This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json) Hash identifier: i5Cg1HoYgyTIONVig3Eq9AN29g0dP4j/xZWNzVXDfkY= Subject key identifier: 62:BD:26:C3:C9:0C:5A:3F:9A:AD:08:62:A6:BA:39:C9:F5:32:1D:DE Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Certificate serial: 0C00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft Manifest number: 0BF9 Signing time: Sat 06 Dec 2025 18:09:04 +0000 Manifest this update: Sat 06 Dec 2025 18:09:03 +0000 Manifest next update: Sat 13 Dec 2025 18:09:03 +0000 Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: yYR4qggvRL9zjTwlLEJ1Fq0yKSxQhovNPSCYIoxrscA=) 2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: dTqPYAZ0fYSqCYvtzmzk6vV87y7uZ4+mAQSsb1JNqeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3072 (0xc00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Validity Not Before: Dec 6 18:09:03 2025 GMT Not After : Dec 13 18:09:03 2025 GMT Subject: CN=69347140-0174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:c0:02:fb:5f:86:40:66:f1:b9:0c:8d:59: 91:79:d1:8a:3e:51:8c:b1:75:a6:e3:c1:d9:d6:10: 73:e2:34:94:47:2c:b5:d7:71:5f:66:f8:75:4b:bc: b2:45:73:fa:0c:b0:f1:66:bc:d8:c8:4a:ee:10:88: b4:d4:1e:c3:ce:a5:c6:4f:c2:11:9c:de:63:56:12: f2:51:d2:b1:a1:5d:41:9e:47:85:d2:59:1e:30:e8: 25:ed:f4:c8:be:9e:ce:7b:88:69:15:d7:90:0b:98: cf:e4:50:3f:e9:bb:92:d9:6c:83:64:0f:26:2c:21: 91:62:7d:39:0b:b8:11:92:b7:27:84:de:bf:b7:ac: ea:2d:64:71:62:64:b6:41:f6:b0:3c:a1:18:24:16: b3:4f:17:d7:3e:56:f1:15:67:92:0e:50:37:32:a3: 7d:cb:5d:fd:41:3d:08:bf:b0:92:a4:5f:14:37:2e: 01:ac:6c:70:7e:a6:c8:83:b7:18:33:3f:f1:3a:f7: dd:ae:0b:4d:99:1d:45:36:54:5e:45:cd:23:d9:8f: 71:46:03:8e:80:90:98:8d:06:14:fe:e6:af:14:9d: 95:85:6d:72:7c:fd:6f:92:ad:13:a5:03:79:5b:b8: 8c:06:e7:26:ed:fc:ce:a6:b6:2d:16:05:dc:1f:db: 77:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BD:26:C3:C9:0C:5A:3F:9A:AD:08:62:A6:BA:39:C9:F5:32:1D:DE X509v3 Authority Key Identifier: keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:d3:9d:e2:01:ba:18:e9:7b:4c:9a:23:79:66:73:34:6a:5e: 0b:5a:ac:58:e8:b5:38:09:e3:df:ba:85:ce:4c:97:36:2e:d2: c9:bd:1d:f6:3f:78:18:c2:76:df:db:bb:74:58:c2:db:3d:4f: 99:f5:64:28:10:8b:96:99:b3:7d:0f:c7:71:fd:5c:27:b8:57: c4:8c:55:45:d5:9d:e6:a5:49:b2:71:c7:bf:bd:0c:30:a1:1b: ee:9b:1e:f9:08:21:94:dd:0a:44:31:e6:e2:88:8e:87:ce:0a: 28:67:87:04:36:ce:c1:30:7b:65:6f:28:cb:a7:ff:1a:02:c9: 2c:2e:44:74:6e:5c:b7:3a:c8:0a:dc:ca:4c:cb:cb:8f:81:88: 95:03:41:01:38:d4:8f:e4:83:0b:af:9b:40:81:ab:2a:c7:f5: 2e:28:f5:8b:0f:50:89:af:4d:e2:ce:6c:85:ba:01:43:43:51: 3c:b5:9b:ec:a0:26:21:9e:e2:b1:20:97:57:31:6f:08:41:04: a1:4a:90:15:bc:25:6e:3f:56:83:e3:32:11:47:44:ce:5b:be: 04:fb:b0:91:50:60:c6:55:82:be:5f:ef:aa:8c:73:1c:f0:61: c3:50:a2:4a:7c:4c:e4:cc:6e:c0:49:ff:2c:c3:62:54:f5:8d: aa:b2:d6:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw OUM0QjlGNEIwHhcNMjUxMjA2MTgwOTAzWhcNMjUxMjEzMTgwOTAzWjAYMRYwFAYD VQQDEw02OTM0NzE0MC0wMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueDAAvtfhkBm8bkMjVmRedGKPlGMsXWm48HZ1hBz4jSURyy113FfZvh1S7yy RXP6DLDxZrzYyEruEIi01B7DzqXGT8IRnN5jVhLyUdKxoV1BnkeF0lkeMOgl7fTI vp7Oe4hpFdeQC5jP5FA/6buS2WyDZA8mLCGRYn05C7gRkrcnhN6/t6zqLWRxYmS2 QfawPKEYJBazTxfXPlbxFWeSDlA3MqN9y139QT0Iv7CSpF8UNy4BrGxwfqbIg7cY Mz/xOvfdrgtNmR1FNlReRc0j2Y9xRgOOgJCYjQYU/uavFJ2VhW1yfP1vkq0TpQN5 W7iMBucm7fzOprYtFgXcH9t3VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGK9JsPJ DFo/mq0IYqa6Ocn1Mh3eMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2 MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj bkdPMi04Vk15elVKeExuMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY053iAboY6XtMmiN5ZnM0al4LWqxY6LU4CePfuoXOTJc2LtLJvR32 P3gYwnbf27t0WMLbPU+Z9WQoEIuWmbN9D8dx/VwnuFfEjFVF1Z3mpUmycce/vQww oRvumx75CCGU3QpEMebiiI6HzgooZ4cENs7BMHtlbyjLp/8aAsksLkR0bly3OsgK 3MpMy8uPgYiVA0EBONSP5IMLr5tAgasqx/UuKPWLD1CJr03izmyFugFDQ1E8tZvs oCYhnuKxIJdXMW8IQQShSpAVvCVuP1aD4zIRR0TOW74E+7CRUGDGVYK+X++qjHMc 8GHDUKJKfEzkzG7ASf8sw2JU9Y2qstbO -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:29 2025 by rpki-client