This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft File: rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json) Hash identifier: qDb27DkrAf+V259B6lPIAjW077BILOSqgDVRK+W6rKo= Subject key identifier: 45:2C:88:83:EB:D2:90:44:9E:91:5F:72:1A:37:9F:8E:15:78:EE:EB Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Certificate serial: 3509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft Manifest number: 34FF Signing time: Sat 06 Dec 2025 14:24:43 +0000 Manifest this update: Sat 06 Dec 2025 14:24:42 +0000 Manifest next update: Sat 13 Dec 2025 14:24:42 +0000 Files and hashes: 1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: PochdhbxQzg9hUO3xEq4ktsNR6T3Nix+ehV00TaojZM=) 2: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (hash: /C/TeYf+QYgaRTA9LTGKRIOjHZCHFtEST+Y+0lrs4kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13577 (0x3509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Validity Not Before: Dec 6 14:24:42 2025 GMT Not After : Dec 13 14:24:42 2025 GMT Subject: CN=69343cab-12c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:96:c5:47:a0:7c:57:d3:d5:ba:33:ed:82: 12:06:69:57:bd:03:b2:31:20:12:c9:1d:92:3b:51: 2f:2b:73:b4:7d:7e:3d:15:45:44:93:12:7a:2f:fb: f7:44:7f:91:30:85:7e:15:68:69:1d:b3:14:d7:21: 28:6c:5d:43:33:80:40:00:22:7d:d6:33:14:43:85: bd:ba:22:83:65:cc:b1:2c:1d:df:b0:97:6d:c1:26: b8:b6:cb:37:b5:a1:52:6a:7f:66:1c:5b:4e:93:34: 8d:ac:27:a4:6a:58:93:b2:bc:f3:23:ad:3d:4f:6c: 7f:39:c9:d0:8d:c3:95:4d:c5:25:65:21:53:73:b8: a1:02:a0:44:ab:bc:2f:1a:8d:68:f5:bb:1b:86:93: 62:8c:ef:48:7c:1a:65:f9:27:75:43:cf:fe:c7:98: 0c:a8:a3:4e:f9:63:51:ff:42:77:34:6e:3e:84:e3: 7a:98:2a:45:9e:8c:66:65:24:16:5f:87:e6:ce:93: c0:c5:12:de:43:c0:99:ab:be:09:b2:d6:b1:dd:da: 80:ff:d0:57:c8:bd:8c:8d:e2:84:11:5f:5c:83:e5: fe:e1:08:3e:ef:c9:df:33:b9:a6:67:1e:c3:a5:18: ea:fd:77:3a:5c:0a:d8:de:43:44:bc:3c:f4:87:fc: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2C:88:83:EB:D2:90:44:9E:91:5F:72:1A:37:9F:8E:15:78:EE:EB X509v3 Authority Key Identifier: keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:72:19:7b:50:e1:24:e6:13:10:eb:b0:4c:9f:1e:42:e8:b3: 44:7f:e5:8b:82:72:99:10:c2:a8:d0:6f:4c:8f:00:a1:4d:15: e3:d6:2f:93:b0:66:b2:dd:be:87:97:78:6c:77:7b:b5:25:50: 9c:3b:6c:e2:86:68:d7:27:8c:d1:6a:b0:29:a5:1c:4c:0e:99: 81:6b:12:0b:b8:96:a3:ed:e5:c8:b4:6b:6b:50:7e:64:ec:d3: d4:57:51:3b:f3:dd:7d:6a:fc:9b:d9:00:ea:85:6f:00:7a:a9: b1:71:95:b7:ed:7a:c1:11:aa:16:80:a6:a6:d4:b0:1e:de:1c: 6c:11:3c:be:de:84:56:34:2d:ee:1d:d6:be:a0:02:fc:e7:5e: 10:e2:f3:fa:11:5e:a2:00:7b:89:fe:7b:5a:6e:0b:46:bd:1f: 03:66:6e:ac:1e:88:1a:be:83:e3:ab:ed:d1:bd:98:48:88:d7: df:d0:88:89:5f:ac:e0:3b:d9:83:cb:67:1f:7d:e1:aa:e7:09: e4:ca:d2:a9:04:25:46:c6:71:66:83:15:03:b0:e5:cb:fd:f5: 07:3e:5f:48:74:c1:22:f5:c5:f1:bc:34:8d:1f:b6:bb:25:c9: 38:18:99:ec:cb:95:9e:5e:ac:b9:ac:9b:5b:6f:a3:f5:35:b1: 8c:f4:40:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEFFMTA3RjNDMjk3NzcxN0ExQ0QzNTcxRDE4Mzc0OEZE MDdEOUZDNUYwHhcNMjUxMjA2MTQyNDQyWhcNMjUxMjEzMTQyNDQyWjAYMRYwFAYD VQQDEw02OTM0M2NhYi0xMmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuO+WxUegfFfT1boz7YISBmlXvQOyMSASyR2SO1EvK3O0fX49FUVEkxJ6L/v3 RH+RMIV+FWhpHbMU1yEobF1DM4BAACJ91jMUQ4W9uiKDZcyxLB3fsJdtwSa4tss3 taFSan9mHFtOkzSNrCekaliTsrzzI609T2x/OcnQjcOVTcUlZSFTc7ihAqBEq7wv Go1o9bsbhpNijO9IfBpl+Sd1Q8/+x5gMqKNO+WNR/0J3NG4+hON6mCpFnoxmZSQW X4fmzpPAxRLeQ8CZq74Jstax3dqA/9BXyL2MjeKEEV9cg+X+4Qg+78nfM7mmZx7D pRjq/Xc6XArY3kNEvDz0h/xuZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUsiIPr 0pBEnpFfcho3n44VeO7rMB8GA1UdIwQYMBaAFK4Qfzwpd3F6HNNXHRg3SP0H2fxf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9FQTFCMUQ2QTFE ODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NYb2MwMWNkR0RkSV9RZlpf RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoQl9QQ2wzY1hvYzAxY2RHRGRJX1FmWl9GOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0RC9FQTFCMUQ2QTFEODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NY b2MwMWNkR0RkSV9RZlpfRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJchl7UOEk5hMQ67BMnx5C6LNEf+WLgnKZEMKo0G9MjwChTRXj1i+T sGay3b6Hl3hsd3u1JVCcO2zihmjXJ4zRarAppRxMDpmBaxILuJaj7eXItGtrUH5k 7NPUV1E78919avyb2QDqhW8AeqmxcZW37XrBEaoWgKam1LAe3hxsETy+3oRWNC3u Hda+oAL8514Q4vP6EV6iAHuJ/ntabgtGvR8DZm6sHogavoPjq+3RvZhIiNff0IiJ X6zgO9mDy2cffeGq5wnkytKpBCVGxnFmgxUDsOXL/fUHPl9IdMEi9cXxvDSNH7a7 Jck4GJnsy5WeXqy5rJtbb6P1NbGM9EAi -----END CERTIFICATE-----Generated at Sun Dec 7 03:48:47 2025 by rpki-client