This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft File: sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json) Hash identifier: Zl5ikvIN5rimfs0aAfaQbgnWGaasuANeiAWeT52+NeM= Subject key identifier: 7A:43:53:E5:00:14:C5:E2:6C:82:36:C9:E1:5C:48:A5:4A:88:67:1F Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft Manifest number: 0C8E Signing time: Sat 06 Dec 2025 17:48:19 +0000 Manifest this update: Sat 06 Dec 2025 17:48:18 +0000 Manifest next update: Sat 13 Dec 2025 17:48:18 +0000 Files and hashes: 1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: ykuTtkc/Fxsl7bswZk1I0DS5qkrH5u8Tb46JnUYEDWU=) 2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: bP4mtdPcC9gJRT9cgoHrxBppsqMyFJRwGR6OCAipZzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Validity Not Before: Dec 6 17:48:18 2025 GMT Not After : Dec 13 17:48:18 2025 GMT Subject: CN=69346c63-2727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5f:17:03:67:5f:64:45:45:ff:34:2d:b9:6e: 1d:80:34:eb:ee:8d:a1:10:be:32:fd:e0:ea:1b:d5: d0:69:d9:78:11:ba:03:db:9d:ea:81:9f:93:2b:31: 1f:a9:8f:6d:69:66:48:96:52:d9:75:64:35:e2:91: 62:c3:e4:e0:e9:6c:4c:f6:fc:e7:1c:11:f0:9d:32: 6b:65:c2:bd:10:1a:cd:56:08:44:18:a1:de:7e:a3: 42:62:8c:07:14:0e:17:4b:b8:ee:54:36:f4:93:96: fb:c7:d2:81:88:8f:4a:2b:16:cf:33:a2:7f:54:09: bd:dd:fa:c8:89:6c:e5:76:0a:d6:cb:5a:6c:c6:4f: db:b7:68:a5:b3:be:c9:d9:8f:87:ac:70:4d:22:d8: 20:0f:2e:f0:37:2e:7a:eb:c8:64:f1:cf:36:3e:3d: 44:c8:58:f5:18:98:55:04:83:46:c5:af:1d:a2:76: 92:00:9c:e5:e8:c1:5c:ab:73:67:ca:d5:5f:ca:d7: 5d:53:af:c4:d2:55:7c:f9:30:9b:32:1c:99:f7:08: b3:86:aa:46:a9:f0:6e:0c:24:8c:37:5c:80:e7:a0: 29:b1:fb:a9:c1:55:e3:88:40:c4:18:c7:4b:3d:7e: ca:77:8b:d2:c9:aa:75:59:aa:59:19:a5:fb:dc:0f: 74:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:43:53:E5:00:14:C5:E2:6C:82:36:C9:E1:5C:48:A5:4A:88:67:1F X509v3 Authority Key Identifier: keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:19:cf:c1:b6:9b:4b:2f:57:17:c8:5c:30:f3:80:0c:06:0f: e3:12:54:ee:9f:1f:c0:68:9e:b6:99:53:7f:00:9b:a7:03:09: 03:0a:35:97:ee:65:b3:e4:df:10:21:68:7a:49:20:c0:7c:04: ea:26:2a:9c:e8:05:b5:f3:28:74:f8:bf:f4:c4:93:ac:39:33: 56:7c:fc:75:f8:6e:59:b3:2d:77:1b:f8:75:af:79:57:36:05: 75:96:a5:a1:e6:d1:b3:ba:bc:ea:fb:75:6b:85:fa:34:bb:a1: 62:59:39:ed:b4:0b:e8:84:74:55:5c:ae:24:4c:8f:a7:06:ac: 01:a6:a0:69:a8:01:a9:b3:53:cb:e2:bb:d2:c1:84:b6:bd:02: 5d:d1:43:fa:80:1a:31:03:e3:dc:a1:47:47:ab:06:98:13:67: 11:8f:68:11:e0:72:7a:77:fd:8a:d3:c8:10:3b:8e:a2:63:3d: 27:57:ea:f7:0f:dd:36:69:43:3b:fd:ed:0b:3a:6e:6b:84:da: f6:bb:f2:ba:ad:eb:51:eb:f6:43:4d:7e:fa:17:93:45:af:4e: cb:b4:a1:dd:81:71:41:5e:6f:da:66:25:bf:99:22:bb:00:df: db:64:d8:b3:74:9e:f9:95:01:46:77:59:97:d4:3f:ce:f3:15: 91:fd:db:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1RkIxMTAvBgNVBAUTKEIwN0EwQTQwMTlFOEI4MjAwMjEzQkYyRENDRkM2ODcw Rjg1RTA0NjYwHhcNMjUxMjA2MTc0ODE4WhcNMjUxMjEzMTc0ODE4WjAYMRYwFAYD VQQDEw02OTM0NmM2My0yNzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoF8XA2dfZEVF/zQtuW4dgDTr7o2hEL4y/eDqG9XQadl4EboD253qgZ+TKzEf qY9taWZIllLZdWQ14pFiw+Tg6WxM9vznHBHwnTJrZcK9EBrNVghEGKHefqNCYowH FA4XS7juVDb0k5b7x9KBiI9KKxbPM6J/VAm93frIiWzldgrWy1psxk/bt2ils77J 2Y+HrHBNItggDy7wNy5668hk8c82Pj1EyFj1GJhVBINGxa8donaSAJzl6MFcq3Nn ytVfytddU6/E0lV8+TCbMhyZ9wizhqpGqfBuDCSMN1yA56ApsfupwVXjiEDEGMdL PX7Kd4vSyap1WapZGaX73A90sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpDU+UA FMXibII2yeFcSKVKiGcfMB8GA1UdIwQYMBaAFLB6CkAZ6LggAhO/Lcz8aHD4XgRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTVGQi9DMTU2REY4RTA5 REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VDQUNFNzh0elB4b2NQaGVC R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NIb0tRQm5vdUNBQ0U3OHR6UHhvY1BoZUJHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTVGQi9DMTU2REY4RTA5REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VD QUNFNzh0elB4b2NQaGVCR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmGc/BtptLL1cXyFww84AMBg/jElTunx/AaJ62mVN/AJunAwkDCjWX 7mWz5N8QIWh6SSDAfATqJiqc6AW18yh0+L/0xJOsOTNWfPx1+G5Zsy13G/h1r3lX NgV1lqWh5tGzurzq+3Vrhfo0u6FiWTnttAvohHRVXK4kTI+nBqwBpqBpqAGps1PL 4rvSwYS2vQJd0UP6gBoxA+PcoUdHqwaYE2cRj2gR4HJ6d/2K08gQO46iYz0nV+r3 D902aUM7/e0LOm5rhNr2u/K6retR6/ZDTX76F5NFr07LtKHdgXFBXm/aZiW/mSK7 AN/bZNizdJ75lQFGd1mX1D/O8xWR/dtJ -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:15 2025 by rpki-client