:14:b2:a3:8a:f3:01:97:98:d7:64:dc:1f:ac:a6:c5: 37:f0:e7:80:f9:55:2c:77:3a:0b:84:5a:30:47:3b:ee:91:15: ab:0d:0b:85:42:73:74:38:68:ae:1e:d7:28:0e:7f:d2:31:5f: 01:5e:e6:d0:d5:9c:cf:42:bc:fa:a0:00:fc:60:a0:bd:12:90: ce:3b:ee:f5:d7:4b:b7:33:1d:ab:a8:d8:3a:14:8c:51:f2:3c: b4:81:75:98:12:ee:29:bd:31:3d:b2:e5:96:a1:38:c7:d5:8e: 90:1d:2a:e8:40:a3:b1:a8:b5:41:46:90:55:12:c0:2c:54:46: be:58:0c:18:fe:d6:50:79:93:3b:89:fe:01:fc:6f:ad:b4:23: 0a:dc:7c:eb:fb:f5:83:c9:68:03:c2:7d:55:10:a4:ea:2a:16: 3c:7b:f1:4d:f6:32:0f:93:cf:25:53:a3:bd:bb:7b:01:bd:e7: 6c:72:e7:ab:6d:bf:bf:93:c8:d0:42:b6:19:e6:24:1d:d6:04: a7:5f:33:8e:ea:e1:92:cc:08:73:f5:00:97:a0:9b:c0:a4:0d: cb:43:74:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjUxMjE4MjIwMzAxWhcNMjUxMjI1MjIwMzAxWjAYMRYwFAYD VQQDDA02OTQ0N2ExNS1jODIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGo2LHIiJYnigZe2qOYIVOnzvtxAh9bvO7yLgQ/MpCI9PYgYcCU+gzg6wGId p/l31Yc1DYYHCTjADQSwa4YUjOZPCODXsN23OJuQPkdKT5252kaQ7IwLitSBK7ev d7qICn8TZ5DcBml6Xxk1nWkMaC1/f4FVzQgMxEP1QWd4oXJOjxVhluUkXNMu5dwL A4nC54vv4dALZ/XLNzxi8Q+Ij+dqOmwlkQVk8xhBiIt7NxzY5kqfKZsftZKlZLdm +mFIHdQ2sejdz/x9u7O697RIg7yY1sq7CfD+5sgOPINuIjqKzD3FjbPVGZ1PMM89 ZrXoDDjm+n3BOYXrpWxICjY8LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvkXlEc 9Sb6BagLa/RAO5AH+KjmMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcEI0WYSMPEThO7DmAbtgxBJXicDfS6Dao3chRFgujIRno7k0sMccU sqOK8wGXmNdk3B+spsU38OeA+VUsdzoLhFowRzvukRWrDQuFQnN0OGiuHtcoDn/S MV8BXubQ1ZzPQrz6oAD8YKC9EpDOO+7110u3Mx2rqNg6FIxR8jy0gXWYEu4pvTE9 suWWoTjH1Y6QHSroQKOxqLVBRpBVEsAsVEa+WAwY/tZQeZM7if4B/G+ttCMK3Hzr +/WDyWgDwn1VEKTqKhY8e/FN9jIPk88lU6O9u3sBvedscuerbb+/k8jQQrYZ5iQd 1gSnXzOO6uGSzAhz9QCXoJvApA3LQ3QI -----END CERTIFICATE-----Generated at Fri Dec 19 14:46:00 2025 by rpki-client