This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft File: hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json) Hash identifier: pG/zz1ivKAWJigRdIOJLaaAs5hX5yJgiGt0FNoWmyaM= Subject key identifier: A5:EA:46:3F:C3:63:F5:03:09:0C:03:C8:8F:03:09:8C:78:11:B4:A1 Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 Certificate issuer: /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Certificate serial: 09B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft Manifest number: 099F Signing time: Sat 20 Dec 2025 19:29:56 +0000 Manifest this update: Sat 20 Dec 2025 19:29:56 +0000 Manifest next update: Sat 27 Dec 2025 19:29:56 +0000 Files and hashes: 1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: 8RpvYxxRm8EtXPF84WT0f+HhtSfExM7bb+Y52ZvOE2E=) 2: 70FED13CCEF611ED9DDE0A39C4F9AE02.roa (hash: 6YMCbYV0HjEFxQW7Rqr8k/qQPvulelScO8qALM4FUVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2482 (0x9b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2 Validity Not Before: Dec 20 19:29:56 2025 GMT Not After : Dec 27 19:29:56 2025 GMT Subject: CN=6946f934-70fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c8:95:6e:e1:ef:b0:40:9e:4e:cd:f8:54:90: 79:d4:cb:af:f2:12:99:98:8e:cd:d0:96:ad:5b:4e: 42:7a:e4:3c:47:05:2c:bd:53:fc:e8:37:96:7c:04: db:68:d0:45:62:ae:22:ed:5f:ca:4b:99:6d:cb:2b: e3:ca:73:33:e4:b6:2f:9d:c5:f6:5e:be:54:c6:34: 51:ec:09:a3:04:30:ed:5e:5f:46:77:4e:33:ed:95: c2:3c:ac:d1:a0:5e:dc:3f:34:45:5e:7b:53:b7:00: 5e:d4:7e:7f:b6:ec:6b:e7:dc:b2:be:64:2b:6c:8b: 9e:e1:3c:0d:81:d3:45:82:e8:6a:c5:57:98:b9:7f: 7c:e1:14:d7:3d:75:63:94:1d:38:23:f8:1e:6a:54: 65:00:bc:3e:26:63:af:27:d7:57:1d:55:3f:78:64: 08:55:28:ae:25:40:7c:74:5f:ff:96:12:3a:1a:36: 23:6f:db:0f:9d:43:1f:9e:8b:cd:35:69:f4:1e:4d: 44:d2:17:03:17:db:e0:90:96:ac:12:11:7a:50:0c: f7:d2:aa:f6:9e:6a:f9:fa:30:60:ee:5b:c2:9e:67: 5f:65:f3:7c:dd:cc:71:85:34:dd:c3:7a:b3:81:2f: b3:5a:77:8a:5c:74:3d:81:1b:da:ae:73:26:da:7e: 6f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EA:46:3F:C3:63:F5:03:09:0C:03:C8:8F:03:09:8C:78:11:B4:A1 X509v3 Authority Key Identifier: keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:15:fa:ae:92:68:cb:16:61:9d:c9:23:77:93:3d:71:8e:b0: d0:46:25:f1:60:4d:29:3e:f4:49:2f:12:cf:8e:a5:9d:87:e9: 06:e7:e0:a8:68:d2:e4:8c:54:7a:e5:fb:f5:fb:5d:5c:0a:1e: 60:26:b6:c2:10:02:5c:8e:12:7c:e1:4a:98:92:e8:b5:a6:d3: 67:b5:41:61:68:7d:06:58:f1:31:9d:6d:c1:7e:e3:dd:20:08: 3e:65:e9:44:5c:06:57:a6:50:f8:b8:54:8b:13:76:a6:25:3a: de:75:34:07:ef:d4:b0:c5:18:86:59:cc:36:bf:5f:5a:7e:31: 09:21:04:1e:6a:d9:13:de:fa:f1:48:8d:01:2e:d8:f3:7f:68: fe:55:62:05:2f:24:3c:a3:58:ce:e9:c5:f3:e4:93:0d:8d:b1: c0:98:36:b8:ce:6f:64:8c:1d:a9:ef:48:c6:05:f3:8d:17:26: 83:49:f1:7c:35:c8:66:1d:89:dc:f4:7d:94:25:f0:81:6c:ed: f4:27:42:51:b1:91:b4:3f:92:a2:91:4f:e2:5b:1c:2f:dc:2a: e3:42:62:39:71:ce:ef:af:50:46:08:a2:8c:dd:1b:e7:35:08: 9f:5e:c7:a2:a3:2f:e2:d4:50:5b:3c:e4:63:96:32:b4:da:b9: 2e:a1:19:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNDRUExMTAvBgNVBAUTKDg2MkI3M0I5Q0UzNTA0QjBCQTI0MUQxNEZEQUMwRUM0 QjRFNEFEQzIwHhcNMjUxMjIwMTkyOTU2WhcNMjUxMjI3MTkyOTU2WjAYMRYwFAYD VQQDDA02OTQ2ZjkzNC03MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ciVbuHvsECeTs34VJB51Muv8hKZmI7N0JatW05CeuQ8RwUsvVP86DeWfATb aNBFYq4i7V/KS5ltyyvjynMz5LYvncX2Xr5UxjRR7AmjBDDtXl9Gd04z7ZXCPKzR oF7cPzRFXntTtwBe1H5/tuxr59yyvmQrbIue4TwNgdNFguhqxVeYuX984RTXPXVj lB04I/gealRlALw+JmOvJ9dXHVU/eGQIVSiuJUB8dF//lhI6GjYjb9sPnUMfnovN NWn0Hk1E0hcDF9vgkJasEhF6UAz30qr2nmr5+jBg7lvCnmdfZfN83cxxhTTdw3qz gS+zWneKXHQ9gRvarnMm2n5vHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXqRj/D Y/UDCQwDyI8DCYx4EbShMB8GA1UdIwQYMBaAFIYrc7nONQSwuiQdFP2sDsS05K3C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0NFQS80MDZFRjE3OEEw QzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJMQzZKQjBVX2F3T3hMVGty Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpdHp1YzQxQkxDNkpCMFVfYXdPeExUa3JjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0NFQS80MDZFRjE3OEEwQzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJM QzZKQjBVX2F3T3hMVGtyY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaFfqukmjLFmGdySN3kz1xjrDQRiXxYE0pPvRJLxLPjqWdh+kG5+Co aNLkjFR65fv1+11cCh5gJrbCEAJcjhJ84UqYkui1ptNntUFhaH0GWPExnW3BfuPd IAg+ZelEXAZXplD4uFSLE3amJTredTQH79SwxRiGWcw2v19afjEJIQQeatkT3vrx SI0BLtjzf2j+VWIFLyQ8o1jO6cXz5JMNjbHAmDa4zm9kjB2p70jGBfONFyaDSfF8 NchmHYnc9H2UJfCBbO30J0JRsZG0P5KikU/iWxwv3CrjQmI5cc7vr1BGCKKM3Rvn NQifXseioy/i1FBbPORjljK02rkuoRkV -----END CERTIFICATE-----Generated at Sun Dec 21 22:05:39 2025 by rpki-client