This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json) Hash identifier: bGglt3v2mHNakc2YsT5KGqm6RZ2NRUG7QXd912mm8pQ= Subject key identifier: F5:74:67:62:61:CD:10:EF:43:A1:88:55:87:A2:70:16:E3:B6:86:5F Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft Manifest number: 021F Signing time: Fri 05 Dec 2025 00:27:54 +0000 Manifest this update: Fri 05 Dec 2025 00:27:53 +0000 Manifest next update: Fri 12 Dec 2025 00:27:53 +0000 Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: 0tiHQI+ZxMe9qW9ajg/kG8ocuCCLMq6D6OaQq9oD20w=) 2: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: Rf57xWILJOvL68EEABL6r6dfZw+gyCnJxd924tHN+AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Validity Not Before: Dec 5 00:27:53 2025 GMT Not After : Dec 12 00:27:53 2025 GMT Subject: CN=69322709-4776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4d:92:7a:78:86:91:7f:8e:47:7c:5e:d3:fa: a5:39:29:e5:25:48:26:1f:5d:ef:51:6a:c6:59:29: 8f:2f:39:9d:16:31:92:d2:e5:66:ef:8e:17:48:9b: 18:98:1b:91:88:73:ae:be:ad:77:63:a9:c4:50:8c: 97:d5:15:12:5f:24:06:3c:c5:38:ce:7b:4e:2f:65: 5d:d0:3b:bb:f4:d4:35:b1:09:64:d9:2e:8d:f7:a0: e0:8a:81:ed:0e:0d:d5:2a:f1:47:bb:f7:97:04:7e: d7:c8:44:d0:0a:fc:ec:cc:6a:54:85:72:b0:97:f3: e9:28:e0:7a:95:3a:c4:16:17:2a:d6:00:ff:fc:02: 2f:3b:2b:7b:c3:70:9c:f1:f2:de:a1:e9:8d:41:9c: 1e:4d:c0:30:47:d4:a7:b4:d5:bb:30:14:cf:28:c5: a7:b7:f5:54:68:18:b1:3e:90:c6:42:de:97:32:ee: 9b:cf:b9:a9:e8:04:47:96:90:ae:a3:5b:1b:3a:f4: 4a:60:e9:f5:bd:2a:81:89:4e:6d:46:57:56:1d:02: c4:0a:ff:7c:6f:00:7f:b3:55:40:d3:21:91:5b:e9: 95:25:72:9a:03:58:f3:ab:fb:f5:e8:59:24:45:11: 03:93:a9:9c:3e:5b:f0:d7:ab:77:b7:5e:5e:96:ec: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:74:67:62:61:CD:10:EF:43:A1:88:55:87:A2:70:16:E3:B6:86:5F X509v3 Authority Key Identifier: keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3d:b6:60:49:2d:08:33:1b:5e:18:98:47:8d:76:be:1f:12: 2d:42:e0:34:50:9a:42:98:00:40:56:0e:0d:99:3a:14:48:7d: 43:ae:5a:e0:89:c8:65:da:1b:3a:cb:e1:a3:40:00:90:c7:ab: 15:89:a4:3e:08:60:b8:27:89:64:2e:dc:86:01:a0:59:33:38: 92:91:82:12:12:1a:3e:60:f1:ee:16:26:be:dd:12:47:ab:79: 55:ae:34:19:a2:4a:5d:04:88:93:a4:09:0a:e7:3b:0b:36:be: 01:4a:5d:79:c4:e0:d9:56:57:3f:96:54:89:ef:a9:2d:82:ba: ae:70:3f:1a:b0:29:5c:f7:44:0f:9d:c1:3b:9f:ac:4b:41:ae: 5c:3b:00:7c:a9:3f:37:be:4e:a3:9a:52:8c:3b:4d:b3:39:73: 28:70:04:1d:06:35:5e:75:75:04:f6:1f:44:76:2c:95:b4:02: d0:c0:78:6a:c1:3f:72:a7:fa:9a:4b:78:66:33:bc:ec:5b:46: 6c:49:88:13:55:98:1f:4e:ca:d7:a5:e6:70:ca:eb:26:17:e1: e7:77:df:cb:4a:4e:42:ac:83:f2:05:0b:0d:73:c1:11:1d:c1: 6d:8a:51:ae:8f:6d:27:b5:d9:e9:f8:71:b6:4a:ae:8b:30:bb: 00:d3:55:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF Q0M5RUU5NkMwHhcNMjUxMjA1MDAyNzUzWhcNMjUxMjEyMDAyNzUzWjAYMRYwFAYD VQQDEw02OTMyMjcwOS00Nzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA002SeniGkX+OR3xe0/qlOSnlJUgmH13vUWrGWSmPLzmdFjGS0uVm744XSJsY mBuRiHOuvq13Y6nEUIyX1RUSXyQGPMU4zntOL2Vd0Du79NQ1sQlk2S6N96DgioHt Dg3VKvFHu/eXBH7XyETQCvzszGpUhXKwl/PpKOB6lTrEFhcq1gD//AIvOyt7w3Cc 8fLeoemNQZweTcAwR9SntNW7MBTPKMWnt/VUaBixPpDGQt6XMu6bz7mp6ARHlpCu o1sbOvRKYOn1vSqBiU5tRldWHQLECv98bwB/s1VA0yGRW+mVJXKaA1jzq/v16Fkk RREDk6mcPlvw16t3t15eluwapQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPV0Z2Jh zRDvQ6GIVYeicBbjtoZfMB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzYwOS8yM0Y5RThCQThGREUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19t RFVzdjlmYkJKRkRzeWU2V3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOPbZgSS0IMxteGJhHjXa+HxItQuA0UJpCmABAVg4NmToUSH1Drlrg ichl2hs6y+GjQACQx6sViaQ+CGC4J4lkLtyGAaBZMziSkYISEho+YPHuFia+3RJH q3lVrjQZokpdBIiTpAkK5zsLNr4BSl15xODZVlc/llSJ76ktgrqucD8asClc90QP ncE7n6xLQa5cOwB8qT83vk6jmlKMO02zOXMocAQdBjVedXUE9h9EdiyVtALQwHhq wT9yp/qaS3hmM7zsW0ZsSYgTVZgfTsrXpeZwyusmF+Hnd9/LSk5CrIPyBQsNc8ER HcFtilGuj20ntdnp+HG2Sq6LMLsA01VH -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:06 2025 by rpki-client