This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft File: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json) Hash identifier: 6rphZ+GSR6EC/SAG0gFMDl1yyY654pJLo5fyM8keSBs= Subject key identifier: B9:69:37:0C:21:79:9D:6F:AB:98:37:65:8E:24:52:80:F8:F0:E1:46 Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 Certificate issuer: /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft Manifest number: 0185 Signing time: Fri 05 Dec 2025 01:50:18 +0000 Manifest this update: Fri 05 Dec 2025 01:50:17 +0000 Manifest next update: Fri 12 Dec 2025 01:50:17 +0000 Files and hashes: 1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: br+pGO7f33c9H+zxGfqaDBnk8RN6yAgrw5EZ1NtThDg=) 2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: lQYmsDBc3UpFQI5bvRZLM1pLBA2w7erJcueIAfvmPc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Validity Not Before: Dec 5 01:50:17 2025 GMT Not After : Dec 12 01:50:17 2025 GMT Subject: CN=69323a5a-4478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:26:01:27:be:97:ff:08:6b:14:34:60:15: 08:85:e8:49:09:92:07:ef:1b:48:6d:af:40:c1:d0: 77:ea:ab:2c:39:4e:55:6f:c8:15:92:39:85:c6:65: d6:84:d0:c4:bc:db:51:da:21:e5:d0:47:45:b7:ba: 68:a3:c0:d4:d3:3f:ed:f7:4e:f2:e8:bc:57:1d:43: b7:16:37:5d:b2:b1:89:6d:28:34:e4:a6:70:b0:d9: cf:18:32:f3:cb:64:96:78:e4:33:36:06:eb:7c:9f: e1:c9:40:fd:dd:e3:ca:24:71:69:05:fd:39:6c:dd: 0e:75:60:0e:e0:cc:f5:35:cd:0a:6e:38:f4:c8:b2: 3f:ca:88:1c:15:82:9e:20:bd:e7:bc:5b:2d:ec:93: 05:fa:bf:93:ef:cc:4b:c1:5a:4a:0b:80:80:58:4f: 6d:ac:ba:cd:fb:19:22:ff:53:1e:27:45:21:7d:f9: 96:f5:f1:49:6f:3d:a3:88:23:cc:42:9e:16:70:2f: c0:1b:c0:41:7d:df:5f:74:ba:48:c3:48:66:ed:ec: 58:93:4e:a2:7d:3d:0f:07:6d:0e:38:71:97:61:d2: 93:26:0d:64:38:a4:27:b5:0b:0f:34:0b:c7:91:4c: a8:94:d7:1e:29:28:71:46:95:4b:02:64:01:5e:a5: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:69:37:0C:21:79:9D:6F:AB:98:37:65:8E:24:52:80:F8:F0:E1:46 X509v3 Authority Key Identifier: keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:18:29:de:ee:26:06:fc:dd:d3:b1:db:71:a6:a9:fa:32:26: e9:91:4f:2a:56:09:3f:88:74:a9:e4:2b:42:df:1f:18:f8:d2: f5:0a:bf:fc:bd:b4:80:ae:cb:1e:78:f4:63:a0:a6:ee:ee:65: ae:6c:28:90:f5:f8:b6:f3:a7:37:96:5c:74:3b:e9:d7:49:65: bf:79:10:f2:ed:34:6a:e1:23:1a:c7:96:67:93:75:95:27:e4: b9:e2:2d:78:b5:06:c5:c1:e9:32:9e:c6:e9:ae:6a:5e:e4:87: d4:82:4a:d7:63:bb:b7:36:4d:eb:6c:9a:14:d1:e1:91:9c:48: 47:be:99:49:08:e8:48:f0:e3:c7:bc:85:23:7e:44:b2:a1:ab: 5b:86:e4:dd:eb:10:39:cb:24:01:1d:b1:85:b0:41:ea:1a:09: ec:94:4f:20:60:c9:cc:0f:08:79:57:75:cc:2f:67:61:8c:60: f0:c9:89:06:fe:9c:c5:68:d3:ed:40:e0:5f:38:bc:6c:68:42: 91:cf:55:8d:77:36:47:6d:da:10:38:46:29:59:d2:ce:9b:47: be:f4:14:98:7c:7e:0a:ab:49:58:0c:cb:a0:83:89:9c:90:fd: d2:32:fc:8d:ea:96:45:78:45:4b:b8:80:27:17:c0:64:a3:49: 36:3b:26:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwMkYxMTAvBgNVBAUTKDg3RjMxQjIwMUJERDE4NzU4MTU0MEM1QjhCODY0NDM4 QzI5OTkwQjkwHhcNMjUxMjA1MDE1MDE3WhcNMjUxMjEyMDE1MDE3WjAYMRYwFAYD VQQDEw02OTMyM2E1YS00NDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDomASe+l/8IaxQ0YBUIhehJCZIH7xtIba9AwdB36qssOU5Vb8gVkjmFxmXW hNDEvNtR2iHl0EdFt7poo8DU0z/t907y6LxXHUO3FjddsrGJbSg05KZwsNnPGDLz y2SWeOQzNgbrfJ/hyUD93ePKJHFpBf05bN0OdWAO4Mz1Nc0Kbjj0yLI/yogcFYKe IL3nvFst7JMF+r+T78xLwVpKC4CAWE9trLrN+xki/1MeJ0UhffmW9fFJbz2jiCPM Qp4WcC/AG8BBfd9fdLpIw0hm7exYk06ifT0PB20OOHGXYdKTJg1kOKQntQsPNAvH kUyolNceKShxRpVLAmQBXqUDawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlpNwwh eZ1vq5g3ZY4kUoD48OFGMB8GA1UdIwQYMBaAFIfzGyAb3Rh1gVQMW4uGRDjCmZC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjAyRi9EN0MzM0FCODdG QkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdIV0JWQXhiaTRaRU9NS1pr TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfTWJJQnZkR0hXQlZBeGJpNFpFT01LWmtMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjAyRi9EN0MzM0FCODdGQkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdI V0JWQXhiaTRaRU9NS1prTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyGCne7iYG/N3Tsdtxpqn6MibpkU8qVgk/iHSp5CtC3x8Y+NL1Cr/8 vbSArsseePRjoKbu7mWubCiQ9fi286c3llx0O+nXSWW/eRDy7TRq4SMax5Znk3WV J+S54i14tQbFwekynsbprmpe5IfUgkrXY7u3Nk3rbJoU0eGRnEhHvplJCOhI8OPH vIUjfkSyoatbhuTd6xA5yyQBHbGFsEHqGgnslE8gYMnMDwh5V3XML2dhjGDwyYkG /pzFaNPtQOBfOLxsaEKRz1WNdzZHbdoQOEYpWdLOm0e+9BSYfH4Kq0lYDMugg4mc kP3SMvyN6pZFeEVLuIAnF8Bko0k2OyaJ -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:23 2025 by rpki-client