This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: edqx6YyVav4mZcosv13FdFELY1/9rxYYAWrvU+8ujX8= Subject key identifier: B2:2E:AD:55:FB:3C:A4:FD:A1:21:8C:51:BD:8E:F8:AD:E9:EA:68:23 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 065C Signing time: Sat 06 Dec 2025 21:30:06 +0000 Manifest this update: Sat 06 Dec 2025 21:30:06 +0000 Manifest next update: Sat 13 Dec 2025 21:30:06 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: W2VL+8qkknCsUaZYQSJMravbWMEAFvtKFGA1j6Xadsw=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Dec 6 21:30:06 2025 GMT Not After : Dec 13 21:30:06 2025 GMT Subject: CN=6934a05e-0e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:c0:e1:6d:2a:3f:a5:ef:ed:ad:c3:7f:a2: f2:64:bf:67:cd:86:43:5d:6c:9f:e6:ce:98:49:27: 9b:20:bf:6c:67:07:e1:1d:3a:58:11:72:4b:52:25: af:bb:2e:ab:33:e9:06:9c:a3:c3:d7:7c:98:4e:5c: 02:ac:c0:78:a9:87:63:f5:b1:24:57:17:e4:55:75: 26:0f:5f:07:1f:34:d4:0c:09:35:7d:6c:a0:13:aa: 1c:93:f8:3a:a6:24:8a:b0:e8:a2:49:1b:2c:c5:69: 90:05:4c:92:02:00:1d:04:6a:c6:b6:70:69:cc:8a: 5a:5d:d9:8a:24:2a:0b:27:38:59:37:06:05:dc:dc: b5:b0:0c:0a:86:56:7c:ba:46:26:ab:a6:48:29:e3: 95:dd:ae:d2:43:45:92:88:27:d1:6d:db:38:e5:e2: 1e:94:e7:76:56:16:45:e9:f9:0d:51:24:28:27:7b: 88:9b:8c:76:53:48:44:a8:d3:05:05:3d:3f:83:92: 8a:5a:34:bc:f1:f1:c2:29:38:ec:77:a2:f2:bd:91: 71:b6:99:d5:2e:6d:8c:52:23:17:60:11:03:9b:dc: b6:d9:16:9f:fb:89:98:dd:71:5f:40:9a:7b:87:56: 6a:1b:85:4c:54:a6:7a:95:cf:ed:47:1a:36:87:aa: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2E:AD:55:FB:3C:A4:FD:A1:21:8C:51:BD:8E:F8:AD:E9:EA:68:23 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ba:30:57:75:73:89:1d:54:23:b9:fa:52:23:e0:b6:f1:63: ba:85:aa:15:39:81:8b:bc:a2:1c:86:9c:86:f8:a7:11:8b:a8: 39:d9:37:70:d3:48:4b:80:5b:0b:15:e5:24:47:94:ed:c9:1f: da:06:d6:a2:0f:5a:14:4e:59:cb:a9:0d:19:9a:47:81:5d:e9: af:6c:3f:ab:4d:3a:a6:ae:35:15:91:ad:7d:41:a0:ff:d3:2f: 99:21:61:cf:7c:70:ab:14:d0:a5:ec:1e:f3:94:b6:34:71:6d: 86:60:4a:7f:d5:7e:8f:13:0a:3a:33:1a:6a:21:7d:71:49:1a: 9e:3b:b0:18:3f:41:34:c9:1b:af:ab:e4:4d:97:7a:46:1b:80: e0:3b:fc:e1:dd:fd:d3:3a:17:85:f6:5a:ca:1e:8d:a7:39:e3: 02:12:78:ce:02:e3:30:8d:a3:98:75:35:b1:10:0d:1d:ef:cd: b2:7c:c2:13:b0:f0:dc:37:f8:40:8d:cb:b3:fe:a9:a8:4d:48: 45:c7:2e:45:c9:6a:83:71:95:ce:b2:23:21:55:84:e8:6a:f9: be:ae:f0:73:dd:41:77:d1:6b:f3:fd:11:99:68:e6:8c:a6:19: 98:8b:dc:9a:4c:42:20:27:39:b3:54:f4:f5:28:f8:76:74:a5: 2f:20:6c:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjUxMjA2MjEzMDA2WhcNMjUxMjEzMjEzMDA2WjAYMRYwFAYD VQQDEw02OTM0YTA1ZS0wZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnLA4W0qP6Xv7a3Df6LyZL9nzYZDXWyf5s6YSSebIL9sZwfhHTpYEXJLUiWv uy6rM+kGnKPD13yYTlwCrMB4qYdj9bEkVxfkVXUmD18HHzTUDAk1fWygE6ock/g6 piSKsOiiSRssxWmQBUySAgAdBGrGtnBpzIpaXdmKJCoLJzhZNwYF3Ny1sAwKhlZ8 ukYmq6ZIKeOV3a7SQ0WSiCfRbds45eIelOd2VhZF6fkNUSQoJ3uIm4x2U0hEqNMF BT0/g5KKWjS88fHCKTjsd6LyvZFxtpnVLm2MUiMXYBEDm9y22Raf+4mY3XFfQJp7 h1ZqG4VMVKZ6lc/tRxo2h6pF7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIurVX7 PKT9oSGMUb2O+K3p6mgjMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvujBXdXOJHVQjufpSI+C28WO6haoVOYGLvKIchpyG+KcRi6g52Tdw 00hLgFsLFeUkR5TtyR/aBtaiD1oUTlnLqQ0ZmkeBXemvbD+rTTqmrjUVka19QaD/ 0y+ZIWHPfHCrFNCl7B7zlLY0cW2GYEp/1X6PEwo6MxpqIX1xSRqeO7AYP0E0yRuv q+RNl3pGG4DgO/zh3f3TOheF9lrKHo2nOeMCEnjOAuMwjaOYdTWxEA0d782yfMIT sPDcN/hAjcuz/qmoTUhFxy5FyWqDcZXOsiMhVYToavm+rvBz3UF30Wvz/RGZaOaM phmYi9yaTEIgJzmzVPT1KPh2dKUvIGyN -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:20 2025 by rpki-client