This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft File: HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json) Hash identifier: EtZQulYMg6u7IAn0TbvalgIZlPUZHXqJSFRlBOqcOFk= Subject key identifier: EA:A3:F2:98:71:BB:CC:0D:01:41:A9:D7:17:92:8D:85:3F:5A:3D:58 Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Certificate serial: 18E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft Manifest number: 18C8 Signing time: Sat 06 Dec 2025 16:05:25 +0000 Manifest this update: Sat 06 Dec 2025 16:05:24 +0000 Manifest next update: Sat 13 Dec 2025 16:05:24 +0000 Files and hashes: 1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: 4aWOO2l12Cj+IwiJexxwkpB/qZoN3N2M6fCn+rVNTkA=) 2: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: KJiYW9fyvj2KonkdW9uDFpKuQ1dT83diO/QTtAE0e3A=) 3: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: KFzJJioj1JdEaM7mj8QrDhe5X+FxHdHyz1gyMqXEJCI=) 4: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: /Xd8kuiaq1Q5eF4PAbm/NjtYZtrHCHK1WvQKBeYKntw=) 5: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: Frk606k9XfomHW0x/AMLebHr43yDTcWmfdXiLloTTiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6372 (0x18e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Validity Not Before: Dec 6 16:05:24 2025 GMT Not After : Dec 13 16:05:24 2025 GMT Subject: CN=69345444-ee36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:24:68:53:c7:d5:d6:b6:8e:1d:75:00:66: 22:47:1b:99:f9:0a:31:f3:c3:60:0d:d6:5d:e7:a3: ce:42:d1:05:0a:a6:d7:70:e8:f1:c0:27:8c:52:30: 8e:50:ad:d2:69:b1:bb:e0:d5:49:02:d7:41:2e:ff: c9:5f:77:a6:80:8b:2b:0f:5b:90:50:65:32:6b:2b: e1:ef:4a:35:d7:09:13:77:c2:dc:3f:e8:2a:09:e1: a5:26:7d:11:f2:74:2c:cc:23:35:6c:9a:10:2d:fb: 7e:dd:50:40:67:75:13:41:c8:c8:cb:f8:db:8d:c3: 69:9b:98:d3:06:d1:09:46:29:80:4e:14:bc:a7:49: be:d0:60:c7:a1:38:f4:0c:ef:c3:61:3b:77:b3:d3: fd:2c:8e:d5:4f:30:17:96:d3:59:23:52:f3:8b:d4: fc:52:27:e3:cf:87:c4:c0:c0:b6:33:d0:ab:6e:14: 22:b4:85:d1:62:6a:ce:0a:40:b2:9e:2a:10:f0:df: 0a:11:c0:a3:f3:22:16:ea:3e:65:75:a3:6c:9f:0d: a0:05:0f:aa:cf:b5:d3:bc:fd:41:42:c7:26:b7:39: 86:88:5c:a5:d2:50:a1:fd:61:e2:3e:65:66:98:da: b9:ff:6c:f5:23:30:a7:65:cc:09:c0:45:b9:ab:1d: 05:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A3:F2:98:71:BB:CC:0D:01:41:A9:D7:17:92:8D:85:3F:5A:3D:58 X509v3 Authority Key Identifier: keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:fb:0c:9a:4d:79:d9:6c:f0:f2:49:98:95:d8:ab:ca:78:79: df:23:aa:81:2e:95:46:ad:2a:70:7f:5c:bf:fc:a1:bf:0c:62: 7d:69:91:14:86:57:1c:16:55:14:f7:64:58:c5:94:fa:87:33: a9:5e:91:3b:34:64:c1:a7:f1:35:8f:d3:da:89:34:cd:e3:c6: 4a:90:a6:3c:ef:da:e5:b9:7d:8f:2c:56:34:2d:06:1a:92:28: 07:9f:fb:ec:21:f6:81:cc:8e:b8:63:87:2b:bb:b1:88:4d:e6: d4:67:0d:65:f3:e4:d1:fb:df:c2:d3:7e:09:54:65:9f:02:df: 62:d1:49:a7:31:63:76:34:a3:f9:9f:66:38:63:ce:98:d5:89: fd:76:0b:57:15:28:83:2e:08:fb:90:bb:52:49:12:d2:11:4c: 13:f9:cd:dd:6b:d9:c8:46:e8:0d:e4:a0:4a:65:ef:e9:c1:48: e5:49:a3:7f:9c:6f:e4:70:9b:a0:a7:a7:fd:ec:7f:8f:a2:7e: d6:fb:63:86:d9:e7:8b:4b:16:5d:a3:75:3f:92:77:46:45:f8: 8f:85:29:fa:03:19:64:6a:2f:a0:1e:2f:78:b6:15:24:26:ae: 88:21:11:54:11:38:f8:7b:28:05:5c:2a:0b:8c:b1:42:d4:cb: 5a:97:d2:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM5NTMxMTAvBgNVBAUTKDFFNjc4QzZBMjE3RDcxNUIzMEQ5Q0IyMkQ1Rjg4NEQx N0M1Njk5QjYwHhcNMjUxMjA2MTYwNTI0WhcNMjUxMjEzMTYwNTI0WjAYMRYwFAYD VQQDEw02OTM0NTQ0NC1lZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApM0kaFPH1da2jh11AGYiRxuZ+Qox88NgDdZd56POQtEFCqbXcOjxwCeMUjCO UK3SabG74NVJAtdBLv/JX3emgIsrD1uQUGUyayvh70o11wkTd8LcP+gqCeGlJn0R 8nQszCM1bJoQLft+3VBAZ3UTQcjIy/jbjcNpm5jTBtEJRimAThS8p0m+0GDHoTj0 DO/DYTt3s9P9LI7VTzAXltNZI1Lzi9T8Uifjz4fEwMC2M9CrbhQitIXRYmrOCkCy nioQ8N8KEcCj8yIW6j5ldaNsnw2gBQ+qz7XTvP1BQscmtzmGiFyl0lCh/WHiPmVm mNq5/2z1IzCnZcwJwEW5qx0FYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqj8phx u8wNAUGp1xeSjYU/Wj1YMB8GA1UdIwQYMBaAFB5njGohfXFbMNnLItX4hNF8Vpm2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzk1My8xMjJEOEQyOEE0 OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNWc3cyY3NpMWZpRTBYeFdt YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htZU1haUY5Y1ZzdzJjc2kxZmlFMFh4V21iWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzk1My8xMjJEOEQyOEE0OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNW c3cyY3NpMWZpRTBYeFdtYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ+wyaTXnZbPDySZiV2KvKeHnfI6qBLpVGrSpwf1y//KG/DGJ9aZEU hlccFlUU92RYxZT6hzOpXpE7NGTBp/E1j9PaiTTN48ZKkKY879rluX2PLFY0LQYa kigHn/vsIfaBzI64Y4cru7GITebUZw1l8+TR+9/C034JVGWfAt9i0UmnMWN2NKP5 n2Y4Y86Y1Yn9dgtXFSiDLgj7kLtSSRLSEUwT+c3da9nIRugN5KBKZe/pwUjlSaN/ nG/kcJugp6f97H+Pon7W+2OG2eeLSxZdo3U/kndGRfiPhSn6Axlkai+gHi94thUk Jq6IIRFUETj4eygFXCoLjLFC1Mtal9IN -----END CERTIFICATE-----Generated at Sun Dec 7 04:47:10 2025 by rpki-client