This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft File: mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft (raw, json) Hash identifier: nXXOxYjVhpmJ6ZA/PxA3lEG7DFURypy3/8fUn+SByb0= Subject key identifier: 7E:EE:DC:AF:41:2E:03:4A:4B:50:F9:F6:0E:8D:C9:D9:AD:C6:A9:78 Authority key identifier: 98:74:E6:D6:1A:60:D8:84:4C:30:1D:81:F3:37:7C:BF:34:F0:D8:BF Certificate issuer: /CN=A9190B12/serialNumber=9874E6D61A60D8844C301D81F3377CBF34F0D8BF Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft Manifest number: 07D2 Signing time: Sat 06 Dec 2025 20:17:17 +0000 Manifest this update: Sat 06 Dec 2025 20:17:17 +0000 Manifest next update: Sat 13 Dec 2025 20:17:17 +0000 Files and hashes: 1: mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl (hash: HQOTOlS/NJbNZ/bENLE5/SXusXVrLYLlSD9w+zZojWg=) 2: 0F785ED8171F11EB9D7AD884C4F9AE02.roa (hash: ukxlstcsmIDQXwCApEHhXJnp0Hl8gCal/Oj825qTh9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190B12, serialNumber=9874E6D61A60D8844C301D81F3377CBF34F0D8BF Validity Not Before: Dec 6 20:17:17 2025 GMT Not After : Dec 13 20:17:17 2025 GMT Subject: CN=69348f4d-89d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:14:50:df:89:22:70:54:2c:25:0b:b4:31:f3: 99:65:30:5d:e9:25:6d:45:18:68:a9:24:71:4d:d9: 8f:48:98:83:34:85:28:fa:d8:00:3d:35:96:91:64: 2b:aa:b6:67:75:05:1c:ab:38:ea:96:97:ce:de:c4: c9:59:e9:8c:da:5f:0e:06:ac:07:f4:6f:94:8f:25: 3b:a6:72:f9:c9:63:0f:15:58:9e:05:30:bd:06:17: a8:84:fc:c4:da:c7:2b:62:31:78:13:ab:b6:b1:ae: d1:40:c4:a7:28:f2:79:89:6f:bf:70:31:b4:e3:05: 75:14:67:33:e7:ee:39:7a:e4:92:32:e0:9b:97:04: 79:5a:ed:45:64:2a:15:b5:47:b6:00:c9:07:f5:d5: e1:aa:e2:c8:d3:6e:2d:c9:f8:31:44:b9:28:82:12: 19:48:de:4a:df:d8:e7:55:cd:a5:71:f4:97:60:d7: 3a:4c:8a:58:dc:ce:98:0f:4f:c1:74:11:12:d4:4d: 3f:1c:64:97:e0:f9:19:c7:1f:df:48:2c:59:e6:64: ef:9d:db:98:78:bd:d6:65:7a:33:87:71:fb:42:e6: 36:86:2c:38:b0:d1:39:46:a6:71:95:d8:d7:d3:43: 51:ad:6b:d1:24:21:25:b0:17:64:80:5f:51:89:a8: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EE:DC:AF:41:2E:03:4A:4B:50:F9:F6:0E:8D:C9:D9:AD:C6:A9:78 X509v3 Authority Key Identifier: keyid:98:74:E6:D6:1A:60:D8:84:4C:30:1D:81:F3:37:7C:BF:34:F0:D8:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:95:f6:e8:ae:3c:1c:bd:7f:3b:61:b2:d5:34:2b:6b:dc:0a: 90:21:06:87:4b:34:e1:7e:d0:58:d0:61:06:fa:b3:d1:a8:1d: f1:a9:ba:23:4a:72:39:72:92:67:3f:4d:89:48:e0:35:9d:12: f0:bd:b6:25:b5:41:6c:2c:0f:b8:56:49:b5:84:4f:c0:1f:9d: 12:65:a2:da:ec:cd:9b:e5:d8:1e:54:c8:4b:fe:9c:69:52:57: 00:ae:b0:fa:a3:f1:c2:26:9e:08:1c:d3:2f:96:ad:ce:90:e0: ec:b2:48:44:5a:bf:4b:c4:fe:51:7a:3d:a9:9e:ca:dc:01:5f: e7:3e:27:03:0d:a8:1f:48:e5:2d:02:95:b1:b8:5f:3a:06:42: e9:47:aa:32:94:81:6e:3d:c6:e0:03:28:ae:0c:8b:81:8b:76: 89:4a:df:88:3a:dc:7b:ca:88:b7:31:da:62:aa:fc:ee:81:58: cd:16:ff:c7:44:a3:b3:69:d7:f9:14:f2:01:52:8c:d2:b0:bf: e5:29:8c:89:f2:33:cc:2b:47:3d:5c:ca:19:b1:dd:7f:95:ea: 7c:73:ae:ff:c9:1b:4c:59:71:9a:5b:7c:1b:17:b9:be:85:6b: 51:bf:be:0f:b4:53:48:71:fa:da:3e:6b:cf:92:e5:d4:09:f2: 85:0d:ff:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBCMTIxMTAvBgNVBAUTKDk4NzRFNkQ2MUE2MEQ4ODQ0QzMwMUQ4MUYzMzc3Q0JG MzRGMEQ4QkYwHhcNMjUxMjA2MjAxNzE3WhcNMjUxMjEzMjAxNzE3WjAYMRYwFAYD VQQDEw02OTM0OGY0ZC04OWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5BRQ34kicFQsJQu0MfOZZTBd6SVtRRhoqSRxTdmPSJiDNIUo+tgAPTWWkWQr qrZndQUcqzjqlpfO3sTJWemM2l8OBqwH9G+UjyU7pnL5yWMPFVieBTC9BheohPzE 2scrYjF4E6u2sa7RQMSnKPJ5iW+/cDG04wV1FGcz5+45euSSMuCblwR5Wu1FZCoV tUe2AMkH9dXhquLI024tyfgxRLkoghIZSN5K39jnVc2lcfSXYNc6TIpY3M6YD0/B dBES1E0/HGSX4PkZxx/fSCxZ5mTvnduYeL3WZXozh3H7QuY2hiw4sNE5RqZxldjX 00NRrWvRJCElsBdkgF9Riai9sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7u3K9B LgNKS1D59g6Nydmtxql4MB8GA1UdIwQYMBaAFJh05tYaYNiETDAdgfM3fL808Ni/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEIxMi8yNkQzNjI3ODE3 MUQxMUVCODMzRjREODBDNEY5QUUwMi9tSFRtMWhwZzJJUk1NQjJCOHpkOHZ6VHcy TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21IVG0xaHBnMklSTU1CMkI4emQ4dnpUdzJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEIxMi8yNkQzNjI3ODE3MUQxMUVCODMzRjREODBDNEY5QUUwMi9tSFRtMWhwZzJJ Uk1NQjJCOHpkOHZ6VHcyTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJlfborjwcvX87YbLVNCtr3AqQIQaHSzThftBY0GEG+rPRqB3xqboj SnI5cpJnP02JSOA1nRLwvbYltUFsLA+4Vkm1hE/AH50SZaLa7M2b5dgeVMhL/pxp UlcArrD6o/HCJp4IHNMvlq3OkODsskhEWr9LxP5Rej2pnsrcAV/nPicDDagfSOUt ApWxuF86BkLpR6oylIFuPcbgAyiuDIuBi3aJSt+IOtx7yoi3MdpiqvzugVjNFv/H RKOzadf5FPIBUozSsL/lKYyJ8jPMK0c9XMoZsd1/lep8c67/yRtMWXGaW3wbF7m+ hWtRv74PtFNIcfraPmvPkuXUCfKFDf9+ -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:19 2025 by rpki-client