This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json) Hash identifier: VqBW6Nn5YrUuCqsqkvRPTg0uPTjV/8oMxA53dG9DM2E= Subject key identifier: 48:8D:C3:DF:77:6A:94:75:FA:06:77:2F:B2:CC:68:28:6A:96:99:90 Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft Manifest number: 01A3 Signing time: Fri 19 Dec 2025 02:29:33 +0000 Manifest this update: Fri 19 Dec 2025 02:29:32 +0000 Manifest next update: Fri 26 Dec 2025 02:29:32 +0000 Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: kiMfgCUBiah5C1STIA+em/NpOF000a8pfXer6zviU+Y=) 2: 80A66D902A6411F09ACA5C61C4F9AE02.roa (hash: VkiCTpbHNMdBRPiF1oBiRg7dOTIy/YEbnzSkLjMcvbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Validity Not Before: Dec 19 02:29:32 2025 GMT Not After : Dec 26 02:29:32 2025 GMT Subject: CN=6944b88c-3326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:61:08:bd:36:98:4e:02:78:7c:48:bd:ab: d2:fa:8d:94:8d:2c:48:69:2a:3b:50:95:93:b3:0a: 46:2c:23:f0:54:48:39:9f:2f:3d:44:bd:ad:04:11: a8:4c:26:8d:05:38:4c:8b:9e:3d:30:f3:ab:65:2d: ee:7f:93:46:62:95:84:13:fb:19:b3:18:e6:ae:f2: 1f:bf:51:e9:3e:a3:a9:1f:bc:c5:b1:cd:aa:a2:e9: 52:73:ac:33:9d:d1:04:76:c9:3f:f1:82:29:eb:b8: f7:51:57:a6:4d:64:6f:7d:15:c5:62:40:e5:89:b5: 31:23:ff:fc:d3:e0:b9:28:5c:48:95:60:85:c4:f5: bf:ab:77:ab:d7:5a:d3:a9:ab:27:d9:19:d3:a2:a5: 84:f4:0b:ab:f0:d6:14:8f:05:ce:5f:e6:fb:2e:e3: 42:cd:24:d3:c0:b9:6d:54:49:ce:c4:22:44:49:87: c8:03:ac:d4:2a:fc:24:5d:84:b9:a5:38:09:cd:09: 24:50:28:28:5e:ff:ee:5c:3d:ae:95:52:e4:89:c4: 13:73:4b:90:96:a2:15:5e:85:5a:43:8a:1a:aa:f6: cf:e9:4f:3c:8a:25:15:55:bf:8e:a7:f0:fa:f9:79: 3d:7c:de:e5:7b:38:bf:1b:fa:93:fb:2d:95:d6:14: 81:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8D:C3:DF:77:6A:94:75:FA:06:77:2F:B2:CC:68:28:6A:96:99:90 X509v3 Authority Key Identifier: keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:eb:6f:27:03:70:3e:9a:d1:65:8f:fb:32:cc:db:a9:76:71: f2:0a:0c:c8:9f:d3:98:21:9f:ba:26:b7:6e:91:03:fc:c8:8c: 59:24:be:19:e0:f1:f9:31:81:65:46:62:9a:0c:ba:08:9f:63: 4e:27:f3:05:fe:49:d5:1e:17:f2:5b:19:18:85:21:71:3d:fe: 96:2b:3a:4e:b1:e7:08:28:11:08:53:36:93:ad:8c:e8:6a:31: c2:1f:10:7d:10:71:be:cd:4d:ea:33:f6:2f:c4:2b:35:aa:62: 91:da:a3:17:9e:d1:8a:06:98:50:d8:f4:00:33:81:6a:89:a7: c6:a6:8e:90:50:c7:84:ec:f0:23:e0:15:c6:47:17:fd:b0:4d: e4:b5:ac:da:2a:2d:8b:ee:c3:59:c4:a8:47:84:88:1a:96:13: 4f:21:9b:3f:cb:d2:cd:66:d7:a8:8e:d6:5e:23:22:a5:c3:a7: 62:df:cc:9a:68:9c:58:92:22:5c:7e:b5:f0:8a:ba:4c:5e:cd: 9d:e0:29:6f:ce:31:0d:d6:c2:69:30:e1:25:0c:43:e0:a0:db: 43:5e:9c:4a:b2:35:c1:4b:7d:2c:58:d2:41:d0:b6:7d:6a:3e: 72:4e:1e:c0:bd:80:02:b1:eb:3f:80:d7:38:26:b0:00:5e:2b: d9:06:3d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxMjcxMTAvBgNVBAUTKDMyMTVDNTUxNkFGQjU0RDhFNjEyRDFFQzNENTE4MkQz MjFFNTMxNzEwHhcNMjUxMjE5MDIyOTMyWhcNMjUxMjI2MDIyOTMyWjAYMRYwFAYD VQQDDA02OTQ0Yjg4Yy0zMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFZhCL02mE4CeHxIvavS+o2UjSxIaSo7UJWTswpGLCPwVEg5ny89RL2tBBGo TCaNBThMi549MPOrZS3uf5NGYpWEE/sZsxjmrvIfv1HpPqOpH7zFsc2qoulSc6wz ndEEdsk/8YIp67j3UVemTWRvfRXFYkDlibUxI//80+C5KFxIlWCFxPW/q3er11rT qasn2RnToqWE9Aur8NYUjwXOX+b7LuNCzSTTwLltVEnOxCJESYfIA6zUKvwkXYS5 pTgJzQkkUCgoXv/uXD2ulVLkicQTc0uQlqIVXoVaQ4oaqvbP6U88iiUVVb+Op/D6 +Xk9fN7lezi/G/qT+y2V1hSBfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiNw993 apR1+gZ3L7LMaChqlpmQMB8GA1UdIwQYMBaAFDIVxVFq+1TY5hLR7D1RgtMh5TFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDEyNy8xNkFGMUQyMDVC N0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZOam1FdEhzUFZHQzB5SGxN WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oWEZVV3I3Vk5qbUV0SHNQVkdDMHlIbE1YRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDEyNy8xNkFGMUQyMDVCN0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZO am1FdEhzUFZHQzB5SGxNWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ628nA3A+mtFlj/syzNupdnHyCgzIn9OYIZ+6JrdukQP8yIxZJL4Z 4PH5MYFlRmKaDLoIn2NOJ/MF/knVHhfyWxkYhSFxPf6WKzpOsecIKBEIUzaTrYzo ajHCHxB9EHG+zU3qM/YvxCs1qmKR2qMXntGKBphQ2PQAM4FqiafGpo6QUMeE7PAj 4BXGRxf9sE3ktazaKi2L7sNZxKhHhIgalhNPIZs/y9LNZteojtZeIyKlw6di38ya aJxYkiJcfrXwirpMXs2d4ClvzjEN1sJpMOElDEPgoNtDXpxKsjXBS30sWNJB0LZ9 aj5yTh7AvYACses/gNc4JrAAXivZBj0H -----END CERTIFICATE-----Generated at Sat Dec 20 20:29:35 2025 by rpki-client