This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft File: h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json) Hash identifier: Dy3rAmXcvciEn9hufx4rU9Of8OGcqiBP7tjDlxRQoPU= Subject key identifier: 69:F3:2B:10:AD:E9:A3:4E:10:2B:73:6D:34:30:30:62:EC:CC:3B:03 Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22 Certificate issuer: /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722 Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft Manifest number: 0631 Signing time: Thu 04 Dec 2025 21:31:37 +0000 Manifest this update: Thu 04 Dec 2025 21:31:36 +0000 Manifest next update: Thu 11 Dec 2025 21:31:36 +0000 Files and hashes: 1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: eLK4XhuKyWnH/0rfEjxa58L5mDQe1pxSe6qSj6dOgVE=) 2: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: uJ34QZzPWsLiblBgV7Ywgb0TXxMUSuEWmFUneXtmF9w=) 3: C49CE482BEA411EB85828650C4F9AE02.roa (hash: tWGIt1j5EvwGUw+Sd+nJTxQY0ACb+5Zewj9NqITpqME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722 Validity Not Before: Dec 4 21:31:36 2025 GMT Not After : Dec 11 21:31:36 2025 GMT Subject: CN=6931fdb9-b50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:5f:9d:9b:e7:24:1b:56:e4:4c:fe:06:05: bb:41:d3:6e:16:88:d5:f0:3b:98:cf:a4:40:88:9e: 60:3a:5c:bc:b7:11:fe:32:a2:d9:bd:1f:aa:3e:ac: 8b:52:f1:cd:25:83:58:89:5a:7b:2f:a4:6e:5e:e4: 64:02:3b:96:17:45:02:f6:02:61:17:43:fa:59:d7: 99:eb:8a:b9:d1:5e:8c:3c:4e:e7:a7:99:d8:66:89: cd:6a:9e:91:c4:db:60:de:59:e0:38:85:38:a9:17: 2b:87:96:a0:91:e7:0f:7d:96:72:ed:10:90:b9:5f: 08:04:62:87:28:4c:50:44:3d:12:d4:bf:5c:2e:4f: 13:5c:0f:7d:84:e5:05:e4:cd:c0:53:ff:29:f5:67: 99:48:95:a4:dc:c6:72:15:0a:a2:30:68:ad:88:a2: 6b:de:96:a7:5e:b0:62:7c:7c:dd:51:3e:d1:59:22: e5:40:a1:72:cd:43:2c:7f:b2:b6:d7:c3:11:e9:1d: 7c:ba:14:5f:c1:2b:55:05:36:c1:31:a8:b6:4a:22: ef:2f:9f:7e:23:98:5a:0e:ff:9e:78:c5:21:97:cc: e0:b3:53:7c:5d:ca:e1:47:95:d5:7a:34:b1:7a:35: 10:b1:c7:38:49:00:d3:45:80:4c:04:50:d8:c2:31: 44:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F3:2B:10:AD:E9:A3:4E:10:2B:73:6D:34:30:30:62:EC:CC:3B:03 X509v3 Authority Key Identifier: keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:9c:4f:33:d9:24:99:65:3e:21:f7:92:57:8f:7a:34:2e:ac: b6:00:26:5d:59:1f:db:01:78:2d:9c:56:a2:cb:86:f0:47:16: e8:ca:73:7e:62:62:a2:02:27:a6:76:95:10:15:e2:9d:21:fa: 44:a4:2f:6e:af:cd:df:5b:82:15:2f:25:87:cc:f3:3d:f2:80: 64:7e:ae:a0:bc:3f:5e:2e:85:ad:c1:7e:c0:12:a2:4a:0b:01: a8:0e:0c:28:be:80:92:75:1e:23:de:01:2a:e8:db:40:b9:73: e1:06:e3:3c:67:e4:76:3c:bc:f2:88:29:0d:f3:2c:53:cc:62: 17:3a:4b:54:f5:1e:18:e3:3b:ef:50:b0:73:89:11:4d:83:d1: 5c:0e:0a:4c:40:67:dd:20:57:1b:e1:fe:6c:0b:aa:c6:45:2b: 84:c8:36:fb:13:0b:5a:29:7e:34:bb:84:d9:e4:76:08:ce:27: c8:22:f0:90:fe:cf:62:cd:5d:c8:36:4e:03:f9:00:12:8c:6d: 89:ff:7e:9b:47:c4:7f:c1:51:16:19:1a:2d:50:8c:09:ed:e0: 17:ed:cc:ed:6a:37:72:58:67:8f:9f:98:2c:40:11:df:08:3b: 9e:41:75:0f:8e:c5:ca:fc:75:2b:35:95:dc:6c:19:15:47:b4: a5:a2:36:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyNEIxMTAvBgNVBAUTKDg3RTgwQzBFNDYzMzEwQTlEMzAzOENFMDEzQ0YxODUz NzRBNUM3MjIwHhcNMjUxMjA0MjEzMTM2WhcNMjUxMjExMjEzMTM2WjAYMRYwFAYD VQQDEw02OTMxZmRiOS1iNTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7hfnZvnJBtW5Ez+BgW7QdNuFojV8DuYz6RAiJ5gOly8txH+MqLZvR+qPqyL UvHNJYNYiVp7L6RuXuRkAjuWF0UC9gJhF0P6WdeZ64q50V6MPE7np5nYZonNap6R xNtg3lngOIU4qRcrh5agkecPfZZy7RCQuV8IBGKHKExQRD0S1L9cLk8TXA99hOUF 5M3AU/8p9WeZSJWk3MZyFQqiMGitiKJr3panXrBifHzdUT7RWSLlQKFyzUMsf7K2 18MR6R18uhRfwStVBTbBMai2SiLvL59+I5haDv+eeMUhl8zgs1N8XcrhR5XVejSx ejUQscc4SQDTRYBMBFDYwjFEdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnzKxCt 6aNOECtzbTQwMGLszDsDMB8GA1UdIwQYMBaAFIfoDA5GMxCp0wOM4BPPGFN0pcci MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTI0Qi85MjQwNkEwNkJF QTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVLblRBNHpnRTg4WVUzU2x4 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gtZ01Ea1l6RUtuVEE0emdFODhZVTNTbHh5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTI0Qi85MjQwNkEwNkJFQTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVL blRBNHpnRTg4WVUzU2x4eUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhnE8z2SSZZT4h95JXj3o0Lqy2ACZdWR/bAXgtnFaiy4bwRxboynN+ YmKiAiemdpUQFeKdIfpEpC9ur83fW4IVLyWHzPM98oBkfq6gvD9eLoWtwX7AEqJK CwGoDgwovoCSdR4j3gEq6NtAuXPhBuM8Z+R2PLzyiCkN8yxTzGIXOktU9R4Y4zvv ULBziRFNg9FcDgpMQGfdIFcb4f5sC6rGRSuEyDb7EwtaKX40u4TZ5HYIzifIIvCQ /s9izV3INk4D+QASjG2J/36bR8R/wVEWGRotUIwJ7eAX7cztajdyWGePn5gsQBHf CDueQXUPjsXK/HUrNZXcbBkVR7SlojaW -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:32 2025 by rpki-client