This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json) Hash identifier: YWh9F6FfY0u3macmFmT+HDl+U73bVg/txL6kIW0UYSE= Subject key identifier: 3D:F1:D7:26:6A:13:53:47:B1:F3:C5:4F:B5:72:92:3B:12:9B:BE:4A Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 080C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft Manifest number: 0802 Signing time: Thu 18 Dec 2025 20:33:02 +0000 Manifest this update: Thu 18 Dec 2025 20:33:01 +0000 Manifest next update: Thu 25 Dec 2025 20:33:01 +0000 Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: I2t3ShChVkcVH3m8iNu2OUKPMMwdXYMsVJozXYJ2em8=) 2: 8C6AAF380AC511EB890DE026C4F9AE02.roa (hash: +LCAkAjuOva0wvpdg8eQD1RUB4/36WnSyP1+IZjx2KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: Dec 18 20:33:01 2025 GMT Not After : Dec 25 20:33:01 2025 GMT Subject: CN=694464fe-2569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:98:50:2f:11:cd:70:f7:8e:d3:21:da:1b: 77:27:52:4c:97:d7:d7:af:42:a3:dc:c7:a5:c7:19: 1c:a8:60:94:4a:5f:2a:5e:f4:39:89:27:28:c0:36: 6d:50:d4:1e:23:5a:b8:c2:f0:7d:f8:4a:ec:87:94: 8c:d1:67:68:cd:72:37:a2:a2:8e:91:ab:28:05:1e: 99:86:27:17:b5:f4:06:9c:65:66:5f:aa:54:e1:17: 4f:b9:8d:34:b8:65:56:85:2e:5e:e6:8a:1f:9a:8a: 5b:09:ac:4e:d2:bb:70:1c:bc:f9:64:cb:d0:70:4a: 01:86:97:e8:a7:b0:96:6a:2e:a2:36:c6:9e:5b:e1: 8e:b6:00:12:1d:37:a4:4d:64:30:d5:85:e6:be:dc: a5:98:4f:9d:47:0f:86:2a:ad:11:75:9c:e7:10:68: 27:ae:36:98:9b:b3:75:b1:6b:f8:74:ac:35:b7:ba: 97:67:15:66:d7:f1:de:db:6e:4f:b6:0d:5a:a6:17: 0f:2b:d8:13:17:a8:6a:9b:d1:4c:b9:ed:9c:c4:b1: 5a:3b:c0:a4:85:c7:f7:e6:38:e6:c8:67:dd:fc:eb: 87:73:94:33:18:d5:a1:fc:64:68:2e:a5:f2:bc:07: a4:52:c0:0f:97:15:1d:48:d9:54:73:4c:65:4d:ba: 1b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F1:D7:26:6A:13:53:47:B1:F3:C5:4F:B5:72:92:3B:12:9B:BE:4A X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ab:61:a6:37:22:0d:ff:f7:8a:98:f0:cd:b8:57:b5:6b:ec: f1:54:c8:34:bc:f4:56:ae:db:0f:ac:93:f8:99:db:89:25:36: d4:52:e0:5b:85:45:fe:a0:b2:56:d2:90:8a:c7:6e:b8:bc:45: 06:dd:50:41:6b:da:7c:be:14:b7:83:e7:16:d7:ff:19:24:6a: 6a:c5:b9:47:2b:92:34:f2:8d:77:9b:17:0b:9b:3d:31:23:84: 55:c9:aa:a4:33:6d:35:44:1d:e9:b5:ba:e7:16:5f:18:ff:da: 2c:93:1f:d0:7a:76:09:72:ce:7f:a0:b3:59:ff:13:85:da:bd: 1f:e0:44:64:c0:b2:b1:0a:60:7d:9f:72:01:27:bc:04:f2:d4: d2:af:b2:86:58:73:0a:c7:1c:5d:b5:51:c2:53:cb:9c:89:c4: 03:44:7f:e1:67:d1:43:27:5d:42:cd:8d:58:f2:2f:2f:ec:33: 01:a3:27:37:33:3e:d8:e5:59:a8:25:aa:12:70:6b:66:6e:5a: 77:3f:49:60:fb:d1:96:aa:80:e5:cf:f7:6a:09:c0:be:aa:4b: 3b:3d:99:45:80:5d:25:a0:99:c1:79:2a:94:4c:24:46:9b:e7: b2:65:6a:11:97:d9:57:69:ab:54:92:30:1c:d2:e2:a7:10:19: 0f:37:9f:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjUxMjE4MjAzMzAxWhcNMjUxMjI1MjAzMzAxWjAYMRYwFAYD VQQDDA02OTQ0NjRmZS0yNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosaYUC8RzXD3jtMh2ht3J1JMl9fXr0Kj3MelxxkcqGCUSl8qXvQ5iScowDZt UNQeI1q4wvB9+Ersh5SM0WdozXI3oqKOkasoBR6ZhicXtfQGnGVmX6pU4RdPuY00 uGVWhS5e5oofmopbCaxO0rtwHLz5ZMvQcEoBhpfop7CWai6iNsaeW+GOtgASHTek TWQw1YXmvtylmE+dRw+GKq0RdZznEGgnrjaYm7N1sWv4dKw1t7qXZxVm1/He225P tg1aphcPK9gTF6hqm9FMue2cxLFaO8Ckhcf35jjmyGfd/OuHc5QzGNWh/GRoLqXy vAekUsAPlxUdSNlUc0xlTbob4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3x1yZq E1NHsfPFT7VykjsSm75KMB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY ZVBWdGxSdHhMcmlIazBpa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJq2GmNyIN//eKmPDNuFe1a+zxVMg0vPRWrtsPrJP4mduJJTbUUuBb hUX+oLJW0pCKx264vEUG3VBBa9p8vhS3g+cW1/8ZJGpqxblHK5I08o13mxcLmz0x I4RVyaqkM201RB3ptbrnFl8Y/9oskx/QenYJcs5/oLNZ/xOF2r0f4ERkwLKxCmB9 n3IBJ7wE8tTSr7KGWHMKxxxdtVHCU8ucicQDRH/hZ9FDJ11CzY1Y8i8v7DMBoyc3 Mz7Y5VmoJaoScGtmblp3P0lg+9GWqoDlz/dqCcC+qks7PZlFgF0loJnBeSqUTCRG m+eyZWoRl9lXaatUkjAc0uKnEBkPN58+ -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:59 2025 by rpki-client