This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: oFa8RveDhwr1fldiyKEFn2ULzhYuJURuJDJNpPK53tE= Subject key identifier: CC:FC:AC:BA:18:F4:F2:D8:4E:B9:FA:86:65:82:C7:4F:09:DA:BC:13 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0CCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0CAF Signing time: Thu 18 Dec 2025 18:06:18 +0000 Manifest this update: Thu 18 Dec 2025 18:06:18 +0000 Manifest next update: Thu 25 Dec 2025 18:06:18 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: 3j3BwQ4Ndijyj4TtMTiHssHDcmi7i5VqpfLPZ5nuPr4=) 2: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: nhOxYzG0rAWYRSzTLJPw39uwciMl2MDnLaJCFvQHhfM=) 3: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: rUTKhJ4mbBn/gtcjaqFary2usRDlDOu+VtUbm3mrKXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3277 (0xccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Dec 18 18:06:18 2025 GMT Not After : Dec 25 18:06:18 2025 GMT Subject: CN=6944429a-43c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:28:55:9c:f0:01:2a:f3:6c:3d:13:4b:bc:63: 55:2f:69:54:75:99:39:d0:0e:8b:a4:e6:ee:e2:f9: e0:68:0d:a5:59:cc:e0:74:8e:16:68:c1:42:7f:0f: a4:9e:bc:8c:80:c2:33:14:2a:0f:b4:02:74:cc:f4: f2:9f:2d:08:b0:3a:4d:df:c2:2e:9e:88:28:16:d3: cf:cd:bc:66:cc:67:83:24:56:09:6d:05:79:f3:15: 77:2a:b6:1b:f0:cc:8c:47:22:81:bd:f0:3a:10:05: 4b:3a:07:87:51:c9:23:fb:a3:bb:fb:b7:02:ae:70: c9:92:70:45:73:e1:fd:bf:69:2a:03:6c:ca:bc:0f: 35:c5:8d:ad:60:c7:4b:1c:3d:45:98:27:f8:7f:24: 3c:86:b0:eb:32:df:64:1c:aa:6f:79:a2:96:20:7c: 77:ba:06:36:ce:a9:e0:9c:14:80:55:3b:b1:c2:bb: 29:10:77:85:22:f9:89:b3:2d:75:4f:fd:df:0a:49: e6:00:41:70:d5:3f:5e:59:c7:11:89:e6:4d:1e:3a: ac:1b:77:46:6e:08:30:d8:e8:00:13:4c:9d:6b:2d: c6:f2:70:ef:f6:ea:db:c1:14:b9:d8:7c:88:83:ac: 8e:98:10:da:65:24:be:d9:ba:01:c9:b1:c1:cb:0a: 3a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FC:AC:BA:18:F4:F2:D8:4E:B9:FA:86:65:82:C7:4F:09:DA:BC:13 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:43:52:47:93:d7:b8:e8:9f:19:57:e8:04:26:19:95:88:f7: 45:16:c6:d3:1d:6c:53:c1:30:17:d8:16:48:c8:23:57:11:ac: 87:bf:4d:96:bb:06:07:60:18:a9:98:c7:3c:67:f3:af:fa:b0: 3b:82:47:bf:15:54:2d:57:93:75:dd:52:ac:cc:6f:74:58:21: 08:a8:8a:84:f5:06:c3:dd:c2:c7:b6:97:c8:64:73:13:31:68: 28:cb:3b:9d:fe:00:f6:57:48:c0:49:58:1d:f4:9a:68:33:dc: 56:e3:c6:a6:7a:b2:b3:b0:bd:4a:ca:75:73:95:c8:46:03:26: 1d:f2:ee:9d:47:5e:bf:3e:06:40:bc:46:dc:af:df:1c:3f:40: c7:36:68:f0:d0:ac:07:d7:c6:1a:3b:2b:89:4c:d0:54:66:a6: e9:c6:f8:f0:91:dc:6b:e3:5b:d0:68:45:50:a6:1c:7e:7b:2c: 50:52:a3:f6:a3:da:0e:91:c3:61:b9:2e:6a:09:41:0a:1a:f7: d4:80:37:02:84:a4:63:c4:36:b6:e8:a7:3c:f8:4b:69:25:9c: 6b:e2:5b:45:d4:f8:af:c5:16:84:49:5e:65:02:7c:93:10:45: 98:70:09:23:24:d4:dc:bf:e7:81:25:c6:dd:25:9f:ab:4c:33: d6:2c:4c:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUxMjE4MTgwNjE4WhcNMjUxMjI1MTgwNjE4WjAYMRYwFAYD VQQDDA02OTQ0NDI5YS00M2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ChVnPABKvNsPRNLvGNVL2lUdZk50A6LpObu4vngaA2lWczgdI4WaMFCfw+k nryMgMIzFCoPtAJ0zPTyny0IsDpN38IunogoFtPPzbxmzGeDJFYJbQV58xV3KrYb 8MyMRyKBvfA6EAVLOgeHUckj+6O7+7cCrnDJknBFc+H9v2kqA2zKvA81xY2tYMdL HD1FmCf4fyQ8hrDrMt9kHKpveaKWIHx3ugY2zqngnBSAVTuxwrspEHeFIvmJsy11 T/3fCknmAEFw1T9eWccRieZNHjqsG3dGbggw2OgAE0yday3G8nDv9urbwRS52HyI g6yOmBDaZSS+2boBybHBywo6EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMz8rLoY 9PLYTrn6hmWCx08J2rwTMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHQ1JHk9e46J8ZV+gEJhmViPdFFsbTHWxTwTAX2BZIyCNXEayHv02W uwYHYBipmMc8Z/Ov+rA7gke/FVQtV5N13VKszG90WCEIqIqE9QbD3cLHtpfIZHMT MWgoyzud/gD2V0jASVgd9JpoM9xW48amerKzsL1KynVzlchGAyYd8u6dR16/PgZA vEbcr98cP0DHNmjw0KwH18YaOyuJTNBUZqbpxvjwkdxr41vQaEVQphx+eyxQUqP2 o9oOkcNhuS5qCUEKGvfUgDcChKRjxDa26Kc8+EtpJZxr4ltF1PivxRaESV5lAnyT EEWYcAkjJNTcv+eBJcbdJZ+rTDPWLEzR -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:21 2025 by rpki-client