This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json) Hash identifier: qOeFkcUHCj4/T6s02+sVSjbx94N9ANjDsxEtszyb7Ao= Subject key identifier: EB:14:A1:50:4A:B6:CC:08:73:FD:79:4C:41:E6:91:CB:65:F1:73:6F Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft Manifest number: 0159 Signing time: Fri 05 Dec 2025 02:18:47 +0000 Manifest this update: Fri 05 Dec 2025 02:18:46 +0000 Manifest next update: Fri 12 Dec 2025 02:18:46 +0000 Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: SNeYe1wGRcrecWUBeY2SMHavfbryMW2HVtL5R6q4v9U=) 2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: 5W+7nQ6sUflibilCBlXCdge8iT2G6A6aLqY201MPVEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Validity Not Before: Dec 5 02:18:46 2025 GMT Not After : Dec 12 02:18:46 2025 GMT Subject: CN=69324106-a334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:37:b2:d6:af:39:ab:b1:c8:47:38:0f:40: d0:27:8b:a6:f1:26:ae:e6:65:62:41:f4:ca:2b:43: 7c:7a:46:75:6b:bf:8b:35:15:0a:ee:aa:0a:d8:8a: 64:90:c4:d4:20:59:80:3e:3d:46:90:db:a7:61:9c: 4d:77:51:b0:44:cb:9f:07:42:cf:66:6c:f2:43:c2: e5:e5:54:d3:9a:73:50:ce:dc:2e:2d:c0:65:59:86: d1:bc:b0:ec:32:9b:64:c6:ae:8c:a5:6c:38:5f:10: 05:16:dd:2e:35:6a:86:55:e7:75:d8:35:bd:04:ed: 79:3b:cb:45:7f:6d:f0:19:27:52:c4:75:09:ce:35: 5a:5c:98:98:81:1e:40:40:35:94:1d:aa:51:7c:e7: 0a:9d:f7:27:c9:7c:67:e4:71:cd:4a:e0:46:f3:87: 4a:56:42:05:42:93:ff:a0:36:46:98:b0:04:7d:b9: 46:2c:40:6d:ff:22:ce:26:02:1d:59:61:26:da:0f: 29:05:1c:2f:0e:b5:af:62:b9:e4:e5:cd:76:80:61: a4:d4:60:fb:22:9f:75:73:eb:52:b1:d9:52:8f:28: 2b:e4:9f:4a:c1:b6:ac:be:cc:ba:95:9a:a8:b1:5d: db:47:87:34:3a:14:bd:11:98:2f:92:e3:4f:36:09: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:14:A1:50:4A:B6:CC:08:73:FD:79:4C:41:E6:91:CB:65:F1:73:6F X509v3 Authority Key Identifier: keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:a4:c2:b5:75:f9:c4:34:16:ce:ad:d7:06:e4:27:c7:ad:ac: 01:9c:af:9e:a7:b6:34:de:89:90:55:5a:4f:5e:9a:e5:50:75: c8:aa:65:89:51:d6:c7:cd:fe:18:9f:10:a6:06:ce:e7:b4:4a: 48:7d:76:b6:ec:29:1b:2f:11:75:12:b8:c7:c3:48:aa:6a:a1: 3e:43:bb:88:b1:4a:53:e2:53:d7:99:38:39:db:1a:42:da:a9: 75:cd:09:ad:83:65:a7:33:2a:ab:a6:cf:56:cb:bb:c6:56:8f: 16:c2:78:47:bd:1d:3a:70:67:d2:57:06:d2:66:c8:45:e1:93: 2c:39:8c:6c:d9:3a:38:30:29:2b:70:4e:ad:1d:a5:76:bc:40: ba:fb:7c:ab:28:52:48:dc:79:a8:55:e0:b2:29:11:25:21:f9: f0:f3:f6:3d:40:aa:0d:f5:f4:15:d3:65:da:6b:c9:b6:fa:35: 64:02:9b:66:c6:08:ec:c9:03:d7:b7:da:81:31:8f:61:35:b4: 19:30:e9:c0:f4:ee:0c:30:7f:56:d2:8a:ef:87:02:c3:f8:eb: d7:99:c1:6e:e7:d3:a6:87:ae:51:3e:b8:bb:8f:8f:5c:e4:84: 11:d2:72:49:56:e4:cb:eb:04:f0:e8:4d:b5:71:09:81:eb:17: ec:3b:66:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKDFERjlDMENFRjlBNzdEQ0QxNUJCNTFGOTNGRDM0Mjk5 OUJFMTE2NTgwHhcNMjUxMjA1MDIxODQ2WhcNMjUxMjEyMDIxODQ2WjAYMRYwFAYD VQQDEw02OTMyNDEwNi1hMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNY3stavOauxyEc4D0DQJ4um8Sau5mViQfTKK0N8ekZ1a7+LNRUK7qoK2Ipk kMTUIFmAPj1GkNunYZxNd1GwRMufB0LPZmzyQ8Ll5VTTmnNQztwuLcBlWYbRvLDs Mptkxq6MpWw4XxAFFt0uNWqGVed12DW9BO15O8tFf23wGSdSxHUJzjVaXJiYgR5A QDWUHapRfOcKnfcnyXxn5HHNSuBG84dKVkIFQpP/oDZGmLAEfblGLEBt/yLOJgId WWEm2g8pBRwvDrWvYrnk5c12gGGk1GD7Ip91c+tSsdlSjygr5J9Kwbasvsy6lZqo sV3bR4c0OhS9EZgvkuNPNgk0lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsUoVBK tswIc/15TEHmkctl8XNvMB8GA1UdIwQYMBaAFB35wM75p33NFbtR+T/TQpmb4RZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9DMjg2MDMyRUM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZjMFZ1MUg1UDlOQ21admhG bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmbkF6dm1uZmMwVnUxSDVQOU5DbVp2aEZsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9DMjg2MDMyRUM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZj MFZ1MUg1UDlOQ21admhGbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGpMK1dfnENBbOrdcG5CfHrawBnK+ep7Y03omQVVpPXprlUHXIqmWJ UdbHzf4YnxCmBs7ntEpIfXa27CkbLxF1ErjHw0iqaqE+Q7uIsUpT4lPXmTg52xpC 2ql1zQmtg2WnMyqrps9Wy7vGVo8WwnhHvR06cGfSVwbSZshF4ZMsOYxs2To4MCkr cE6tHaV2vEC6+3yrKFJI3HmoVeCyKRElIfnw8/Y9QKoN9fQV02Xaa8m2+jVkAptm xgjsyQPXt9qBMY9hNbQZMOnA9O4MMH9W0orvhwLD+OvXmcFu59Omh65RPri7j49c 5IQR0nJJVuTL6wTw6E21cQmB6xfsO2ZC -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:02 2025 by rpki-client