This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft File: h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft (raw, json) Hash identifier: LrfrdOsrGacISihsvzHYecn+IKs/+EWW9jl0RLWkW8I= Subject key identifier: F6:B8:92:B0:2A:ED:62:17:20:BF:9E:02:6B:75:93:2C:0B:67:3F:A4 Authority key identifier: 87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE Certificate issuer: /CN=A9174CB0/serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft Manifest number: 0848 Signing time: Sat 06 Dec 2025 19:51:20 +0000 Manifest this update: Sat 06 Dec 2025 19:51:19 +0000 Manifest next update: Sat 13 Dec 2025 19:51:19 +0000 Files and hashes: 1: h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl (hash: /2gVs4J+uGlZ45kC0297P5wLOEhTwzUR/rLkGsXKULg=) 2: E21E5A44EB5611EA85A6FA39C4F9AE02.roa (hash: Y/gZjrjkV3J+e38Z5G6K1ZkeL7UeturETxRHwwUgwB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174CB0, serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Validity Not Before: Dec 6 19:51:19 2025 GMT Not After : Dec 13 19:51:19 2025 GMT Subject: CN=69348938-c0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ff:98:82:ea:aa:c7:75:87:07:c9:27:53:de: e8:86:0c:2b:15:80:e0:4a:d8:c4:2c:dc:b8:f9:6a: 4f:96:a6:a5:2c:3e:94:7d:05:cb:59:53:a9:1c:d1: 0a:e5:3b:24:12:b6:7c:06:af:76:b3:ea:62:aa:5b: 0b:e5:af:1d:a6:d2:2f:bb:91:b3:38:94:f3:31:c0: 86:6a:cc:d8:2c:1e:54:79:2a:84:7a:7b:14:a7:10: 9c:e2:8d:11:e6:04:1f:e3:37:33:c5:db:0b:0f:b1: ac:d7:a4:b6:02:c2:37:51:f7:98:7d:30:43:98:e0: 76:0b:b9:77:97:28:99:4f:9a:52:f3:dc:e9:c7:b5: 99:92:9e:3e:c2:a8:d8:c9:c4:d9:36:95:84:d8:c7: 64:20:7c:e2:0e:a5:d7:2a:88:80:f5:0c:a5:7a:27: db:d5:1d:a9:d5:a6:a4:fe:85:b0:76:38:20:a4:d6: 28:bb:8b:08:d0:32:2d:e4:fb:a9:a7:f6:bd:12:f2: cb:fe:ab:4d:19:4d:1e:0d:11:cf:f6:f3:65:87:a1: ee:e4:f7:dd:9d:c0:1d:37:16:a3:74:41:33:ea:e6: 43:0f:6d:3a:e6:ea:d5:3e:5f:da:00:d7:d9:26:96: ef:80:84:c0:31:d7:ce:9f:61:48:a1:37:03:06:7b: 9c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B8:92:B0:2A:ED:62:17:20:BF:9E:02:6B:75:93:2C:0B:67:3F:A4 X509v3 Authority Key Identifier: keyid:87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:88:38:c2:36:e2:be:d4:30:90:00:f5:27:7e:00:5d:45:ff: c4:54:ae:c4:86:60:8e:d5:08:96:a4:74:6e:c2:ea:1d:88:d9: 81:a1:70:0b:76:26:bb:4a:ca:e9:d3:3c:06:30:8e:df:6e:fe: 74:a8:b1:e1:56:c9:fa:be:f0:6f:53:ac:0b:28:bd:7e:47:e9: e3:40:09:d8:d3:0c:cc:cd:3d:29:31:c8:42:52:60:75:d3:13: f3:a8:d5:df:f4:53:5f:52:17:02:b6:9b:a7:80:dd:1b:dc:21: 5c:08:f5:87:ef:d4:f9:ac:c8:10:65:bc:7b:52:6f:b2:96:b3: c4:9a:e7:d2:fa:43:2d:19:1b:a7:19:95:6b:86:44:3d:49:a5: 20:86:04:ea:ec:ec:7f:13:4f:03:76:44:60:24:1f:79:b7:5c: 50:aa:7e:38:fc:67:1b:f2:78:7f:a8:00:0f:b8:fe:13:f4:48: 36:ea:d0:73:5e:75:4c:ca:c7:80:ac:76:cc:be:6d:be:97:52: 7f:98:83:e0:94:b0:de:13:0e:10:e0:7e:0e:26:eb:be:5c:73: c7:5f:6d:ef:e0:70:a3:45:e8:58:43:a4:19:11:ff:ca:9e:db: 47:f9:79:ef:87:38:7f:92:2c:d2:3d:45:ba:34:54:3f:b7:b7: 2c:45:b5:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDQjAxMTAvBgNVBAUTKDg3QkY1N0ZCQkNFMDY0NUUyOTFENDk0NkU1QzcyMjc2 MjQzNzFBQ0UwHhcNMjUxMjA2MTk1MTE5WhcNMjUxMjEzMTk1MTE5WjAYMRYwFAYD VQQDEw02OTM0ODkzOC1jMGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApP+Yguqqx3WHB8knU97ohgwrFYDgStjELNy4+WpPlqalLD6UfQXLWVOpHNEK 5TskErZ8Bq92s+piqlsL5a8dptIvu5GzOJTzMcCGaszYLB5UeSqEensUpxCc4o0R 5gQf4zczxdsLD7Gs16S2AsI3UfeYfTBDmOB2C7l3lyiZT5pS89zpx7WZkp4+wqjY ycTZNpWE2MdkIHziDqXXKoiA9Qyleifb1R2p1aak/oWwdjggpNYou4sI0DIt5Pup p/a9EvLL/qtNGU0eDRHP9vNlh6Hu5PfdncAdNxajdEEz6uZDD2065urVPl/aANfZ JpbvgITAMdfOn2FIoTcDBnucwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPa4krAq 7WIXIL+eAmt1kywLZz+kMB8GA1UdIwQYMBaAFIe/V/u84GReKR1JRuXHInYkNxrO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NENCMC9DQ0FDMTQ1NEVC NTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pGNHBIVWxHNWNjaWRpUTNH czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3OVgtN3pnWkY0cEhVbEc1Y2NpZGlRM0dzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NENCMC9DQ0FDMTQ1NEVCNTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pG NHBIVWxHNWNjaWRpUTNHczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgiDjCNuK+1DCQAPUnfgBdRf/EVK7EhmCO1QiWpHRuwuodiNmBoXAL dia7Ssrp0zwGMI7fbv50qLHhVsn6vvBvU6wLKL1+R+njQAnY0wzMzT0pMchCUmB1 0xPzqNXf9FNfUhcCtpungN0b3CFcCPWH79T5rMgQZbx7Um+ylrPEmufS+kMtGRun GZVrhkQ9SaUghgTq7Ox/E08DdkRgJB95t1xQqn44/Gcb8nh/qAAPuP4T9Eg26tBz XnVMyseArHbMvm2+l1J/mIPglLDeEw4Q4H4OJuu+XHPHX23v4HCjRehYQ6QZEf/K nttH+Xnvhzh/kizSPUW6NFQ/t7csRbU7 -----END CERTIFICATE-----Generated at Sun Dec 7 03:20:13 2025 by rpki-client