This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft File: hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json) Hash identifier: n0VCDn9tVFopacU8Y7YdM9at6KjTZWEAwylasqYkZd4= Subject key identifier: D4:DB:01:A3:F5:1C:B5:B4:D4:8D:F0:3C:F7:5F:30:EB:A5:A8:C5:82 Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 Certificate issuer: /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft Manifest number: 15 Signing time: Fri 19 Dec 2025 06:47:45 +0000 Manifest this update: Fri 19 Dec 2025 06:47:44 +0000 Manifest next update: Fri 26 Dec 2025 06:47:44 +0000 Files and hashes: 1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: Uz7rFXtnnGF65BCFN9jWK0uW+UP1IocIF8eAIclvmpc=) 2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: 2X/xAt2NpQgJSrpIK+jQKjbm6p9J7Q5z+jWa7ZqFy0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Validity Not Before: Dec 19 06:47:44 2025 GMT Not After : Dec 26 06:47:44 2025 GMT Subject: CN=6944f511-ec14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:3b:5a:3d:a1:79:44:93:50:ab:8a:ba:9d: 3a:a3:7f:ca:9f:c5:03:82:5e:c0:82:40:e1:7b:93: ca:ba:24:a9:77:ba:b9:a4:01:51:c7:70:b1:e2:33: d8:4a:40:13:30:8a:83:a3:ce:37:05:30:a0:9e:76: fd:02:7a:de:18:21:1a:7a:34:ed:37:c5:8f:70:15: 02:9b:d4:e4:91:38:fb:a4:cf:88:5f:80:d8:37:e4: 97:c9:0f:14:9d:80:52:a9:a3:e8:99:7d:d0:8b:5a: 27:31:1c:c8:d4:b2:e5:04:92:37:7b:87:6c:bd:57: a9:17:06:c4:89:c8:c1:e5:7f:5f:18:83:dc:b5:c9: 67:93:45:dc:3b:b6:4c:21:d5:ce:d1:69:4c:93:8d: b3:c5:c1:54:a0:35:fe:9e:42:bb:b0:43:56:8f:26: 49:06:4e:a8:8b:11:5f:bf:57:48:05:f1:8d:84:c2: 76:b2:b3:5a:29:d6:89:1c:c3:97:01:9d:59:8c:f0: ed:aa:ca:1b:9b:82:4c:a7:5d:a1:3d:a4:71:de:1d: 38:21:64:f7:1e:60:42:c5:3f:f8:7b:0a:70:6d:5c: bc:6e:76:42:19:e6:db:9c:52:e1:b4:30:7c:f9:37: d3:ae:ca:cc:1f:03:6d:6c:63:df:39:a4:a5:91:fd: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DB:01:A3:F5:1C:B5:B4:D4:8D:F0:3C:F7:5F:30:EB:A5:A8:C5:82 X509v3 Authority Key Identifier: keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:a5:9c:cf:5a:b2:e1:97:8c:98:7b:92:ad:fe:85:df:81:a0: 25:bf:94:a1:48:19:7d:7a:4a:38:ab:42:42:4c:49:b3:44:c2: b2:5a:43:a3:6b:37:ca:4f:9a:80:16:df:ae:68:cc:ce:6f:68: ad:a6:12:17:d1:9d:b9:e7:7b:4d:63:22:13:9e:bf:73:55:a1: bb:09:df:0d:9d:56:1f:e6:d1:83:29:37:cd:80:33:56:14:55: 92:01:b9:e3:2f:14:58:e1:0b:e8:4d:97:78:62:78:11:ea:1f: a2:37:f7:91:3e:4d:66:c2:1b:33:0d:e1:c6:56:53:fd:f6:6a: b7:55:55:b9:32:56:58:15:08:1e:54:48:af:c3:16:03:ef:e4: 60:bd:93:19:b3:60:be:6f:5d:e9:c5:f7:b0:c5:ef:26:e2:c1: bb:b3:0c:01:0a:e1:05:24:52:ee:5d:c8:9f:38:fa:6a:34:b6: 5a:c9:b2:eb:bd:c1:38:9c:54:0b:65:29:3d:76:78:92:1d:32: 85:61:a5:c0:b9:07:70:b3:fd:2d:3f:21:11:02:93:b8:f9:6d: ec:32:6b:9c:22:16:e0:3a:72:09:7a:16:85:b3:93:c2:e8:c5: 26:c4:2b:f6:14:71:fe:67:6e:51:64:1b:78:26:2f:9a:42:75: e7:7a:66:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTAxRTExMC8GA1UEBRMoODUwODdEMDhFREIzMzdFRTAxRUIxQUVFQjgxMkNCRUUz NEFEOEU2MzAeFw0yNTEyMTkwNjQ3NDRaFw0yNTEyMjYwNjQ3NDRaMBgxFjAUBgNV BAMMDTY5NDRmNTExLWVjMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCyztaPaF5RJNQq4q6nTqjf8qfxQOCXsCCQOF7k8q6JKl3urmkAVHHcLHiM9hK QBMwioOjzjcFMKCedv0Cet4YIRp6NO03xY9wFQKb1OSROPukz4hfgNg35JfJDxSd gFKpo+iZfdCLWicxHMjUsuUEkjd7h2y9V6kXBsSJyMHlf18Yg9y1yWeTRdw7tkwh 1c7RaUyTjbPFwVSgNf6eQruwQ1aPJkkGTqiLEV+/V0gF8Y2Ewnays1op1okcw5cB nVmM8O2qyhubgkynXaE9pHHeHTghZPceYELFP/h7CnBtXLxudkIZ5tucUuG0MHz5 N9OuyswfA21sY985pKWR/VjrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1NsBo/Uc tbTUjfA8918w66WoxYIwHwYDVR0jBBgwFoAUhQh9CO2zN+4B6xruuBLL7jStjmMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMDFFLzE0NDdDMEQ4QkVD ODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00QjZ4cnV1QkxMN2pTdGpt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFFoOUNPMnpOLTRCNnhydXVCTEw3alN0am1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MDFFLzE0NDdDMEQ4QkVDODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00 QjZ4cnV1QkxMN2pTdGptTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL2lnM9asuGXjJh7kq3+hd+BoCW/lKFIGX16SjirQkJMSbNEwrJaQ6Nr N8pPmoAW365ozM5vaK2mEhfRnbnne01jIhOev3NVobsJ3w2dVh/m0YMpN82AM1YU VZIBueMvFFjhC+hNl3hieBHqH6I395E+TWbCGzMN4cZWU/32ardVVbkyVlgVCB5U SK/DFgPv5GC9kxmzYL5vXenF97DF7ybiwbuzDAEK4QUkUu5dyJ84+mo0tlrJsuu9 wTicVAtlKT12eJIdMoVhpcC5B3Cz/S0/IRECk7j5bewya5wiFuA6cgl6FoWzk8Lo xSbEK/YUcf5nblFkG3gmL5pCded6Zmo= -----END CERTIFICATE-----Generated at Sat Dec 20 03:02:39 2025 by rpki-client