This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft File: hctAGQp33J5olNhX9zu3qQ4JdOQ.mft (raw, json) Hash identifier: ljVlByozKmRpqlMO7/bA0Yzp7fHuOLDCg3SCl9IZi/U= Subject key identifier: 05:54:D1:8F:A5:7B:05:9B:09:64:25:04:AA:86:5F:0E:DE:C6:32:B8 Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Certificate serial: 05DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft Manifest number: 05CF Signing time: Sat 20 Dec 2025 22:21:12 +0000 Manifest this update: Sat 20 Dec 2025 22:21:11 +0000 Manifest next update: Sat 27 Dec 2025 22:21:11 +0000 Files and hashes: 1: hctAGQp33J5olNhX9zu3qQ4JdOQ.crl (hash: vgDSq1ZqZGILVXt45xTk7hVQ08PL0A/VTsFyeEf0q7A=) 2: 7FCFB4745E8411EE89DF693EC4F9AE02.roa (hash: AcP4+2aIj47AkfHQ0Si3gKCupjSk93I6lVYcHLmJ46k=) 3: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (hash: zDAY/JgF04rYgWurZj2nx6aFtMaDIFUtTRAO3VpvWV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1499 (0x5db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Validity Not Before: Dec 20 22:21:11 2025 GMT Not After : Dec 27 22:21:11 2025 GMT Subject: CN=69472158-bab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:fb:1c:ec:1a:d7:fb:fe:8b:34:49:c5:5e: c0:36:13:db:c5:cb:aa:4b:99:a1:2d:e0:6b:9b:cb: 3c:26:33:5d:2e:d3:62:3c:c3:50:3b:b8:f4:66:99: 59:a8:aa:05:f9:1d:de:33:08:50:27:19:4f:86:ff: 27:b0:07:d9:85:9f:2d:19:df:36:6e:b5:97:ca:9d: 2b:5d:19:37:d1:ac:45:d5:80:d9:f0:25:0b:83:58: f1:e4:a2:99:75:0a:2b:ac:26:de:78:87:58:7c:a6: b3:07:09:7d:8e:dc:98:5d:61:15:c7:a8:41:06:c0: 8f:f0:06:0f:b8:6d:76:2f:c4:f9:b2:07:72:99:9c: 0c:2b:b4:b5:d4:20:c1:8f:a6:2f:30:e6:ad:9d:a3: 93:a6:29:ce:fa:43:75:87:8b:c3:0d:01:b7:4f:fb: 38:e8:fa:6b:54:52:f4:ae:45:13:ca:a8:75:96:75: 30:4f:fd:59:c7:30:96:da:b8:2a:d0:df:66:9c:6d: a5:ac:f4:fa:56:3c:c4:67:d9:58:2c:ef:6d:0c:aa: 3b:a4:fe:12:55:ec:c8:00:07:2a:ff:0d:d4:62:e6: 3f:35:55:c0:2a:cd:95:39:1a:ac:d2:42:a2:7c:1c: ac:83:5a:d2:07:6f:ed:f8:1b:4b:a3:34:61:c7:d6: 36:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:54:D1:8F:A5:7B:05:9B:09:64:25:04:AA:86:5F:0E:DE:C6:32:B8 X509v3 Authority Key Identifier: keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6d:e8:af:0d:09:43:61:d1:0c:6f:02:9d:61:c0:83:07:e5: 0e:ea:95:54:ff:17:24:b5:6a:f4:02:83:e4:ed:24:d9:4f:c2: c5:9e:b9:88:93:3c:ed:97:05:a2:e4:69:f5:90:62:1b:0c:b8: 30:6e:aa:03:5c:70:34:c6:f5:81:a0:12:95:f3:ed:8c:40:46: d8:f9:0f:40:51:6f:13:cb:68:68:b9:cc:c1:93:ef:18:93:24: 00:75:5b:48:e8:0b:67:fe:cc:1b:40:5d:fa:39:89:02:a1:c0: 1b:e7:4b:db:4a:33:c1:6d:8e:f1:4c:6f:93:cb:55:b1:44:48: 4f:ee:76:b8:68:23:13:81:5e:cd:0d:64:9a:9c:49:f1:e5:ac: 63:c4:e6:37:f4:fb:6d:ed:22:a1:74:8a:1a:b4:0f:bb:88:15: d2:b2:0e:3c:f0:5e:84:8e:d2:46:7f:6d:f3:71:8a:05:2e:c8: 06:7f:c6:a2:01:3a:3a:26:61:75:65:99:90:59:db:8b:9d:49: bc:02:a6:38:4e:16:02:92:ae:b0:45:3d:ce:a2:b9:22:d7:2a: 9a:2d:fc:be:e4:6e:1a:71:81:ce:f1:2f:44:f9:8c:7e:e7:29: 62:51:99:08:d4:e2:19:b4:a7:08:c0:f4:fe:3e:d8:32:eb:c7: 1f:3d:0e:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQjQxMTAvBgNVBAUTKDg1Q0I0MDE5MEE3N0RDOUU2ODk0RDg1N0Y3M0JCN0E5 MEUwOTc0RTQwHhcNMjUxMjIwMjIyMTExWhcNMjUxMjI3MjIyMTExWjAYMRYwFAYD VQQDDA02OTQ3MjE1OC1iYWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT/7HOwa1/v+izRJxV7ANhPbxcuqS5mhLeBrm8s8JjNdLtNiPMNQO7j0ZplZ qKoF+R3eMwhQJxlPhv8nsAfZhZ8tGd82brWXyp0rXRk30axF1YDZ8CULg1jx5KKZ dQorrCbeeIdYfKazBwl9jtyYXWEVx6hBBsCP8AYPuG12L8T5sgdymZwMK7S11CDB j6YvMOatnaOTpinO+kN1h4vDDQG3T/s46PprVFL0rkUTyqh1lnUwT/1ZxzCW2rgq 0N9mnG2lrPT6VjzEZ9lYLO9tDKo7pP4SVezIAAcq/w3UYuY/NVXAKs2VORqs0kKi fBysg1rSB2/t+BtLozRhx9Y2PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVU0Y+l ewWbCWQlBKqGXw7exjK4MB8GA1UdIwQYMBaAFIXLQBkKd9yeaJTYV/c7t6kOCXTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJCNC9CM0U3MzA5Q0U1 MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNKNW9sTmhYOXp1M3FRNEpk T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjdEFHUXAzM0o1b2xOaFg5enUzcVE0SmRPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJCNC9CM0U3MzA5Q0U1MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNK NW9sTmhYOXp1M3FRNEpkT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5beivDQlDYdEMbwKdYcCDB+UO6pVU/xcktWr0AoPk7STZT8LFnrmI kzztlwWi5Gn1kGIbDLgwbqoDXHA0xvWBoBKV8+2MQEbY+Q9AUW8Ty2houczBk+8Y kyQAdVtI6Atn/swbQF36OYkCocAb50vbSjPBbY7xTG+Ty1WxREhP7na4aCMTgV7N DWSanEnx5axjxOY39Ptt7SKhdIoatA+7iBXSsg488F6EjtJGf23zcYoFLsgGf8ai ATo6JmF1ZZmQWduLnUm8AqY4ThYCkq6wRT3Oorki1yqaLfy+5G4acYHO8S9E+Yx+ 5yliUZkI1OIZtKcIwPT+Ptgy68cfPQ4o -----END CERTIFICATE-----Generated at Sun Dec 21 11:28:11 2025 by rpki-client