This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json) Hash identifier: nsX6LzT25Wa0W4yFtZiZBSbjNHrY/Yu4kOdkgLzxXbw= Subject key identifier: 39:B5:A0:7E:1C:02:55:64:8E:14:61:3D:32:DC:CF:13:3B:B3:E0:F7 Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft Manifest number: 0153 Signing time: Fri 05 Dec 2025 02:18:55 +0000 Manifest this update: Fri 05 Dec 2025 02:18:55 +0000 Manifest next update: Fri 12 Dec 2025 02:18:55 +0000 Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: CZbv3Af9RbkphoPBPcIEmZcrONkNBtUpchaDW3LlpmM=) 2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: F4PEaJfd6HP1/7qcDw3hvzZGyQ0ocll5S0CbxU1lwXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: Dec 5 02:18:55 2025 GMT Not After : Dec 12 02:18:55 2025 GMT Subject: CN=6932410f-baa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:e9:76:00:e3:d0:95:d8:31:eb:af:44:5c: 76:e0:36:47:fc:f9:bb:5a:e0:08:3c:5c:36:6f:ef: db:33:ef:1e:f2:52:61:9e:43:cc:c2:6d:01:4f:a3: 2c:aa:3c:5a:cb:da:c4:b4:11:08:7e:63:7d:ab:51: 1d:e4:93:65:d1:b0:ab:02:9c:44:57:42:e0:4a:2f: e7:91:fd:40:bd:e3:a2:56:9c:2e:eb:b8:91:aa:c8: d1:af:9f:d7:3c:ae:58:f7:5d:80:03:29:da:b1:6c: 25:39:3f:0a:9c:58:c1:a6:59:2e:2d:4a:e2:a4:de: 71:55:e4:5c:b6:77:03:a0:72:f6:d5:a7:40:e1:5d: 51:4e:ab:8d:10:b5:9f:4a:fe:22:9d:6c:b6:47:06: 81:e8:71:73:41:e0:fd:e8:93:33:65:7d:65:4f:56: df:5b:50:ed:c4:9e:b3:68:c9:d1:9f:0c:ec:e6:81: ce:fa:d0:7c:ab:e8:23:de:fb:3c:ef:7b:14:ac:ff: 19:e6:e7:fe:fb:f8:b2:7c:f7:66:d8:5f:56:6e:bd: 11:41:9c:f9:ef:4c:2a:d0:ea:79:ab:24:6c:34:a3: 23:df:6c:60:5f:84:cb:62:30:c5:5c:01:02:9d:7d: 22:60:6c:6c:88:78:5a:a1:c5:ef:17:61:71:73:b1: 58:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B5:A0:7E:1C:02:55:64:8E:14:61:3D:32:DC:CF:13:3B:B3:E0:F7 X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b6:93:de:20:c3:b4:f4:b2:e4:33:c4:a2:af:ff:19:41:0c: 84:7a:6d:06:22:1f:df:3a:32:61:a3:db:83:44:6e:83:a8:6f: 3f:a6:e8:c5:d9:3b:5b:01:76:94:d3:43:93:96:d3:66:50:79: 33:c4:d1:13:7f:8a:da:cc:86:85:28:6a:0b:e5:55:9d:1b:e5: 42:49:83:aa:2f:74:be:65:67:af:94:89:41:c3:10:15:70:0a: 0d:d8:94:b7:4b:4b:08:5d:44:b6:7c:95:e1:52:5b:cf:c6:bc: e5:7e:01:cf:2c:64:60:08:4c:9b:e2:c2:ce:bc:e4:bd:a3:33: 81:a0:57:ef:63:c5:56:cf:5d:84:7c:cc:c5:09:c0:1e:eb:93: 70:98:b7:6f:b1:9e:c8:7f:1a:99:3f:2a:ce:7b:72:5c:2b:b8: 12:a6:7c:f3:fa:50:4a:84:28:ea:c1:96:5b:f4:ba:3f:d7:1c: 2e:f1:9b:51:61:1e:ce:86:5c:e1:dc:08:45:4f:68:f3:03:5f: c9:ad:63:79:93:6b:dd:15:a6:05:70:95:98:0a:d1:98:86:24: 8a:f6:91:b5:50:72:3c:99:70:64:60:ee:a9:84:46:72:70:9c: bd:03:f9:74:e1:20:f9:1c:27:f6:76:95:d2:b3:1f:d8:c2:b6: 26:4b:df:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5 NTREREMwRTUwHhcNMjUxMjA1MDIxODU1WhcNMjUxMjEyMDIxODU1WjAYMRYwFAYD VQQDEw02OTMyNDEwZi1iYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte/pdgDj0JXYMeuvRFx24DZH/Pm7WuAIPFw2b+/bM+8e8lJhnkPMwm0BT6Ms qjxay9rEtBEIfmN9q1Ed5JNl0bCrApxEV0LgSi/nkf1AveOiVpwu67iRqsjRr5/X PK5Y912AAynasWwlOT8KnFjBplkuLUripN5xVeRctncDoHL21adA4V1RTquNELWf Sv4inWy2RwaB6HFzQeD96JMzZX1lT1bfW1DtxJ6zaMnRnwzs5oHO+tB8q+gj3vs8 73sUrP8Z5uf++/iyfPdm2F9Wbr0RQZz570wq0Op5qyRsNKMj32xgX4TLYjDFXAEC nX0iYGxsiHhaocXvF2Fxc7FYlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDm1oH4c AlVkjhRhPTLczxM7s+D3MB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3 T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VC YkNCa3BXNVRnODJWVGR3T1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAutpPeIMO09LLkM8Sir/8ZQQyEem0GIh/fOjJho9uDRG6DqG8/pujF 2TtbAXaU00OTltNmUHkzxNETf4razIaFKGoL5VWdG+VCSYOqL3S+ZWevlIlBwxAV cAoN2JS3S0sIXUS2fJXhUlvPxrzlfgHPLGRgCEyb4sLOvOS9ozOBoFfvY8VWz12E fMzFCcAe65NwmLdvsZ7IfxqZPyrOe3JcK7gSpnzz+lBKhCjqwZZb9Lo/1xwu8ZtR YR7Ohlzh3AhFT2jzA1/JrWN5k2vdFaYFcJWYCtGYhiSK9pG1UHI8mXBkYO6phEZy cJy9A/l04SD5HCf2dpXSsx/YwrYmS99y -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:15 2025 by rpki-client