This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft File: hM4p-GFBrPuKdekE8CcjhS3mMzg.mft (raw, json) Hash identifier: 2j8G674YE2NAXNhcLIlxJsIRmTTySqgbW2pZziHSEYo= Subject key identifier: 79:FF:15:B0:3C:F0:41:B8:4D:67:A3:6C:E2:51:24:AF:5D:AB:F4:24 Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 Certificate issuer: /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Certificate serial: 0A92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft Manifest number: 0A89 Signing time: Thu 04 Dec 2025 18:52:58 +0000 Manifest this update: Thu 04 Dec 2025 18:52:57 +0000 Manifest next update: Thu 11 Dec 2025 18:52:57 +0000 Files and hashes: 1: hM4p-GFBrPuKdekE8CcjhS3mMzg.crl (hash: Nb7usU+ON6Jfli8rPocomlVkZ9Y9KESjX0qEL3BoHjs=) 2: 267A24046E7D11EAADB09659C4F9AE02.roa (hash: 3bopi4jiFY/1Loa4aKzVKdm1Wqw6EWIsHmdkMoO5oMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2706 (0xa92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FFB, serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Validity Not Before: Dec 4 18:52:57 2025 GMT Not After : Dec 11 18:52:57 2025 GMT Subject: CN=6931d88a-ad39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:95:3e:12:20:95:4c:15:d8:4d:73:8e:65: fb:35:03:3b:ce:11:c3:a2:22:b9:84:e2:07:f5:a4: 3f:eb:1d:3d:34:9a:05:aa:84:fb:1d:2b:0c:96:35: 35:39:e8:c2:98:dd:86:ac:4c:9c:d4:17:ad:11:96: 81:05:a5:3b:e0:d6:6c:c8:f5:bd:82:76:c6:a6:8c: 10:e2:92:51:a3:55:27:7f:fa:83:ad:bb:e1:70:3c: f5:11:98:fe:af:d7:4b:67:fb:fc:8f:2d:cc:e5:b7: 5b:2e:5c:d8:5d:62:85:92:c7:6f:c4:07:d3:90:ea: 13:d7:a6:9e:a7:95:ba:2d:d0:d4:e0:a4:a3:2c:2b: 28:1a:db:3f:30:88:cb:74:ce:cf:d8:b0:68:a4:bd: f5:4b:b8:bc:0f:ce:df:3a:32:39:f1:3e:00:0c:f9: af:3c:9c:c8:61:fb:10:1a:1f:e4:a6:c7:95:ae:98: 94:51:4c:ab:8c:90:c5:d7:fb:bb:0e:84:26:cc:93: 08:82:0e:13:75:bc:5b:2c:ed:59:dd:e6:33:e9:04: 69:e8:08:c0:34:71:be:13:e3:ac:ab:3d:73:90:c0: eb:b5:6b:9b:a7:be:ae:e1:4c:09:cd:87:c9:5f:3e: de:4e:e8:58:95:b4:b8:ab:9a:f8:73:c1:e4:22:f3: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FF:15:B0:3C:F0:41:B8:4D:67:A3:6C:E2:51:24:AF:5D:AB:F4:24 X509v3 Authority Key Identifier: keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f4:bb:9c:32:1c:21:1b:c4:db:e0:34:b4:c2:b0:3b:3a:fd: 31:f6:d9:93:42:66:0e:20:5b:8c:d4:1d:18:d1:ae:9b:61:f5: 1b:fa:a6:03:96:51:85:57:94:89:24:33:5a:cb:64:ef:fd:2d: 87:a9:1c:12:21:a3:7f:ff:b8:f6:d6:dd:10:36:e3:c2:34:4d: 4c:cd:c2:30:c5:cf:d9:7a:7d:e3:4e:12:d2:48:42:97:de:b2: ff:50:23:d9:c9:91:c5:c4:0a:45:39:03:9e:03:42:ee:10:08: e0:34:2c:e6:b7:f7:bc:9b:f2:18:43:2c:d1:38:d5:3e:d0:d8: c9:d5:a7:8f:ec:9c:5d:07:c4:d5:d3:9a:c0:15:42:d2:de:15: 1a:45:ab:2b:e9:d2:7b:78:95:6c:f3:a9:9c:5e:cd:7f:29:0a: 8f:e8:b0:57:0e:f8:78:eb:05:73:a6:be:54:fb:50:1f:f8:ed: a6:6e:89:1c:9a:0a:61:df:a7:64:b3:c2:04:90:77:79:ce:99: 1c:ed:df:15:c7:a0:df:98:ec:8a:d4:1d:75:5f:df:33:62:d8: ac:3d:95:df:0b:01:a0:50:63:cf:d0:bd:f9:18:a8:7b:4a:bc: f5:4a:79:3f:23:85:d2:3b:f2:c7:d1:4c:d2:4f:20:95:f6:34: 00:d8:76:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGRkIxMTAvBgNVBAUTKDg0Q0UyOUY4NjE0MUFDRkI4QTc1RTkwNEYwMjcyMzg1 MkRFNjMzMzgwHhcNMjUxMjA0MTg1MjU3WhcNMjUxMjExMTg1MjU3WjAYMRYwFAYD VQQDEw02OTMxZDg4YS1hZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1o6VPhIglUwV2E1zjmX7NQM7zhHDoiK5hOIH9aQ/6x09NJoFqoT7HSsMljU1 OejCmN2GrEyc1BetEZaBBaU74NZsyPW9gnbGpowQ4pJRo1Unf/qDrbvhcDz1EZj+ r9dLZ/v8jy3M5bdbLlzYXWKFksdvxAfTkOoT16aep5W6LdDU4KSjLCsoGts/MIjL dM7P2LBopL31S7i8D87fOjI58T4ADPmvPJzIYfsQGh/kpseVrpiUUUyrjJDF1/u7 DoQmzJMIgg4TdbxbLO1Z3eYz6QRp6AjANHG+E+Osqz1zkMDrtWubp76u4UwJzYfJ Xz7eTuhYlbS4q5r4c8HkIvOmlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHn/FbA8 8EG4TWejbOJRJK9dq/QkMB8GA1UdIwQYMBaAFITOKfhhQaz7inXpBPAnI4Ut5jM4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZGQi82QUMxRjE2QTZF N0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQdUtkZWtFOENjamhTM21N emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hNNHAtR0ZCclB1S2Rla0U4Q2NqaFMzbU16Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEZGQi82QUMxRjE2QTZFN0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQ dUtkZWtFOENjamhTM21NemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP9LucMhwhG8Tb4DS0wrA7Ov0x9tmTQmYOIFuM1B0Y0a6bYfUb+qYD llGFV5SJJDNay2Tv/S2HqRwSIaN//7j21t0QNuPCNE1MzcIwxc/Zen3jThLSSEKX 3rL/UCPZyZHFxApFOQOeA0LuEAjgNCzmt/e8m/IYQyzRONU+0NjJ1aeP7JxdB8TV 05rAFULS3hUaRasr6dJ7eJVs86mcXs1/KQqP6LBXDvh46wVzpr5U+1Af+O2mbokc mgph36dks8IEkHd5zpkc7d8Vx6DfmOyK1B11X98zYtisPZXfCwGgUGPP0L35GKh7 Srz1Snk/I4XSO/LH0UzSTyCV9jQA2HYp -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:32 2025 by rpki-client