This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json) Hash identifier: ZvYTieXhWndHGGRmVYAcP+VJEu4/8W3tMjd1mbeKoqU= Subject key identifier: 86:68:69:E1:F6:8D:D2:38:89:F5:DD:04:8C:CD:52:C1:07:7F:41:BD Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft Manifest number: 0BAC Signing time: Sat 06 Dec 2025 18:27:24 +0000 Manifest this update: Sat 06 Dec 2025 18:27:23 +0000 Manifest next update: Sat 13 Dec 2025 18:27:23 +0000 Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: hu64TgLDMxgXOGOlrque//k23BuQrDLrwrEPuJfnE/8=) 2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: rsXupeO8EVGQ/M7qesQZfS0Ho6k/jy/+B1i/0dc3Rfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Validity Not Before: Dec 6 18:27:23 2025 GMT Not After : Dec 13 18:27:23 2025 GMT Subject: CN=6934758b-0226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ff:d5:83:e0:ed:38:63:1e:81:36:8f:7f:d4: 6c:3e:b0:3e:33:1f:50:b3:f5:cd:53:a4:c7:21:4a: 25:42:1d:49:4d:b3:bb:0c:ca:81:13:58:56:00:e3: a7:93:a5:17:ef:76:36:84:49:d8:e6:2a:27:85:7c: f0:79:0d:35:6d:4e:72:6a:67:77:2b:8c:01:c0:c3: 14:d8:01:c9:d3:df:ad:f2:95:86:06:7d:ae:3a:ca: 4a:7c:dd:97:42:25:4b:72:94:fd:aa:7b:81:d2:69: 3e:3d:5c:d0:0b:6b:89:05:e8:c9:05:4e:f3:b0:a1: ac:b6:bc:76:ed:9d:1f:0a:c7:bd:37:b4:6d:9a:e8: 51:7c:45:6c:83:8f:02:2c:ed:58:a7:ee:52:36:77: 8f:35:e6:60:d9:5c:3e:dc:69:91:37:95:43:a8:54: c9:2f:ee:7c:f9:70:dc:50:55:a7:03:50:4d:07:4e: 06:ba:a5:73:88:55:07:27:03:b2:db:56:03:4f:74: 64:00:88:df:8d:ee:a9:66:22:07:9e:9b:d9:e5:e3: e4:02:47:8c:d0:1d:82:50:18:06:eb:05:e5:06:e6: 97:84:ac:a3:c3:9d:56:92:d0:a0:c9:d0:8e:43:8e: 99:10:7f:0b:63:fe:b3:bc:aa:55:4c:9b:94:b0:2f: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:68:69:E1:F6:8D:D2:38:89:F5:DD:04:8C:CD:52:C1:07:7F:41:BD X509v3 Authority Key Identifier: keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:28:70:b3:55:f5:65:ae:52:b0:f7:a6:cf:eb:d0:9d:11:22: 4e:c9:2d:1b:de:5e:24:bd:2d:54:a7:d7:b0:c3:44:88:90:2b: d6:f0:0f:ba:df:3f:7a:38:e9:1a:8e:74:8b:f1:8d:c2:e2:a7: 90:bd:dc:19:19:e1:7e:ad:82:52:73:0e:24:c5:c8:4f:a8:ce: 7e:1c:b8:76:db:69:b4:99:b7:be:7a:d2:c9:1a:02:9e:c0:b0: 0b:1b:aa:f3:af:12:6f:1a:b5:55:e2:e9:8b:e9:52:ea:71:2b: 4d:d8:55:62:59:48:ab:8c:ac:d3:78:71:bc:90:02:4f:60:89: 70:0a:88:15:b8:f8:fa:4f:b8:6e:0c:f0:b3:cc:51:5d:ed:da: 9b:bd:ab:d4:a8:96:fa:0a:50:30:2a:52:7d:09:75:d5:8a:6e: b4:7d:2b:f4:17:77:ab:d3:7b:aa:25:6c:a4:38:94:e3:15:ae: fc:19:06:0f:d3:27:1d:c3:79:e6:5b:99:a0:54:49:04:75:bd: 41:d7:42:0d:e5:c4:90:7a:eb:7c:ac:a3:ab:1a:cb:f5:b3:ab: 21:80:a5:3a:e6:72:23:db:5d:eb:60:69:0a:d6:51:7e:6c:21: 43:78:4d:80:19:25:00:b9:d6:37:29:62:f6:61:d6:94:67:f5: 81:66:2d:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUNFRjExMC8GA1UEBRMoODQ0QkQ2RDFBOTcyQ0ZEMkI2MEI4NERFMENCNjNFNUQ1 NEFGQThDRjAeFw0yNTEyMDYxODI3MjNaFw0yNTEyMTMxODI3MjNaMBgxFjAUBgNV BAMTDTY5MzQ3NThiLTAyMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDh/9WD4O04Yx6BNo9/1Gw+sD4zH1Cz9c1TpMchSiVCHUlNs7sMyoETWFYA46eT pRfvdjaESdjmKieFfPB5DTVtTnJqZ3crjAHAwxTYAcnT363ylYYGfa46ykp83ZdC JUtylP2qe4HSaT49XNALa4kF6MkFTvOwoay2vHbtnR8Kx703tG2a6FF8RWyDjwIs 7Vin7lI2d4815mDZXD7caZE3lUOoVMkv7nz5cNxQVacDUE0HTga6pXOIVQcnA7Lb VgNPdGQAiN+N7qlmIgeem9nl4+QCR4zQHYJQGAbrBeUG5peErKPDnVaS0KDJ0I5D jpkQfwtj/rO8qlVMm5SwL4eDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhmhp4faN 0jiJ9d0EjM1SwQd/Qb0wHwYDVR0jBBgwFoAUhEvW0alyz9K2C4TeDLY+XVSvqM8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQ0VGLzlDRTUxMjU4NDU5 MTExRUFCRTZCOTMxQkM0RjlBRTAyL2hFdlcwYWx5ejlLMkM0VGVETFktWFZTdnFN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEV2VzBhbHl6OUsyQzRUZURMWS1YVlN2cU04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx Q0VGLzlDRTUxMjU4NDU5MTExRUFCRTZCOTMxQkM0RjlBRTAyL2hFdlcwYWx5ejlL MkM0VGVETFktWFZTdnFNOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJoocLNV9WWuUrD3ps/r0J0RIk7JLRveXiS9LVSn17DDRIiQK9bwD7rf P3o46RqOdIvxjcLip5C93BkZ4X6tglJzDiTFyE+ozn4cuHbbabSZt7560skaAp7A sAsbqvOvEm8atVXi6YvpUupxK03YVWJZSKuMrNN4cbyQAk9giXAKiBW4+PpPuG4M 8LPMUV3t2pu9q9SolvoKUDAqUn0JddWKbrR9K/QXd6vTe6olbKQ4lOMVrvwZBg/T Jx3DeeZbmaBUSQR1vUHXQg3lxJB663yso6say/WzqyGApTrmciPbXetgaQrWUX5s IUN4TYAZJQC51jcpYvZh1pRn9YFmLb0= -----END CERTIFICATE-----Generated at Sat Dec 6 22:10:28 2025 by rpki-client