This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft File: rN0Hh_30YaFfcqHizj449FTtIHI.mft (raw, json) Hash identifier: uyksdU1wwpMeP5LjPTi4L4+hEJTH+IHrTmSV6Cslbpk= Subject key identifier: 1D:A7:F5:07:45:B7:C2:F8:7C:D3:41:73:02:B6:4C:AA:3F:4D:22:62 Authority key identifier: AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72 Certificate issuer: /CN=A9116D68/serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072 Certificate serial: 0F65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft Manifest number: 1815 Signing time: Sat 06 Dec 2025 17:02:05 +0000 Manifest this update: Sat 06 Dec 2025 17:02:04 +0000 Manifest next update: Sat 13 Dec 2025 17:02:04 +0000 Files and hashes: 1: rN0Hh_30YaFfcqHizj449FTtIHI.crl (hash: Kblr7sS9OIBVK+FtX03xAefL/d8Ghg7IawMCtB7xkLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3941 (0xf65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072 Validity Not Before: Dec 6 17:02:04 2025 GMT Not After : Dec 13 17:02:04 2025 GMT Subject: CN=6934618d-95d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:b9:64:06:a7:09:48:97:6b:4d:4f:0e:97: ab:cb:d0:38:4f:85:2c:f6:02:2c:19:27:ae:b2:21: 93:61:5b:f7:99:28:b0:7b:d0:d8:a8:f0:32:1e:75: b6:13:e3:e4:aa:95:2d:e8:16:3b:55:70:c5:f1:28: 64:d8:4d:17:98:be:28:81:93:36:69:59:b9:71:0c: 32:8e:4d:85:b2:1d:e9:97:91:00:4a:71:ea:df:ff: 24:24:77:c7:25:87:c9:10:60:1b:ed:96:bb:e5:26: 91:ba:ce:e5:4c:81:0f:06:08:d1:5a:b9:35:14:90: 60:1e:0e:19:f2:c3:4b:44:14:e2:78:0b:61:94:72: 37:5c:c3:b6:a6:69:d6:fc:55:6b:5c:3d:92:3b:9f: 02:51:34:cd:9b:1b:16:3d:6e:56:36:d7:42:52:85: a8:8f:ab:13:3a:5e:d7:33:97:46:11:cb:cc:9f:91: e0:e0:10:fa:00:d8:c8:f5:60:af:3d:2f:82:b2:1e: 89:6d:58:7f:f8:66:eb:82:e8:78:b8:8c:8a:dd:50: 36:32:30:78:26:a1:d3:2d:c9:d1:43:f3:9d:62:bf: 98:43:36:5d:33:50:86:41:4a:fa:b7:e6:00:e2:04: a4:8a:74:7a:c9:22:ae:47:1d:e2:da:4b:e9:50:c3: 29:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A7:F5:07:45:B7:C2:F8:7C:D3:41:73:02:B6:4C:AA:3F:4D:22:62 X509v3 Authority Key Identifier: keyid:AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b6:0f:82:2b:64:a8:5c:68:02:02:e0:a2:f1:c6:5b:74:c7: 8f:3a:70:bc:76:a3:4a:76:d8:4f:5a:23:08:4b:24:c4:9f:c5: 9f:80:b7:1f:c7:62:10:c1:4e:ec:71:33:3a:1b:82:c1:c8:67: 18:2f:77:e8:a9:b5:2a:26:17:a2:3b:a3:a1:e1:3e:4c:60:4d: 90:ce:65:81:35:b0:ea:97:26:36:bc:44:2b:09:cb:ef:dd:91: 9c:2b:6c:57:c3:ea:6b:40:89:ab:17:66:ab:1e:1d:67:4e:7f: f3:42:82:3e:fe:46:59:ac:6b:51:44:d6:6b:34:87:41:ff:3f: 0c:b2:2b:5a:70:13:4f:53:87:4a:26:2a:61:a4:94:4a:a6:31: cd:4f:a9:73:b9:73:39:73:2b:80:02:af:22:6a:06:3d:6d:6c: 13:3b:f1:2f:7f:c1:c2:4c:7e:58:c5:64:1f:5c:b2:03:59:3f: 88:90:45:4d:63:15:f5:d2:d0:6b:fe:51:45:90:87:f8:8b:4e: 08:3c:da:61:27:96:64:40:f6:82:93:89:40:8d:46:a2:57:98: f7:21:b8:fa:77:c3:22:8d:37:04:82:d0:dc:97:34:a4:d9:9f: 0b:18:7e:8a:a0:53:9a:dd:34:8f:07:0d:28:37:56:97:b1:c8: dc:0e:0f:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKEFDREQwNzg3RkRGNDYxQTE1RjcyQTFFMkNFM0UzOEY0 NTRFRDIwNzIwHhcNMjUxMjA2MTcwMjA0WhcNMjUxMjEzMTcwMjA0WjAYMRYwFAYD VQQDEw02OTM0NjE4ZC05NWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVq5ZAanCUiXa01PDpery9A4T4Us9gIsGSeusiGTYVv3mSiwe9DYqPAyHnW2 E+PkqpUt6BY7VXDF8Shk2E0XmL4ogZM2aVm5cQwyjk2Fsh3pl5EASnHq3/8kJHfH JYfJEGAb7Za75SaRus7lTIEPBgjRWrk1FJBgHg4Z8sNLRBTieAthlHI3XMO2pmnW /FVrXD2SO58CUTTNmxsWPW5WNtdCUoWoj6sTOl7XM5dGEcvMn5Hg4BD6ANjI9WCv PS+Csh6JbVh/+Gbrguh4uIyK3VA2MjB4JqHTLcnRQ/OdYr+YQzZdM1CGQUr6t+YA 4gSkinR6ySKuRx3i2kvpUMMpfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2n9QdF t8L4fNNBcwK2TKo/TSJiMB8GA1UdIwQYMBaAFKzdB4f99GGhX3Kh4s4+OPRU7SBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9yTjBIaF8zMFlhRmZjcUhpemo0NDlGVHRJ SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOMEhoXzMwWWFGZmNxSGl6ajQ0OUZUdElISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9yTjBIaF8zMFlh RmZjcUhpemo0NDlGVHRJSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXtg+CK2SoXGgCAuCi8cZbdMePOnC8dqNKdthPWiMISyTEn8WfgLcf x2IQwU7scTM6G4LByGcYL3foqbUqJheiO6Oh4T5MYE2QzmWBNbDqlyY2vEQrCcvv 3ZGcK2xXw+prQImrF2arHh1nTn/zQoI+/kZZrGtRRNZrNIdB/z8MsitacBNPU4dK JiphpJRKpjHNT6lzuXM5cyuAAq8iagY9bWwTO/Evf8HCTH5YxWQfXLIDWT+IkEVN YxX10tBr/lFFkIf4i04IPNphJ5ZkQPaCk4lAjUaiV5j3Ibj6d8MijTcEgtDclzSk 2Z8LGH6KoFOa3TSPBw0oN1aXscjcDg8u -----END CERTIFICATE-----Generated at Sun Dec 7 02:35:00 2025 by rpki-client