This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json) Hash identifier: HB5V16bZQaNKR6E+dk/bKGFYe+5kN5/orPLxliYMx1E= Subject key identifier: D0:E6:9D:85:0D:C7:E7:0F:D1:58:91:8E:67:2F:EC:91:F7:32:DA:6F Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft Manifest number: 0239 Signing time: Fri 19 Dec 2025 01:09:26 +0000 Manifest this update: Fri 19 Dec 2025 01:09:25 +0000 Manifest next update: Fri 26 Dec 2025 01:09:25 +0000 Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: kW0ofWYpbAGypVecEywGJRcTOysXYKnfEw5MFUTFhxw=) 2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: k1Zwpv5X+PU26A87kFtIjFMNyUjqNWGBGW/MolkeBNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ED8, serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Validity Not Before: Dec 19 01:09:25 2025 GMT Not After : Dec 26 01:09:25 2025 GMT Subject: CN=6944a5c6-b6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0f:7d:9a:c5:42:96:e6:83:35:ef:ff:ac:c4: d1:dd:07:14:21:9d:39:d4:5a:34:5a:fc:2c:d4:e0: be:ff:b6:fd:41:4f:7d:a9:2a:62:09:96:3f:52:d4: 3e:84:77:4d:cf:63:94:5f:8d:ec:ec:9c:db:87:b6: 92:1f:f2:e6:79:13:8d:40:b6:c2:f6:42:82:df:a4: df:5c:52:dd:46:c1:09:df:06:a2:d8:50:32:d3:4c: 98:b6:45:03:49:3b:39:aa:ed:e4:5a:3a:9e:9e:3d: 32:a4:90:72:b6:f2:f2:2e:03:a9:8d:6c:9b:b1:80: aa:5d:5f:54:75:10:73:c8:6c:b2:de:0f:d1:cf:4c: 1a:5e:70:12:b5:ec:d6:b1:7d:48:73:d9:43:a5:26: 6b:3a:d2:e2:b2:84:3b:8e:45:21:f8:1b:84:ff:3b: ed:55:71:ce:26:ef:41:18:c2:c4:06:fd:15:1f:2a: 25:87:7d:1e:9e:fc:d2:51:07:b4:0e:7c:38:91:82: 04:8a:ca:51:dd:ad:02:df:4a:0c:47:12:bb:9c:fe: c8:73:91:68:0b:f1:c4:94:ed:d7:f7:01:a3:11:62: 3c:f3:4c:68:47:a7:ee:06:b4:0a:83:de:cb:a3:45: 3b:78:91:15:81:f6:38:41:1c:f0:ca:dd:1b:a9:f0: 73:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E6:9D:85:0D:C7:E7:0F:D1:58:91:8E:67:2F:EC:91:F7:32:DA:6F X509v3 Authority Key Identifier: keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:dc:7e:37:d6:a4:7a:ce:38:6b:44:cf:4f:ac:0c:77:29:8c: 5d:1b:b9:8f:99:9b:7f:d0:55:3a:42:56:18:d0:6c:73:96:7f: 01:8b:8d:89:da:b4:7d:ed:f9:e0:63:07:f2:97:a3:52:bd:0c: b7:89:65:98:56:77:25:a5:bc:0e:30:49:bf:b1:45:39:22:99: 7e:d5:91:85:4b:bc:23:b1:4b:92:f7:bf:46:f8:9f:66:b4:aa: 9b:0d:d2:2f:d5:5a:ad:f8:ce:c1:47:9d:19:fd:94:e2:31:68: 41:ed:97:d9:c6:6a:83:a0:22:18:f4:68:60:4c:3b:cf:f6:01: f4:fb:36:5a:22:61:f2:96:e6:7a:1d:ca:42:32:d8:44:36:f9: 6c:41:f8:e7:84:c4:39:7f:03:0a:0b:56:8d:0f:85:34:90:f9: dd:da:c2:aa:2f:f5:23:95:5d:97:59:04:e8:aa:35:eb:d8:ea: 09:4f:8c:0e:91:34:64:5a:50:0e:94:7c:45:ed:57:08:15:0e: 60:a7:87:1e:50:61:94:3e:3a:0e:ec:54:29:de:02:3c:1b:3c: 74:f8:85:0d:df:e5:b6:b8:fa:90:39:3a:ce:b6:e2:bd:9b:7c: d4:a1:5e:a0:6d:7b:74:ac:51:67:f4:96:48:b7:c5:cb:fb:c6: d9:77:09:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRDgxMTAvBgNVBAUTKDFGREY4OEIzNTlGNDQ4RUQ0QzcxMkY5RjE1N0QwODND QzIxMTRDMTQwHhcNMjUxMjE5MDEwOTI1WhcNMjUxMjI2MDEwOTI1WjAYMRYwFAYD VQQDDA02OTQ0YTVjNi1iNmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3g99msVCluaDNe//rMTR3QcUIZ051Fo0Wvws1OC+/7b9QU99qSpiCZY/UtQ+ hHdNz2OUX43s7Jzbh7aSH/LmeRONQLbC9kKC36TfXFLdRsEJ3wai2FAy00yYtkUD STs5qu3kWjqenj0ypJBytvLyLgOpjWybsYCqXV9UdRBzyGyy3g/Rz0waXnAStezW sX1Ic9lDpSZrOtLisoQ7jkUh+BuE/zvtVXHOJu9BGMLEBv0VHyolh30envzSUQe0 Dnw4kYIEispR3a0C30oMRxK7nP7Ic5FoC/HElO3X9wGjEWI880xoR6fuBrQKg97L o0U7eJEVgfY4QRzwyt0bqfBzqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDmnYUN x+cP0ViRjmcv7JH3MtpvMB8GA1UdIwQYMBaAFB/fiLNZ9EjtTHEvnxV9CDzCEUwU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VEOC8zQzU1MzNBRTcy RDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNPMU1jUy1mRlgwSVBNSVJU QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5LUlzMW4wU08xTWNTLWZGWDBJUE1JUlRCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VEOC8zQzU1MzNBRTcyRDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNP MU1jUy1mRlgwSVBNSVJUQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+3H431qR6zjhrRM9PrAx3KYxdG7mPmZt/0FU6QlYY0Gxzln8Bi42J 2rR97fngYwfyl6NSvQy3iWWYVnclpbwOMEm/sUU5Ipl+1ZGFS7wjsUuS979G+J9m tKqbDdIv1Vqt+M7BR50Z/ZTiMWhB7ZfZxmqDoCIY9GhgTDvP9gH0+zZaImHyluZ6 HcpCMthENvlsQfjnhMQ5fwMKC1aND4U0kPnd2sKqL/UjlV2XWQToqjXr2OoJT4wO kTRkWlAOlHxF7VcIFQ5gp4ceUGGUPjoO7FQp3gI8Gzx0+IUN3+W2uPqQOTrOtuK9 m3zUoV6gbXt0rFFn9JZIt8XL+8bZdwlA -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:42 2025 by rpki-client