This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json) Hash identifier: BLXfBPUsNlh0N1IuLbUIjNJpJ/UBGL6VQPjJjlpNoAg= Subject key identifier: C9:97:09:0D:74:C6:5D:0D:E1:50:82:A7:A0:15:BE:BD:CA:AB:4F:FA Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft Manifest number: 017C Signing time: Fri 05 Dec 2025 01:57:56 +0000 Manifest this update: Fri 05 Dec 2025 01:57:56 +0000 Manifest next update: Fri 12 Dec 2025 01:57:56 +0000 Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: Bgf1aylOcBbtMdGuC/WHbzqYdBgkWmXJvtYQC5pIo/A=) 2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: 0YxUShTVwHuXxQ4B1+3Qh7vnGMMJxFNDWJ5Ekk8GYX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Validity Not Before: Dec 5 01:57:56 2025 GMT Not After : Dec 12 01:57:56 2025 GMT Subject: CN=69323c24-309d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:eb:52:32:ff:43:62:30:fc:be:07:24:88:cf: fc:05:f8:9d:4a:af:a3:d6:9e:d1:a4:65:59:35:10: 08:3e:eb:d4:26:86:60:cc:d9:45:de:c8:13:7d:f9: 07:c7:e6:14:ec:0f:f1:15:13:5d:91:b9:70:ee:a9: 2a:6d:3a:5c:38:1f:a3:0a:6d:f7:c7:88:45:01:e9: e1:9c:da:8d:aa:f5:34:50:51:bb:b5:c4:27:3f:b4: ca:d7:19:82:ec:60:6c:8e:9b:77:f1:1c:11:68:d2: 1d:45:1b:b3:2e:9a:a6:f3:94:fb:92:87:f0:3b:fc: 81:c3:fe:ab:9a:f6:5a:9d:2e:fc:63:52:fa:e1:f5: 6f:a1:a0:0b:4c:53:7f:a2:70:30:19:e3:bc:c0:ff: f4:e4:6b:65:e6:b3:ee:ae:64:4d:e6:a2:d5:14:21: 79:4a:22:33:c8:bd:cd:d9:76:d8:67:aa:b0:32:fe: 5e:6a:e9:9b:c5:09:03:fd:d0:10:af:7d:99:ec:e4: 7d:3d:59:21:3f:8b:27:77:8e:a5:2f:ed:f0:34:47: ca:31:0b:9f:b3:11:40:72:10:d1:12:71:a4:a2:58: d6:5c:86:42:0e:f4:de:48:cb:49:3d:8c:d2:f8:06: dc:a1:c8:cd:79:2e:7d:64:dc:87:db:39:bf:36:75: 59:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:09:0D:74:C6:5D:0D:E1:50:82:A7:A0:15:BE:BD:CA:AB:4F:FA X509v3 Authority Key Identifier: keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:32:79:63:a8:79:7d:c8:80:00:b2:0e:71:99:a2:35:a0:e9: c5:1f:24:18:2d:5c:19:94:a8:ed:17:71:09:0d:e5:b8:86:f8: a2:52:43:22:54:19:96:99:f2:8f:94:3c:2c:c9:32:ec:06:10: 85:ce:be:a0:93:18:ae:8d:4c:07:99:4d:36:29:8c:5b:cb:3d: d2:9a:e1:81:ef:30:d2:93:42:8c:aa:b3:b4:30:f1:be:c4:16: 6a:3e:40:73:8f:35:d2:eb:17:cc:ca:9a:8e:c2:50:11:81:c4: 9b:ec:83:b1:f7:43:5c:1c:36:8d:c3:96:f2:ee:75:5d:a8:42: 69:96:ed:09:21:2e:58:c6:40:aa:65:8f:2f:9e:73:c1:de:0a: f7:c0:4d:7a:20:77:ed:45:82:45:b0:d5:13:37:d7:56:03:8e: 23:f7:8e:d8:53:d8:13:54:43:fb:e1:97:38:b1:fc:b5:37:18: 04:bb:c8:20:1e:7c:8a:42:83:3d:c6:7f:68:5d:ff:ab:6c:74: a0:5c:e3:c7:11:48:7d:4e:00:22:61:2f:fd:4b:b6:c3:f0:d2: ba:51:c0:af:25:f9:8e:6f:39:8f:5d:27:8f:30:91:cf:ba:3c: 70:57:0e:c6:53:55:8b:68:b2:c0:17:f7:e5:84:a8:7d:e9:ce: 01:45:07:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzM0IxMTAvBgNVBAUTKDg2REExOTAwRTYxNTBDQkQ5Q0Q4MTVBQzY3REM1M0E1 RTZEM0MwMjcwHhcNMjUxMjA1MDE1NzU2WhcNMjUxMjEyMDE1NzU2WjAYMRYwFAYD VQQDEw02OTMyM2MyNC0zMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+etSMv9DYjD8vgckiM/8BfidSq+j1p7RpGVZNRAIPuvUJoZgzNlF3sgTffkH x+YU7A/xFRNdkblw7qkqbTpcOB+jCm33x4hFAenhnNqNqvU0UFG7tcQnP7TK1xmC 7GBsjpt38RwRaNIdRRuzLpqm85T7kofwO/yBw/6rmvZanS78Y1L64fVvoaALTFN/ onAwGeO8wP/05Gtl5rPurmRN5qLVFCF5SiIzyL3N2XbYZ6qwMv5eaumbxQkD/dAQ r32Z7OR9PVkhP4snd46lL+3wNEfKMQufsxFAchDREnGkoljWXIZCDvTeSMtJPYzS +AbcocjNeS59ZNyH2zm/NnVZHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmXCQ10 xl0N4VCCp6AVvr3Kq0/6MB8GA1UdIwQYMBaAFIbaGQDmFQy9nNgVrGfcU6Xm08An MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzQi9FOThBMTEzRTky NjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRMMmMyQldzWjl4VHBlYlR3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h0b1pBT1lWREwyYzJCV3NaOXhUcGViVHdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzQi9FOThBMTEzRTkyNjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRM MmMyQldzWjl4VHBlYlR3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNMnljqHl9yIAAsg5xmaI1oOnFHyQYLVwZlKjtF3EJDeW4hviiUkMi VBmWmfKPlDwsyTLsBhCFzr6gkxiujUwHmU02KYxbyz3SmuGB7zDSk0KMqrO0MPG+ xBZqPkBzjzXS6xfMypqOwlARgcSb7IOx90NcHDaNw5by7nVdqEJplu0JIS5YxkCq ZY8vnnPB3gr3wE16IHftRYJFsNUTN9dWA44j947YU9gTVEP74Zc4sfy1NxgEu8gg HnyKQoM9xn9oXf+rbHSgXOPHEUh9TgAiYS/9S7bD8NK6UcCvJfmObzmPXSePMJHP ujxwVw7GU1WLaLLAF/flhKh96c4BRQeF -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:23 2025 by rpki-client