This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json) Hash identifier: A9xqx3M8Q++4gNTtDRIHirFvhxsA3d1ZXBmkZ+qR9Hk= Subject key identifier: 88:2F:BE:4F:0A:A4:FD:61:9B:2A:82:7A:B4:3F:97:4A:75:DE:01:BD Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft Manifest number: 34EF Signing time: Sat 06 Dec 2025 14:16:30 +0000 Manifest this update: Sat 06 Dec 2025 14:16:29 +0000 Manifest next update: Sat 13 Dec 2025 14:16:29 +0000 Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: DWw04Bk0YySCWCRIo0W6glCe3mm4f6Q7E7Zcnfx6Yjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Validity Not Before: Dec 6 14:16:29 2025 GMT Not After : Dec 13 14:16:29 2025 GMT Subject: CN=69343abe-d028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:df:47:de:56:f5:f7:6f:b8:49:3f:a8:cb:e8: 5a:83:44:79:13:f3:ab:8f:cc:37:df:84:0e:3e:16: df:ea:b2:f9:c2:f4:30:81:50:6d:c4:1f:c5:a4:bd: b3:42:bf:e7:39:53:79:09:7c:e9:1c:ac:41:f4:4e: 75:69:61:9f:86:cc:b6:b2:af:16:cc:db:02:90:4a: 2a:7c:7d:ba:35:af:9a:4a:7e:aa:7a:44:5c:28:f1: f7:44:15:11:e6:42:89:95:0b:90:b3:d6:e5:34:78: 03:85:34:25:c5:36:e5:b4:e6:bd:31:ba:9f:f9:c3: 56:08:0e:1f:71:38:bb:7a:c4:9e:c6:da:fd:a7:70: 5a:4c:18:0c:30:da:73:a7:f7:34:e2:9a:39:1e:ab: 86:61:5d:87:3f:5a:c7:6a:16:4d:ab:4f:20:ad:b5: 8d:d7:a0:f0:0e:93:f9:07:31:a2:7a:f1:70:d9:ba: 4c:8f:da:55:a7:96:ec:c6:c9:58:fa:a8:f8:5f:a0: 96:91:9d:94:25:da:0d:07:4d:34:8c:ee:27:02:9f: 44:08:dc:c3:c9:e2:0a:66:ff:2c:a7:12:6e:b1:2b: d0:10:e1:a7:9f:ee:22:06:2a:2d:ac:08:3f:07:94: 91:74:66:9c:9d:c9:2f:9c:ce:79:95:c6:48:44:c6: 4e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2F:BE:4F:0A:A4:FD:61:9B:2A:82:7A:B4:3F:97:4A:75:DE:01:BD X509v3 Authority Key Identifier: keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:fc:3a:9a:d6:9f:41:23:1f:04:9b:22:72:d8:c3:63:c8:f1: d1:2f:f7:c0:74:01:93:95:71:d2:0d:4a:e9:12:25:cc:34:b2: a8:82:de:fd:12:cb:1e:67:6a:e4:09:f1:9f:4c:83:c8:58:5f: 87:2a:2b:29:fc:a0:7e:fb:84:2f:f3:45:50:a7:89:73:b1:8f: 8f:ab:af:5f:e9:25:d9:18:d5:54:e7:3c:3d:fe:fe:77:97:38: 9d:ac:9a:85:4b:f4:d7:13:94:52:d0:c3:02:ec:f4:ee:97:fa: f1:54:e5:67:a8:00:77:6f:fd:3f:b3:c7:5d:39:11:f6:78:eb: fa:ed:87:df:62:33:69:b6:74:8a:09:6d:53:36:50:9c:2e:c6: 22:62:ed:dd:8c:48:b3:fd:09:0f:eb:d4:87:3c:cf:d0:1c:d4: c0:08:0a:48:9a:91:e3:f8:bc:a6:83:1f:17:0e:73:95:37:8b: cf:1f:c2:17:70:23:4b:ef:91:7e:08:ac:a1:23:35:49:14:e4: 65:00:bd:28:f5:26:8a:fd:24:89:ab:1d:03:7a:fd:13:b6:10: 49:5f:c8:59:8c:78:39:5c:37:eb:e9:79:17:98:f4:2d:ce:19: 66:17:42:08:91:81:b9:e1:5c:a6:f7:ae:0e:e8:15:76:0f:cf: ca:51:67:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDg3OTA2MjUwM0ZEMjA4NDY2Rjc0RUE5QUY4NzY3MEE4 N0Q4NkE3MzYwHhcNMjUxMjA2MTQxNjI5WhcNMjUxMjEzMTQxNjI5WjAYMRYwFAYD VQQDEw02OTM0M2FiZS1kMDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6N9H3lb192+4ST+oy+hag0R5E/Orj8w334QOPhbf6rL5wvQwgVBtxB/FpL2z Qr/nOVN5CXzpHKxB9E51aWGfhsy2sq8WzNsCkEoqfH26Na+aSn6qekRcKPH3RBUR 5kKJlQuQs9blNHgDhTQlxTbltOa9Mbqf+cNWCA4fcTi7esSextr9p3BaTBgMMNpz p/c04po5HquGYV2HP1rHahZNq08grbWN16DwDpP5BzGievFw2bpMj9pVp5bsxslY +qj4X6CWkZ2UJdoNB000jO4nAp9ECNzDyeIKZv8spxJusSvQEOGnn+4iBiotrAg/ B5SRdGacnckvnM55lcZIRMZOuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgvvk8K pP1hmyqCerQ/l0p13gG9MB8GA1UdIwQYMBaAFIeQYlA/0ghGb3Tqmvh2cKh9hqc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC84NDZFQzA0MDFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NFWnZkT3FhLUhad3FIMkdw elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2g1QmlVRF9TQ0VadmRPcWEtSFp3cUgyR3B6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC84NDZFQzA0MDFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NF WnZkT3FhLUhad3FIMkdwelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV/Dqa1p9BIx8EmyJy2MNjyPHRL/fAdAGTlXHSDUrpEiXMNLKogt79 EsseZ2rkCfGfTIPIWF+HKisp/KB++4Qv80VQp4lzsY+Pq69f6SXZGNVU5zw9/v53 lzidrJqFS/TXE5RS0MMC7PTul/rxVOVnqAB3b/0/s8ddORH2eOv67YffYjNptnSK CW1TNlCcLsYiYu3djEiz/QkP69SHPM/QHNTACApImpHj+Lymgx8XDnOVN4vPH8IX cCNL75F+CKyhIzVJFORlAL0o9SaK/SSJqx0Dev0TthBJX8hZjHg5XDfr6XkXmPQt zhlmF0IIkYG54Vym964O6BV2D8/KUWcu -----END CERTIFICATE-----Generated at Sun Dec 7 04:16:14 2025 by rpki-client