This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: 50buaG3OdA6Gs3irHd+A/Wy91jLowncDwTE+pjknyTo= Subject key identifier: 3E:3A:BE:66:17:5A:15:E9:DE:EE:49:1E:01:44:D7:75:F5:BF:FA:54 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 0158 Signing time: Fri 19 Dec 2025 03:30:48 +0000 Manifest this update: Fri 19 Dec 2025 03:30:48 +0000 Manifest next update: Fri 26 Dec 2025 03:30:48 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: yO8S6aniyq/ldy4IgslidZSsOPYRExeDbSNZotnG2dA=) 2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 1JT4JL5zieWvYxgXcbCI6LK5Unc1DnkiTfLB/8ABEcM=) 3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Zgo+bSd3ddxUsWa4WgDo/fUl+UPnYadDGveXRl2dsm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Dec 19 03:30:48 2025 GMT Not After : Dec 26 03:30:48 2025 GMT Subject: CN=6944c6e8-bc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:a7:a5:2a:25:32:9c:e7:e1:66:ba:42:e8: 7b:4b:07:0c:d4:2e:05:03:f1:01:aa:8b:c4:fd:14: 68:27:82:4e:cd:98:4a:08:2f:93:f1:60:90:4d:3a: 9a:86:69:b0:a7:c8:54:ee:45:e4:94:6d:a4:cb:f4: cb:a5:30:3c:f0:32:ef:15:bf:55:07:64:48:e5:f2: 07:50:33:d7:0e:da:4f:42:ff:85:31:17:90:e6:d3: f3:ec:9d:6b:47:12:93:df:15:e7:d5:60:9b:54:8d: f0:7e:60:cb:0f:57:56:b2:4b:e5:28:ca:4a:ae:31: 07:74:39:de:0f:62:2c:b5:0e:ac:85:ab:59:0c:ec: 27:8f:cc:ba:9c:fc:d8:09:39:b3:47:4f:dc:21:b9: d8:71:b1:0a:d3:60:4b:72:5f:49:1f:34:38:f3:9d: 2a:81:8b:c2:69:58:0b:d6:61:17:83:25:c3:f7:9d: 6d:dc:7a:9b:58:9a:f5:f4:81:e4:b3:f6:4a:a5:af: 16:2c:2e:e7:de:74:e4:de:f9:1b:67:b3:3d:c9:26: 70:cd:8e:60:83:4c:fb:bb:68:9f:6f:11:91:68:9c: de:fe:5f:06:1c:cb:ec:fc:b3:be:36:9c:74:97:1c: 75:f2:d6:56:6c:f4:6f:b1:62:01:be:64:0b:68:9f: 77:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3A:BE:66:17:5A:15:E9:DE:EE:49:1E:01:44:D7:75:F5:BF:FA:54 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:30:f0:12:e9:3a:c1:c0:05:c7:0e:52:17:ee:12:23:93:82: 8e:a4:7c:c2:ba:c9:28:05:94:e3:18:53:8b:78:29:5b:bb:f0: cf:d5:c9:d6:23:48:30:0c:63:c9:d3:15:73:e0:ac:5f:89:a2: c7:a5:19:e0:c9:0a:7d:1f:33:e2:36:bb:e5:ff:9f:58:1d:b6: 67:44:32:09:b7:ee:a8:60:e1:2f:71:64:70:34:64:ca:c8:59: 98:ee:96:72:a1:fa:db:df:d4:aa:60:81:9d:a6:8f:4b:3f:75: 40:3f:80:9f:79:4d:7c:16:af:28:43:57:c4:6e:57:96:b3:33: 8d:ef:b6:cd:e9:ae:8a:92:cb:a3:7a:ac:4e:ea:22:07:f9:17: c5:5e:cb:66:80:01:49:1a:cf:34:a8:39:80:a1:2d:5c:b3:e9: bf:62:96:6d:b8:7a:47:45:f8:bf:58:d0:3a:e4:fc:73:50:a2: 50:a0:d0:42:71:99:35:07:97:49:ac:c5:32:0c:4d:7b:1f:06: 24:07:1e:9d:b7:aa:9f:6e:a2:05:75:90:ca:46:78:ec:3e:44: 00:af:f0:8e:ea:a3:08:72:cf:52:60:25:a2:d6:12:14:21:dd: 31:c6:b7:9f:a8:25:d2:e9:75:08:bc:ed:0a:87:19:94:5e:93: b0:0a:2e:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjUxMjE5MDMzMDQ4WhcNMjUxMjI2MDMzMDQ4WjAYMRYwFAYD VQQDDA02OTQ0YzZlOC1iYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthSnpSolMpzn4Wa6Quh7SwcM1C4FA/EBqovE/RRoJ4JOzZhKCC+T8WCQTTqa hmmwp8hU7kXklG2ky/TLpTA88DLvFb9VB2RI5fIHUDPXDtpPQv+FMReQ5tPz7J1r RxKT3xXn1WCbVI3wfmDLD1dWskvlKMpKrjEHdDneD2IstQ6shatZDOwnj8y6nPzY CTmzR0/cIbnYcbEK02BLcl9JHzQ4850qgYvCaVgL1mEXgyXD951t3HqbWJr19IHk s/ZKpa8WLC7n3nTk3vkbZ7M9ySZwzY5gg0z7u2ifbxGRaJze/l8GHMvs/LO+Npx0 lxx18tZWbPRvsWIBvmQLaJ93zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD46vmYX WhXp3u5JHgFE13X1v/pUMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALMPAS6TrBwAXHDlIX7hIjk4KOpHzCuskoBZTjGFOLeClbu/DP1cnW I0gwDGPJ0xVz4KxfiaLHpRngyQp9HzPiNrvl/59YHbZnRDIJt+6oYOEvcWRwNGTK yFmY7pZyofrb39SqYIGdpo9LP3VAP4CfeU18Fq8oQ1fEbleWszON77bN6a6Kksuj eqxO6iIH+RfFXstmgAFJGs80qDmAoS1cs+m/YpZtuHpHRfi/WNA65PxzUKJQoNBC cZk1B5dJrMUyDE17HwYkBx6dt6qfbqIFdZDKRnjsPkQAr/CO6qMIcs9SYCWi1hIU Id0xxrefqCXS6XUIvO0KhxmUXpOwCi6l -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:52 2025 by rpki-client