This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json) Hash identifier: 6bl7Y34aJCy+jAhc+Lwmk08+87BElaw71fNCSi3L29s= Subject key identifier: 41:4A:35:C5:28:E7:B4:3A:8F:F3:92:C2:87:B6:D2:09:14:1F:E3:12 Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Certificate serial: 34EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft Manifest number: 34E7 Signing time: Sat 06 Dec 2025 15:00:09 +0000 Manifest this update: Sat 06 Dec 2025 15:00:08 +0000 Manifest next update: Sat 13 Dec 2025 15:00:08 +0000 Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: 3xMMvJf06Tim4DTG1iM/oDNIy0Wv6PJUm5u/KLG2qxk=) 2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: mU82c9UsN7aMzC4DMeuqqygQy0O+yLmNqhxj9poHsyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13550 (0x34ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F17E, serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Validity Not Before: Dec 6 15:00:08 2025 GMT Not After : Dec 13 15:00:08 2025 GMT Subject: CN=693444f8-d502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:ef:50:e9:b7:d5:fe:da:c9:e5:fb:78:ff: ac:86:50:c3:90:52:ac:69:a7:9b:08:0d:6f:e8:d5: 28:37:69:b8:86:3e:b3:ed:69:89:5d:7c:59:38:d2: 7b:11:32:41:1e:be:22:6d:ee:42:9e:34:92:62:b2: a8:dd:f3:cf:3a:cc:f7:ef:60:83:4c:ed:bf:4f:b1: 31:ff:65:a6:80:d4:90:90:08:f6:ae:cb:d0:e5:9f: d2:b5:0f:98:6e:8a:e2:cf:8f:2c:ca:d3:e0:b4:b0: f5:34:3a:f6:ea:1e:46:06:4b:fc:cc:91:e9:8b:a9: 8f:45:cf:96:2a:1e:30:8c:c6:5c:86:96:8a:82:d8: 77:1d:4c:29:c5:3e:16:fd:11:49:a2:b5:33:5f:de: 8a:73:f1:ea:d9:b4:ca:b0:43:9e:bb:44:45:e9:9a: 96:1e:79:c6:7e:3f:cb:a2:d6:5a:f9:9c:0b:2f:6f: 49:89:74:24:b6:0b:ec:27:35:a1:9a:27:df:16:1c: 8e:cb:54:84:05:5e:24:51:62:7e:fd:12:df:64:a5: c6:7b:85:fc:fc:aa:8a:24:2b:56:00:2e:d6:ab:6a: 53:3f:08:6b:81:62:bd:c1:d8:b3:99:3b:de:9d:46: cd:13:08:d1:43:0f:23:da:1d:86:64:b4:e4:63:7d: b9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4A:35:C5:28:E7:B4:3A:8F:F3:92:C2:87:B6:D2:09:14:1F:E3:12 X509v3 Authority Key Identifier: keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:49:83:98:67:66:b2:d8:58:bc:bb:10:86:6f:ab:1b:5d:86: b6:ae:b3:43:40:25:16:b8:36:47:fd:36:7c:66:17:77:7d:dd: 12:5d:9f:e4:70:dd:9f:78:56:34:3f:b3:bf:15:09:90:41:fe: 15:b1:91:2b:64:e0:7a:05:31:ce:21:5e:aa:98:64:41:10:32: ba:21:f4:92:8e:bb:ef:92:2a:68:50:78:42:26:97:5a:2a:1c: f8:3e:6a:c8:67:ee:b2:5e:79:98:78:a5:dd:5d:bc:9c:58:b6: b4:fd:80:c6:6a:4b:fc:69:cd:6b:31:71:e3:68:4c:91:4b:fa: fc:4f:45:f4:b4:63:a5:53:a5:10:98:a4:5a:5a:45:bb:50:6d: 3f:fb:d0:4a:9a:78:28:5b:21:88:6c:02:e4:52:96:23:0f:ce: f0:98:8f:a7:b5:12:63:46:62:f0:e4:95:00:62:9d:0d:c8:0e: 41:7b:8f:df:50:4b:2f:48:7b:5b:24:33:57:3a:db:48:32:33: 2f:37:2e:54:46:25:f1:c1:10:2e:c2:3c:14:8c:06:63:63:65: d1:b7:45:03:4e:30:47:57:11:cb:32:95:f8:e3:3b:ee:81:53: 7e:80:cf:fb:fb:9d:10:48:2c:5a:e1:b7:f4:37:50:18:74:4d: 20:70:c9:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0 RjE5QzQ3QjIwHhcNMjUxMjA2MTUwMDA4WhcNMjUxMjEzMTUwMDA4WjAYMRYwFAYD VQQDEw02OTM0NDRmOC1kNTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0PvUOm31f7ayeX7eP+shlDDkFKsaaebCA1v6NUoN2m4hj6z7WmJXXxZONJ7 ETJBHr4ibe5CnjSSYrKo3fPPOsz372CDTO2/T7Ex/2WmgNSQkAj2rsvQ5Z/StQ+Y boriz48sytPgtLD1NDr26h5GBkv8zJHpi6mPRc+WKh4wjMZchpaKgth3HUwpxT4W /RFJorUzX96Kc/Hq2bTKsEOeu0RF6ZqWHnnGfj/LotZa+ZwLL29JiXQktgvsJzWh miffFhyOy1SEBV4kUWJ+/RLfZKXGe4X8/KqKJCtWAC7Wq2pTPwhrgWK9wdizmTve nUbNEwjRQw8j2h2GZLTkY325gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFKNcUo 57Q6j/OSwoe20gkUH+MSMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt WWlEUUxTelJFVFZQR2NSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASSYOYZ2ay2Fi8uxCGb6sbXYa2rrNDQCUWuDZH/TZ8Zhd3fd0SXZ/k cN2feFY0P7O/FQmQQf4VsZErZOB6BTHOIV6qmGRBEDK6IfSSjrvvkipoUHhCJpda Khz4PmrIZ+6yXnmYeKXdXbycWLa0/YDGakv8ac1rMXHjaEyRS/r8T0X0tGOlU6UQ mKRaWkW7UG0/+9BKmngoWyGIbALkUpYjD87wmI+ntRJjRmLw5JUAYp0NyA5Be4/f UEsvSHtbJDNXOttIMjMvNy5URiXxwRAuwjwUjAZjY2XRt0UDTjBHVxHLMpX44zvu gVN+gM/7+50QSCxa4bf0N1AYdE0gcMnE -----END CERTIFICATE-----Generated at Sun Dec 7 01:56:29 2025 by rpki-client