This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: nxCp3MSQIZsFzh8IBdY7dKLo+pPNDtVmP7VOV/Q2U3s= Subject key identifier: D8:D1:B0:8C:C2:69:BF:F8:A2:D9:CE:B0:4A:E1:87:25:3C:03:4A:F3 Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 018C Signing time: Fri 05 Dec 2025 01:52:00 +0000 Manifest this update: Fri 05 Dec 2025 01:52:00 +0000 Manifest next update: Fri 12 Dec 2025 01:52:00 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: mCG6gSEP7jDduGxm01ZD/OJV3iQCc5TSmhoKd2wIbK4=) 2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: RLnLzyrrcNZhWSbOgsksg70plHnwm/0y4IiOT7XePHI=) 3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: g3qVGTL6N3Bx7PoU5ChuYFlVdWGCksOpw5qXnk0J/9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Dec 5 01:52:00 2025 GMT Not After : Dec 12 01:52:00 2025 GMT Subject: CN=69323ac0-669d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:15:fb:6d:be:ca:92:1c:d0:95:ed:a9:f0: 12:df:6d:86:c4:f5:62:6e:f5:6a:4d:27:62:c3:b8: 99:07:71:e1:cb:04:1d:11:8b:86:58:c4:ee:78:22: e8:5d:b7:91:ea:71:16:0d:cd:a6:a6:76:30:f6:d4: c6:a5:7d:83:60:58:a2:5b:62:a1:74:e2:8c:38:ff: 09:d3:20:8e:e9:29:00:df:b9:30:38:69:9e:7b:30: 5d:f9:38:7d:b7:b3:94:d7:e3:b1:21:4d:00:3a:b2: 5a:b0:3c:dd:08:1a:3e:c5:49:92:ca:2b:ca:02:0d: d2:de:3c:ca:e9:75:31:23:e4:a8:49:5b:bf:d6:28: 8f:4d:37:f2:55:cb:74:e0:35:fe:96:97:97:57:f5: f2:a2:fa:68:7d:5c:9b:90:6c:4d:2f:d9:f5:4f:24: a3:bb:7d:5d:96:4c:3b:6d:b5:3b:b9:09:17:69:4a: f8:af:c6:48:29:8d:41:18:c6:41:f6:af:c0:f8:e0: 04:1d:af:4d:f4:1b:1f:c2:af:24:b0:95:00:81:73: 30:86:96:77:b5:5c:ed:f0:91:91:85:e8:46:d9:6a: 19:98:52:f8:f1:67:46:66:5b:2c:ae:6e:31:f9:4c: ce:90:b6:b6:ba:82:9f:1f:ff:27:b8:ad:c1:03:b4: 34:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D1:B0:8C:C2:69:BF:F8:A2:D9:CE:B0:4A:E1:87:25:3C:03:4A:F3 X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:f6:f7:2d:4e:84:49:29:da:25:3f:75:62:84:27:c7:e8:2b: 5e:51:78:21:7b:9b:49:b6:8d:d1:18:e1:3f:aa:45:5b:6f:69: 9f:6f:7c:dc:60:4f:a8:76:2e:72:6c:86:03:32:93:f8:40:c1: 63:2e:4b:de:26:f7:a1:bb:00:12:aa:37:b4:22:2c:f2:24:ee: 6d:86:e8:2e:c9:fe:04:dd:89:81:9a:b0:1c:f6:ad:d0:c1:6f: 84:9b:31:84:42:9b:ee:97:f3:50:49:df:9e:d4:6d:50:b5:99: c4:e8:c5:3a:b3:97:42:9c:ad:68:0e:8a:1d:4c:14:5b:9c:ae: 4d:23:ad:e0:64:e7:33:d0:43:ee:a0:35:6f:3b:6e:f7:97:d5: 86:98:32:77:14:87:9f:d0:0e:f4:61:45:6a:1b:8e:c2:d5:a2: 0a:a6:8a:07:66:3b:1a:4c:97:3c:af:04:8a:8c:f9:1b:86:c2: b8:82:4c:7a:2b:59:70:e9:20:6f:0f:da:f7:b1:76:54:89:2d: 16:0b:ce:f5:d5:68:be:e0:0a:5e:b6:1d:55:5b:e8:41:7b:93: 2c:1e:19:c9:8f:df:35:c6:53:f6:a0:4f:d0:eb:a7:6b:b4:a0: 55:94:d8:75:05:4e:23:cb:fe:eb:c7:fb:e6:8e:8a:2d:79:c3: 5d:78:91:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjUxMjA1MDE1MjAwWhcNMjUxMjEyMDE1MjAwWjAYMRYwFAYD VQQDEw02OTMyM2FjMC02NjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArD0V+22+ypIc0JXtqfAS322GxPVibvVqTSdiw7iZB3HhywQdEYuGWMTueCLo XbeR6nEWDc2mpnYw9tTGpX2DYFiiW2KhdOKMOP8J0yCO6SkA37kwOGmeezBd+Th9 t7OU1+OxIU0AOrJasDzdCBo+xUmSyivKAg3S3jzK6XUxI+SoSVu/1iiPTTfyVct0 4DX+lpeXV/XyovpofVybkGxNL9n1TySju31dlkw7bbU7uQkXaUr4r8ZIKY1BGMZB 9q/A+OAEHa9N9Bsfwq8ksJUAgXMwhpZ3tVzt8JGRhehG2WoZmFL48WdGZlssrm4x +UzOkLa2uoKfH/8nuK3BA7Q0qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjRsIzC ab/4otnOsErhhyU8A0rzMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE9vctToRJKdolP3VihCfH6CteUXghe5tJto3RGOE/qkVbb2mfb3zc YE+odi5ybIYDMpP4QMFjLkveJvehuwASqje0IizyJO5thuguyf4E3YmBmrAc9q3Q wW+EmzGEQpvul/NQSd+e1G1QtZnE6MU6s5dCnK1oDoodTBRbnK5NI63gZOcz0EPu oDVvO273l9WGmDJ3FIef0A70YUVqG47C1aIKpooHZjsaTJc8rwSKjPkbhsK4gkx6 K1lw6SBvD9r3sXZUiS0WC8711Wi+4Apeth1VW+hBe5MsHhnJj981xlP2oE/Q66dr tKBVlNh1BU4jy/7rx/vmjootecNdeJGo -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:15 2025 by rpki-client