This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: DXdW3CJl3oc9lsX8JWmM20TWhzmWye71EgjZXIRm/xI= Subject key identifier: 82:8F:25:B6:87:18:8D:68:24:D3:B3:0C:88:FE:8E:22:F5:A6:54:33 Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 02D5 Signing time: Thu 04 Dec 2025 23:43:36 +0000 Manifest this update: Thu 04 Dec 2025 23:43:35 +0000 Manifest next update: Thu 11 Dec 2025 23:43:35 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: rapqNFCDsKEcKXL5U0tzbYFMpoMRjl+p8wUeUgw5aog=) 2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: ev+YjLUEFuV9synNnilJkgFER39S40N1zyX1CzULmag=) 3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: Ia6tlVbLIeqz/TCnxF60wA233bLpbVn+2ya+t4NGuKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: Dec 4 23:43:35 2025 GMT Not After : Dec 11 23:43:35 2025 GMT Subject: CN=69321ca8-2f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:1d:d2:aa:38:90:48:17:79:87:3a:56:f1: bc:3c:03:d6:86:26:21:6f:90:85:a2:a1:2d:01:06: ed:c3:a5:ec:48:b8:84:d2:8e:f6:ff:c7:e6:41:23: 2f:e3:6e:b1:df:96:24:ae:dd:25:a6:53:34:4c:cc: b8:e5:aa:fe:93:84:de:ad:e4:45:f5:cb:2a:12:2c: 8a:09:4e:3c:1f:27:f2:e8:e1:cf:cf:1c:e7:e3:e0: bc:05:d1:87:e2:97:57:8b:07:85:50:5f:57:46:dc: 23:a1:e8:ef:53:c3:c9:3d:73:f2:ce:54:a1:45:ed: 14:5c:a2:cf:15:90:37:1c:06:14:f9:bc:a2:0c:f9: 80:bb:f5:ee:3f:fd:4a:85:fd:d1:f0:e9:e1:47:41: b2:bf:58:95:cd:83:51:e5:7a:4f:b6:c4:3a:ac:ec: 65:00:ae:e5:55:5e:d4:64:bd:06:2e:28:c2:28:2c: 99:d7:0d:cf:cf:6b:c6:ee:71:db:66:4f:4a:72:da: ba:33:38:21:42:1e:db:ec:ff:24:b5:2a:56:18:d8: 0a:88:62:9a:3d:1c:3d:bb:b2:d0:22:c9:dc:55:d2: 02:32:68:bf:f8:78:32:47:46:f5:15:75:4f:6e:10: a6:ec:bb:4e:72:73:53:49:7b:ea:a1:8c:95:7c:13: 3b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8F:25:B6:87:18:8D:68:24:D3:B3:0C:88:FE:8E:22:F5:A6:54:33 X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:bc:22:7b:1b:29:89:84:7d:2f:ee:e9:29:29:33:37:cf:b1: 84:6d:41:c2:1f:2a:68:25:4d:d1:21:f1:2f:4b:1a:76:bd:e2: d3:21:9d:dc:ae:42:0f:05:b4:ed:ff:45:40:ec:59:d9:19:ee: d7:ab:89:34:31:7f:ab:12:c0:28:8c:b0:a3:18:89:db:7a:5d: 68:99:b9:2c:7d:89:76:c3:e6:2f:bd:e5:37:f6:af:68:36:fb: d9:4a:4f:d6:e6:35:21:56:ce:89:12:fd:a4:f9:87:1f:df:76: a6:4c:4f:f2:0c:b2:48:97:07:9e:b0:2b:15:9e:cb:68:84:33: 77:00:2b:17:ba:e0:fa:6b:0c:ec:4b:12:20:56:e9:50:d4:9a: 12:52:1e:25:83:d9:80:e8:e8:1f:20:8f:c0:98:b9:67:87:93: 48:f8:88:9a:e9:d5:36:ad:44:7f:e0:1b:15:a8:66:cf:7f:49: dd:93:30:cf:bf:92:c4:53:a5:c4:83:d6:ce:eb:00:aa:7b:20: e8:23:a1:3c:bd:7d:0c:8a:c1:aa:35:a6:b1:1c:0c:06:ce:96: 1e:c6:8a:d6:cc:a7:05:3f:a5:d8:b4:02:bb:ab:43:b6:52:55: 6c:cb:fa:c7:02:6b:7f:1b:78:a8:ad:6c:d5:4d:0e:89:08:63: 40:ea:aa:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjUxMjA0MjM0MzM1WhcNMjUxMjExMjM0MzM1WjAYMRYwFAYD VQQDEw02OTMyMWNhOC0yZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCcd0qo4kEgXeYc6VvG8PAPWhiYhb5CFoqEtAQbtw6XsSLiE0o72/8fmQSMv 426x35Ykrt0lplM0TMy45ar+k4TereRF9csqEiyKCU48Hyfy6OHPzxzn4+C8BdGH 4pdXiweFUF9XRtwjoejvU8PJPXPyzlShRe0UXKLPFZA3HAYU+byiDPmAu/XuP/1K hf3R8OnhR0Gyv1iVzYNR5XpPtsQ6rOxlAK7lVV7UZL0GLijCKCyZ1w3Pz2vG7nHb Zk9Kctq6MzghQh7b7P8ktSpWGNgKiGKaPRw9u7LQIsncVdICMmi/+HgyR0b1FXVP bhCm7LtOcnNTSXvqoYyVfBM79wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKPJbaH GI1oJNOzDIj+jiL1plQzMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0vCJ7GymJhH0v7ukpKTM3z7GEbUHCHypoJU3RIfEvSxp2veLTIZ3c rkIPBbTt/0VA7FnZGe7Xq4k0MX+rEsAojLCjGInbel1ombksfYl2w+YvveU39q9o NvvZSk/W5jUhVs6JEv2k+Ycf33amTE/yDLJIlweesCsVnstohDN3ACsXuuD6awzs SxIgVulQ1JoSUh4lg9mA6OgfII/AmLlnh5NI+Iia6dU2rUR/4BsVqGbPf0ndkzDP v5LEU6XEg9bO6wCqeyDoI6E8vX0MisGqNaaxHAwGzpYexorWzKcFP6XYtAK7q0O2 UlVsy/rHAmt/G3iorWzVTQ6JCGNA6qpj -----END CERTIFICATE-----Generated at Sat Dec 6 22:06:19 2025 by rpki-client