This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json) Hash identifier: BMeuvB+3FARscwwTHksdfqObFadO1zKKHqcI0nV44nE= Subject key identifier: 94:1E:E7:CE:C1:EE:19:FC:CB:C4:D2:0E:11:BB:F2:E1:35:40:E8:4D Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft Manifest number: B9 Signing time: Sun 21 Dec 2025 05:16:37 +0000 Manifest this update: Sun 21 Dec 2025 05:16:36 +0000 Manifest next update: Sun 28 Dec 2025 05:16:36 +0000 Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: PuqS6auFmIlHz4Mmix3J75FK1B2aps4r4mk5vaSEgUY=) 2: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: FHrz83TvBf0PQed/UPRQj7z6Reuifr4TTzu0H0Cz+Nc=) 3: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: usgzG5l4Fc/vVVRb6d9DCRrnc0s/zMN8s4ksanz/FtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Validity Not Before: Dec 21 05:16:36 2025 GMT Not After : Dec 28 05:16:36 2025 GMT Subject: CN=694782b4-4ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:90:03:6c:8f:23:61:24:0c:19:27:4a:6b: 7b:24:1d:49:a5:99:bb:9c:39:07:1a:57:fd:61:1f: 23:8b:f6:bf:b7:06:e1:52:14:cc:9b:0c:f6:e4:21: 18:1c:3b:02:05:5d:99:41:f2:0d:fa:70:31:a0:6f: 12:0d:fe:f9:eb:02:d3:b0:7c:f2:d5:48:22:4f:37: a3:86:d1:bc:d2:52:b8:42:b6:88:94:11:13:2b:56: 38:7f:c0:80:bf:82:a9:30:c1:b4:78:b7:d3:b1:cf: ba:7e:76:80:ed:ad:8e:4f:00:cb:f9:8a:89:42:d6: 9a:1e:dc:67:03:2a:32:06:51:0c:38:93:e4:c0:2c: 84:26:fb:91:78:34:26:8a:bb:8c:b9:b9:75:c2:b7: d8:f0:82:fa:a2:b1:e3:68:8e:1f:7b:0d:8a:9c:89: b7:42:2b:64:ba:f5:2e:62:98:1f:d1:d4:09:0e:b1: 36:89:25:66:9b:31:5e:74:7d:f9:f1:89:67:50:0f: 03:1a:83:74:09:02:cc:e7:89:45:c3:1c:c0:0f:29: bd:d9:4b:ae:23:a9:26:5c:2b:5e:c0:71:0f:00:c7: 7a:e7:b5:51:ac:b8:1d:0b:42:22:6c:26:cf:8c:ba: 35:36:37:bc:62:02:a6:06:12:f8:cf:9a:79:39:52: c8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1E:E7:CE:C1:EE:19:FC:CB:C4:D2:0E:11:BB:F2:E1:35:40:E8:4D X509v3 Authority Key Identifier: keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f8:89:5b:5f:04:bd:26:fc:5d:94:5c:ae:52:ee:43:7c:73: 72:1c:fc:83:51:21:38:05:3a:66:d8:70:16:99:12:dd:d5:2d: b5:e1:d5:15:d6:df:82:5e:a8:6d:86:13:3a:84:e3:f0:48:e2: 05:5b:05:83:0d:0e:b5:dc:11:2f:92:0f:ca:6a:38:f9:ef:ad: 61:66:58:3f:29:cb:bd:97:94:1f:2f:6e:73:ec:f4:ab:4b:0d: af:25:1a:7f:7e:c9:35:08:08:fa:7c:b7:bb:75:52:36:23:c0: d6:d4:0d:40:e0:aa:1e:10:fa:91:93:df:e3:04:93:0b:71:67: f1:c4:4e:a8:b2:8f:67:df:07:7d:20:7a:d4:13:e1:8a:e5:3c: b9:a6:b6:9f:89:fa:0d:a7:db:08:a0:0c:dc:a6:69:30:48:39: 36:c9:08:11:fb:ec:2d:82:9d:7a:32:cc:87:44:ae:fe:04:18: e3:55:64:d1:5b:fe:e2:90:5c:1a:77:24:b9:d0:0f:90:71:54: 7f:33:82:7e:e4:11:0e:7b:a7:3b:13:de:88:a5:da:9d:d0:74: fb:c6:c2:41:52:dc:98:d7:84:6b:f6:d5:93:5f:81:44:71:ee: 2c:e1:3d:f7:8d:8e:d5:01:3b:34:f3:42:3a:12:49:38:eb:3f: 79:c4:58:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxODAxMTAvBgNVBAUTKDg3REE0NEE0Q0Y4MzlDMzg4MUM2QkMzODY4M0NDREMz MDhDQTdDRTkwHhcNMjUxMjIxMDUxNjM2WhcNMjUxMjI4MDUxNjM2WjAYMRYwFAYD VQQDDA02OTQ3ODJiNC00Y2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTyQA2yPI2EkDBknSmt7JB1JpZm7nDkHGlf9YR8ji/a/twbhUhTMmwz25CEY HDsCBV2ZQfIN+nAxoG8SDf756wLTsHzy1UgiTzejhtG80lK4QraIlBETK1Y4f8CA v4KpMMG0eLfTsc+6fnaA7a2OTwDL+YqJQtaaHtxnAyoyBlEMOJPkwCyEJvuReDQm iruMubl1wrfY8IL6orHjaI4few2KnIm3QitkuvUuYpgf0dQJDrE2iSVmmzFedH35 8YlnUA8DGoN0CQLM54lFwxzADym92UuuI6kmXCtewHEPAMd657VRrLgdC0IibCbP jLo1Nje8YgKmBhL4z5p5OVLIkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQe587B 7hn8y8TSDhG78uE1QOhNMB8GA1UdIwQYMBaAFIfaRKTPg5w4gca8OGg8zcMIynzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDE4MC83NzQyODdGMkQ2 QzcxMUVGQTNFMUQ4MUNDNEY5QUUwMi9oOXBFcE0tRG5EaUJ4cnc0YUR6Tnd3aktm T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g5cEVwTS1EbkRpQnhydzRhRHpOd3dqS2ZPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDE4MC83NzQyODdGMkQ2QzcxMUVGQTNFMUQ4MUNDNEY5QUUwMi9oOXBFcE0tRG5E aUJ4cnc0YUR6Tnd3aktmT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH+IlbXwS9JvxdlFyuUu5DfHNyHPyDUSE4BTpm2HAWmRLd1S214dUV 1t+CXqhthhM6hOPwSOIFWwWDDQ613BEvkg/Kajj5761hZlg/Kcu9l5QfL25z7PSr Sw2vJRp/fsk1CAj6fLe7dVI2I8DW1A1A4KoeEPqRk9/jBJMLcWfxxE6oso9n3wd9 IHrUE+GK5Ty5prafifoNp9sIoAzcpmkwSDk2yQgR++wtgp16MsyHRK7+BBjjVWTR W/7ikFwadyS50A+QcVR/M4J+5BEOe6c7E96Ipdqd0HT7xsJBUtyY14Rr9tWTX4FE ce4s4T33jY7VATs080I6Ekk46z95xFgd -----END CERTIFICATE-----Generated at Sun Dec 21 08:46:41 2025 by rpki-client